Malware Analysis Report

2025-01-18 22:15

Sample ID 240430-tnypksaf8t
Target https://create.roblox.com/landing
Tags
adware discovery evasion persistence stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://create.roblox.com/landing was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion persistence stealer trojan

Downloads MZ/PE file

Modifies Installed Components in the registry

Sets file execution options in registry

Loads dropped DLL

Registers COM server for autorun

Executes dropped EXE

Installs/modifies Browser Helper Object

Checks installed software on the system

Checks whether UAC is enabled

Drops desktop.ini file(s)

Drops file in System32 directory

Checks system information in the registry

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

Suspicious use of AdjustPrivilegeToken

Enumerates system info in registry

System policy modification

Checks processor information in registry

Modifies registry class

Suspicious use of SetWindowsHookEx

Suspicious behavior: GetForegroundWindowSpam

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Modifies Internet Explorer settings

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: AddClipboardFormatListener

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

NTFS ADS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-30 16:12

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-30 16:12

Reported

2024-04-30 16:33

Platform

win11-20240419-en

Max time kernel

1199s

Max time network

1201s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

Signatures

Downloads MZ/PE file

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUC7C7.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUC7C7.tmp\MicrosoftEdgeUpdate.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FE073C18-1D30-4B86-BACD-926E83F05284}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC7C7.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO\\ie_to_edge_bho_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUC7C7.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUC7C7.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\GameSettingsPage\GraphicsQualityEntry.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\IAPExperience\IAPExperience\Locale\Locales\ko-kr.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends-1016398c-4fdfb9d0\RoduxFriends\Models\init.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\VisualElements\Logo.png C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\InspectMenu\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\ImportPreview\Dark\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestSnapshot-edcba0e9-3.5.0\JestSnapshot\State.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\VerifiedBadges\Dev\JestGlobals.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Dialogs\qml\qmldir C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Feedback\Components\FeedbackReportDialog.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GameDetailRodux\Time.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RoduxNetworking\RoduxNetworking\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\xboxmenu.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\TerrainDetail.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\MainPage.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\Http\Dev\RecordPlayback.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\SystemInfoProtocol\Dev\JestGlobals.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Edge\Application\new_edge_proxy.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DefaultController\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends-1016398c-4fdfb9d0\RoduxFriends\Actions\FriendRequestDeclined.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Utility\useIsGamepad.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\AbuseReportMenu\Analytics.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GameTile\GameTile\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\Screenshots\PolicyProvider.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_nl.dll C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\msedge_100_percent.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DesignSystem\ButtonX.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\EBWebView\x64\EmbeddedBrowserWebView.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\GameSettingsPage\VRComfortSettingsPage.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\CommunityLinks\Dev\JestGlobals.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\Universal\Page.qml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\fonts\NotoSansBengaliUI-Regular.ttf C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\ImportPreview\Light\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Debugger\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-12e911c4-0c4b13ff\LuauPolyfill\String\split.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DefaultController\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\PlatformContent\pc\textures\sky\indoor512_lf.tex C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaApp\icons\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\DevConsole\MiddleWare\DevConsoleAnalytics.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\ScreenshotHud\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\DraggerTools\Light\Standard\Move_P.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls\Styles\Base\images\spinner_small.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Util-96003ad7-0.7.0\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\ContactList\Reducer\LastRemovedFriend.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\llama\llama\Dictionary\set.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\ApolloClientTesting.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\AppBlox\Style.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ProfileQRCode\Http.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\vccorlib140.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\StudioToolbox\Voting\thumbs-up-dark-gray.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\configs\DateTimeLocaleConfigs\de-de.json C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Light\Large\publish.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Debugger\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\SocialTestHelpers\SocialTestHelpers\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\UserSearch\Dev\RhodiumHelpers.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\LegacyRbxGui\x.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\GameSettings\ErrorIcon.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RbxDesignFoundations-4f0cd42b-a744f1a5\RbxDesignFoundations\tokens\Desktop\Light\Component.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxUsers-d30ce745-a73d2f11\RoduxUsers\Actions\UserUpdated.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "18" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "52" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "47" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "29" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "45" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "51" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "26" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "50" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "32" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "5" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "21" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "17" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "36" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "31" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "48" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "8" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\ = "Microsoft Edge Update Legacy On Demand" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\Elevation C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods\ = "5" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\text/html\Extension = ".htm" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CredentialDialogMachine.1.0\ = "Microsoft Edge Update CredentialDialog" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F09CD6C-5964-4573-82E3-EBFF7702865B}\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F09CD6C-5964-4573-82E3-EBFF7702865B}\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\Programmable\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods\ = "16" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ = "IPolicyStatus4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback\CurVer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ = "IGoogleUpdate3" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachine\ = "Microsoft Edge Update Broker Class Factory" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods\ = "41" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\NumMethods\ = "12" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\ = "IAppVersion" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ = "IPolicyStatus3" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods\ = "41" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EA92A799-267E-4DF5-A6ED-6A7E0684BB8A}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\Elevation C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService\CurVer\ = "MicrosoftEdgeUpdate.Update3COMClassService.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 436640.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUC7C7.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: 33 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3392 wrote to memory of 2192 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2192 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 2428 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 3708 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3392 wrote to memory of 1044 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffdbd9d3cb8,0x7ffdbd9d3cc8,0x7ffdbd9d3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1908 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2516 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5296 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5344 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5492 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:8

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RDk1ODlCN0UtMTNFMi00RENCLThCMzktRkIyODI5ODkyQTAxfSIgdXNlcmlkPSJ7QzlDMEYxQTQtRkEzMi00RUQyLTgyRkMtOUI3OTdGQzNFNURBfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins0MzhGOEQ3Ri04QzgwLTQ4NEYtQjE2OS05N0FGMTk4Q0U5RTJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUzNzI3Njc1MzciIGluc3RhbGxfdGltZV9tcz0iNTgxIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{D9589B7E-13E2-4DCB-8B39-FB2829892A01}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RDk1ODlCN0UtMTNFMi00RENCLThCMzktRkIyODI5ODkyQTAxfSIgdXNlcmlkPSJ7QzlDMEYxQTQtRkEzMi00RUQyLTgyRkMtOUI3OTdGQzNFNURBfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins5NjI4RjNEMi0zRjMxLTQxNjUtOUI0My03ODE0RjUxQTI3NUZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTIzLjAuNjMxMi4xMDYiIG5leHR2ZXJzaW9uPSIxMjMuMC42MzEyLjEwNiIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUzNzY0ODc0MTIiLz48L2FwcD48L3JlcXVlc3Q-

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "2900" "1588" "1520" "1584" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "3724" "1544" "1528" "1552" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6600 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{17A116BF-EA79-40FC-A644-D6A18FD0AA77}\EDGEMITMP_02675.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff67b8a88c0,0x7ff67b8a88cc,0x7ff67b8a88d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RDk1ODlCN0UtMTNFMi00RENCLThCMzktRkIyODI5ODkyQTAxfSIgdXNlcmlkPSJ7QzlDMEYxQTQtRkEzMi00RUQyLTgyRkMtOUI3OTdGQzNFNURBfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins2MzczMkY5Qi1DNjExLTQ2RTItODIzNi1FQ0MyMjNCMTU2NDV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTI0LjAuMjQ3OC42NyIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiPjx1cGRhdGVjaGVjay8-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_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-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-

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "4128" "1556" "1540" "1560" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1096.4228.12389214380186324888

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x180,0x184,0x188,0x15c,0x104,0x7ffda63dceb8,0x7ffda63dcec4,0x7ffda63dced0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1700,i,7626631365602886222,16879352134813673867,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1696 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2012,i,7626631365602886222,16879352134813673867,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1996 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2228,i,7626631365602886222,16879352134813673867,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3512,i,7626631365602886222,16879352134813673867,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4032,i,7626631365602886222,16879352134813673867,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4056 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3620,i,7626631365602886222,16879352134813673867,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004E4

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3836 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714493811240+avatar+browsertrackerid:1714493664452008+robloxLocale:en-US+gameLocale:en-US+channel:+browser:edge+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:17337941876+universeId:5932483521

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FE073C18-1D30-4B86-BACD-926E83F05284}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{FE073C18-1D30-4B86-BACD-926E83F05284}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{87AB96B2-54E2-41E7-B3F1-57605E4A9F35}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7ODdBQjk2QjItNTRFMi00MUU3LUIzRjEtNTc2MDVFNEE5RjM1fSIgdXNlcmlkPSJ7QzlDMEYxQTQtRkEzMi00RUQyLTgyRkMtOUI3OTdGQzNFNURBfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins4NENCMjQ2Ny1ERTJELTRDMTktQUEzRS1DOEM0QUJDNjgxNDV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE3MS4zOSIgbmV4dHZlcnNpb249IjEuMy4xODUuMjkiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIj48dXBkYXRlY2hlY2svPjxldmVudCBldmVudHR5cGU9IjEyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4NTk1NTgzNjUwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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_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-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-PHBpbmcgcj0iLTEiIHJkPSItMSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk2NzE3OTc2NjY5NzAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNC4wLjI0NzguNjciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk2NzM1NTMzNTE0MjAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0iezg0MUMwMkU3LTBBOEMtNEVBQS1COTVELURGOUFBOUFFNTRGN30iLz48L2FwcD48L3JlcXVlc3Q-

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "7032" "1576" "1536" "1580" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Program Files (x86)\Microsoft\Temp\EUC7C7.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUC7C7.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{87AB96B2-54E2-41E7-B3F1-57605E4A9F35}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iIi8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzEuMzkiIG5leHR2ZXJzaW9uPSIxLjMuMTg1LjI5IiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMCIgaW5zdGFsbGRhdGV0aW1lPSIxNzE0NDkzNjY2Ij48ZXZlbnQgZXZlbnR0eXBlPSIzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4ODcyMTYzNzQ0Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "6864" "1640" "1188" "1644" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iIi8-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjEyMy4wLjYzMTIuMTA2IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIxMSIgaW5zdGFsbGRhdGV0aW1lPSIxNzEzNTIwNzMzIiBvb2JlX2luc3RhbGxfdGltZT0iMTMzNTgwMTc4NDA4NDUzNzE5IiBmaXJzdF9mcmVfc2Vlbl90aW1lPSIxMzM1ODk2NzI3NzU3MzYyMTciPjxldmVudCBldmVudHR5cGU9IjMxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIyMzEwNjc2IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMjMwNjczODg0MSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "5136" "1616" "1608" "1612" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7ec7a88c0,0x7ff7ec7a88cc,0x7ff7ec7a88d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7ec7a88c0,0x7ff7ec7a88cc,0x7ff7ec7a88d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RUVDRUNFNjItNDE5Mi00N0QxLTg3MTEtRjJCQ0JCNzhBMDQ0fSIgdXNlcmlkPSJ7QzlDMEYxQTQtRkEzMi00RUQyLTgyRkMtOUI3OTdGQzNFNURBfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntBNEU1QjQyMC01OUJCLTRENDEtODdDMS0zNUU1OTY1QkQ0Q0V9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4NS4yOSIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiIGNvaG9ydD0icnJmQDAuNDMiPjx1cGRhdGVjaGVjay8-PHBpbmcgcmQ9IjYzMjkiIHBpbmdfZnJlc2huZXNzPSJ7MzAxNzZFQzAtQjlDMy00M0NBLUE2OTAtNDkxNjEwRDA5Q0QwfSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IjEyNC4wLjI0NzguNjciIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaXNfcGlubmVkX3N5c3RlbT0idHJ1ZSIgbGFzdF9sYXVuY2hfY291bnQ9IjEiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzU4OTY3MTc5NzY2Njk3MCI-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-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjAiIHJkPSI2MzI5IiBwaW5nX2ZyZXNobmVzcz0ie0IwNTI3RDQ1LUZDQUMtNDlGMi05QzNGLTU1NEQwODE0RDI3MH0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "6840" "1628" "1612" "1632" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1888,12908895716836541179,5545875548731365830,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2652 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 create.roblox.com udp
RO 54.192.235.125:443 create.roblox.com tcp
US 8.8.8.8:53 136.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 133.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 101.235.192.54.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
RO 54.192.235.18:443 webblox.roblox.com tcp
RO 54.192.235.18:443 webblox.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com udp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
N/A 224.0.0.251:5353 udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:49965 tcp
N/A 127.0.0.1:49969 tcp
N/A 127.0.0.1:49972 tcp
N/A 127.0.0.1:49975 tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
NL 128.116.21.4:443 roblox.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
US 2.18.190.76:443 apis.rbxcdn.com tcp
DE 128.116.44.4:443 www.roblox.com udp
US 23.102.129.60:443 msedge.api.cdp.microsoft.com tcp
NL 104.109.143.5:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
US 216.239.34.36:443 region1.google-analytics.com udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
DE 128.116.44.4:443 itemconfiguration.roblox.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 2.18.190.133:443 t4.rbxcdn.com tcp
US 2.18.190.136:443 t4.rbxcdn.com tcp
US 2.18.190.136:443 t4.rbxcdn.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
US 216.239.34.36:443 region1.google-analytics.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:50888 tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:50907 tcp
N/A 127.0.0.1:50915 tcp
N/A 127.0.0.1:50918 tcp
N/A 127.0.0.1:50922 tcp
N/A 127.0.0.1:50926 tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.139:443 static.rbxcdn.com tcp
US 2.18.190.139:443 static.rbxcdn.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
US 2.18.190.78:443 js.rbxcdn.com tcp
US 2.18.190.78:443 js.rbxcdn.com tcp
US 2.18.190.78:443 js.rbxcdn.com tcp
US 2.18.190.78:443 js.rbxcdn.com tcp
US 2.18.190.78:443 js.rbxcdn.com tcp
US 2.18.190.78:443 js.rbxcdn.com tcp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
US 128.116.99.4:443 roblox.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
DE 128.116.44.4:443 metrics.roblox.com udp
DE 128.116.44.4:443 metrics.roblox.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 2.18.190.76:443 apis.rbxcdn.com tcp
DE 128.116.44.4:443 metrics.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 170.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 4.99.116.128.in-addr.arpa udp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51326 tcp
N/A 127.0.0.1:51528 tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
N/A 127.0.0.1:52763 tcp
N/A 127.0.0.1:52765 tcp
N/A 127.0.0.1:52767 tcp
N/A 127.0.0.1:52780 tcp
N/A 127.0.0.1:52783 tcp
N/A 127.0.0.1:52897 tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
US 2.18.190.136:443 t7.rbxcdn.com tcp
US 2.18.190.133:443 t7.rbxcdn.com tcp
US 2.18.190.136:443 t7.rbxcdn.com tcp
US 2.18.190.135:443 c2.rbxcdn.com tcp
N/A 127.0.0.1:52939 tcp
N/A 127.0.0.1:52948 tcp
N/A 127.0.0.1:53013 tcp
N/A 127.0.0.1:53015 tcp
N/A 127.0.0.1:53017 tcp
N/A 127.0.0.1:53021 tcp
N/A 127.0.0.1:53023 tcp
N/A 127.0.0.1:53116 tcp
N/A 127.0.0.1:53199 tcp
N/A 127.0.0.1:53201 tcp
N/A 127.0.0.1:53203 tcp
N/A 127.0.0.1:53215 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:53240 tcp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
US 216.239.34.36:443 region1.google-analytics.com udp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
N/A 127.0.0.1:53390 tcp
N/A 127.0.0.1:53397 tcp
N/A 127.0.0.1:53400 tcp
N/A 127.0.0.1:53403 tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
N/A 127.0.0.1:53412 tcp
N/A 127.0.0.1:53424 tcp
N/A 127.0.0.1:54657 tcp
N/A 127.0.0.1:54659 tcp
N/A 127.0.0.1:54669 tcp
N/A 127.0.0.1:54674 tcp
DE 128.116.44.4:443 www.roblox.com tcp
N/A 127.0.0.1:54677 tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
NL 104.109.143.10:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 2.18.190.133:443 t4.rbxcdn.com tcp
US 2.18.190.136:443 t4.rbxcdn.com tcp
US 2.18.190.133:443 t4.rbxcdn.com tcp
N/A 127.0.0.1:54680 tcp
N/A 127.0.0.1:54720 tcp
N/A 127.0.0.1:54923 tcp
N/A 127.0.0.1:54925 tcp
N/A 127.0.0.1:54927 tcp
N/A 127.0.0.1:54929 tcp
N/A 127.0.0.1:54931 tcp
N/A 127.0.0.1:54935 tcp
N/A 127.0.0.1:55111 tcp
N/A 127.0.0.1:55113 tcp
N/A 127.0.0.1:55115 tcp
N/A 127.0.0.1:55130 tcp
DE 128.116.44.33:61962 udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
N/A 127.0.0.1:55136 tcp
N/A 127.0.0.1:55139 tcp
N/A 127.0.0.1:55142 tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
US 8.8.8.8:53 c5.rbxcdn.com udp
US 2.18.190.140:443 c5.rbxcdn.com tcp
US 8.8.8.8:53 t5.rbxcdn.com udp
US 8.8.8.8:53 t1.rbxcdn.com udp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 8.8.8.8:53 c4.rbxcdn.com udp
N/A 127.0.0.1:55165 tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
N/A 127.0.0.1:55183 tcp
N/A 127.0.0.1:55198 tcp
N/A 127.0.0.1:55200 tcp
N/A 127.0.0.1:55202 tcp
N/A 127.0.0.1:55204 tcp
N/A 127.0.0.1:55233 tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.136:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 2.18.190.133:443 t0.rbxcdn.com tcp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
DE 128.116.44.4:443 itemconfiguration.roblox.com tcp
US 8.8.8.8:53 inventory.roblox.com udp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:55264 tcp
N/A 127.0.0.1:55306 tcp
N/A 127.0.0.1:55308 tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:56138 tcp
N/A 127.0.0.1:56182 tcp
N/A 127.0.0.1:56184 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:56232 tcp
N/A 127.0.0.1:56235 tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:56238 tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:56250 tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 20.7.47.135:443 msedge.api.cdp.microsoft.com tcp
NL 104.109.143.5:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
N/A 127.0.0.1:56696 tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:56702 tcp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:56704 tcp
US 8.8.8.8:53 assetgame.roblox.com udp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:56708 tcp
N/A 127.0.0.1:56724 tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:56732 tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:56746 tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:56750 tcp
N/A 127.0.0.1:56753 tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:56756 tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:56864 tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:57025 tcp
N/A 127.0.0.1:57048 tcp
N/A 127.0.0.1:57050 tcp
N/A 127.0.0.1:57052 tcp
N/A 127.0.0.1:57054 tcp
N/A 127.0.0.1:57194 tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
US 8.8.8.8:53 c2.rbxcdn.com udp
US 2.18.190.139:443 c2.rbxcdn.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
US 2.18.190.146:443 c5.rbxcdn.com tcp
US 8.8.8.8:53 c7.rbxcdn.com udp
US 2.18.190.140:443 c4.rbxcdn.com tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
US 2.18.190.147:443 c7.rbxcdn.com tcp
US 2.18.190.133:443 c0.rbxcdn.com tcp
US 2.18.190.133:443 c0.rbxcdn.com tcp
US 2.18.190.147:443 c7.rbxcdn.com tcp
US 2.18.190.147:443 c7.rbxcdn.com tcp
US 2.18.190.133:443 c0.rbxcdn.com tcp
US 2.18.190.139:443 c3.rbxcdn.com tcp
US 2.18.190.139:443 c3.rbxcdn.com tcp
US 2.18.190.139:443 c3.rbxcdn.com tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
US 8.8.8.8:53 c1.rbxcdn.com udp
US 8.8.8.8:53 147.190.18.2.in-addr.arpa udp
US 2.18.190.145:443 c1.rbxcdn.com tcp
US 2.18.190.145:443 c1.rbxcdn.com tcp
US 8.8.8.8:53 t2.rbxcdn.com udp
US 8.8.8.8:53 t3.rbxcdn.com udp
US 2.18.190.133:443 t3.rbxcdn.com tcp
US 2.18.190.133:443 t3.rbxcdn.com tcp
US 2.18.190.136:443 t3.rbxcdn.com tcp
N/A 127.0.0.1:57222 tcp
N/A 127.0.0.1:57227 tcp
N/A 127.0.0.1:57260 tcp
N/A 127.0.0.1:57267 tcp
N/A 127.0.0.1:57269 tcp
N/A 127.0.0.1:57285 tcp
N/A 127.0.0.1:57291 tcp
N/A 127.0.0.1:57293 tcp
N/A 127.0.0.1:57295 tcp
N/A 127.0.0.1:57323 tcp
N/A 127.0.0.1:57325 tcp
N/A 127.0.0.1:57394 tcp
N/A 127.0.0.1:57396 tcp
N/A 127.0.0.1:57424 tcp
N/A 127.0.0.1:57426 tcp
N/A 127.0.0.1:57451 tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:57535 tcp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:57550 tcp
N/A 127.0.0.1:57568 tcp
N/A 127.0.0.1:57570 tcp
N/A 127.0.0.1:57572 tcp
N/A 127.0.0.1:57574 tcp
N/A 127.0.0.1:57576 tcp
N/A 127.0.0.1:57578 tcp
N/A 127.0.0.1:57580 tcp
N/A 127.0.0.1:57582 tcp
N/A 127.0.0.1:57584 tcp
N/A 127.0.0.1:57586 tcp
N/A 127.0.0.1:57588 tcp
N/A 127.0.0.1:57590 tcp
N/A 127.0.0.1:57592 tcp
N/A 127.0.0.1:57594 tcp
N/A 127.0.0.1:57596 tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:57613 tcp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:57616 tcp
N/A 127.0.0.1:57618 tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:57620 tcp
N/A 127.0.0.1:57622 tcp
N/A 127.0.0.1:57624 tcp
N/A 127.0.0.1:57626 tcp
N/A 127.0.0.1:57628 tcp
N/A 127.0.0.1:57630 tcp
DE 128.116.44.4:443 voice.roblox.com tcp
US 2.18.190.145:443 c1.rbxcdn.com tcp
N/A 127.0.0.1:57672 tcp
N/A 127.0.0.1:57677 tcp
N/A 127.0.0.1:57703 tcp
N/A 127.0.0.1:57705 tcp
US 8.8.8.8:53 gameinternationalization.roblox.com udp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
N/A 127.0.0.1:57752 tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
N/A 127.0.0.1:60481 udp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
US 2.18.190.134:443 c7.rbxcdn.com tcp
US 8.8.8.8:53 c6.rbxcdn.com udp
US 8.8.8.8:53 c0.rbxcdn.com udp
US 8.8.8.8:53 c5.rbxcdn.com udp
DE 128.116.44.4:443 locale.roblox.com tcp
US 2.18.190.140:443 c5.rbxcdn.com tcp
US 2.18.190.142:443 c0.rbxcdn.com tcp
US 2.18.190.140:443 c5.rbxcdn.com tcp
US 2.18.190.142:443 c0.rbxcdn.com tcp
US 2.18.190.136:443 c3.rbxcdn.com tcp
US 2.18.190.140:443 c5.rbxcdn.com tcp
US 2.18.190.140:443 c5.rbxcdn.com tcp
US 2.18.190.142:443 c0.rbxcdn.com tcp
DE 128.116.44.4:443 locale.roblox.com tcp
DE 128.116.44.4:443 locale.roblox.com tcp
DE 128.116.44.4:443 locale.roblox.com tcp
US 2.18.190.147:443 c4.rbxcdn.com tcp
US 2.18.190.147:443 c4.rbxcdn.com tcp
US 2.18.190.147:443 c4.rbxcdn.com tcp
US 2.18.190.139:443 c2.rbxcdn.com tcp
US 2.18.190.139:443 c2.rbxcdn.com tcp
US 2.18.190.145:443 c1.rbxcdn.com tcp
US 2.18.190.145:443 c1.rbxcdn.com tcp
US 2.18.190.136:443 c3.rbxcdn.com tcp
N/A 127.0.0.1:57816 tcp
N/A 127.0.0.1:57845 tcp
N/A 127.0.0.1:57854 tcp
N/A 127.0.0.1:57869 tcp
N/A 127.0.0.1:57871 tcp
N/A 127.0.0.1:57873 tcp
N/A 127.0.0.1:57875 tcp
N/A 127.0.0.1:57893 tcp
N/A 127.0.0.1:57895 tcp
N/A 127.0.0.1:57908 tcp
N/A 127.0.0.1:57968 tcp
N/A 127.0.0.1:57970 tcp
US 2.18.190.136:443 c3.rbxcdn.com tcp
US 2.18.190.134:443 c7.rbxcdn.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 t2.rbxcdn.com udp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 2.18.190.133:443 t4.rbxcdn.com tcp
US 2.18.190.133:443 t4.rbxcdn.com tcp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 2.18.190.133:443 t4.rbxcdn.com tcp
N/A 127.0.0.1:57990 tcp
N/A 127.0.0.1:58355 tcp
N/A 127.0.0.1:58357 tcp
N/A 127.0.0.1:59344 tcp
N/A 127.0.0.1:59346 tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:60554 tcp
N/A 127.0.0.1:60556 tcp
N/A 127.0.0.1:60558 tcp
N/A 127.0.0.1:60560 tcp
N/A 127.0.0.1:60562 tcp
N/A 127.0.0.1:60564 tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:60572 tcp
N/A 127.0.0.1:60596 tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:60599 tcp
N/A 127.0.0.1:60621 tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:60623 tcp
N/A 127.0.0.1:60625 tcp
N/A 127.0.0.1:60627 tcp
N/A 127.0.0.1:60629 tcp
N/A 127.0.0.1:60631 tcp
N/A 127.0.0.1:60633 tcp
N/A 127.0.0.1:60635 tcp
N/A 127.0.0.1:60637 tcp
N/A 127.0.0.1:60639 tcp
N/A 127.0.0.1:60641 tcp
N/A 127.0.0.1:60643 tcp
N/A 127.0.0.1:60645 tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 0f25425fcda7474bc74cf6b914ce2262
SHA1 541620b08eedb97ada0840960b2c59391ba9a530
SHA256 b170ac8e893bcbc87746d28c5068393019160b9f798db01d364812cac69f1cbe
SHA512 f4c7257d8729f6d6338872ca36ed128349944c9efe8989dee267230e5ebae8675a3fba3ac3038a88d5b70977b767eee0c2423481c526ade354fb335592d80b7c

\??\pipe\LOCAL\crashpad_3392_EFFUMNOKLXKNTFVZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 0354ef8afd53bc4c27ab99144970a9c9
SHA1 7105316ebb6a50dc71cc5402c64bba847a7c95ae
SHA256 acef151efdca7eef151e0cc9e45d5945737c4ab7cd8493e3dd9acb49d8df6020
SHA512 af6d8f1010ab8181c6cbe4c64a0d72c20ddfc56257cb862570c410546ddc52d2f1a67e58b93e7548573091b0e7173f230868c28bc6ed0abb8116f850f7122893

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a0d1bf5c95fac8055ccc70976f42dd41
SHA1 c0bd0c309d907d67c3730f6403d5d10d3a72c28f
SHA256 f1d9d598f6861b6f9f07bc5a700751e025ce4937dcba3c1ecd4939c48523d7d6
SHA512 57fc74b67d8c2924543b60c18d74a5efa683ffa29eb94a1c9fa7217d0444417e277041935091eb6dddd6359efdf0dc955ca297101067d541d68c4ebb208408cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7c37ee74e1e6f39ba65a3349a41f3699
SHA1 24f459dadec54f5d4e2c3246e5fe80cf7ccf28ba
SHA256 6ba967bf586ada2745ed60fe444d6c271e8b747f7965960bce0ac6e0f28bda4c
SHA512 e67cc0bd5a854ad3cb22fe208fe1d5141bab697ce32fb01d7f43c91693cc9420c9d03dc00b864c8fe300101c55703b4b659c70965ab66bc9d7c3be42ea3c645e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 55d2c39fa4a1c9ddf97587dfe27e1b18
SHA1 da10c6890a0478d51284fbedf9e086c746adfd4d
SHA256 e098f22ed52f6e0a8fc9d19f713da75638099c971f378bca37021fe8f763a6c4
SHA512 cc8ef0dfdc79f5af311f673894659fe8b4b69edf9edf7d6db1e54da490f9c8b9dd8e6de0c77e221f15c0920fe785c0f776bf8d7ee807b9015136568aa763e632

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b226905349588f44c5228892480a52c8
SHA1 e09937058fa84e610cdfb151c68d6ef040ca2bae
SHA256 def0e85dbf6832738af3c894842cb42f07041ec3df1748d5e23b90b6888689b1
SHA512 12e699eda15f88896630a712b411bdfcaf1a5d5d7a34c70ccdc21af4d90e8be100c4ec304e5d1c017023f4697c7f55f55e4b132581d038275f68521f66d174bd

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

MD5 911c020a364b10fe1de664c01de4534c
SHA1 8731aee51722d2e1604864eb8f03abe3e6d35441
SHA256 cb84418aa6ff71e927125f05cd74b10cef07b40fe19a17f9ba5c3bd57f2d9591
SHA512 7e2c2259dde1fcb1a10a3864b1e24f892fb28d1c0a9a8b1b32d6b512d9f49b031cf6119f55dad008f0b2a5dc87ae606ee0c2918fdc44fc307d56bc933537db7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d64614fe1b50c5f62ac1ea286ffd0847
SHA1 d9e9e5023d653f8997ebabf7999f17832a5c9c5e
SHA256 e7fb43e39998ac5f2a7a5211e87b308da43d93750f38e9df3412531416533d50
SHA512 67ba4589534a4bb13557367aa1a80131b51d899195ba2f5eaaef2614badc16a18fb056ace11b73fdb8051d78381f79fbe02fc59118507d3d596439c93821f62c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 ccf0046184ad36dca4c54dd71d228b6d
SHA1 6a54eafbc4430d6d4e49677d5d19ae87b4b16fac
SHA256 3e3641a0e4337bc03df134897e7e2aaeaea18265b305eee662ab70366bbb1f8a
SHA512 30f98cb131ee2cf7bfb51d468d9fe0f4993580a59872ab6682358e70f9f143f0e60bfbc29f13c529128ac6d215b7968b58c1b35d677f55066b0fcb3375ab57ac

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_ga.dll

MD5 3b8a5301c4cf21b439953c97bd3c441c
SHA1 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a
SHA256 abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0
SHA512 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_id.dll

MD5 03d4c35b188204f62fc1c46320e80802
SHA1 07efb737c8b072f71b3892b807df8c895b20868c
SHA256 192585d7f4a8a0cd95e338863c14233cdd8150f9f6f7dd8a405da0670110ee95
SHA512 7e67ea953ea58ff43e049ce519ae077eec631325604896479526627d688f2fa3bfc855a55ac23a76b1c9ef8cd75274265b8238423b95a2437be7250db0db31b1

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_hu.dll

MD5 f4976c580ba37fc9079693ebf5234fea
SHA1 7326d2aa8f6109084728323d44a7fb975fc1ed3f
SHA256 b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791
SHA512 e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_hr.dll

MD5 0b475965c311203bf3a592be2f5d5e00
SHA1 b5ff1957c0903a93737666dee0920b1043ddaf70
SHA256 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0
SHA512 bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_hi.dll

MD5 34cbaeb5ec7984362a3dabe5c14a08ec
SHA1 d88ec7ac1997b7355e81226444ec4740b69670d7
SHA256 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9
SHA512 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_gu.dll

MD5 f9646357cf6ce93d7ba9cfb3fa362928
SHA1 a072cc350ea8ea6d8a01af335691057132b04025
SHA256 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150
SHA512 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_gl.dll

MD5 84a1cea9a31be831155aa1e12518e446
SHA1 670f4edd4dc8df97af8925f56241375757afb3da
SHA256 e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57
SHA512 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_fr-CA.dll

MD5 b534e068001e8729faf212ad3c0da16c
SHA1 999fa33c5ea856d305cc359c18ea8e994a83f7a9
SHA256 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511
SHA512 e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_fr.dll

MD5 64c47a66830992f0bdfd05036a290498
SHA1 88b1b8faa511ee9f4a0e944a0289db48a8680640
SHA256 a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961
SHA512 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_fil.dll

MD5 7c66526dc65de144f3444556c3dba7b8
SHA1 6721a1f45ac779e82eecc9a584bcf4bcee365940
SHA256 e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d
SHA512 dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_fi.dll

MD5 d45f2d476ed78fa3e30f16e11c1c61ea
SHA1 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e
SHA256 acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2
SHA512 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_is.dll

MD5 5664c7a059ceb096d4cdaae6e2b96b8f
SHA1 bf0095cd7470bf4d7c9566ba0fd3b75c8b9e57ec
SHA256 a3a2947064267d17474c168d3189b0d372e36e53bf0efb9c228d314fc802d98e
SHA512 015dcb17b297a0aaad41c7b0b2199187e435855fd3977d16402be774622cc4f6b55d04ba9159a89e26e350c5602928c76dd9386be3974437b41888a0cfdddfa8

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_gd.dll

MD5 c90f33303c5bd706776e90c12aefabee
SHA1 1965550fe34b68ea37a24c8708eef1a0d561fb11
SHA256 e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c
SHA512 b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_fa.dll

MD5 cbe3454843ce2f36201460e316af1404
SHA1 0883394c28cb60be8276cb690496318fcabea424
SHA256 c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59
SHA512 f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EUBB1D.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 6c72040e83afd752eb34f46da721992f
SHA1 d615fa70ee00a6f0c384e62b7bc16801b59cd618
SHA256 6d3e16eca4fe1d00abd63a1ad3d43cf286ccd3a2057df505d11639b0d5cbc361
SHA512 e01a811b946a4616025b55b2099d3337098322a3a4d5cd299968213cb5005fe3a0ca1cfd8ce0e9f377e1615490e47fd91f368be256408962ec382ce2e121f8f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 97c2b995464eb61eaf3bdaa295ab2dbd
SHA1 8a3e889033a3c95951f2f410eca749887c7af58d
SHA256 2a97b57842082ce1c102b1c81adbac2177c2ec548f04628ee976dde3db198eeb
SHA512 01ecf656392a0a7bd1fb32205a50ad8967a0e1ee41a51184478ae7bce57833a99d756ba50a4e33253bfd3f1787acee21697596bbd56f205e80db73407b38073d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58d8c7.TMP

MD5 fae94afa95abd493d668fdf151849cf1
SHA1 9545e2d274150e8a4afcb0ca704422d047d25399
SHA256 27e2cd2dca4b12f51acd9679a621515de9d9b40f723c01e37e67c9d5674f791d
SHA512 9741926447860d732dc42b3dc6ce3160389135d1d0a5115ffc97835b39509d1d45f1a1b29c6463e94e63432b704f76a2ed240338e1c896cba4f3305d0eb967ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fffe51f08c0fb0045debe5f3f26acd26
SHA1 ebf169ba9d832a818f6722b2ee36b6cdeabfe19b
SHA256 a94098a5932706cd43e107dfa50f3fc258ff6a16f7459434ffea830d669f8112
SHA512 530d484f416858ba79a9ee27269f15d7e4e089705733836ed91362b9df9b56e45000d29b988c162f9c7dd3af2e71da6a0380fa7eddf9152a24d40c4e02812e12

memory/3672-697-0x00000000009D0000-0x0000000000A05000-memory.dmp

memory/3672-698-0x0000000073730000-0x0000000073940000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 30193b9faf09fb561ae9b45f52e70445
SHA1 1bd2b8f329bbf4dfc2378d937e1ecb0bcb56e26e
SHA256 dad43dc28beb0a4f177b176f4700b8eeaf741e15218a25c6d7ec8c4daefea170
SHA512 5f1ae6595e844d19ad592edaccc66ac118c9032c75af1e539f6131088448b3dc2c28ba1df893c8348677fb756cc998eb2d1c0b59e05ca7181802c07af21b4d24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 399fde20ec607466703a3fe39817de49
SHA1 8f8b2bde2e17f46b9c422450a31407783badbc00
SHA256 bb5db8e1023c19694ed09f79c0fec267e6acd7316709055cb8da8c13920af8e5
SHA512 aabc3e35f5207951d0af2ba6c902ff138d6975886605cf0ff3ef262a767ddf1515e5bb221a95d58894276744a4650b8495929b1ec54581d717b484fb55041b90

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 51676fa60c77cd2970a2c7d946f89520
SHA1 9df0ad26dfa4ce1da181e02ee375b89cb40b97aa
SHA256 dca509a49cf96d8241060ac0f8f91c79480403b546d82f383c3891b4c4ee237a
SHA512 2f957eb43f46545fb2b125d503d39e14c7972187263cf9516439062af245935ee889d4c2a5b500f1c3ed69e15bc13735a8c4a97ce4c8d55769f8db320bac8339

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d23913ae98723ca721ebf6efc7ac98e9
SHA1 7fe4195e805c44b679cb7ecd3161f4adec10f788
SHA256 b37a1853c6e9f0a94ebce0a5f1dac37a056511ca61412cbde351ab29e3cb5406
SHA512 514696384ac334c85d6a0585adb1e84a948a8484361f9fdeaf7545ce290a2e8e173552ebc9c7e796a95f385ab296068db8275e14607325ed24703206693dc35b

memory/3672-926-0x0000000073730000-0x0000000073940000-memory.dmp

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\124.0.2478.67\MicrosoftEdge_X64_124.0.2478.67.exe

MD5 dabc3160a804b9fadd89ceb0fcecf388
SHA1 b52f15e866a18637683bdf0ea4eaa326b787396f
SHA256 53eb39a92ee0d2eb94f6d33c015097bddd9cfe5c4129d3ac9a9facbfb5087bfe
SHA512 74fc0f21d7cf99e07c079224e2af8a4a51bff98a97bc471cfedfbd3a28d3ee681fbd63fa7239948c3c0bf4f9af56dc582dd128f8c08b54cb73389e85f949f431

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 061f110290ecd7d3f1e9a0a7eb8a8a5f
SHA1 b81eee77de7e44ac2e3210c98542b74275a6433e
SHA256 fd2a77d4fa067a2c22ba934252c3380b2cb6cfcb64f53f28806cb7ff13c9180f
SHA512 a6c731eb49dbd6d3f72b1282df82060a08a7bddc938b9d9d049d028e2446bf1ce0744e34b3e1933fc43d9aab27f03c42b5a0891d377ca3e85dd1ae0955d41b84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 438d5b2e118d9e4771016f103b3578de
SHA1 2d40830e8e4484fd0febf110c421de2d280b11f4
SHA256 8786817d832670f5c6d5ba33497697ae6db6dc5c3a90e2aef6a1a1605a39efe6
SHA512 e729f8046ac1189451fae1e914b64d3ee77027c6234c4dacc3364a6c0d0d957bbdad1c80ca29e2fc33a2162f20fcfaff99454451ba3adc7b8e0f17642ffb6348

C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Installer\setup.exe

MD5 c31297188ec9fbaa60449f769339963e
SHA1 8502d9e0cef18137529f0a46ad6e69a1577e6cae
SHA256 2e2eff110475dd3dfd732ab514e4692032e67b2d228d0081634a87f45cde5ff9
SHA512 9525e3e08b953fe36270c7b4868959e9bded055c5577e5ca94d79606b671e6660d180f763b54a276bf356e82d7073901c373e0b40cfca924cc4b38384c20e22a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 923188de74235d49950583f2d2bfd1e7
SHA1 92f10b2287ef7f5fa6a9484f17674c8a56a3e491
SHA256 22a28f031d21250b72966d6aab9ea5c17dd228cab0fe83a89d45760504b10cf8
SHA512 9f1aa2e843ab44cfd342647e6d26fed4e70888dac6888a4e5afc4397a8adb856e1705f593a59e9941d525ef2afc1d3a820983ed222826276d26e3ded436bb18c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0710bc3fddbc7a0ac5ef5fc6d67a661d
SHA1 c88b5ba8e5eb3fa73e7b1b3dc461dc8ea5f0697b
SHA256 0462cfd08ec52500cb01bf559a4379cf586c2f169db27e9b7e937604ba5ea8f9
SHA512 421968fa914975794ebe45447a5aaaf800db6fd285444782c539d205696590c54f57e0a1d5145bab852a76d0e2c858647e5e054f154ec57f86f359d2bfc8be05

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7200680716aa008f55934f73c1711a7f
SHA1 dcf918489ec122e64b7f4e066ee19f02b6bba6a7
SHA256 760648be5eb85ee3fdb1ddf6d418610dc846b8042fc5df0d91f11f4ae57eda06
SHA512 916968a5f62168bc069397b958397b3102afc39c887dfcd7d03ad6a2f08434c8ef80cd96efc61e07d186742e6571c6b47edec31b34cbaf1dc47127206e264201

memory/3672-1059-0x00000000009D0000-0x0000000000A05000-memory.dmp

memory/1096-1072-0x00007FFDA92C0000-0x00007FFDA96C2000-memory.dmp

memory/1096-1075-0x00007FFDA92C0000-0x00007FFDA96C2000-memory.dmp

memory/1096-1074-0x00007FF6F5680000-0x00007FF6F6680000-memory.dmp

memory/1096-1073-0x00007FFDA86D0000-0x00007FFDA8C1C000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 4c6a8bda10015cddc382ab759d22908a
SHA1 792cc34783d551ee8cb09ffb009a955e525c6e9e
SHA256 379b11ecf2c719008c154258a164bf02572ab6d643c70c2dfbd5ba8bbd128e10
SHA512 76a4a7579d961a0a0bcbf447a0a72b848461c7d453f999061fbd5e706fc2752f3aee79ad85f0403b93f6a45bec671d9e37daced4b1925ae35d55888e69fb97b4

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 0156c62933a3b048ffe31e9255ae7066
SHA1 98cc8c923c88f4f091f0ece13137c62f17dc4498
SHA256 78c30c6d5e9c5332cfcebbd3316c96a8b412ae4bf785d62819fbdb5545ab909f
SHA512 0d4e08cfe14633367bb22d7617f06271c0bd63656b88e6356926d83a9ca491b255d4f5c009e3bc7ce34361d7f1327f8b13d10c5e5d3c207d003b56daf841ae3b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 0f1a70c91e8fcb51fcef2e21bf9d38fe
SHA1 008e9a81491e8248bd4f3cf2c2f4530c3463525a
SHA256 648195d19b6dca074cc8e9bcc66f83e5fec5154de3045fc83e34538e7aa4736a
SHA512 6f9c4f6715daff4df0d8f524ec6f3daa801618feb9241948c80ac937a661a0fb6bf86e39f8d7e3383cfe95571e43a657008b89396c2074539c5ff7b94779fd65

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5a1a50.TMP

MD5 d2d57a008bd750f2460c552dd08d625b
SHA1 24fc77e228d133cdb5f7c66187fc89daa1515d64
SHA256 1ab5c304644dcb5f78ddc7f97d5f69b89945d148fa28e11af745cc7df75f591e
SHA512 559248486fd9192ad0cb6203c3705a6ba6079ef9df5578daa199e4f2a2d1fbeeb5bfb71dfa79be7fc6624888f5d263d3ef66e6b55ebdd1ce169e18ffba2dd540

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

memory/2724-1208-0x00007FFDCB740000-0x00007FFDCB741000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

memory/5108-1108-0x00007FFDCB740000-0x00007FFDCB741000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

memory/2724-1241-0x0000014715CE0000-0x0000014716058000-memory.dmp

memory/4340-1261-0x000001DF2E800000-0x000001DF2EB78000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 43c69621b965a90c0fcf72d1286ab2a5
SHA1 fc69974a2560c600fd0e07474a950bb891966271
SHA256 fdabf5090b5300492e5705b2ef22f1d308cce1875f318ac76721870f7d9e4d53
SHA512 376faa41cad6dc421fb8cfc89566fe1fd46673b03810a70904ad131600a33e25c36b75025e1255a920c0858c8f71498925d1deac01c8508f15474b124461bb66

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b5f9edb425061e1433d36a67b8a737cb
SHA1 ea92dfe29a381e1532da82b0769dcaee3c1f89a6
SHA256 5ee8ffed6a4e145d589d372ca93a62ef4dde669159b8794e9b5540010d6db9b7
SHA512 ef97d6287777b4587a427cb664ef8df3621a2fe383b81d87380e3a56373a6d1ce4158cf9551b570fbd4f5095305ea2e58a836b4cca45567537a6fd1f11a607b9

memory/5108-1448-0x0000027097F20000-0x0000027098298000-memory.dmp

memory/408-1449-0x000002555AAD0000-0x000002555AE48000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 e11c65cdd79f12fa1274878c4312eb2d
SHA1 ee27bf2ac799a015d9449c61bbf3916972849c62
SHA256 1da15866c0ff4199a93b8b14200662635fac4bc13f520bf6e9f416d7b2b0ad88
SHA512 8bfb2ebede2cac76478c28497862f4c62f142c13e6404d6ebe53af08fb5d563ce44d72b4838ca93783a55c4377deacd0325c304cabb5a29351fb0e79ad4512de

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 23109e608c33da2d0c968c86b9484bbd
SHA1 e3f739ff637993e96efca5d3a3f967035f6855c5
SHA256 b0f9d43536c26956c11ed27b62fec35bf6ac87bbce9fef5b40d69400626c3349
SHA512 82284d03eb432ee469c023ba652fabd6620a5bc16805a1009028e94b195574334cdaec089107421d3e19cde7ede2e36f8356bd0c6beb589ce57cec929d9170f7

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 2fd750f81c3a62a8ec2d041d9c77c50c
SHA1 97f508750bf0606f4bc7b87ca9df421bb78713e6
SHA256 96396f816dbcc1f71bd80c4527bafaf8ce3a962ac2a1ccef05b2e56a6baa7950
SHA512 6d2d6b516822205b49d9ee7196f238cc8c25bb776e8e07a99d6a9baa85e62c2abb060d60d3391443ecca2e7259a774b1b36b2d91f72d35954643dc662c0bd9b4

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe5a6b00.TMP

MD5 0e0ee08c840cb58f226e40c514acdf2d
SHA1 68e3c8a719d8020b78be224b40c02d2622fae963
SHA256 437518d0ec3e42da729dcab3d824ecb7c60362b662ffa864a79c3ee61d6922f9
SHA512 7cadad99af9dc180da5d943ad3617eb73d40874e9704a31fc640c22505a21a9e5a5a7c87db479f86119e7b35bfa30c3fb77cc0875535b8f0896958aad0712bd9

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a6af0.TMP

MD5 751455031c7b447a9217b987ce2e10bf
SHA1 234584cd41363b2bd1507cdbf58feb4bc7341b00
SHA256 9396571ad7da7cd81a9ed02c540e5c9aa1264d8a9884652956e1852346a71b30
SHA512 e94caabfdd0f484070126398806f250a3a2fff62acb5f3200d1be420581d4fee70515332da405e1a677be7706f935a2d7d4af09e597c8267504712c5898ea629

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 2ac6a1a43ca89561e58279999133da8c
SHA1 1ae0ba50d533a58d9187df6075d6023e7d9246e1
SHA256 8025b5cfcfa2e5cf3d134b0342e67f9c1d6e22f6400374286ac3444e35499595
SHA512 ad8dd2b96ff396ac06934da0bf0b923898e5ae81babc7ada014679dbdb8b8fd54d456620a9d74f04895fe41821b278d2fbf02327a1c61c312cb534e4d0382843

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 4b4ac12b8b9434356cd8a70fbcc7cc26
SHA1 52a53e27a53c0996f4ac8dc71580e7489b155f9e
SHA256 58ae0563fb38d710a72df1f23f75c8617df26d5631269d419e8de3802ae2a76d
SHA512 c7be4e5c66f585a3d6103483b025077fd89d0127461942192d6cc85667fcba511827ba752f2ec688343451f05b8ce3cd1dbd2fd3072f79c516086f013a346fd8

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5a6b0f.TMP

MD5 08fcce4dbf438620ccd61f442a99c91f
SHA1 1ea3afdc7a0d4a2ad7d64d0fd1eebab1e4381aef
SHA256 b54077d856c69c48ad0e76f65bcf494d5a66ee487cc754be151f2ae53c9aa779
SHA512 b321d83d651cf4a25fb4a07027bb255b20d852cde957d8ab32af6f1a15a4b96ecc73f0ed1fd10fbfbf5b983703ceee809314dea3b579af50d07d00c8e953e0ee

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5a6b0f.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

memory/1096-1655-0x0000024119B50000-0x0000024119F90000-memory.dmp

memory/1096-1656-0x0000024108B40000-0x0000024108D40000-memory.dmp

memory/1096-1658-0x0000024108D80000-0x0000024108D81000-memory.dmp

memory/1096-1659-0x0000024108D80000-0x0000024108D81000-memory.dmp

memory/1096-1661-0x0000024108D90000-0x0000024108D91000-memory.dmp

memory/1096-1662-0x0000024108D80000-0x0000024108D81000-memory.dmp

memory/1096-1665-0x0000024108D90000-0x0000024108D91000-memory.dmp

memory/1096-1664-0x0000024108D90000-0x0000024108D91000-memory.dmp

memory/1096-1663-0x0000024108D90000-0x0000024108D91000-memory.dmp

memory/1096-1667-0x000002411B720000-0x000002411B721000-memory.dmp

memory/1096-1668-0x0000024108D90000-0x0000024108D91000-memory.dmp

memory/1096-1669-0x000002411B720000-0x000002411B721000-memory.dmp

memory/1096-1670-0x000002411B720000-0x000002411B721000-memory.dmp

memory/1096-1671-0x000002411B720000-0x000002411B721000-memory.dmp

memory/1096-1672-0x000002411B720000-0x000002411B721000-memory.dmp

memory/1096-1673-0x000002411B720000-0x000002411B721000-memory.dmp

memory/1096-1674-0x000002411B720000-0x000002411B721000-memory.dmp

memory/1096-1675-0x000002411B720000-0x000002411B721000-memory.dmp

memory/1096-1684-0x000002411B730000-0x000002411B731000-memory.dmp

memory/1096-1683-0x000002411B730000-0x000002411B731000-memory.dmp

memory/1096-1682-0x000002411B730000-0x000002411B731000-memory.dmp

memory/1096-1681-0x000002411B730000-0x000002411B731000-memory.dmp

memory/1096-1680-0x000002411B730000-0x000002411B731000-memory.dmp

memory/1096-1679-0x000002411B730000-0x000002411B731000-memory.dmp

memory/1096-1678-0x000002411B730000-0x000002411B731000-memory.dmp

memory/1096-1677-0x000002411B730000-0x000002411B731000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1f1d96b68e3261cf312b541611c5539

MD5 3adb865c801399c412bc73840d3d8241
SHA1 267f8332eb7486bccd7a6730cfb4f5c2152b11c0
SHA256 10fb505b7ce30ce4bf5582248b17dd47f6a39635007bb77dc5d16b963baf9905
SHA512 609793331ce25c6667067b3616791f3ece470500f797343178948e4b7af18f275fdde226f542610d957b397651e12191aed58dbb88bc1c59eff4625e550160a5

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 30c7b2bdc35c650d2b65150241646816
SHA1 94d466a5f5159784155b6adcc9555bfdae4710c6
SHA256 0784d39379f0a4f971777844ba07550aff31a3d5e32ce1d1eff6f4c7d49b90b1
SHA512 8d51ef924b6c8f46a7ced69f188f2ea583ef3feb7fd84f51a8af8810c51e5099052e2c1513f15ac6fb83fecbef8c984fb4e124ff524c2b20a437943dc127465d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 5b6ee7df5ab2131365b3f57151bc5602
SHA1 6cf9e41c2893702d95e29bccd710ef0fac5702cb
SHA256 4e8d76a4ae548d4cec7e3681e50e8ec19b3b5ff84af1a2bd058029ac240df08a
SHA512 bee0dd97d9fe3ccd85b0d5d11242c761f9aa1c14f773032c28cd9466274f4599d3be3b92baad827a2ee55ca13bbac99ec6c9b19f5d8d98f46af42f92c0bd721d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

MD5 f7b043b74aa7d975ebf0640720a202b1
SHA1 a76ce902ae4199428b0ad5b5373d3ee740f157ec
SHA256 ebcbea3b961af129b7fb5567582723c0a7f3618ef88c1bea8bb45cb50cbbed46
SHA512 1f49cf3649d18edda3e9c276364ea81190515f2e85a21e0bd7d95820773417308b9d2190f3fd3e72cab62126eb7adf335a4be0b20ecabbc7b54199f8ce839940

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 f08f09e85c7d549dd367eaca5bcb811e
SHA1 5e087b59a2d69dee2c9efed0403bf782f17048c7
SHA256 c298b21a861bc053cf2f0f40468991a07ef1f6ab1ed1047e684cd34bcce97ee6
SHA512 34b5f8789c4e6ad641b387aca4464056def6f297263f826431496f4ce511f1ee80cd783467599479d8617b6eb659d57fbbb11460e806f5cacc966d85b3eadd1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 b754f8c75ddd38870b3c411fa8d07c6f
SHA1 2cfdff90e656b0e6038eac2f53de2e0db1c7b7a7
SHA256 360948ebdce99fb2a9cdb605368e83fd72f078b937b90ace486f1bd51389cf82
SHA512 8c05cedcc1bfbfafbcd4f9aa3af4e42c5d03b752f4ccf47a36c997a8adaa8fab68ffe22b8aac45a3259bd931b12f1ad095431a141e3ea3c5b89848288852582b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 d9f7efe6f475cafa9e81eefe9e880f84
SHA1 ee8ae1ea4677bd43df7bc0d3bd11162555586ab1
SHA256 76cf9aa1759b28aa1581a794fb43216983ce715eda842c1272afbda30a96d8e4
SHA512 6fd4ed8566b4417199f842e246413ca77442066e7e0d6a747e03e24caabbfce4b51169151ed33d4aebc2ff5b589a2c1227cfe375f9a364c301a755193849cf0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

MD5 57e977569d137f33648e8fa0c5e28be2
SHA1 c7e2cbdf37053164ab540321f86d9797f42e5968
SHA256 913069532c4119a97a524f565c06bb23cb63388227853bc0c40d4f27c827b043
SHA512 0dd6205ce5ba2047be65667f7b9a37588b746f524b6bafb6b912f9447f8dedec67e8331ae1195ca2e1cfd7b4fdb49f43b414d813457914a180b81b9af8cb9ec1

C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json

MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5c65426761bd946563f6ff1cb104a74e
SHA1 ab65018eb2120da7fe699820cd81c000a3adfa7d
SHA256 87e0f18887071d72603490ffb6732b92d11ce713cdad4fc85a307f3c4199f438
SHA512 938af5a93153dfcbe7088c163c2e6ec9a867222213045027ec7d83363a5961cc338ee055d3de2aea2f2b3a7436172a781537ad048564478368433f99414135b3

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f5ca5d4cd275205c6826d1677ba572a5
SHA1 9c31f7ae3b53de895301fd347775e0f2e96c799a
SHA256 f4c351f621b7357906ca7df977c8090787fdd57436a2ab94e531ef6a6d65f771
SHA512 af64eeeb9a7919d5cc2b02dfd6f05cb7a384b6cc31e26c17839e62f39d756950f680086a2be87146b731512d9f9eb319aed622c575842f4d75f7f7d4d05600ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5b76c15b8459bfb54da0dc6cd3da61a1
SHA1 99786558c6c37b4b027a09319295bd3266e8280d
SHA256 e84bf2c1aaf4f50acf8c999186d416f522e7fe9720307b5eac22454fc8af0dd0
SHA512 eff9062e760ea22c6746b52c01035a767ca024a9c9084146d7cbc03d850a99a199cca1d6d50e4cebb1bdfe6bfc8e59d1c48fd771f94204349020ee58796bdd69

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e80f536d935baadf55f21b096e693c68

MD5 4c2750957e24d68d3999dcf023bce5e6
SHA1 b3149b352cb616a743d516ab8775fceab6543dc5
SHA256 9b7c29ceef86651ac9f44effa39d97c91029b566f2c298137cdc7c48a6a1ab3c
SHA512 641bff16408f5d52cb5f8388464c7568f4f25a178474c34b7d144d4a941933b46f4f1154164b076d7d4b32106fa53cc07638140123c647f569e3c0c76fed613d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a9ea6cf4e67ac02b8388f1da5640da70

MD5 c49e8bed1e35bbd2e8ef00e21aa4367c
SHA1 bea5676cead9790108f7e92c9da96813a4655679
SHA256 0f6ad52ad10ba4c14c958ba44f1b0bc7b7b106aca0335505e62115dc2aa82c13
SHA512 5492faa34b0d2eb53c7a94a2c9f8772ab16795f2ddca06beeb00ce8977d5f5e84fb52ffd6340d3ac281ecffe2545eeeafad6ef11316feaa1a960fad8464b3fc7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcb654249c504749eecc7e07e142fea6

MD5 a94d08b8647cd4bc4338b77555328b65
SHA1 8ca7462397e2e4981c439cca3ced1097796cd1c7
SHA256 d7442a7c5649c86b603e7447bafc7cd5649026ae02d16b83b200afb031e70686
SHA512 ef8e2ffff889dd602a7ea62698f8d1ed20626a6e325ef19891f930f24c970e663e53045548461af56576b49729862991c085e1da4a0b9f327f8b5ba6558f9689

C:\Users\Admin\AppData\Local\Temp\Roblox\http\de65b167b06d0f941123666323557772

MD5 e22336e42de09fcd99a8eb257049ef98
SHA1 ed312dbf27685af07e49901ede7f17417bc54ced
SHA256 425b36a528d04dcc358eb5fb962dbe071fcf3241fe7c6311aee19186216521cd
SHA512 d7da02d06e682b19e849cc48e6dce60720bf9181b571eaed607224da662cf6585b36fef3fea8b43626f2724e81885af405badb98f1a64b795aa521cc56f6640b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849

MD5 7342a963fbe8b3a5bce98391f7c91497
SHA1 d937946afb025eb344dac220aa2d8d3494c759af
SHA256 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd
SHA512 fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed

MD5 808cb55c51b6fc55fa6cdb17892dc876
SHA1 4487b86a3a42ff05e109800b1827c100390245c0
SHA256 eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d
SHA512 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6f36c34e2ea49405b6d51310f54cce89

MD5 0f64fce8974acdf7fec2d1b77c5abb3e
SHA1 eea2f3fbbf93312c879d5bb2e1d0b6485f3381b8
SHA256 0835c29bbf7014a20fe24ec0ae172a43a06e349e9bde44d04fc54fbd20ac3268
SHA512 7d382311659189c82b334ab72662ae8696e3478eecf8a59718a116828ce3c9ec8dc733c0277ec6cd71dce9a28f92ffb7e342ba796fe6dfba1a5b84df0d3f3915

C:\Users\Admin\AppData\Local\Temp\Roblox\http\72118822a1d711af96156323b38685fc

MD5 2766fc3d120129459f299d62b2f40bbc
SHA1 11db6ff453aaf77eebaf01a6bc61e2127449be40
SHA256 acadf5b10a383623463b33644cde1d5d3a6ea896272473d7d6ab72354ace7b8f
SHA512 dd2846e74666ffb5f40322e9b4fb915e5030c44bad228804214a186239411026c327369f4a8931c73f5af3b83d038d9060276c9cf0f550e0caec366ea7948e01

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a1d7a8fb35b007494a82bd5304ba1e9

MD5 2414d644ab2dc0d3c58d8546b4cd7ea0
SHA1 77a854549c69f719657f5d404ae9391c705d88f6
SHA256 28be75fd24c5225fe212cbece08722d92c4d2816e5c3a0051294826a5fe79458
SHA512 02bc18971dd372438e6f93b0db0e29a2b647b7e1acc5e8d8321f73857b746c5523e7c720ddadb96363664fd5652c30d5e396f7128813dfc0c30fe7ea4086a229

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d8b0fd3715ff57ba968ae5740d39a12

MD5 a3366bed53be5f4fed574fc819a07072
SHA1 a79b59561cf06c8a209fb701567a67376d83924d
SHA256 ec5c1697be4eba9851b9a413c13e1a94f9846f6dba1d8d0fa33e1ca7292e8030
SHA512 f8424133bac79bbf7547bf7076cbaf0bd0767f220778275c36878bb982bb69bfe64aede42d67c9db009047e66bcf5eb9604205f6b0aa9a801f6827e2034399fa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ac0ab8f16fbb1afe5c7b089b5d5698e6

MD5 5bff0b6da657e8e4ed652a4a5faf57f6
SHA1 ad49b5a7c4734d26061b0eea4496fc41949bc5b2
SHA256 c80ae50ae40768b21e62b593515865bd729b4c0712a006cbaf374a66f14f956f
SHA512 146a0ca1c20471f2921f1c911692223b77c4f528f2de47da9df54c1620242230998b86be05b436a725e64665a008cfc21715e114fb0fd1b9e0786288ad20ff24

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8fbe2ad68bce1f4933b291c365e04e75

MD5 d6a9f27b18ba6c1cd064cfee32420a8a
SHA1 3eb4fe70132f76c96bf7f951070f437ba176fc40
SHA256 612baaa3a5eeebe00562f3ecd4490073f3313811613ead2948c1626128191506
SHA512 1126e9b53315742eedcb4e28bec6330c03cbeff2d311c9bca1e8280720ded31b6ad7f4f4b6899aaf23656ec46b19fc2ea6566226c1fbb1ded1c3790832d9fc1a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0fce80600a43748c6cbc0ac23f6cfa2

MD5 3bf49259291542dfee0f89d587c177f1
SHA1 22328c74fce75f7918f6c4b3ca5ad9e1921db437
SHA256 971101824fc41a26f9b1386d72750a69298f4725f266edb3c93b21f9600d2916
SHA512 20366e5775f42da8e313d67ace54bed3b2a010a84d9b3422276a8b544186345683c00663ce4f541c9890f906344ca3400015bef988d4ffa7dd4bf1c38161e271

C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e8a63e8fa08c8135be1c5384c3e0a2

MD5 1221a85cb03fd45c001ef47af9935e7e
SHA1 f209b998e8972ecf158f58270244b831d107ace1
SHA256 e7c79bc6240600fc94d67a9c0e9c1f563a3f30698d7cae3d19b1735865835d4e
SHA512 2e6846a2ea3bcf0892703f3f2024a0acdf277251c55ad9c65e61fb5a8780c67ec707d42818b3d98103504dda9984c109ec0f8e393fc063f734bbc7bce168ad90

C:\Users\Admin\AppData\Local\Temp\Roblox\http\175af5595dfe9780b5b7b10ecb943336

MD5 0c9078c249c45630688d2af7e0574c25
SHA1 8fae18c0c69cf3a58abddcc9a55fba6d81aca2b2
SHA256 b0e7f0945d5de86014379ede1d9a9528a8c944534ab33e58c7b3be1b5706500e
SHA512 24e0cfdac58bc3714541bd39f6992bf0a4bd4c47e492edc40b72d045b4f06573d582d9f4e50e0c23f964ec678d857752caeec6a65ef89b70e2ecbefe749b21f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcbcf8ab7914469e06c8fa6ee80f2201

MD5 958ad6c1423022b1905d452d8772d16b
SHA1 a1c5aef3f0d7550f8a9ac31ac1e295696477c02f
SHA256 8965deb3f4a35faba9f087defdbc2fb071e006f283ee7e6b1ce250c6ec12a49f
SHA512 5185a342c83ca7770ecb1103d95d061cc17c80526f755ebfac53305947b09765515221ba65b43a98eff3860e47bfc7a15f51e67d0636de7596a6859ff20804e5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b80d47fd48f8d137ca2aca87e1d00059

MD5 7dae317d3e65c483f462a48cee3002cd
SHA1 330c91065d277740b721b723ffae4e5511e8da2c
SHA256 ad244e68f3ae289677897bd171703b8ab65bb03b17621b3c8f61594b906f8b78
SHA512 966a981204a7979932981d8870704fbe3d4afc2a0306cf149117eeb30a54debf852c8ef04fda90fb2d1d1261daec60db390a4c9b9fa77740d14171335384ecc9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\32c38bb4f4a560d621ab93aeb6ca5d7a

MD5 f7b60787135cc235066319d2412e77e0
SHA1 ff9e626cfeeb124bc95d830d20e13b15c6427c77
SHA256 e815d7145b898343e81a796bee29e8a71a678c9c3475a7b1107cdbefeefb6152
SHA512 bb21ace97ed300299a276844630c2b30aa0aab87a3a8684391bbe37a0ce7761c82011035f741cc1f596136043f1871d16b0238249d3b943b2c08fdaab8c0d762

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5b794cd8b1447c984ba301aa73a6625d

MD5 2740a9a1a4020c08f3ae9fce5509416d
SHA1 371eb56fa91013a45a38486d5d77ccc12ad03990
SHA256 239bce8cdaa04b7e91497dc8fad14e5af36ebf244712d7a04e37c2be5a0e0a38
SHA512 fbbad878010bb317d5ddc6de48c87d838db393fc52c564555883d07e62b77cd37a3584414566977fbaef792ce0d2a00cf851ce871e880d1cda34357d2fd4682a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1daaef2a5ce0ea927443fd099437bb55

MD5 e4a239995837749223ed2039a40a3a21
SHA1 b1cc97f9ffc3a367dd3a55a1a3342d59cb610403
SHA256 36ef28d0243f78f746ddc7abb74563980829c81dcfb91abcdaf6459bc7d374af
SHA512 ad81fe4cbaed589da0a3b97c20e7e5fc0deabf5910b1c41dc7d6e6e8b8f22486f71c9577886689739bdb87e34b330ce43cb60fb2e3c1305d77984ec78cc0879b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706

MD5 a0c28b8252eda35f15ff0931e1817ac9
SHA1 3fa429b9d0b8926907abc63b81a301bad2442eef
SHA256 ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d
SHA512 e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e2504bf31b5aa0ab48a8ae5f1dc5f1e

MD5 6abaefefcacaf36071c43e9dc51f1bda
SHA1 a562a7fc46cec9c90e86fa570267864ef2249a20
SHA256 55941590b6aff4d570b3531c493c14c46eb687ed9e4de19200de1681987f75ae
SHA512 5fc4b6db68c03630673789ec5f5d017709e5a9011f25575c0e428f4a21c30e1f6664faa9e4ed456ae79c7ea0fc45db30b8d45ad9b4e2e94f49b27c50237872c3

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 eaef4b677b2babd4fb7b29da0f065bf5
SHA1 655dc02137cacabfeebb0705832c3378062b1598
SHA256 c5a33fdff10981930005746e120f5cab8bd1321ea949ea5cd1b2e34a88f7aaf7
SHA512 7ddab6aac206bbd23350667487335e674466d66b3f0c425ec3789a62749bd6073eea1e1f5785ca539a0b7e0bbd8a83605191508d97c8280644088cc7d8161aa3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cb8a45c1430998ec1304e4c79176816a

MD5 933b1f5dc544d9868d257d80e517c112
SHA1 a8d55f9cd5f79ef7f6fa1ffb229d8bcfb30ce348
SHA256 51a66f59fb6018efd308234879746581b50566d967cf1fbf63fd3fb6917f1295
SHA512 6e03ebecd629ec937171a7a2d11a88c83c0267c0f153b86194683fc967f0e1c827e6393a39af735813a1cb3fe2297cd6582d2f7578355e797a5152dd92d6e600

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac

MD5 d97f6e22eba42d95c89cfd439f36c1d4
SHA1 3a439aff0b80708f6510643f70997b897500d2bd
SHA256 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e
SHA512 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd

MD5 74efd118f986358ad4cde9a57e61dc32
SHA1 0cfe0335bb35298456edc9ed791e019b70266c31
SHA256 b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5
SHA512 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7948b73360f27446739cb67376a2d7bf

MD5 6c261f23c63795849eba5b1ef6f17cf3
SHA1 464f91ce49db8b5546722bd62c4f59aae33dfc20
SHA256 e4274c467ca592398736e990eaa97a937f209768239400cd90ea59f9e58a27fa
SHA512 ab6f671b1939df79ee60a873148a1763c06fa880e2f17a23c9e09c5401120873167905e49be3abaf546b9fee33096b76a5573a473b72de3806c38a128ab91ab9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\706b550a2be783fb6e220ca8181485e5

MD5 be4a508de308b15bf9c711a769ed61a9
SHA1 2b980f20a1466d2f1508bfaf8dc2a2558450c1d9
SHA256 0ac514138710cda19cc114cafa8a3fce046654dda1cce0915f525c6f5ed0b812
SHA512 dc71cf06e2466f17b843b96fdbec856b3b67df95105895597e73fad455340d4237f1b7cf91ac2906efb9efeac89515deb79a045859a0651420edecabfef8cf8c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc27c501541df155b6fb12496e5bac70

MD5 f635924f866829484247044f991b14ec
SHA1 39c6f43e94e4b0d0ce9c30da5b78aab7fa5086f5
SHA256 30b18b2546442b630f0fb8c6a7c26419a9a73988e8e1a118dae5b7241e98074b
SHA512 ca145397fe454c2623651c9ccaf86fd15212fe83d758fab2f8de35e4ea00f8eb8f58aeecb2fc95a4ceda07c9bfa960ccc29b1a56c2bb317c94297c24a366be68

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a

MD5 81927a5a1612202db2ce511c62ced773
SHA1 4414e92b078a515ca699a82cc3bc64a1e264e4bb
SHA256 a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e
SHA512 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2

MD5 59e7e73fef4a9df2680ff8fe1722014f
SHA1 2b9d42140ad6207b1e3f5cf8d66b345109cb1098
SHA256 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57
SHA512 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783

C:\Users\Admin\AppData\Local\Temp\Roblox\http\09f04b99b82b262e105a232e97395311

MD5 e3a0c050904f457b02b36bfebb1c0b6e
SHA1 a611605082957d8eb5dcb83939e1b6bd3d870bf7
SHA256 02c51e5a41d473f8e0befe8e5fb49073f0dec0ca88ee83e0e6a3c0ba3e18d399
SHA512 f2b6b3a7c193a951feaa1d5abeaf52316773d7895284e806f7267708672f6a7baf37191a244d2c044c785fe967d416353ab83517b28932b9e521172b89e22275

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcece68795e396ad03d6e2608d740126

MD5 0ba72ed050100e6779ea0f1c713ac441
SHA1 ff585cbb4b671bd3a04f3bdb2512a896ff07883b
SHA256 0949d1f525ea9da560f02a0447eb12a33ac6db673e89754b8f3d230e24ccfd06
SHA512 22c09e80f4af164d94ef40999572d2ce35bfb1dfacbd1762b380c9685889d515ed9aa064db4f8ab6746c8a26ea4ecffef9337014293905abb2f0cece7344b851

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d132016b6bd0b89da2690c24749f6ff7

MD5 2e2350147bec3587e3bc14b7a1e32c2a
SHA1 c275f45e728f71d24ac6d8b496865c218f972b41
SHA256 7ddec5794d779b1ad88ffec41f00c793f21046d18c930328d662a3c2d1c27d84
SHA512 670d3893ab1503dea9437b61b2b1488238d84d3703f94b74b5c20bb7bd26eaa0479e6d3d91319219bae1c1c357c6807101c5960ee2f29ff48475c0e6d9ac3adc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 14589c58bf8159d77f8a8bb459d29f10
SHA1 3be9ae807e672e59c99fe595a0a4df5012b41115
SHA256 3606ff6840c20d8f53d6ffa41aa7a606b219c8e86aee9882fce68715818c44e0
SHA512 aff5b75618633426bd5233e9bb867ce95ed9de3d6c77e511292e30803ba88d469686252f9e55fbf4524263b67a48a2b6151565501ecf891f353b8cceaecfc597

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b39eb4053e10b7ff21430e80432eed8

MD5 be1dacdbf4fea39b16e7c11e286b7205
SHA1 28ae9237170d6fa225c54e7a36e35549d191d450
SHA256 3a6d14f833f7da8ddf3139d42e41b2b83d1ea0d4570db39d9c10dd98e33da800
SHA512 72cef9e399c0652a340cb12dd239cc0dfa14a2c832fa63f76dc442308ee9f91b41ddff62fb70331895716b61fdccd332f75c0ba2003f818900e3e6f260303176

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c36700f9b5f405f69b210d702f6087c

MD5 94b44243d9e420ff19ff04f4e434b83f
SHA1 04687ed0f779c6873da97da0f16f042b2b459b69
SHA256 f76c45b8c4831588b971b25431b7b85f529a7214f99103ed82b4c2e97d9919e8
SHA512 b7778206ef730254f469214ace61b13f7031d0c4c751b2988decee93dd5a6c8336c40974af74b0aca6d42874d54e23dfcdfc743f5d633610aab2f05e948bea6e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77b3cd784a40d8349719b23b5c0e414b

MD5 05c43f778ddcf81fb06a2fdfb4f7624b
SHA1 616dade772feb66bb1b8dee218c7a5a39d43de06
SHA256 f4a00d60cb52477dfdb2eb264470e5daffd44139c118b73c80e8fdef16f9dd45
SHA512 a2443c678bc019dcc50fd7a49d5c19dfa0c45a7c43fffa24ca225f0f24b6839865288b2fe843bb233752fe59c712c54bff8d9b5c4e8ef5ff4ad8ef20b053feed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783

MD5 22b25a819c414b6c626e5306888142d6
SHA1 e7d68968d0848af0e5203409227a1980dfeb4a0f
SHA256 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea
SHA512 bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0af1ae578b1c58a0e785712d31028c1e

MD5 4ffc139d6996c3eba2d40053423d07fa
SHA1 6da7d02805c626596d055c20cf084aafed9b9768
SHA256 0445b87f48bfd12bf0dae91d8dd7c20ee924212b4cc8be782c0a54193546f43c
SHA512 5af3417cdb0d099add05b22090b5aea9ba39069c4704d000aa323b859e47ea67328f616ab03b7b878ef8cce0d528ac0ff5c0f8fe305175b952e840368e0d4a81

C:\Users\Admin\AppData\Local\Temp\Roblox\http\848d350916ab0af9758cff8167a2aea2

MD5 0042d3425d57e55a4e8c899aa911012b
SHA1 f260334951b11b4ace9af45974e365ecbc6cb9cf
SHA256 f312918dae9b5ebf3028f14575ac8bdb78e7f152061fc59d0885ab7acb3e9581
SHA512 cbab405431b5a95ae3c9d3816b4a1c4d4a07cdc4dfcf64d0977ec80533a6029329db101ac36361114288fa18c769c85a3f238b13f63d2e1e83ef4ef64ae45521

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b83eea53256ce3cba866ff16ee35ae82
SHA1 358df685aaafb3c7e024c94e3c5d3e2a7dc362ad
SHA256 183ae4d9eec433812b85ac20ccafcd77bf90ae90721ade9df3af6912714b353c
SHA512 fd9c0215ba67b831d00ae7493dbe301304e6b993caf669efa14401bbf80d9bec2c7395a9e8294270a3e5e06edf5dbdcf87b27f807fcf1ddb9b4cd448b81002b5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526d6628fea4b1243fbb953bdf85ac9

MD5 3964c0c8b23c560175f4b299e1a9605e
SHA1 6c155c8a5ece5d5d7340ee4ff0fcb730e4d2b0fe
SHA256 20dc4a3272ebc6ff5edf0494d9e6e2d06c690bb079a36bd04e074818f16a2dbf
SHA512 c6f53903aa3a14f3187bcec1afba4b5b07c10ebef6dd10a710f400996f2214703d29d58abff6e7e0025ea91a78ed2f799f69c542bea006dace570464acf90d64

C:\Users\Admin\AppData\Local\Temp\Roblox\http\571e70bdfa73e0cdaa28fdbd2ca19ddd

MD5 bd289aae66f24d373fe9d4388f8ba9b2
SHA1 4d248d4f9aeffef2fdd953bffbacf81ff3ac8554
SHA256 78561a946c48755de0fce9695d30ab82d9e5dfce2eeb0ef6a0824282bc88a0d0
SHA512 50666175b0955dbdf933302016675f035df38deeef6b4a0e8d0cf40b6e3d2c3e4a089a5b78d75015e0048b2e7f91d81b69857004d55436437d3fa0754d1ef8a0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be241f3cbd5449b0c30c651c4834e3da

MD5 2866f1aa81a7f9c354d34be6a58aa88e
SHA1 c470d8ad431f9876d7966796a503c15440a35345
SHA256 38baca61b0de1abef8c3a97557b6e246fbf9091d1193e3732f6011508e5f0a27
SHA512 1af43841070856ee4c509080c286285ef4850d9dd8507381a5045ed748ffdd09fc32843c0d18aaac70621a8ec88064f0a3b74036cbdfe91be207594f55b24ef3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e665da7061b12f952145852fc21ef7ec

MD5 4cfd979bf14b07dfed01ef9a3b1279a7
SHA1 2e7aad8b8909d3117bb151bf4d34b608e3ab9c56
SHA256 589b00b0a2fbada62af8b7daa8755ce68420a009bf6ce7a53e0865fcf262f94f
SHA512 79a25e0af653d6ecb5fd1908c3652c6fc8ad3d0cf1e00510801bb369728dcbe3c5e1e66f73d058c511320badca3c8ea82f2baaa5e0682f304235b68f622685cf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be58ec8ab04ff195247b1536cdfb3d44

MD5 d1d2f476fd075d55fa0e77b3c507cb0d
SHA1 5976cdae821737161f6debcba500a2842f988f8c
SHA256 650bcfb9e1c7855d2b72865695c2f4d4212ccedb53584f089c26e2087cc65d41
SHA512 958c07812ae7e89143874ce4effb112eed3bec3436fc0b71ee70de38298130d08d89f6bce42d2b0696839f67be260791d121e81f46a4935f3985e241aec7b0df

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e385854d0ae9ba50e28a7a5629fa28be

MD5 0c889bbbf77ec231120674d4843ee0b4
SHA1 fd29658b2fa416059cb30a6729030b6a6b125e92
SHA256 5006fa1587ba1da5b7696daea22929c490049bc0f10661d9c79322b0a647efc6
SHA512 504d43f9104b8c56ba12ae9533ad3554858ebfb4f5b4b8b1692ba339deed831a66f5441a1e4706015cc59f4de4729c0128fe7da2c8c3d095b2993e92eec378f6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\73b0a5d180fa4202c3e9365c3d577fd4

MD5 2c2e29b04e1f7144017730d5b5ed8b87
SHA1 8a36310825cfb7d8ea6fd487afa46dde29147199
SHA256 6026fca2672513a7a42dc67687850d630434b2260621f77ef5b2634486048d5a
SHA512 bbd5097d544d3bea8b5e97f3262a4f7765b13d5c742c9df8fd07e6a56e7c021a41de575dc1c24749631eb1003db0b9548c634eba7d6d2701fe4035f0a5880615

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9cfb35c8f272d46d504f99d9c00054a

MD5 5a67e8e85c0ad7280e9f1ca86f138b77
SHA1 b9fc6b3311df7710e1251114946b93a72dd5d5d0
SHA256 09e7111ea12f1236be9b1da699f8c93eb68127d0a98f2ceebfc5c2d7b25f0ed2
SHA512 ac5e400ce21e5e2503a11642cf401ab5ad4e625a01ac87f1711a02a415fc924556d0d3e50386d17e29ec20bb99b5d3a2d0496dc2ac1fc1381b29774b826cd9ad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d5ee01099db60480061c57d9831c261

MD5 839f812fb19680ae8e62c2ebe0355e4d
SHA1 a256751297a9f82a082bc4d5ef08d5d9d89a2c17
SHA256 b414e1186136cb1f46c6cdc69dc5b637ac5de6a390d67cf25907907c61b364a4
SHA512 f2209d8bbb8f7ce1e6b675cdd2da3a10bb450d50b4f73a596fc0639f201999f32d3c1a2418e0b92c918c0a667a5750ef122e4331361e0022b66a2fc5e489e5ed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf8e7398be5b1007fef514afffffa6c

MD5 864c04942289c1dee2c1aa18ea77f1c0
SHA1 1be7f1b6c2f1472adb9b34fb6f7a51d3d1ba161d
SHA256 9855931b8e0500c6753d77200447963d1981fa7f7b4fb34067bfedbdec0db442
SHA512 6f3934ea3ca2317756e45bcf065abae6cf34ab7c24e1847023ecee8e404294420f5cc978af2afcea986bf160eda88c020fa1b799f5ad75a5e3991e7268192dbe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\90d821a0b7efe2541659a0ff6b31b88b

MD5 6f0ea4b31f2f55764db79b43833bf83d
SHA1 2522c29622377d611419babb3eba2e8cb13fe0e6
SHA256 08f380d19a3cf8307b098cdb5e9992ed1d29e5d15226340758a1af3cb4300c64
SHA512 6a5437574ce2db6feac98928a22c7002ce526501335ac00444190febe302dcab5f18ba33a5ae00bcd83f469b5f1cd356474c8cfd31d9992d186fdd0846db5641

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d27efcc314894472628caf798daafe01

MD5 bdec8723e953241ac3edc46458a6ed7e
SHA1 783605b1587b096807a81e32c488be272e0ad581
SHA256 c31b000a001faa6e08026a24043899ee4941371ce464146a9c78befc2a796e4d
SHA512 221cf258c9c88c857e34fda1da4290c67c3a34459f86b828ab968f5e57b2be53eb4f7aaced83151576fb843a7f1166c267de0efb116740ab2ac2b37ca0cd4d93

C:\Users\Admin\AppData\Local\Temp\Roblox\http\697aeac1e8e025f05cf4b76086fb70df

MD5 749deb1ff197b5082e2b07aa55a33d31
SHA1 08b4d7441ffa13b8dc3610d74a56d8eb11d8acb0
SHA256 e593f31edc529b51f9b253994d8aa93d8ab0bc8faf433e737b0a09e80cf2784a
SHA512 eff256220d72675ba4b23344191b963f7acdce9743af8be81020e2a74662d2f3f1b2735e686806b73198463c550b2d18921840271d515dca0b2d4ce226954d0d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa3db4232d83f97f5e078c526e25a6e2

MD5 3e1ba08877dd32fe4178a730b0ea5e19
SHA1 c020afb22c7cde0c77a9d1d6be18ac8f1e62973a
SHA256 1a6447007e90d27fc71fa7bedef2219bda30eebc33447c2929e4488315e19641
SHA512 bad57ec1a48f686fbc5842a291c95f01db413600828b198b55615857bb1e50e4b3b6031d5896c8d7b9d6753c290c0253ddb83482f89c7fc348b8b80194a07286

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5105c207d9317b50c40470887ccfd3aa

MD5 481555658adb9b672941de82171b343c
SHA1 7937e7bac46ac99e1897c00285fd23059828dc12
SHA256 5069797f8a4b926fcc5bcdb668c1f67ece5d5e8f05d6f19a260c55c9a67f289b
SHA512 aa9aae6ac82a3e320ce9c1b83883263d547a82369d8f31d3db0ce6d6bc5cd07ef96157ebf234d6e31b40b32e276c233f7c2c0856394a70d183bd64e03720737d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6443205f8638cd85aaa1caed016b8ac4

MD5 20db412bf509b564fa765bbc0b917fbd
SHA1 938513617f173454649543b7c014ecc762ba5b5a
SHA256 8b7281d0d0576ed2b73ab842080238d7e006e1524ed48f423f61a86cecf3ad40
SHA512 f6c54fb0478c2df40776125a920621a1789d02239a78cdd3de8eb83a27a00464b2aaf8714776897a4b3ae5488da664befa604ec836fe12010a046d48eaa519a1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d4f8d4ffe8696350702fd146346140ac

MD5 084a09f4a178b2533a56610f28f252d4
SHA1 70c343a804ea4674a214d5ca8e24bce33cf662f5
SHA256 91b1a39172d8f6f0c98a2a3aaf8c137b29dcc4ed4c1bb4a3bd449dc16fb45e97
SHA512 fd8205ea2edc70743247666bf8ff414ef6038f6ec03bfc7590dc037024ca66eface1f3cc559511919058754a5dfc2224ca04368ed31df8aa942a7d9022b93e5f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\251c7269a8dc64cf406e8c2d5f5cc688

MD5 7e7342c1c2e3602906a1fd64acde7735
SHA1 357de58a6c39a0fe4d7e4c13c16d8c1d25f9e649
SHA256 24a5a23ded1de17bc3170afbe5eb7debbb47f0ed7b2a4b5303bc899e927a99e9
SHA512 c6313b65687a5ce03772ff6f1edf761aa91f07a29f8b61db7edebf1beb5c548fbc53aba721ede32d4c4bbdd31361dc724c676d41c06278904291579d25d93202

C:\Users\Admin\AppData\Local\Temp\Roblox\http\afa231f024ffddec5f9d2963d20c450b

MD5 64c05df26d12845b64880218a48e1b3f
SHA1 6ae26e09d6c23ea9ba5ad92d3d40790948b36141
SHA256 e41beb094c8bcc0d8825e031ec9ca5b13e45b94f3c93601c31c10955cfdd8da8
SHA512 d6925cf4d6eeb5275a7c008723410edfe1dd24b9097656e8573f749864f8fc7c61dac61b05230de13a7b9b7b866528c04adca85ad83e8e2831c43b46a70d4c27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77fad0fb4662c6b81630ee443153aceb

MD5 183fe999017d5e5654364c0d8fd895b8
SHA1 64cbdd4bfac3c60803acfb2871a9fc8da27d318c
SHA256 3622ef17da158e25761124720a642153fb6eee615b54da286e731ca2920216ed
SHA512 d5026e42d343185e14360a292c6d13131dbdf081ba44960598e12652d99d999b4f5c70c5c02335596d18302b1cf64128a8bd06273237a48e2cc4eb0267d12307

C:\Users\Admin\AppData\Local\Temp\Roblox\http\74f7241d43fd3efbef367cddf2de0712

MD5 1e996f012273818bd88129d26108d8f9
SHA1 c193db2eca6d190e929375e617f45790cae442bb
SHA256 c7c8ee23804c70ae96b1399c2f6730543f10f7678f5e3ee36fcbce97245aa8c8
SHA512 40ea7f36824cb96dace8ff41b1e92a03e0f7e61cac33a3a81c81cba12714812504554eaa0f4344d30061ce1d89f231ab21cab164a008e1f68d18ccfcf5525173

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2da892c80dea8811c616fe5e0e6c010e

MD5 0dbe0b49a06c4093d004ec7d44303fd5
SHA1 2bac861a6075854f8dc8db470558936c36201aee
SHA256 b136004ec10d66b813386e21fc6c5f86d37071e01e8a82437676902eb3e63e8a
SHA512 1d306115aa97102b5d68552b591f5faeade373ff3a718d9f39dbeade32892e47fd921cd78e5dd71e91072476e5ad933ff9659ee5ea1d07133b55745f00c22828

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8aad44a486e1e94cb992a6a0e230f735

MD5 451b527070f0cfb1431ff5052642059b
SHA1 6021d49e6b87b9ae8fa64c3cfd0180d625c7d761
SHA256 b9391062d160f5bd861cf7e5ecda919954e84a87eeb3b000bf9b93c068057c9c
SHA512 3ec22e77061670685a576d96cc3897473d11c45c24e581688da54d8700b186d3583ffc23cc2c3395fd93af36afc45083058a2bad9cffb1362be8bf4edb20cef5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9d72083ee0b41e11170f5a9845c3060

MD5 92e9669fc7c748554c057eccb11a97e0
SHA1 d3fd8c1e136a2ebed238d95bfbfbf3ce61a385b7
SHA256 b29195912662d71be85e0db741dec5ef005d744d3aa0913dad8ad1e51c3aeff2
SHA512 cdc3a1b4c596fd3c9621e53887a9d503205a0d5f8663e1ee3366129ddbfa83f2b15bedef155eda2949f24d1df615ead664114310e3d3dd03f9fb2d95df2e29b2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c677a51b0924e108a9b1485dbdf883da

MD5 e1e4307ebd3e7f8280c75be0ccd3b5bd
SHA1 3f2a56ac3ee57082ebcf4a1ca21001821286e77e
SHA256 10dcbda8315ffe2e7215b8d61dbd26b0553b438fe94b1bdf005758b1b96d9f94
SHA512 7f3ef600e2ecca826fc163d9092bfc10fcca9a9e6206ef29fe5d61902e3e9625bb2bcc07a58ab480ad19354bd0a1c56dd9f13c4e62aed22d87da146252144ef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b39250833fce2d9f0655b124db089d4e

MD5 639a9c5f588be3e48a6bf5601215f027
SHA1 1ab7c1d3d5df21a05324853fb235b848945c351f
SHA256 4fd48841bac69eaaeaa9c936347395f5eab6fd4f5549d65cf6fc541884a4b2d7
SHA512 c3aced88385dbd9b10841f72c422b17cabeca80ad11af01222f8901b950be3b42467851d5ef61fa3a1d92f7977724926f765b8bc594655e93e116d04223497dc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\83eeeca932186715a9107df83747a179

MD5 e7ee77fadd485e9a35a1bfb4be99691c
SHA1 bf1aacc9fe769fd1dd111a1009473db1dcac7399
SHA256 d98e995f0160e551443de0eba015bf29192aea408469c2fc2d9c93a5c1c82cd9
SHA512 3ae849a12cabc409e435da98308db2ec0b86f8fa8624a23632ab0ea836a0aed001853eef600bb99f67f8f907dbb641c9c6bc37bbf959dd12c1bf2ad9c8147460

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4130cf898fa8b448f1568bfb61305e94

MD5 86df60a0980b57864a2e2d68f857e0d8
SHA1 60c24af81c8406f05ee1721b374ab8a466d878a2
SHA256 ccdedffa29231d609157ccf22019e03a721e9ca248eabf12be511b76f795c247
SHA512 c025bcd3d21ec036712ad8e40afa7da973db770bf5b9b019c73ca8b99202c8e37999e6daaeab3f1c2190f84434a5e4657a8593e8a59066e0feaf38fcd8bc41e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ecc495a0b2b0470e25d688a9077fd977

MD5 741a45f09ceaf9cba7f0ee5b8aac236a
SHA1 aa6b59bba687981191db42af8a8b17dc0fc9150a
SHA256 92ee9b175404bf4aa4e346ebe4948ae5c0ee7edf5693778a5e6a4a1bed508eac
SHA512 97cb36fc2281753eb7a42f762c8ad5cdef7c14665214a71f33518f88cff24ec5e91267f834a6ea5ab0206457c7e9c730dcfb4f7a2ec527e3ce48877e2f34be6d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\28c39719e7218d9c2d686d4daccb1b72

MD5 25a0b3d9ce5e6e1cc4cc7f4cdb328273
SHA1 4d2dddbe9502a5373e6ea99771bb1de6e828b95e
SHA256 013275e837c61c631932167d47d5d9b838ba8b9863915d39f06d8ba4914df147
SHA512 20df5153edab7085594382f80b5d7c6afa5f2a84741efb46961e36331c94369a7c7302c9799676e18aab171cf398dae8f314395c22238de6f8450726c4c992c7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\993f844b48dbb84a0eece0b1d1aad326

MD5 c05764b76e6db0114c1d6200b56a3588
SHA1 5f96252b5a83e5c0810e4ba604dfc433ee449639
SHA256 427939d6cefb89facb6e71e082e42ed184f0883db715e0bd8ca832a316150430
SHA512 4c6c06afb99e99d6a7466ba40146b7fd02f83de16e5c89acbe64179860547f42dad0562b2a281706cfc6acdc5558e8fba5647874ff15d2778f3f6d8c1cd983a7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc70073e6562a1a0cb99b092be4629f8

MD5 acc9db15cdf0932e73bfd20b9857b80e
SHA1 cb6455b641cdaa693de88e9b0d1f422744faa35e
SHA256 f0e15f7608b3829d33eb8e057f31f21e931d9d2ab4814891b11ecf47494c141c
SHA512 7ca5152691d595acc0f0398e26f82c4cf491bea98f2c81e7a972af8fe763ef5926a716ea44112c2fa257ba0109b8848f8611f071b88902901bdee1d32a315913

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5ba3b6fc7c95f933bacb9db38c93e80

MD5 0de2eda8831ddddda130102597e758bc
SHA1 0fa49f0691a4ae61e422a22b07fd4e5def0ae5b2
SHA256 2d60885d3492996ffe223ec6dfddb240eba00a9e03ac0506d3489edc4822e1ee
SHA512 f466e1ea3867fae7618b76a2895cccabb0f646f54bf8c4cb6cf6a5c2eaf4b8e31eb4f8b42971ee53c929241d9f40af6a684647cc09395cfd709774503f274b75

C:\Users\Admin\AppData\Local\Temp\Roblox\http\388a60aa5e51ff44455d359825078031

MD5 eb62ee1626b44f54b2c444a487ef84fa
SHA1 d3d918dae048e4ee9c9626608693d69c4c4ae55c
SHA256 bf2f079ca21684f382d094af52836d83862c93800e8e054c2f6bc0838c442d86
SHA512 68022f2ac538c51acc24065480cd23670efff68d56a4b5dec2c28316726ab82c81b48fbfe76c44f32dc32b0af75fe3e203aeb40610f34e2e5d75bc684f712381

C:\Users\Admin\AppData\Local\Temp\Roblox\http\584bbf8c27b2f156742be22b280cc8d6

MD5 7c0764a501b7f8f1eab14fa7f9337a4f
SHA1 2e17a9b6d5bd740c4dc91af9311e4a6e77bd55ce
SHA256 dc0524c0d7f9f637466570c86adad7021f9316e42e69745bf8d27081a98f09d2
SHA512 dba17c07bc4310c556ef62f157dfd3a0ea1a617ffbbc4324f9a046bf47be9a2bd500921bf02bb79d9ac2df1aeca3745ee1cbd7f33bbdb80fe67e1adaa0bd82bc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc86756c9d8f409a887054cf26a854b3

MD5 70461ebd3bf0f7a0beafcba1d52417ab
SHA1 53dd7894e76f0fe7c02f378d7c67107ed4a03d45
SHA256 e3ef21dd9efd05fd1260691d6dd47f76155bd0b5ef1ccb62ef1e588dca161fd7
SHA512 ccc18b368873c76fb25c97009bfd17e4456d488b16da511e61fe1dee031cce48bb25d507d7fb1237345bdc2191085bd384ce45ca98a5864d10b65b28650e553e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c288ffb1fe759d2618c218fa0d2bee8

MD5 c914fc7a80c8ebee4ddd7216cb8e63e3
SHA1 2e4bbbe23167be5f26e5f3e9f1e1b2409b38e7ef
SHA256 c718cff1df66ac36549451bc6de0535c3f2f9e74b4fcdcea38af9eeecc42a674
SHA512 7564812cd051e0970b3d06aa1bb839c8fae5d1e95e23615eea42d2f12b6284d06f2936cedd947e9d4d33c4656fec00494121d58cd38ddaf1ce2ad8be8685d0fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8ead55fcc97d21deacf012df5c33fdff

MD5 16e22cfdc829405af27279c364ba2f8e
SHA1 0c75b97959d7df1586db85cd1166f99c65603c68
SHA256 aa2f6c8bba8aec6b84f7ef8a7d8c30022097b784236806e63da1f0417124a3d7
SHA512 d1f6695e255f5b7ad498ce177a16591757d5570a4ea45d396f3fa159f5658bddcb7d524c102efdd982fd9ccfa557d984280c27e57484b8f61be512ce994d7964

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f1c2eede7a115f0fd9ddcfae03372516

MD5 08ba91e62331009631f755289dcf7324
SHA1 03786d766cac0b39437b98cb61e65c25d16325bd
SHA256 c50ad1d35d0b3e81ef6780da13361923d7525a39db5c9cbc6c5344a0bf5e1380
SHA512 3fe207322d4249f92893d0eb7a93f455374849ca583dd0fd00c79790ab7bc7f0699fe16de332b767689e0a104fb272992ddc37e002b6962cdb6c66a63618e3d5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c582bbf5493f077bd8f59567067f24

MD5 ed3f4356a5aa9295ec58f77ab387582f
SHA1 99f94109e03097ddf835c06292ecb6142c93fdea
SHA256 60e6db5121cddd5bc13b1019c85b5d962599e2548c347ee3c7d944cb20ff01b7
SHA512 cc7869759564fe9d5e1580be978727c4b0da340c052db74f677bf7cc24d93da0b837d01ae0199c6404e02b49d08fe47a2fec7165cfad841f1b6fbb1d7e8d7fc4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd52b35df5f543d23b7f35ae9e845be

MD5 2de5aeee01688c41f23b2ddc07c0b442
SHA1 68bd21cd4284ff390c1f4f5f4b61c9ff3b8f2268
SHA256 3ceb6af768ce708d114195ea3521c71370ee69172d4d0cdaeb1efff406571d73
SHA512 ce845ebebe20efbfb1a0565e69cea69e3a4f3e71289ec68379565052a2e8a3e5ac873b52e74ea26f2afae7ff64c789c348b4b9d4426ac0c0d6547d9f12290090

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e4317e6c6a87bdf6f00c6c80866345fc

MD5 fa00f598036aff7c2e4728ff840efdd6
SHA1 7873ee7205e2817fc8fdcb3afdc275aab494ea91
SHA256 18fecafdfbf34c5b261f4acbd607c439e35177802c8002a0d88221258108abb8
SHA512 f72faa02c263ed200f7a296ed86ef5da614911c1cd212aedd12923ba551aabc44b33cbced8dac80aae67dc09988d53ee191755afe3d51383ce885750bb00a944

C:\Users\Admin\AppData\Local\Temp\Roblox\http\23f316746f014ce443f0b0adb0d9d90d

MD5 4843f2fc4404a016a8a7b7f5c352f877
SHA1 1446153b0498dd65dbb53b417d5ce5db49f0dec5
SHA256 46ec4647b950351b091ab0bb34d1964bf24b0eb58760175def7a4a1d7a4e09b2
SHA512 8d5198bd48be46a6aec5cb5d9eb6e75828f88742f12102a1f5091f9c8b51167fd6db13981fb875b032795b9407fa64cf3aa54224a64008262084dbfd3d98dc27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\252921e7f19d826cf6778747e86132fd

MD5 e06fafb3ee051c215c7118dcb4a75354
SHA1 c72b3e0f2bb1139344053256bcc3ac48f590174c
SHA256 ea771a4652058a4110a95a6fa24c847e7a50cdfdd711f57e02f9c7caedda7908
SHA512 83008fcb8a91bb42f76568773c98e5dcf6658b0d7972d595eb7059b5a598faf80fcc8492351e9e98a6d3a9ddfc17fca742f07ffe4af644d99c087062ed7b14b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6d1b0fd2905f7655bf0108dd4e655991

MD5 efe7165d72ce56eef26da49dbefa586c
SHA1 b2441c50e501f7121277d205876ec6a5811c4e67
SHA256 4e12e3ed0da10924a1dbc49e464b0b07c017970c839f1c1cb4ecf5a8019d3ae5
SHA512 195b3d7954627b571226a4d5293b19dd0b7b565d4b295b494361ed81f3d9e1c193533dd0e53b2ededa326278294694286669095147d769c5de343aa611ab0238

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0407c8d6df198f6864381d3e595ae971

MD5 703dee4351832fd18ef5b85c6e1bf992
SHA1 bdea9dbbdae401cd68814d9815a17bab6f3870c2
SHA256 8fb57fee0d1c996a828a3147fdd9a38e8d1624163dad101e4bc1d44894bc3d68
SHA512 d43b5dc41be38f5fbe30a51c1abcbbc5c606c9d911dd164b5106fe2bcf0310ae8b641299c5491bbd5ba66433d87ebd17dc8a487d88d56d0ee8e81309533ef0b7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3ca8206460663e9e944ccfb414623b40

MD5 816be237e27ddb79f9fe0c46efa0119c
SHA1 fe0af06e1155ba784ed6ce8b97849eb3fffb5f9c
SHA256 ec6063b82a1adc4187ee0e01f413d4b5ed10277605f741295658acd3f0ceabcc
SHA512 5ca3c5bca3f5559a500de1262c133a972e776dba7192e6cade152245c0e1118fac41c48a79dd0f15c78ef177294867f041bccd3eece6a388eadcc32da8efaf00

C:\Users\Admin\AppData\Local\Temp\Roblox\http\06bf3774b39be975c53ba2193da7f90d

MD5 29abb94b78b9a73db28b7ba825833346
SHA1 fd6da6bc273d4a44067d8c2b625980ab8cc52aca
SHA256 d929c9d2ba98883044b81894da3e921de179d5915e1f92ca9d4df9cc89f1424f
SHA512 d5069ac2996929a5d1622f65ab450bd152130978b049f672b1a9f28cadcf724e317024bd95a11109e0ae488834ab184f5e4b10f6a21ba3329cf056a0b7139613

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1489d1b06ae2d917aae075e6fa9b8f7

MD5 5420558b929446bbd89f3d35e72b5836
SHA1 da46e5c797831b47c4d62fb9321c420c6b0ba50c
SHA256 12d1d581ac394291754c5b042baec0904c2f3b3be6a17e0a8761b32b6e53d507
SHA512 e125c8d668b2c73d583c528f6d35bf8a1c9558c594cb3aee98e25eda051f621a6924626d845f200442da65034dd77aa4a51dd1668c07b26611909f76cf9174b4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b597c88ce139f36dee5c4afd7d80a2c1

MD5 f195c3e8ddb6711a2feaad4aec69b8b0
SHA1 20b1011f280842fe6aaa58117a05f57cc17b6c69
SHA256 9c263d2a5db10ebc2d543bbd0c125bcc5da6c2245ed133fe0abb1b308f343a71
SHA512 52ed2e19a2b991880336b6b1694016f4c8e5a5e92a9dc989ab317f7f743f38dddaeba8fb5764826bfd9aa145028a1b3f9fa34a02f39c1e5162aef7ad282b0632

C:\Users\Admin\AppData\Local\Temp\Roblox\http\16f7441682caf62a1789b9d3e75ec170

MD5 cb94125a0b01b9335f3c3c9a9c6cd60f
SHA1 85ae6cca4c661270b389c00299bf7f5d81fc3943
SHA256 afd92a2c0ea64515200f7dd1c6237f18b6d1bd2065296939697d34a3d4e1b0d4
SHA512 649155baa2d26fc6afd0496d11f37d9dcb588726806eec89be58faa54fcf3b90d1becf114c4e2f3964c98e93399b87bf5bb87709a7bd9a3540c7ddb56e2da555

C:\Users\Admin\AppData\Local\Temp\Roblox\http\852240b4203e72d7bfa66fcea2e589eb

MD5 547ffe689cd0af21ec616bd935f78b14
SHA1 36e70f429bea53fc2c8dd76eaad82f7bf9f3742c
SHA256 abf9ebe04321f9b8926304bc16041965dd79405783b7d3ea56d5fc802863bd9c
SHA512 3683baf37d3da8ac536ae4d2d852acfb49039b3c9d4ab42d972c23e2df6dbfd178a552ef023f48c43c6887161313d516914d26b7cca0c022e2741875d62e38d2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8550d05ebb82e2c3691bc35b7c166899

MD5 f3e7b2683bee3c3628f500d157a7184c
SHA1 17aa34cf9e45a2a10cc370ef0047d6ec844053dd
SHA256 66d177f97d367d8181feedc6db9f92f71dbabf58cef1355439559005be6a24ac
SHA512 48994f038f0cca5a1ad783d05490ccc209ac4ff2a9fc3b508d5225348d2202f9760ac6c0334d12f74ab8227eab5a412370459ab328f44177729f8fb6b8911088

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1cb6044427da36923148711b8796b750

MD5 ccdd89dadb2a17edd97a48f05de218ab
SHA1 c8829afdfda3e414304f09f588a9e00cd43de4d0
SHA256 8ebad66a66dec464ea8f6a70c240e6fac36d2155ef5460b2f1cc80451e9949ec
SHA512 79976e6623479c42c3b9babb2bbec208a8f13b580dc19419df33639e3922ab973e740fcf33c94841e833ef3ca8209b5b149d2ba5c064f08e3b6a526a651432f9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec9a7853aa53bb67f2099830ce97922a

MD5 0ab1d8c6659dc5952cb81416c8d9a85a
SHA1 16d889c645dd70901f87cc86f6db8a632b8518a0
SHA256 1ebc2f03253024917e0b562d101603c2f9e04aa70a05accc5e63eed9976ea0b4
SHA512 657a549264297c42e4783cdfc76baff2dab9b5b9c1f991b3aa8b16f2b8f87ccdb0c1a56edc23713ea7f34ffcc4cfc95b7fbba8d5fa06ea443610f06a00433f36

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6e62dea9b6f892b37a40251f84c9e0e3

MD5 f48177bf38c02c3a2cb322b77d627f23
SHA1 e207f206d2f707e7feddc32c02883bb71015d23d
SHA256 4a8a4eb5baa01e72889b67caa16b69a4c2e8a07aa12f84ade87376f344b2fbd9
SHA512 bb3c4ba048199ddd3cf5d554a90c279d7b868871f1a0eea4ce27c641556fb3e483cf839e3f9a27a092021783a25d604c952fb1ea34528d722db9930fe48e38a8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\05e6fbe7faeaf27e476e2247265bd7e2

MD5 774331951556eabf4930f06518bfe5f8
SHA1 79a7b332357aa2b18cf400033bfeeb5db7614627
SHA256 c4239a4d05bd3e427245f920cd4eba313e0af75c819f89553c7b6758da9b4d57
SHA512 bf67dd1c1d57779578524ee404de1648d9a4d8ed7f524fd49643ec49c3165b9321d64bda2216cfb8617c32cb500eacc2966263dc03841af51ee37facb2b1724e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38b0d496d6e95d4a4e1f049ecb71b4d1

MD5 60dc54bc02627b188fbc37f3c81899b3
SHA1 7065242d6e88ff9ed0e0cb891a9a6f6db2be5334
SHA256 35fd7f2804d4edd74c14cb7bb1534edc993ab7ce9e2d64be997b12ffa8ee5b16
SHA512 2b43c5d1f2ee4621055d94f3e04cbfed24371eea9a7c719f8392a993464e7d05635f59bf230e294c60de5656f421f4661bd5b1b8f286c4c15e79bf9c57d686c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\92ca8d0a36e9ce06a1c3537675677ffb

MD5 ae7d26697baf4e3c0a4f7e4fd800f89b
SHA1 4f2472e39c964861701d80139cdc33bb967b2c34
SHA256 58c1370bf264ecee15638ab670a0af85f8bc3b974670875c757751fd116f4833
SHA512 e93451a30c74751ebd6996efb038016e28370de37bfbfe2fafd1f3c3817f2e720bc3b7d96e1c0e346f08e3c581d13f77a535c30c07a487f2c4a13b4da9970a0f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7df53404f56c9f1787b277ba9d17049b

MD5 ecaba5cf9469daab7c05847af2da45d7
SHA1 78d9c8d289db9815482249769dea663f4999cac2
SHA256 23946e247fe3bb06503a06be2b8e154d724a8c2e86fa4f441fc09ba1e5781121
SHA512 4204260b2efe3b4c95584394b30ad7957b154229828f0ac90a04e5167c7eb78f254777fad0d4fce9c5675fccc390dfccae2ecbd8d17e0e73bb0a6933605df7d1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6c536340229d1bb052a390124806163e

MD5 8dda220de3bfd073f993acca9cce3f19
SHA1 c78e343e500f592bfc59de89dcf8548cd6fa1f71
SHA256 21710259e1dbf800de1bd2dd8e19f33cf70dcf6ad306f7738a23300e40d385e3
SHA512 d21115712737f5d51c7fc887a14bb7b9dda4b9db295ecf429623a20eee02b2868956e6d66907997f100395625c42464218c36e750224e02fe0245c0292fc9e1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\68119f28ce3eca78171a6a8c8822e1bd

MD5 35e84ac53c5b6ac5714c5589d7d79153
SHA1 cedd01f0263fc9e5718b8e77b3467c14a35a1b53
SHA256 47da60997e22feaa88bff58bd2db6320534331990a14e2b64b6d665df77b931c
SHA512 7cbdf8f0eaee0c4e00e3813d1e558cc5aa305d6e9861255d721bfb655cddbf08c70fe61f686e79154f1c36e7a4b5c29f2ecf2776fee9eb0b7ac1da8c87e75dff

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1f571bce12b3689efa5586c78436d68a

MD5 aa1cb968768ba580f7e7d559906a49de
SHA1 1a6a0906ac3c68f859790103094a617e0439d77b
SHA256 b9e49fcb7d0be8aac8bf1d990f2277363077dbd34af7f5109a14bea85b9fd35b
SHA512 a72d7246405dea401b6e97963ea624772f65a7b20eacf2c358fdb73d7e5c2afac79b5cd39cd548ea8c43f14b5f03cc38deee8a495e9c7a1f264c1ca7de4f2411

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7209cd4fd5e4a48a4cabe7e3498368ec

MD5 643d56f3cc2d206fc1eeafd601a0e287
SHA1 0e55be4bc02d884a40a586b44d5728f9e8fefa6e
SHA256 637c7f57eea4b46821e968a691bc2181ac0ed00252691845fefd947a4c594f66
SHA512 10cb34ff5d98467c3de396ef4993a11c7db2545329ea473eb3ffe387f2663cfda6d21d31299f87aa3f298d2bfdb88d705b9236e9f71c48c22970713c2c3f75e6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a479665357e877c36a8bc4ebab8ac84

MD5 f5366499a754da1e3317be61d63cc243
SHA1 8689a3cc6a2e1af5dbd2b6c23b488283362bab0a
SHA256 14873e016597bf69824fb29a219f6d81befb11b19fe2e505544115b33f030e6e
SHA512 6920f31ed14ef4621559e67c75a69ecdb7832aac639c40febd98dcf9b7c02402510e983b84cd309bdcd7b0438b394cd6b1d11bd4c32c58488d24a5d38db930c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b00de5dcbb5ba1d0d58ba82e9c2f97bc

MD5 9a3aa49a6c57739a171e507a3b0a90ff
SHA1 f3c154299bec91f215954c1df2b03f68fa08efa3
SHA256 6d61517c2a006e117a5d5032dc1be0f993f275b6d0c8a0fbef25bda8cfc12691
SHA512 0a02917b5eefba73d3420852a5c66719bae97bc3c8f9adfb2dcad89dee9caf5852f660a3e787d84e9b86e3793ae0605b2db10c0a1463e0f09a733b614d2f4c1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a116d80baa851750ec02ad98f6a28052

MD5 db41d22b9f9f4a43ff8916ff8d513da0
SHA1 00dee570785465bff97ec8a96ebfad3d21f1d248
SHA256 31e6f7d03515207ae87b2f9e9594fc94db77038fcc28ee3990689c6590b7547c
SHA512 df4e09d0f24ec1cf13ffa1a062f9d28a5d36d99b606f27f7ab757f82e4202e51ff4e033b6554b763e6f97c73bbe77b9d133b4b842469b96056654cc2f202124c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\234369d070cc483f7122fd415837b73a

MD5 51d45f80859fca2ea5720897d7f1612a
SHA1 2a7d736969502784b96328f4fd1fc7697a099273
SHA256 5bf07b195c3902c69653ca0294f2bdbf9124df501af426b14d6bcdbb87d70745
SHA512 059455bc829431130377e4c8cee87ed3652b712eb46afa6f666d9e4aff7401b59068da840b91f4914d0752880cb2ed8c64a90e79e37f45b4b90996e44f2932b5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7deb7c677f433c0b6c649020e88fe58a

MD5 d76037dbae4ae81158187aeced5816b1
SHA1 7858adc6bdb9f9b03fcb28746d7a0d08c297d058
SHA256 8113ac3b2c1f9a16f7c5a9be473b64abfa8c9689afcbcc30750aeb3077e3e27b
SHA512 e9e1b515c621e760968098b8e0a16e00cf1fc17b74065efd2f8793add04d5e506205df5d65be1db885fb958b9c5879ca728528963b4048bfe073d4249c0dc6eb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6105c4318cc0c25a63a6c9b8db84bc28

MD5 6badf7314b5d440a6ec8dea899d7872e
SHA1 003170f75f86922af2aa5bc4b2c3c41f5f14106d
SHA256 c13071122b4ff111c8ee877e0d8bde8f34ab3569df48fa81f6f4f1b0b0ba855a
SHA512 5fd8098470eb97e06e62f6d8753d3dbef34d8db6b3ff463cdc964e61e765ab844168170a64c837fa5d60c029a79ac0fe7cc661b9bae07acbaa2400120037aa13

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f40c00885cbd0588eebf8bd59a345579

MD5 9c0241f7306bbf3cd085509dd7840c99
SHA1 21c2a9c916d0e537c5662db2acb565615ef79962
SHA256 e2afaf1d969e104e2ffc22494e2f7e2ec4a0bda49b9de0dcb3bbaa3da9bc8655
SHA512 afdf2c9a29559645e08604b15f023475e8610f41f650f3527a4c2199fc4bda9c291bb24e2f337e00cfac6a5347fae125d8055f0af6eaca38b92ec408343cb9b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\477a618fe08d138e560e0c8eab9f3583

MD5 4f9c826223fb8d7fb603bac0b294a706
SHA1 44a185bf8edbfee521dc92ae012e6ed18cfae3a0
SHA256 e12f126277c8b35c48dc15cb2f37850ff5ab0816e5982eaeceb571c99bd17502
SHA512 ecf987dc0d416a7fb1779289a0bd9ba55625abff41491ec3731fd77950e91d5b454b17573be388766b20fc630ee3f125d37feda44e068d2ed0cd2a87be021fda

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7a00848cde060794152aadd82cec0d86
SHA1 11681369be3787e5073bb93807fa0d97062d5959
SHA256 8b48bd126b806b1b2fd34939bee7eda80b7f8d78ca4f8ad1098542e78a3fc5dd
SHA512 c0f05b5135d49ed734a63527eab1993486de6db83a9eb56b36a38298c1abd809a6a190b3783ee9f7c4f247f649b5f8dd4ce8ac8f1560bd2e4fd35cc95660cfc5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0cd0725ce628c802aea646becfd46a5

MD5 b7c03229a5a8d6586e4532281bf1bcf6
SHA1 e2cf4dcb1a5ed9ec90882b05fd92a1cb2d9b7031
SHA256 2f68626defe72fe2f0f653e4f329dc40a4da28ec0b6805b7e372df74503490e4
SHA512 4b33587bd1e348c0c3c90ab22556c1a1634c9c16a7986d5ca92cf409a6bc9a2d4ef6ff29f1c56fbaeea7ea42b9e6bcac980f3a13869c7321dfa94b3d4c68498b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dfb210895860723bfb5f851019a8838e
SHA1 f94fef7308a9e67beb52a9a423e44ae8534d0208
SHA256 1d878a027ae052c1430540583242339a194f2eae495dda667ec8d11c716bae3a
SHA512 de248d21c49bf5d2244d969974305dff6000d761a05799bfd86e46989b4cc66151e555a328286baab11bba8abf5b973ed6fec51598067e9f82e9bd248348b497

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6c94306dd282ade9bf336c1f9420e9a8
SHA1 da79492f8790c29a74ca34f3505b621f7b00b9a5
SHA256 a27b782a1efbb180ced509948428cb7662358bf64802358f80b8e77e9b3b4668
SHA512 73048498e6fed37807a10b331f0ee1bcc7a715f00d029734ead8a0a8eb383d4e0884bafe115647f525592caf2ad6d53324f0fee18582f375e7287f2e5f7a5a68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f44a17501380161a3e45c36a261cc882
SHA1 b0de7e9b76eaf2278ad836e6d8f5ff2765e946bb
SHA256 053ff1f899b35efe4db026e9d19be3b2c077db9b4d6304c9216169d8b02d5b4d
SHA512 1b4f5db0fc1c44bbba8f993c12d8c251d67d311ee8ca3abb429dcbd9dd7fd5b9107f3c688f7b245c5a7533333aa355f8b8f21c37150ead9c016a78a9ac6d9d35

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c81813ea34dbe699086525727806025a

MD5 8aee7e6af2284ae179f4f9e2a84c786e
SHA1 805b40be391649a429c58b5f47fc5f5a40b7c60a
SHA256 b909e3b63eb9ee4322c6d40823db163d408878e37e58683c57cd5564c7c72edc
SHA512 ecc7d0b4066489ad6f9ecdca16e91306c9dae95a1b1bb063710cd5a2edb102d4fa5196c083cd550c86e77ee00a3d00b33e6a9c72135bdb58c4ce07780c29c3a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a11c97ca220ecf9a413419695430bea0
SHA1 6e163bf40fda5384fcb96c18437835d4d01e87ea
SHA256 fe0af5d2ba351eeff729432ccb922c67f5efbb30379075e28067a9b40e981031
SHA512 62826c27c6236a9bc83ea4471f7efdb8c1963002f36260e502530ef499bfef3e44021bc6c870b9d53be2c3ab4399306f685f7a46f4f4b32c628a878c35ec7917

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4ed453613a6e1f7816dae2fe5a08914e
SHA1 0469080aff66f63bafb87d9df1bfd70c0bf49454
SHA256 d11544e3bf859a6f98af8e672827b5a3668bade30445ef2820796dc622be00aa
SHA512 e076e61799fe008a5f29010a1b2dfb7ae767851bc042600f759be9b519ec6fb2e1690c084f82eeb5f42835b67a5dc12a307e897d257af03f09cb6324a7c9b59c

C:\Users\Admin\AppData\Local\Temp\{6F349C4A-6A7B-449A-B0DA-3C37673EB074}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

MD5 b18c705b3c68cc49d9bf3649abc75c24
SHA1 6dc8963dea0f3185368790dee2a346301b4fa24c
SHA256 c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa
SHA512 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{666CCD2A-2E8D-4503-85DC-56974ED9F124}\EDGEMITMP_3F534.tmp\SETUP.EX_

MD5 5070a34dbada1aaa375cc572b5fc7d0c
SHA1 e74b7ef714755870976abe3d2b4a7db0b9cc21e5
SHA256 03e7a32e1f10fced6a07dfa4e6cfd92510d4bf6929d423798e4fb5ca91fe6c20
SHA512 fed3fcbb64a59070b0efd677ca2edc982d28e37cdf7283f2777af8aca7d3760a7eefb8d01b3c2bf4b4ec3708a74c3412f0dede91e31dca1b6f8a4e4edc673aa7

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 dd6bc9b4faa6c1cf7efcde90da953f9c
SHA1 9796dfaa2acbcf3434d6a8b9ccfe2a92b3c4a8e4
SHA256 6d3ea4c76dcb39b87f775ab8b4feeb107dd738a041846736306f84bf3255c0c5
SHA512 fff6071eca5022ec9ca5b8cff03b7aa661f784fe9c9457063adb412bb8abeaa2eba7412793a8d9bc939e523fb8e40190b74e7a97c071ee73cf8bb4ca4aa6b650

C:\Users\Admin\AppData\Local\Temp\Roblox\http\575aa01ae2e40dd40496b70dbe2a2e3a

MD5 3caa280bd415549d72827cf20afb5186
SHA1 373ce93f1fbaf6324633bb251036e81d83ec0807
SHA256 57949ca866186e89d0f73e81864aec43e8a23edaf0e0e7123652db66332f2ed6
SHA512 dd06d8cd2a0f8e25befc5505384f2c83a3072a26ac756227f5cb0adbe2e7c182348c6d807a845933cb415ff8003d704a6834b3e20c7ff7987488dfc630b290d8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f08fd7380a8786f61b7942b48fb2b791

MD5 b73abbacaf1789dc5b8ee9b369749a6f
SHA1 65b33e06a4e65606d0b5f2292add38cc2e2a846d
SHA256 88e1eb4b2d21e43e5d3d1b12fe677fca7eaf5bad07246a870a1c41d751862c20
SHA512 6341b87659b2cbff7f716b48cddd67a3dfa822d9d18583320c8a449b5eeab2b53e2064f09aa26621108a5bb914923ee831f26e10ad66b6b2ecb87e083590230f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6a437c9ff08c22428e41cb8fd8807b5f

MD5 7529c3c3b895e19eea0bfe1efb931a78
SHA1 830236210abbe198034eadb0d7428896db37544f
SHA256 b84b112169e5dadabc35144c148c8e667d03844a505f648977f36b08cfc00506
SHA512 de8d33e8e04fe0747637e2ffb44fd8a9b71372ff6740e35c14b7156f7df456ac3aacce851ac6ee4b46715469ed9bc538e5987a3119277e802b566cb8572f6726

C:\Users\Admin\AppData\Local\Temp\Roblox\http\47f2028af2ef023d25ccc8efd0d9db29

MD5 56b76514c0782e1ececa50bb8e0923d2
SHA1 740fe85a29378a980c647422988e0b8ea3c735e8
SHA256 424bc604c69ce78e2654cb79e036a69c863c52dc3bbc2cfa354f06711a7530d7
SHA512 15cecd67e0d1a3099b1ebf09dde92932f956ed61e518438a079ae405f97cbc298c20ceda990f0050a4d14cc67fc2c1776c812933c1708fdd200ddfd993974a56

C:\Users\Admin\AppData\Local\Temp\Roblox\http\151e0e19d6d4085a550e13fa528b4509

MD5 392d6da3018264cacc2343101220ba87
SHA1 8b491d51540b004ae42c8b3923949f9296acb859
SHA256 18d0d2913ff4795772a5b7287bb22b7a50d9da00f9db4e78c7a39f605939148f
SHA512 c69af795a73c3d03f3fa442bed65c031ddf8eb7be911eedba5f29a13575d8c5638ebbf2aee5541f940ec0158f0b37334a3faebde8a853190780e6dec42a37887

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c25127772bfabfbfb79619e6fec7277b

MD5 b119bda4df2775e3f00b10d7c7ec8609
SHA1 475acd6adb5270bb08d96ca6e31f2c738c8e0321
SHA256 52e93d0fd49b472e23677d3211d51d41410bab51c880fdeb9c1abcce699d4a68
SHA512 0c2b42b7cd910ff3a83817d6d994b89c9312769496b08093fde4f2c590bf892d7fb4b92835419243d92723e8b8a2ff8152ea7aa99c1538377ac0bcbc804de6e4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb87ea28e2ab4fd9afdb0138873b5895

MD5 8e9b8381538c341d8989bb98d31dfc59
SHA1 2c75bf34f0f8579f309355d137e1cbb056d53fbf
SHA256 2debebfecd0e09e5bc0df69f9f945f0342f814ceda8ae8e321238568c23b95d2
SHA512 b074448a65e3f21c91e736bdf7cdbfe9d19f48032c513c76595fa2a8ed600159b70aa84c00ce05eb1744b346030098c2ea96d00b49031be5a6f931a8a431bd95

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2fce0a696ce3dc0f908123d196477f4

MD5 f806a7821e21871e209db202d09027af
SHA1 958d59c9f8ac329bc00373e846d8586a087c1f7f
SHA256 6d76261542389201c25c83a3c2537e438466d82e785f9761106d3e17fdce4d36
SHA512 63f42a9ceb32c6d20f264076298c77213112842806799a578792176ccce7831a2e5b2ccf30e326a3d1f2e0c177cb89c38889aeed757d7bcf0b33754da5b25fd7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d7743c335b45bb22a7541fed74f1415f

MD5 12e34bad46b69c24aca6eaf0410f4331
SHA1 637db76a7263e1a327b2813aceb657dd8602c8b1
SHA256 e6bfe55cfca09a26db59917ea8214cf25115b94a60b66d8a11074ca68e61c625
SHA512 eeeae6628af4fa2afed149c383cee87dff0264efaa857823545a2c5cc1ede5505d06428f6470075b76df3d000f1efa4f5c1e39b70744e8ad29bb6e94009d19bc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3becefa122c886f8110deefaa6d99fd4

MD5 877ea639c6c1f44a3aa3a691b0e7bfd6
SHA1 409faa352d221f963bc307eae54909aef07fd4d5
SHA256 5b1ec2193cb497875e214b67f868fdd6f908363da9e3949b5a3ca319c4e7e5f6
SHA512 907f812993b1511fabecfef48a61d2f3c33ca58911d2d4ecc4ced42c253eebfe8ea4e9422ba7cd8eaa24caeb3d393252c0aa073710dbea11a8657ff3fe05d8f5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3b7963cfa77aee4e65926ca13ad4f482

MD5 edd2402fdbfee9b283a0f5d6b23e9bb2
SHA1 1e60739c67eb4e9c2c538c5ce08f83aa25681e12
SHA256 bddc06b63d66a3e9976670cea6672dd18094ccb983e7de560491a0520f817661
SHA512 771db7ab11362626ffb2a13eb0184f78596aedd497c9435a343f86734f2a26d481c22bf2c567971bbc59d4b2b4719cb2b20a3e5f2dd80bfafa38800342842502

C:\Users\Admin\AppData\Local\Temp\Roblox\http\13a44cf73e53f5ac70aea7731256bd89

MD5 7d8b30931ad854273922e6d6a2a70556
SHA1 cc574b672f3b7a25d5b4532e8efec9668b1cb854
SHA256 63908201d4b925c8dec907c93e384a6087f208e045bb1fe475dcab7650271f78
SHA512 f25e43e3da113eb428c718058e8b1aa8bb865f99a8941a1baa43d520da78f2a865b7ed225e86c621b0297767a66ec41393d19d4bf70159140d348479d16c54e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2b4378551cc4c3b747034ca2d7fee325

MD5 69c735d8ad9179b5f2f4463842e02fc0
SHA1 76618723729f1371967376a471e5ace743507d04
SHA256 ce9a47712385c821e13d4823fe60db0276835518b39cdf36e146a4f4f4f4a89a
SHA512 1658ea964ef621ee9c7f02ff436b2ecb2bbd7e8cab4c54bec5633671d6f4aa9df1e9c63b34197db2f44b4f0c009f3bf58e7f667d94646bd0746fd82ddbd33d69

C:\Users\Admin\AppData\Local\Temp\Roblox\http\81f830aa0c3d4a7908e82e9b167fc7b5

MD5 b32772c2a8d2b6022f8b2d0ce0baa8bc
SHA1 7f5696a1ae0a507ab78cf2c5959cbd0a5f09844f
SHA256 49c1296cb922b1ee84d9eec354ed82ffa16b55a958be7bd5ff05b14092129e2e
SHA512 771234d2ee9febefb3e5658f7d8a316674faa9b13073f3d2e05371a03207d332b3c18a79606c460342c69d720adde5daa9e2b7a47aa244a65e53b1f1a5b98ba4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c481be37cbafcba082b8c864cad44971

MD5 833e479b88d23068abf4200cd556cd3b
SHA1 e1567fbdcf5c219e9d05fb37d8932c1ff2a2095a
SHA256 7582994f3d95f9f706ef9cd6dff74e240e8a9fdaf0f4ffc032230d6d6a67dc76
SHA512 74828d1520ec4b1ca238534eed2c8fd20d486c32e191a7854190af33d8e86a487172b35dd64f21fef22d6ce6af6ba90cfbe59b81f6691abc59e177846f7e7860

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7f3c3266daeca564517218c0e5db4471

MD5 daa3d76d65a85992bf4c9ee1e1adf075
SHA1 f87a5f9584afa426fc02bd9d7b1f9e42abf2ee90
SHA256 3ca395f2ab83febf2c2592e76049c3f719f49a0e1e739014fe20879d4e22bc02
SHA512 cde0bfabb144da30323593dbcca5669822db069fecb91115bc2b5608b37d0133ce3bcaa88fab1f4ab1f4f3002e186864c6928df5bdaa2a46cb1a761d817e81a1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\55970dc14e63c66630f4b540e158f97d

MD5 df73e542d3246787b8dae637c5b667c7
SHA1 3d45b55b7601fbbdd9f6eddfc50de83e75aeb239
SHA256 ffa3fb84acc8d7a55badc8e85cb84160976cd47f5ec1b02d623ba94223d6b4cd
SHA512 47fb552993842bd7244192be3abf54078f8d7fc90e16ad1b634db8a0ee7e7c837715b30493831b6b394435152739cfb9b9a5563941e27aa7ad83546f71732dd6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a2f0a4bba5f22227929f71970a3db328

MD5 51e310f0a2bf7705ce7c046f2fdd1652
SHA1 f2b6857db08980ea3a15cb81e9741ef5c31f82d9
SHA256 052e1ac1b1f08e5e9eb31c316c1d4c490944d7554dc1c6a2ad99af870d99edf3
SHA512 843847d4b0af356a1b70c0d44943cc3864b7b7f0062153fc32561b44c6f860f51dd28ab9c084bf51d1b2ba5214d7e188f05c89b38ddaad50505e847c87384f2b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\302f2b9c54a790abd9d5bcffbf1de651

MD5 20d9bbcec2a344f51532589cc2591f25
SHA1 404713b34f7a414c1ec5aa62469c9c9e0b6eb693
SHA256 c2024654b94434349fe649c271273d0d64a55666b6d14d46b7a369888393a531
SHA512 874bec6d548783573f1e81f31fff79f4f177a12b1e9474f089c8c670243616e792ea4732d472bd2f507282368c6e07debc0aa7f418f02cbc0bb8f72dbb0211c2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fa150345a354ef5de121778601a4c67b

MD5 7ef5092ebe4c1d59a02022c33f352587
SHA1 4df0c7edf627f90b61a800f0892019906e066f96
SHA256 4d4d1a918e8a8496bba5ca153c93a292b8b0c4c77cb2baec955fe8f74e47dba3
SHA512 12fc6760d1af03e558876ade236ff0e2c6361ff3d1ff8dbab511977a3aadcd010c1af075c10fdbb93d1f5620982d436abf1e96fe0eafec303b4a08d924f896ac

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fe102070e9f451cea552f14990011027

MD5 85dcc8424476991af4cc264db5b4b410
SHA1 9f09b3f1ce94c0a6c8a6b5a452abb9c30d03fbc9
SHA256 9faff8f5a25273b998fe09372824d316f1aeb3e45be8bd5cacee1d84941471f3
SHA512 af04a1a5d2bd39e8d9142e96b1eb51ba79fbf342d40a7ca56ae2f517510d242ba36537c691cad9dc5e6bdc5af3336ff9b9835f0ed4531c1db3f9998e36c54d73

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f5658572836448b3797cf51535a362ea

MD5 a93591059794470a1b5981b582eec350
SHA1 18361d60ca8be5dd9c4bec5985172ba5a8ae6c82
SHA256 9c2a9103e640c1de8a93026a4fffb9956b58c569a46ee3232b837c0da62a1351
SHA512 e4dc7a0a8c808de6bc38939bd906b426feca2163da9db0f251343ed4290aa9842414b193027ddbc3d618ee4843457cb0909239ba6b4bc65b5a8ed3791e60b32f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6b7354af1788471cbcf7521d2ea4d539

MD5 38a881d8ea579973cd9065e9a0a94628
SHA1 2ae62a533566d67d02ac6ac8a6a130071a49b6cf
SHA256 f45b53c036f44d762653e3829088f2079a545ab82abb0f0a9f2613056f518726
SHA512 4540fbe7ec956ba50330580443b9071a8175983fac753ae27a0c8cf15705d652b93d107a74f079fcd790f60db0a8c959a4f390bba92a897a9c7b457d23728673

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c152af22376fcb4931d35b4b8165b30c

MD5 22a80cef5fa82e165fda3762c5759702
SHA1 2e1eb18218ce0beee00039b5fc78937d408d45f7
SHA256 e13640d898cb4612c05ddb7d60bb77b09d010b7ec25f3156fa196b5381586e5b
SHA512 e0df3d37a9e849cca36650f2d3bc9649db2e0f4573687b6e9f04aea49b1904aa3eb9160fce40a697df6e68df31e2b8a8267d2789249f61aaae5cfe5add73d676

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ea92132d5d8caf76f9cf60f064286eae

MD5 b66121145042f5681f03c51444dcd85e
SHA1 4893446853f7e76e95a889ab59959ca68792bf3a
SHA256 7c1e19e30d076f66f4d1ce46adf9709273edca58f2740727583eaed616bae7a7
SHA512 0debbbcc7ad0a327832192128a3a6683d87808759250771a32fea04103ea8b4f652b71ef1426201ef13dc290f4fbe9d5c336631ef96dc894c2bd2fdcac41fa91

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2f213ef207221bbffdde2ac969e494a0

MD5 020e2464a74cff46f1ec68e4b1cf28a1
SHA1 134c4b8b75cde9f7dc72cec20ae1d3ea1a3abb8f
SHA256 7b61cedd55e045f36c5d29d73f1b289338a82aa86e2ebed3b087f3bf9fc8dc48
SHA512 05152ffe275da6e78275b3fac077703f8e292a59f519678dc55d107ac1f3c912147de6f5eb883d34be9ea91d564af44cdbc805bffd6194915eda48e5a2f1ee3c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cee4915d7f1a500665a2cac06f50cf1f

MD5 709b68680ff5d3e676c0ba31c7473ae7
SHA1 b65790cfa73947ce7a57ec339aa172055e98012f
SHA256 875c2101971ea779194346a7388813767ed2dfb3fa8b1cf2adc0d809d96ba31f
SHA512 33dd94269e9b1eff24701c667f7e61e129300fec97c858a0af5407fd89d714687eaba174e1ce0ea3ed3ae93a46d597565de4de3086e496a6ddb052d455e91b69

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8380cc6e5c0268490b39e6de022edb5e

MD5 4b739a4874110abeb2d10012447fa919
SHA1 ff3779587ecd1a1af5648ad17335088708877b91
SHA256 cd18c7d041d7c7feb613d99a51ef06147e4f3d4685aefce579c296d97328fda0
SHA512 1573d9e64f2b73792b5fcd8e513f7b43b81dc4a5c8f6f8a63ed5e66fc8373e8b1d628dc0bab9f73650d22a697300297864ceb4c062ba1b8180b432f70e1809c0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\69a63ae74a0f753477ebf8f1b11dbacf

MD5 3fecebe8675698cf85c9562ead988067
SHA1 aea472c4bcda0a5f09984e8e02a608f1ffa8db07
SHA256 eb254307ada7f582a6ddb89b567d6cc79ff4928cd4a962226d97cd584dc64d89
SHA512 47ea9cd3b10d73ca1c8d709c8af1da2f9c8fa1b096c42066cd73ace636a4b579ed522ba4ef473a3b492ba8b92605bc9474de8c408e5af3f60a27571047b665d4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\720e63f3358623c1f0e73bdc318d569b

MD5 95e43fc522302074225de9240ed3e233
SHA1 96a8ace5194f5830c749dafa29380165c092adee
SHA256 2a042e08125883eaeb833ef7eeed3d4d8ea8880c1a295de43b5f1051b6510368
SHA512 fd83966acc1cc93748c52f00fda7893b4a0e86aae87211c58b44de64f9c3e336d25286f381548d35bd1354c5a6b6025014e47bf85b44ac74d63f32cffa5e86bf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3315caa47254ff0e4c8d0aa36436f55b

MD5 6366de8965b8bd7edd7d18acaf1e205a
SHA1 8666d6cd4025fabd5e49f80bd0881ef6622592e8
SHA256 8745f4e53032fcd7edd1987914129e76b82b0bca3204cd012f02b96916afe4c7
SHA512 109654efd6808630c126dc10ab55c315c9c6f047ca81ed289093a54a7bc7a76102a47689ebad9f35fc721ffa0102f642a58e1c4dd534210d350bd8be43962c21

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 51c31a893d3890f20b191760cad3199d
SHA1 66257742859be7265d31f4ee9cdbf89c355e879d
SHA256 400f91febc362744958749fe81c8fb1aaabd455dd55169a6f44fae2f607bf74f
SHA512 f29a3dbefce43ba3bc12d282f9a2c6b8687e131fb7ad369ebc5af729806836536a1adfcb610f6fb147781276db01ce672012e5e1ab3e6b5f422e5a466fdcd02b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be2b3ff13713e0bc71bc758d3ddebe8e

MD5 3ae6fa68349e6d2bc54cd8b5d96d4188
SHA1 07b9cd916bdc7212136174cc9f28f73f33487f86
SHA256 2b49ba99c6abfd904faf8ebabdc73d8a6f7ad11031483c408e7fdab5e91579d3
SHA512 5de6f35801073b65edf476845a02a7f50ce063a722ef8d3eb63a8800d4dd59d7795b3c031ebc3edbc2b9414ad4a993d813e41c2a5c37d54c8784ffd72988cdb7

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0.rbxl.lock

MD5 ef22e0c861277b72055311e7ed5a443e
SHA1 47e75566dcadcd71019931b39e195969900783eb
SHA256 b8e35686e62578dafac71abbbd6452345a1b31054668b8cf5976fc8cb4ff50f7
SHA512 80300e51ca973d3a9a9b9a71efb273cc955783432893662a9a811ecdf76f388d8086b14c239e7cd3c79f85efaaf954a4cef46cf095b669e439f86857099e8f81

C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXA9B8B828403144A18735D944115D6A70

MD5 67dea22f2e3c36ff181f0fddc6ae7f67
SHA1 c61d6f2bb20f0b17b63da5277d6d26b3016becd6
SHA256 01ed4f609869c120bbc31eefcdf58c9c310f3480ef9d8bf33f6cbffd53ec7a53
SHA512 e50d24b6c1f22ec8ecdb4e7cd3fe31151ae23c818d5b3a9bdab6d4346de8870f6c75bb21d84fd14a4c3d7575c533605654837ed6540b3212d300109bdc679a98

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fa7410b88528496eebb54ea535f7b51b

MD5 6b130be076d108daaf61bf250d4b7d1f
SHA1 ff62f13e0657e1f76d844bd60547334efdc49123
SHA256 b196782b9c2d5161586392b52ae0e6031d2fcaffd503bbdac4dc2be5f6bb4a4f
SHA512 ffe379fcd00e6282d9340203fa62ba172193c1bbe85882853c24f10aeec43f946bade9b7f8434a51e0dc02b824d41548443d8f3c1fa90def499720647fec0383

C:\Users\Admin\AppData\Local\Temp\Roblox\http\595ca6c2ea42524146eb3dffcaed3a82

MD5 6e290823c054cfea6911a028759716ec
SHA1 dd2d128bad8de4bcb8df6b7dc6150da3c98b4d16
SHA256 378ce3d78d3e53ae9a29ee877d8b3800176fbb1a56540f95be71604c7266728f
SHA512 0193d729d03c1d57d0335bd0ec26a51f52573a7919bf51a2914995b1a2c86c249c3b91c85cd44b034b4aa2c0836035eca7567b99400da3d5efb6adb7892cc268

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8b334beef7df5a2cf862b7372c568e23

MD5 a17a11072aa9f154bc13b9f9ff0fbdc6
SHA1 4310476c67fdacd9c4cca0133a60c8e2c959fc5b
SHA256 cf67840aa268dff7cc3513d7d0ec2247b9cf8eba37a0f3a7c901d6491a803105
SHA512 9efda3df0e923ab1797db407feb00f233ab9144eee85810c88f43774578e18c8301ae6be9f435e5ee2c9beb1b539d1a7ee0139954c12c6ae2a6580a1dede026f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf945cb1379a67c55875bda48ba1fb0

MD5 6d7738f6530904547b564a95302a3fd7
SHA1 2e13d7cf95a2d3c3c1bfc07df018fee45cffbda1
SHA256 106d9ab89111cbda19abfadae33a2c8d8bacbfe2414f8666071a211b702d713b
SHA512 901ae007eea5f480509018f2e2be6c806307d2de7cbfe87db196eeca918698144bb264964ceab0841e9f9ae06e9ccff15e7f9340fc45474df9d67b5e30e80099

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8cd47ee5e1bd5e5ecc3c82d06f7cc8bc

MD5 9a895c016ffaba2a57e691e71bfd4d8e
SHA1 259d7ca7f6039951f3d83ad75d4c1aeefaabb03b
SHA256 bd57f7c46d7e841bb4725b0d0e772982ecc1b07147b42a90cb8d4224396e1f2f
SHA512 50d35cf5d462636c8161e8628961bee6a56a1497c3f4856b93f5ed19c9b2ccc2514ac1a88253d1e9d4496ab2bbd9cb20cf81b9998265ea86d1a7ee02156af775

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c243b12ad7ef587c03acd6e7beca0df5

MD5 864a7f97f5926190cc1fcef671d3a88b
SHA1 495b87b05317b1feb12ef5c0d1ef634f01b0feb1
SHA256 aaa0a861d0846a8f8306ad878b50343f5936a3aada398d01a5525479bced4536
SHA512 b865154ecd34d315aefccf64e42ad1d74dc6d7c7662e4a061daee88b75358333d23e131aa34e39be4de88752b07278afc4a07e83d0d7c612d9e0678911c46db2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f2e30d3b161a58948d86d332e498f4a5

MD5 a011820ee8789a645fbe9a5f02189a10
SHA1 ec434afcf8c0ccdb1d38bafc9d9b86067d5695a0
SHA256 9aaf8be0d4dca8af69eba1d3dd215891443c6a3856b315dffc8a4705aabeee47
SHA512 bdb4bd263823eacccb58fc03dba01a0d9324f87519a3447a1145fc280f7bf15c94a99453a2f825f11e8a7e4ddf57eb54079535d72358984f2b0ee0a081b44102

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5e18a20fa888a73695f052eeee0fde7b

MD5 fdb1cebe71e53d40b5d9966fd2ae075a
SHA1 7b89d8bd732c262bcf650b110bf22cd21617b3d8
SHA256 8493768a194b77ab40aa58215946dca018be6b2dd9df8179f5b26c94aa3e4c82
SHA512 5e8a2ab800322e74e6cc12967bd65537b89c5e6b1ddb214b220b1d2da423b1ab2cdc5f4d3c16356ea210e75b73e877a5cf2f3d3f209c00cd74c1f02f32182f97

C:\Users\Admin\AppData\Local\Temp\Roblox\http\226d8c705087f167f071ccb8f6026822

MD5 2b1dec45d4ca6cf48afd9eeabe1b3db6
SHA1 cc25e7b66dfc12a4b06877430edda24414e9fe71
SHA256 0a4384c6ce92fbd139f253049a366916a1b81c881143d5724af2fde3d90fcfc9
SHA512 bab82af1951b85edcd27c7b46a039373dc5c2203b4f2ae9f41617052819567cecc4ddb44e72593fc8aa3e95631f0a32d1ce45d10a09494c9d369164ee47133a9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\751752b038ed5ef56e9e73b782b08131

MD5 961e8d0598ae7ddf0202b0d4eae71eeb
SHA1 296967682d6a7421c1d55e4b20454775925b519d
SHA256 da79dba418726c24dc3ff5e3754bc332f716f3087d60b30b19e8d66edf80333d
SHA512 bcf5d44a913707bf0d2f69cd3877e7dff736eec7653f6afd16fd69a9828ea6200697e0099179f2987d67c79172a503ce3f688983e328b6a1fd1c80470591ef9b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\168d02b7921a49bfeab00cf70d7c5d9e

MD5 0ae6365c1949f61a81378302c6d7a183
SHA1 b19338be823c112960d1548fb24097ca42100c82
SHA256 88776be0eb8b4d921ea25aabfef5a38f0b915e2c7e157f382788e0c280f257c2
SHA512 70091c14194d7c11a5d0ce914f1aaeb5c26b47544b8bba59a7dba3fde55cb6ffeaaf98cf39a7bc95fdac567c9b9534ac2112c791a6a62386a02594f6a9f5396a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7355109984590782794b57390696c35d

MD5 6fde6c98032ced303ef18853a7f3b563
SHA1 487bbb540d385de6c415817ce0a83114f9c3224d
SHA256 ed03c7d50849ceac33a8ee6df285bf87752c98ff23fbb91c12d2b06c749d6462
SHA512 9d51d7f154e98bc9fcb6eade1e7e06fe769095fc9074c8498124bfe0075a8b61e8b83eb5eef2f33dcfc8c09e0a82c5a0aa12300b2403b4ce5407dfa639ba4489

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d5146db2f8201b78bbe18970a595a253

MD5 c9d7a5449c2416cea3dc4b8697273ad2
SHA1 452f66798b4f15ae1c77aa6c20247d202fc09fa1
SHA256 2b94005f0e346190d6ba38deb3763858acbdae197a6a200f0c7c1220f5f5644a
SHA512 dd637977954052362cf59ab76b8d707243d519398fc51e188ebbd882d4b82abd3cb18f80d0faced0fcd37d06373748ebe493faa0b45b12d41f0af1700c6ece89

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fe88e5b76c852cbe44acc3c371d7478f

MD5 0b62c869e1e4e394c4d980c149741eba
SHA1 a26b25b0cd77f761bbbe727587890e135e512306
SHA256 cf230de22d3c89ed0afbbf905ea2d67427cfcc97404cea54845ced8b4cd8d4d6
SHA512 c905b0a82612b033fc8f674d0828094ba5737dff9864e95dcd768b660710f83ec3617688beec2ee4fd6c1ca31eec8d2d70df9868273cc79a59d0346be83986d2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\774ad174c53c04e6b1a29c22a5f6e32e

MD5 99bec00bfc46f3e950ee281f6c95acbb
SHA1 38ab6e7d03e5a58a32fa8b93cdfcf4fc1a959e48
SHA256 df51d04572d489f40be555b7273f7ed2e772480f2827e3bda6213fa38c909328
SHA512 04d346260c3083e318e1b7025e78693f97ab7da9511927efe02e9dad7c96755df7b3dec8bafd175c53514bef532c24846b8e9c429ab0f7942bb9adcadb2c757d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXF13E55EB81494A1D8BFFB329606D5E0A

MD5 2bf5ec84b00457829b29234293136fb3
SHA1 d8637a4c5ce61c9d460951a0706cedd1f52b749a
SHA256 c3ca3f679195ea7d40e1889d895e0fa78b95c2cc64bbe325f57de96430dbca8b
SHA512 e98aaebb04644759cbd7d8daf93973e88b678776ffe47ad4507a85910cac4ae7fe68b3bc1f441567711de6454e504797d090a66ec1a9bf0f444ac7f9429333fa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5965db33c00199c8da043230c1beea49

MD5 3ae9eece15951e58cb3c3333675f16bd
SHA1 f68f72eb957241ed71bf15acf71d515361c70398
SHA256 262a1a8b853e44e5ea0f8a61549527c9d7ad4a61c43fe03c062297251ca0ef2f
SHA512 c1c4a46bae66037adce49c680b42c91f8a8f3b91fa21da308db6e0070c605f0b6a072922adb7978c11b83912faa5c82fd134d3a38ad7b34842de4c0514dadb3b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\22b19b20581c5f62166a73f4ed0991fb

MD5 908169b22541e44d56f5d1909909805e
SHA1 40f82ea8fdfd3295706176ce7ba412e753f8eeab
SHA256 d52f23e90b859cc5787fcd15679a6c5ac79ea5bc9b03d5f58e6a67f57afe5bfd
SHA512 b4fef403d66bc05f31fc0929d38f44ac15ff6f2d3cb02160073a9d939ba28e985fa77521e558ece1c4ffc73c720c63ff263ae14adb2ec7b19d0cdde82513efcb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX25DD2E30CE8E427086E268C411CB625E

MD5 934a11b8eaef18e6790e660f167b251b
SHA1 1195e4573af3ac1c966de8210b162d76f57df7e4
SHA256 8a8ffcca05368fdf6f8941aa5ebf50c565c4946e660dac731827703d5d36665a
SHA512 7b9ec190b7cbdaa40921a775beb6cc245f9e92b12785d0c1a9fc6285a996a809a2c80546a099fbdf5e2628404e4cedc2ab652f3e02c27012fd2fb3ea6d1ddaa1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXCEBA403ABF3E4A5FB1201321A81B8B8B

MD5 9de52d85b06da1acd48afa0d6d1d19aa
SHA1 6683b9c8eabeb1f315873fa6bcdfaaafa9353ad6
SHA256 8b231ef4bd7d12979f583d8c1b89c66ae7e379d6557a1bb6bfeffcafc15f1a2b
SHA512 f3c1210177102ad92dc8661720f12f4c6aed3a86991b59c823471464feb2eed41cc1512acc864cdace009852380701c20a694fdc0311d5a023c2b9298979c8fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\576c7360d7dbf5c209ea184dee932ce8

MD5 8b87e00e15e8b22c07fe61343b921def
SHA1 5275488ffd82741832f38ed90f0ba311e06a8c67
SHA256 e9bbf61c79723b15b5210f18154f102fc48902e154ef8feea2527b78e5941103
SHA512 0aa79e6ac8b69bbfa10dd41ea6200ef2ba9c7354969a74deacbc36e5cdd79093d6f592aecf35280beef8fb51a520ad0f80a44d76e63135c1e2f5fb19bdd4ba23

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e60894907471600db01872a1741a0bdd

MD5 5bc34a1c60d2a4bbe7441e8307189156
SHA1 136eea02e3c374521146b9f530ad9c1151e20a37
SHA256 563d0ba1f9dde1fa635ee6f29925712b5a162396d7681d8b4dae1fffabcf5626
SHA512 5c542b3aa5f8036901247fee55c187958546966a9dc6b34c291af2d63fe0c3c8f92f3d87466e02e3b124f4972b1558a743e927520dc9c3fc5256ee8d066aafe6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e508bcc64367cf9b98fe28c4255655a9

MD5 82b21f9bd843529c51bc0e290ca119e5
SHA1 697c8e0ec246effbf2d047870b81f701756b591f
SHA256 a7f86e25dfed056d6c9833e367cb58dec30c5707046b9941edb54726c78620d6
SHA512 8e1ecbea17605f90660dff9c3918bf0ca7a4f661611ca0796bb875098f15d1c1e3dc595a0337162c26ff78949aa66c27f883a71c5c8077f9c29faca1c92c4889

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX4566B914CCBB4D909F1F2B738F8C8C78

MD5 d6f5e76b38b611737bea4df7021a180a
SHA1 180495d2c8f89bc65cea42c5cbf343e0f3e0db47
SHA256 cb53664e949e16db8ddb57ebb8146b13b785a6f57b9feaf12109670963efea8b
SHA512 bda67757d47ae3e15b5278a8fdca0a73c1aaee595a27e664a936085ff742dca717b3a1981340589d0a270ea93cf3ccf05f61872fe006c33bd52dad8d61301789

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX78924A29B231451BBBB2DB1E82AED4F0

MD5 b04c0dc18c7d55cd67b193981117e8e5
SHA1 de1b8da5292626c82c5369243ab17e1fe87819e8
SHA256 0e9e0d48cb004bf17d389dc2d43451e7c45546210703bf2c36048568477f538a
SHA512 e6a2aea601a6cc021d9537fd56eaf034dbc5932f9dfeca57fa69921733af8d1c22fa4997a596f2895ca60a9a064ace6a135a8c5893381595521da9cdcfcfbef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0da1eff9a99725e6873478bb53e6ad07

MD5 20a9b87070a921eb6ca606f4b49e4ee5
SHA1 500f261fd7bbcdaf2b4b2a3a6fa6f0cc69836e49
SHA256 0cafb5b24a63bf21914494b4800b2ab0aaadadf01fd5413b85ba98b573b8cd61
SHA512 65279869345c2add4d752e8db9b2b5d57f2f21f7441559a76a8c1dad56c8759a37bcc0741bb96164e874fa8062e89e2c200816625328126e019b377e79a973f3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4bdacebda49ebc2c2d118b7ade154ab8

MD5 46fe622ae1ed5e04c8e870d2955b0b5b
SHA1 b53f9d01b0b5eed94f7e1efa209fc6fbc95e9006
SHA256 3f64186c98498258f668809710386563ba357ebe3f72afe8da26681539ba6254
SHA512 bc03f8d6cbd1b1dc2a5d0c444d840dfafe51af93fc09b8393f921d5c1e26b58145280d4d51086c3ab9c4938191221c08f3636ad9f317ba718a45fe265b17f723

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0e72d04ad553b3d0c14270c19eab2986

MD5 71998edfcaf6236c9cbb0100558e9e10
SHA1 6efcd23ccc8e4db8814e5a2e6df0db27e198ba81
SHA256 eba46b16e0d6b6402fb3c4ae1ddb02615263f553b1102c0ff9c7d1b939f30754
SHA512 c81c7c5c19fcd4999b9b0a7abdf044621ebd75fc6ab4058472a7e61af90f2fa021e64040e179e98ab7d31bec33ffe042d93025ea01dccfccd014fa0f72588bde

C:\Users\Admin\AppData\Local\Temp\Roblox\http\912f5fc3f8ee84a59c48c411e53edbb1

MD5 c77201c032a8d835884aaef460a86426
SHA1 65082a70376eceba181d6a51f0398813e9e3c8dd
SHA256 6d97a18d7dd1a3971760a44b5c85aef291e6338c1e926ebabca6f5fe31c675d9
SHA512 c66c74ed3df2b1f39f047cb8ae6ef52275b0a3ba2e631ee78ab5af54122fd8a2fcd9dbb9a4d8a70585f50edfd16ab95e4200ec2e3599c28adb8289a8e61afa21

C:\Users\Admin\AppData\Local\Temp\Roblox\http\84757e79ec2d4ea81334496509b1a323

MD5 1c289c14c895dfdf05610074041c670e
SHA1 75ec8d8c4bf89b0d0ba0c1a3487c11988019e975
SHA256 7041f621e57bb76b41d4b329081403cc6bd5a161f8a45ef494f90942762ebbe6
SHA512 04c7d00b7225f604b32a9428860bde90a0a432044878c1060b638761ab8aba20dd41b8ff98e38f98687b587818a13a7f95f32da5ca839956ae56da54dfe3b079

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd32ecc5c32b11bcd2509d541b5579d

MD5 fcf7972a3c5bd7a9a8239778acbeef31
SHA1 ee81b0e3c6d7d6599776bc1d18c207d5264299c2
SHA256 6854ba55b5f4061656e4660ceb37ef25a108dff6f96167c5b2a67e291ee9f56c
SHA512 48eea8ec572bd641c02e860baa0a11c47f65f1f450ca6be43f3502dc8294d9ac6d495ba3268990a867a271a6e2753aa2d2b80bd84bdf77d99cd1c6446a4e0209

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0aaf6f7317997d554f4a87946e18f4bd

MD5 b7fcabc842e34093c2d79eddb9b0a14b
SHA1 a6ac7bc76d847debd8851693a34c9d4652770ec9
SHA256 ea654e6a85aae695ed6a83519d28e14c497685a7d9a1e3113de375dfad9c0105
SHA512 30bd3f1a0f400ec09fb702f60da46d66415fcfbeb38f0c4ccba33ad9ec0f31c536dfa514ab06a7f4fe96b7685195a69f9d30caca2244dda3ec8866193f2ce26c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\373eb9f859dfb4f553b19748d262bbb1

MD5 e6ac2d485aad3b98341b7d126a034c04
SHA1 4193eed9387a9645f6cb6323b48f31d4ae7096c7
SHA256 05defb267e9ef077e09014672106fb227f7166552fbabb131ca26195fbd32b90
SHA512 18ec7a42adabfd627061a45546b2499f9cd51650ee7d3d64b1c5eac1920771f093da37656ae8a07cbff974ef8f1328eb74392d87d6aca52da0d8dffbef4fc700

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2f20103cac5461a1d3547c6e14d7587

MD5 1b9490b907af8da1fcdcca50c8f65b90
SHA1 cc193d424cf6411e6354fa24ab94a1edfd252cf4
SHA256 7332f2665454eadc72aa894f2dbbe8369ed53b1462c8951d2c0f3e1f09616397
SHA512 bbc0bd3e165b69997bce74bf28349edd89dc8e7509457c8a40df3de21745f3e63d0026101b4a31bcdebe0411a620168b49ec0f0431b7ed2315f92e346cf458b9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e81489ca248da128fe61473200c5d020

MD5 520ab766bca67603b739d14545224a36
SHA1 f4034ed446290fc46ec6c34c2477b55d6a07476e
SHA256 c7a8d3923046b6f77cedd9fe94b6dddb725568999a48265e7457c67ede70df5a
SHA512 a13593c5e7f348838561d4afbd8cbb15fb413af7db59f462b0fb87727dca3393b8d1a470b18cfbae8161755f5558b84a23f7d814578882fb1c0fb51a11d0f2b1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\04597c7198e265b4587f918f96394020

MD5 293305cbe466204f63be406d1158c58d
SHA1 1f3aef9d9f022dbea189e738874f6ef5fc388ee5
SHA256 c9e08a449d95f452ebc44f7ae6b1880efebbf7fe62854f96d5680d9fcd9d7f20
SHA512 73f76a71676fa21aebb3569864cb234cef2a5716bbdb0089f41042f2daa35c8aaa63990db49f808cc3484e71153bc42ed5e4220fd0118827712f7703cd6d46e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e628708210857eedae1e15dedde2b0e9

MD5 4d56158ef4894e8a90a712c7bb83f344
SHA1 799f080b7fbbdfc974a15b9d7b674835480178a4
SHA256 431d99c76df973fa3bd4332eb9ae76b3c7eca9cdd9d2fb2826452a754a50730d
SHA512 1be664d4093aa473227e4cd85de979189ad8ad55c4f896395a4bedd415afbfa44b7ecf32b0c2987c2e34ab46cdb0d001975ef54b43e96e22114320dc761dd907

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ca69e8e4fc12f768f5339538f2558c23

MD5 98e21067edf1161556a42ebba66fa240
SHA1 47753ff5935f9927251eb0743e4f4140ac56d87a
SHA256 2d6424cf2d8a1a079d5f7dc3e63706324a95417255a2b5742ee3df04c8f265d8
SHA512 7d2d5f2cf7df253cbf772f8c3d487bef45e4ad359c14a04d4b17a960b911e5b44d60e395fdb1f54be3bb0c01dca8f2b87b3131947edb435dc6c7ecb2a3ae93e8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e91043f7393d8df20ba8d27e796875d4

MD5 636cf4edf429497b2f383f3300be47f0
SHA1 efde4f6f6e770065c5f81369ec1f93d7fe12c271
SHA256 52a6ac9a8a929297951fa93a34df88cfc47af72642ea7b1682358854a6212156
SHA512 729f7d68d0cdf6f3ad384b90716c68620f7defacd7c084d829bbb1c6189daa4bd3542636bc0f410a81176878b4327ba9592d6cdcd156a3d09bd425b8cd762776

C:\Users\Admin\AppData\Local\Temp\Roblox\http\213a2ebeadcf5e30e59f67ba882d72e2

MD5 5ddec84bdd5a2c2638eee185a96d33e8
SHA1 642f47137af0ba97bc539f791d41ec8a9d5ae3c5
SHA256 7c07f9742d8d07ba0391ebc7d008e4f9f5b627e57948145675d8542dbf9be12d
SHA512 6a4ff84a9443e8f4d7abb3b821eb6dee8fcd4f7b41c50a549178e681bab4f437d3fd538ff809027242d35dbd1aa97676fd6aeb138d4b32dbfda6037f6eb10f68

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6ec7821058d6de655b2b49dd71fa4077

MD5 4c2a8e6294ee51e5c7f517dbff89c3b4
SHA1 d0ece283316a6cffa2508ce4b613ddcc8808420c
SHA256 a10f622b4d90fae780795342f39478e8fc212947a605c71dc55b340946333e13
SHA512 ddad53a1aa7ad6d28869e72260948b34c9c2ebb71c65f27854ad90ce56bd4cab9a6e0becd7cb4b377f8cc2689f3b8010a3052af53888f62b524417d130f0beec

C:\Users\Admin\AppData\Local\Temp\Roblox\http\554149bb50d82e476d8024535fe169aa

MD5 9dd646d41968926843693c0143cf48d0
SHA1 7d34e1eb33178f572b6558a4dccf448f4b88c96c
SHA256 c764e8c3eee83026e101337dfe15761e2bd2fd79ca123b91652e1d4b0ef1c915
SHA512 617d1558aed5da0a0a4e5aaf76a5f5e004b494cd448ee4f9ce468498e9445af053e6418c7273297076d65eea2782f26e1981d5b58daeaf02db7ea9e36a43934a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e2ad0f4d94a678d0b3b42bafa36b89ae

MD5 d15ea25ae38c4c21c8e2285250b09fb2
SHA1 d2d33ab800f1dc0b1c4f13eef2a05e19b981a76b
SHA256 c744d841131f10dff209a1460c61994ba38f2ac208b35e5377e338d0c606a125
SHA512 f8c4fd7d970762cafd5279e40748293cda5b996a785cbcb7c19ad0ca6b0772bb917b3514a7402d8ee45d62bda5f1d19cf219c6f048a878368c00a5de448b453d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\409e32ef8b27444a86034ce907aec97e

MD5 84300e0f7446ad8bae6033ccfcba31c3
SHA1 c74fa0dada411356cf0d61a8fe3b93830f74c68e
SHA256 5702338b38429008cbd92c8ef2d0f3b2ddade5de51a609a3bef1b1640ed29092
SHA512 0b45abfefc02ffcfd30c7db1a38b8e2565670cbd662ef077d4cf8f73436aea370bc7c6d9c077f995aff2470bdf9e4b392df6a1e701aebb7a2130b538b753ef8b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2b30553b07e18a0d003e4a1bebbd61a6

MD5 09c26f8cac35fb8e115d32ac102e5f16
SHA1 7bf890275ed4c9e158ab1bb2c2af6505cfd54f89
SHA256 751554fba217c8e1876d769d3909a63fb3f3dd7fa4ba9a9e7baf0f75e22e3f3e
SHA512 e608500fd78d4a687adfdb9bd69160b44ec3ef564c16fd7cb5e4517f9d2acc64254d3f7bb3d95db27bcab0b01af668ad92c4b7b258ce8a54804a0ba491c39303

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a2f01eb7a4a4966d9cbe25f05155189c

MD5 286120f54763b876b570eeaa81a48481
SHA1 8d358b0cc8b337e002bda352ddcc65fa3746b37f
SHA256 0968a31832a539d69331c2d385509a8f96c9453c21d6314502aaadf6495a52d8
SHA512 9e630f9fb9f1a9a8c4eb0f88dc1e4c4d32312e56e9c975aac308792e75c5dd3220d019c1084e28dac6edd9f5079b7d67f3fd7f79c23fab952854986a92f20cac

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b3f692949652f0471893c77f9496d15b

MD5 309694506a96de053ad11a13bd28538d
SHA1 2e5ebbeb484a103b46221691bcbf9059d237bd20
SHA256 bb03b0e6a4ea12c1ea31613a7781444f22e913c6de10faad59d108843d200617
SHA512 ec5b6a54aad033b1cb9e35af707832e78750f71bccaada6f536721696d21eadf508253bf53015f2159e447466eb833bc4402242c279e09fd432727d1301a844d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\07791848cc603e383e28008beb42e89c

MD5 1f8a763614d8da55e0813fa79055e786
SHA1 0ee36ba9f42f5aa701c2c21f0b1242019e8ccabd
SHA256 ef3e1850477949f8f6fe6f88d8ea606b944a8538a313b8f9fe7c0ebfdcb8f77a
SHA512 6f1a6ebe16fadc0b2e53ac36a098e0e15a2b07f58f9b8fca974927af0dfdcaeb3683f5251af1c40904408bd59d0c44d2d67279ffca9e1e5d962b20912fc2590f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\612637e2bd4f4bb37655abf718961693

MD5 616d0c52e0ef136c2f8b8b77377062c3
SHA1 c4e0a6ec4e086c245b3c875a63163b73887a2750
SHA256 1df73596560f9bafd032d4b0aed20f1786ae5f5dceeccc9366e5eda8ad174628
SHA512 f3c55d1b0c57f053bed557087110404374da0a996976428bb56c442fb73a80f9e57e99c06db6f55c024722cca8bb6006aac27ec46c1e9c8ea4db2716d51bb26d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\15aa102399debb391f38fc5d43f516e3

MD5 2c2421dac112a9f08f76a83c57b9be7a
SHA1 a7dffecabf5cb14b28ab1edf58d77a60859ec7cc
SHA256 8578fb02c9c6ed2c0996ea5bedfaa1c86d13b5528a4929f5c5fa58d7b9fba7e4
SHA512 233f0c1c578412e787a5e4c469bd853a0aedf897d1363eef729c6148fea7c75078f6af0c93a4ae27c90e4f805c9b9cb873d163ba4a42bf8ad54665cdd7882127

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b3002ba810fd3dad730f64dabe06055c

MD5 8647672359f63aa2ba975d707185e278
SHA1 9d8dc7750b803b2d5d6ca624b44609c05e359b33
SHA256 01c312a920d09eacad3def988b53110ae518a291903422b5e21e46b6e7ea020b
SHA512 ab60d25de8010b3d151a6e2f31f7902eaad55087e1a1d3a7b9bdc481278d0ca68ae4351e12ecd07dc21c92cbf00950d79bbc7d70fa27d769624d105a0fcbdc69

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c44daeb46ad8bd1a496998a640c77b47

MD5 23e6cb2942e5b2a3bb7c75cfafb45440
SHA1 5a75dcbe56ccf2413ab5966964cd48c40483855d
SHA256 477e431f4cd8994b51cbd3f5813e155a1c20494e1fdd9d3c7f96b3682736ee69
SHA512 5ef3c228255023e9e13b6f8b13e510ef139f00d94a92541a84f1d780163a421501b0074f4033155755d385167ebb24864389bb3ef76e77b5ef8e721864ccc86a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c72116ef1203a5cc7cbbc5ecc9dae11d

MD5 4fbe88040ecfd396db68b9e76a1634ec
SHA1 e87442ee47af878222fa813fbdda54889f7a6693
SHA256 9857f57f284d498c6fe65034d0782db5e5835a72d5e02061d5dfee7fc7d40739
SHA512 b27258edb748e6757a6d3946448c2a4200d57c248b3c23b949a185ba94ae678834fa5d8e96206c09a8a2769b532d23628d3c3f5d4b57a24a3862570ebae0f577

C:\Users\Admin\AppData\Local\Temp\Roblox\http\25899a90c7cc48a4445f95530828429b

MD5 73fc04ad82b32a023d9dad583389ba51
SHA1 6a6766e7ad471e3413b25e3280dfbf2b8bea4b85
SHA256 340611deb4612a9602d6a5474347b93522e3b0dda29066d6ec756dbb32029b57
SHA512 ec6a0b0cf269923d65eacbbfa58a8d32c3cf0c565e32b20fe5ff80def360c01f0e42e2f2fe47686690cfa5e1237fc0a85f82e2ade914ad522e7fe2dde5f174a2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\507593cb1e738e938c9f3cab26ef62bb

MD5 0f287e372e52d9d52fcfbc13c426f169
SHA1 e4ebe2694837c5e887a64297f58321edb3240d2a
SHA256 4909d83155ca1616e0fcb93ada815c22293df70bc986664d6b0baa66781a97da
SHA512 bf364e6b3ffdb179d9782ec19e503fe915d9602f59257729011a7caac90dc0d172d6729848e0ea42f049ec3295ccc0e1404e7542a00e504ec6638a129adecdb9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0b2d971970792b0ece0e42dcfaf021e

MD5 9da5ad39380e88072b59c50fca2522fa
SHA1 5906574b71b4a77280ebe1b41347fb3180e12327
SHA256 bfb18a9e4256a192814aa7f5a836c42d145a7ee7811b5ae88e806cd418ad6762
SHA512 f94c6a29f06dcf6faaf1bde4233bfb4ebd93d27eec130630a78369f44a4cd001398a7956c6306e3f97360423b1c0b5eef9d890c8b3f26b2c7366258ca0a8050c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7e6844b20996bb4152bfa71d76badb46

MD5 16c2dfd91ea24982c879d37f9d769964
SHA1 d3e6f5153e506bab429dcbe35d527b9bc2c187ee
SHA256 3bf90021f0dd604935208072742974f9b3cfe53e653e251be55175d36ad32436
SHA512 b1a693298fa25a70f8163cc2e0a84c84b8ce0f524cd3c31fe4f76055df6774dea8313630a81e20e57cf4caa356b08977e9a5b35401239cc1d86e2c4ffac6e661

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8c46f9c0dba15457b7c8b7f50c4447a5

MD5 ba04b1a48b60b9c6d30cb87638b97596
SHA1 7319823403c442fae14d153c27477c67c7a2f035
SHA256 4608ce321ec157d6b99b8336ac1fc29a4fe70905898da412877563e32a480537
SHA512 8ce6c2db6adcb62960776d91cc517b047cd9eeb36ccc8019eb71a14cb2344126eafeb73f4e8b4f522c784e4dedfb70c40efbdbcd455d7501bbf1227219282dcb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\46fdbee5d81b3a0d8cde2d5f2a37f6cf

MD5 0e6e8e7b4927fa4d64b9be33f5584f09
SHA1 42b59c62255af48754594e4e164ef22516e29fe0
SHA256 25fbb3d6eecccb3179f73a32db033f87ff388aa462f1f28a334e7775c73b5349
SHA512 28328da5c75a9aa26b167c6bdd7400c2517ccbc4f12d549c512e17e6e7217d8c04090731af93829e1e70693dcc0f5400ae1de32e99922a6ad9f3c0c444e5d0f2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\49731304e4e3c17ac538d25277dfc478

MD5 df80621a08a7f8d2133c266e23b93121
SHA1 786486e1c017abf8072af120840195e12b35a7a7
SHA256 9186d6719bb1403e66bd133fd559b756c1aaca45d0f41dbfb936475202b17b77
SHA512 16495defbb3be1afb5bf0f4297903adfd4bb7ba3b0234a2b39b01a5bea42f155cb51f9941754549115d5edd5929a5b984fad923111be897e88766a84394cc2f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3cd38b7b17873bf90a92f6cae6d39fe1

MD5 f5f9d5198f15ebacf93dfde70671e311
SHA1 760b93c4b10da81b49e6b2faeb6025def639b3bb
SHA256 be2433820fbeb01a73a25387c4bd3d3f6aacf713e4e7e93f6771e2960093669d
SHA512 3b94c0e49b1f3d2ef292f1f3bc0cadcee65c07dc38befbc88c2a0388e4109c8aefcea103b46bfe8dbf3c0cf3332acceaf18c66b32eb8db9993f7673a6c7cef9a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\19d7eaf9637c1de4150b0438bb42f7f7

MD5 6122fa90bb5003e4a7866a9f4034e731
SHA1 1480984a75d27ab34c9b0b2115ca73bf68a5fccd
SHA256 6429d22df2462fffee5f4deeb6333b57600a5655605666663a4df3333669631c
SHA512 e4cf0c2c1a06038fc6c1c66c6c9a1c306630651103ec666b1d7ecd23c17afe1effa06284029e439828c4997bcb10fff971437f18206e94cd93e04c68f628acca

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be61f5c7ea13c1af6cbd7adf986dcc38

MD5 2ff7fa50eb186fc217d1445654c23559
SHA1 3908e329cbbbec9490d09158912c2855ecb954ae
SHA256 ae28b7881502692136343c85399601934ae3f13bcc246608f5ee119649888d0a
SHA512 6649a75ea8e3bb3f4ea33e56d6d96643f5ff76da034cee3c9550bf7065eb12dd20a5e8f33aca6d3d99a4217e39724c0b657003bfbb4868a473876c14b2bb4881

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d3e81795f8e136a0d8660bb1137aa3f

MD5 d48553f9f6a2cfded5e3bd4b947ae662
SHA1 85e3cd109ee9775f66c649701ddeeceafe508324
SHA256 39202ae1772031f8d0e9af6e27bac30175a1d4d2fb6a50d93adc264c4a91b61b
SHA512 fa680404f9e41503cc39502ab672faa5d3bd6c98755b579d2b380f412149ae13a3bfb19beb0daea371ac0c1d525183e24cc34cc61755dbc65c83c72e91288d2b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4d7f3b21d1cbb95cf3ff3f10c3a80b49

MD5 35e931abcfd44f1a5ac67166a5634998
SHA1 d30e656beec49287126e8d548f4ecc3d99ffedf5
SHA256 c5eeae95dfcf82eb38b65b495fee237e9054d0854601f3f46ad05af99eb0c024
SHA512 37126273fbbecef710e824a4482421bdad1a657e754221072fc9bab78549a5e80c87024725d8205598a48481c6675bd589740da431fc83e27e61d7308293a5c0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9d27976c15602b11891dbbf2d4d7f6ba

MD5 b73dbde6953f95296a3d6fd8f26ce269
SHA1 5996cbe1aebbd1b5198fd1a17bef01051c133cc5
SHA256 1ccd8c7c399c1b5083d0f305a41a7b7b140f8a7755658410ed3de2d6546aa4de
SHA512 f97159d8a57fe319aef1a46505ce9f96b439a3a979eec241ae29b54ff3dbe94eb6c8eda99462ed3aa6f36c4ca5ec069cb6c90a6b484d1542ef1d7a4f82484cfb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\811fe622f7deddfbd8287e0eae8823e4

MD5 0e7bdf1aa1d36301adb382aa53fd2a70
SHA1 939d99e50f7f24790ff0a076ec556eeee4bbdcdc
SHA256 fa0209576ecd054e5f2173ff7f398a380e4f0257f505a49a51a80dff1407fba0
SHA512 50f153581d38868fec2808bceb519c85af2cb19125ef8448a4282e096c9d5a3091acbddd3d80259876bd684d44fe23029042133ad54e578e2123b5155130b415

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9118536fd8d9edf3f85cd30c5b911b29

MD5 120db7c43b01a986f9893d39ee412da5
SHA1 482b7f25470e243fcaeda4f3a7a0ae2bcb9e7c44
SHA256 6f1e4fb12fcdda4e6137f8558184da8c266f3720ee1f6082c7c6e143acda9258
SHA512 2413131e02d54ef6d1b034121ef540eeceb0da04b7b1f9eccb6a1eaa9fb2d50c9984270ed84e32d024075cb8fbce81edeaa6ec7e606af34d021939ae21f2c041

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a62344e7bcba9dd87c14e28f1d27bd8c

MD5 f6d1bf7c87c4f16d7c35cbcc810b0657
SHA1 73e938a6b495755c41051384064175249061a136
SHA256 f95ac45b09e7a2d7e9217a10fcd97d82ca3c5165e952a0598e7fab868345dad8
SHA512 84e7e954eda91b9b5022f6525d8c7217f174d80ee1dc9ba395a10fe02464f0c0e6b508dbd6674bd896145788eb79e8d5ecd4b11f28dbdb49307f0b2759e2d557

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be4cf88455b1c04e0557aadacb279d84

MD5 a3efba2729cbb2085e9950c6290c6bc8
SHA1 fdf93dc1f7886edd2c65ec5d20497ca9607a4099
SHA256 83f31a83f67208aacd458911a77809e4eb125732ff1d528f6fc1bfde1a86a61a
SHA512 73c13071f89716fc0da9b8b062cc9568d68f8957178db6849c6c3c1decc1e64ef50da473ae1044ffda9bf3c9408c8847bcfd123b0acc0dfe5f92f2ce11ed20a8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d2c264b3e6e9aa905da703bfb6d183c9

MD5 3dccbf8396371c5d9b16276011fc1cec
SHA1 d9ce333603994aa969a37430d29ed0cb33b50947
SHA256 b9dc1d214bc9443f2ae74d3c73c20dfcc7ddc4a3426446cfd7af6b63df741419
SHA512 7dae464e4bb0affd61233ae97259e90a0e0011ff9cd0a5785b20eedd191d4c44285e5ec5d0936b198c1c144ab3d4ab2c8c997a9b08fb28fd2c0be9eb30b43d1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5fe7ad361bce635837b2c80f45fc30db

MD5 3e6b8f720c9494b36cac88552c31a359
SHA1 53141b588b3b81c8b439cf0513360c1dc168205b
SHA256 44e87f05bbdab1dce54143d1f90da4b1f1f54fc6bd97b1ed6759583f07c0a057
SHA512 1c26d6940995ba8d119240ad6476df3d8ae51802149fbec9b544acd5d1c0a3f4eb73c7a5a45769ac1937f13c8e3640f31e140944587c9e4e88122e33ad023cb7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bfd6ddae3bcbee67da4d5cf21e7f8218

MD5 2cc7bfbf35b8e270522fbb289221de2b
SHA1 8dd1749e7de3678cd742475db9bc2f2401653040
SHA256 1ab02e321f5672abbac500b5a1d914e44c466058eb9f3b4940fa621ce25c13fc
SHA512 628ba006e6c24eccc6f483ef35cd2d09051e7d4b3963aa7a9e10fb06b3b7e0423e720de2078dd6353a105fc7a7ce289a7187cff223def225ca75071075552dc5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\465ce41f6c8bbf96018968557f687bf7

MD5 48a329f1292c97ad2b9cacb2d80eba02
SHA1 b718c2f1f23d896eb611191b5c2efd2973a860ff
SHA256 a84bf7617e01f3c2c9632d33b264c28dca2b403c027625c79e286e8e25101397
SHA512 1e4c364f6b5b6b3f2ec033e8812070dcfdb9e09d2a28c769ac09b9e0fa10842fe93a61e29e9b657be144fa99b21cb105799d886ee1b6eab49ca74311ded43d56

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ab559921d5b54079f11941badfd4e828

MD5 c6e05474db74b90b2a6d08f2d98e91cb
SHA1 44bf84527b206719481542c178983b482be84e6d
SHA256 43fe4515510c6ed9037d6041c71d31758b1c9acd45598ddeb581ca5615d4f6f6
SHA512 05a0aaeb11db4ec6a2eccdcfe91be6dc026050f5facfc315a4d316a26acf01e8c45be6affd8b10574ed7c9caf6b195ce0ce9e60d4f006713f612c0e58ec29df7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\569d4580f4fddf61a677b0f4072c9aa5

MD5 c724ff9a8ce5fbf91aeedfeb8112a9f7
SHA1 32d98429bda504534e6daed8f6024725a869327f
SHA256 359db4bae0c22c6a43dab2a7b7c52311c4d26f4521d3435c533fbe603e36136d
SHA512 757db94cee0822ce196b4dd7ba3fc7d8f214b513aca15783350e10038ce2050076d19b145deef860b29ef21dae30716d8b76140f142f16d64f609f1d2be17934

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ac5c32cbc7e35c3bfdd0a28dd28b51cc

MD5 3c66f7101a9eea11cad21fe98649ba73
SHA1 d3abdebde7697f578ed9d188013319c837861b38
SHA256 0c266bb86018903971b2802032453074c4242babf3565daed7302488b7c9bb2d
SHA512 7d37cef526c727913cb31a0491c99868d5f97317449996a330881df58b2b6a52aeb1280cc0991698191a76d9df3b4ba0525fcaa83c4fb9295007758f1b2d50f2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d3e5fc8c30a5cfe05dc008db0717381c

MD5 f24f2de3310dc4058f3ca5d1609e1988
SHA1 0473d57406007e41500487b2ff17b07775bb7031
SHA256 09e56aaa6a9722f28376f9283d008563bb4ed820c0c872cea5cb99d29fccd6a6
SHA512 8cb70358d57cd9c4ac0058510fa045cb266d003ecc9145e4d29960e77d88db1d6654c3db0eb9feef8228407aa8ab6fd31dd4be051ee975259015f04d604b33c8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ff9a60ec2d57604105a3a09130a4a4b6

MD5 b2bf951020c8c23c4aace10e4a3e7511
SHA1 84a24501e034b083917560736d6e466e61f40418
SHA256 35fda1d60e1c3c184d484bc80d0dfe5430750aaf0cb849b43d681acf79e7d541
SHA512 e3bd8c2ac48ecd815b2fa71c3c0c4f450447cc5166aae5235b2b906ecee02ce0bd2de3ae9871404d1456bfcf929614991fea6083b1c61cbadffdeec3cdce4ef7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ecde444997db035139609ec2d483028

MD5 1eb7d928c3b4679632396c78a77f098c
SHA1 4ab2fee84ecd13f23e03ec03e69e13f0cf72b86c
SHA256 cee451820769a52e91b1d3e19d6d4291de065a31fbe3e037ddb02151e35f6dfe
SHA512 99e247a28eea962f9e3bec815688b9361ba79b6ce1e07734985e32348f2f2ec6569bca430d8f6db0e8f5179c9da7ab4c6a0afa2e75d02aab02f9434ce3a90303

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3386561926c1c5cac9638a7143619b1f

MD5 6ea109b191c95b749ec991a6db6a01a9
SHA1 7cf3654b8552d12bf651106a77819b10e0ed8e45
SHA256 dc25df924da3a8cc2a0b9e0779a010795262ee8b35135d1747c758cb54dfa8b4
SHA512 2f6f461c70abb681506b853094908eb18df2c2a55348d88c6494f20e0926e2a5d72e7414966b839f996a2916dfd7ee40bc3d7419eab76e487e4ee38aced4c74b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcb227ef820b9cc6d620a91b909f9f20

MD5 6961b65ff1eb79bfffacd9b53ece0f8d
SHA1 e1d81d4e278f116b514cb976ee67a89dc7d97bc9
SHA256 ff0a61a6393e8b060e1c1158651fbfd1d4e8de972d6a39bd2201d9fe59b4b0d7
SHA512 22ce9a87e5a942ca13f9964fa62b3be22c4cfb55521c956590a907cd26024198588b89451ae9adc6f974acbecaa9d9c1565396bf76c50c97b19a0821af8a7711

C:\Users\Admin\AppData\Local\Temp\Roblox\http\18f39f6a6bf8fae683672cbac160f466

MD5 61b1d58fd81af70b0e2cae11048a6302
SHA1 efbc04efd343c9623c60651c0f205f2af52c2359
SHA256 0d484299b35cd6fe921c1b35d09a40eb59bec92547d3b322fc3f0bdaae28e982
SHA512 114241814e364b86271cd04e800c45ad2e22d4683887dfa81b40777ca44014d13ce11fadb89a913fd24f5c5ad5a5f408873fb5f4a8a432ff580612726acb0566

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e81d48b85fffdace207df38a7ef07f69

MD5 f9d91aed004e79307356e0aa3cc0f61e
SHA1 4320aaa252175af5cf15837c1c0a057a1d5d6620
SHA256 45a8eaa89baadb8dce15b7fb8985996e4588f58f9020c56dc616c8b0b3dcd5e2
SHA512 bf8353f634051fa69fca649347d14fa46942e1764c7d68ad5355b4eb3b8aa1285f57ed8cec8b909c5f2804d3002de56883d797f16da38fdf9cedc380dea13541

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7d5528686e31c1343745a77c0e0854be

MD5 6526c613f39fc30bb854367a961bd86f
SHA1 4e1b709f9c3011df764a54400430f84923de68a7
SHA256 3c6f1370ede7a382ef84a01b90862729fb86346850377dd7b0183ec734ca36cf
SHA512 fe5c179ba4ae0817d4f3a2f43e7005720d7e42831f8797794dc947a425a0de67ec729bbab154b72fd9585b9d590ce08b29ac47d84909efea97982e44566cd215

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3cf3eedbda3476340b9545d4113cecb5

MD5 644b9de6d42296064ceef28d6c871299
SHA1 a6b2b36a8910db28991a53c929c2d9ba5c096d40
SHA256 b5c768f9e8cb0f6d82b031c24ac0feac480360a2b7f325c162df0e8d28c22447
SHA512 084b371cfb04ac8ff4f49a09876c696d5dc7d672e125c73024b6cd6bae933c26ff1cb43fa4f17052cd8d209db394853c7845959a9d92d6f34f5e9952c110348d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\90ba59f60ed0fa6e2744da18f6b9aab6

MD5 78597cf7ca49787ffa824131d9d2b196
SHA1 dcee1175ea2f3ec558bfad0baa73dcc4c0107ea8
SHA256 53749cd382c7356a26df2111b6e91596a65cb0e9db2da4a458f17d0beb188753
SHA512 574238b44785382a63c57c7bb2888836adf249beed8cbb7fbe20c69d27b66c02894bd989350e72ef209d6972e73d17c0f469c0deb2c7e5f65db4a9fc4f949be5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\febbcb5915310bc3b8058391378f832c

MD5 b4d7994909cf1dc455e9b0c3f9c45641
SHA1 78622e6ba3e6aa1243ade852a7b8b5efbeead4de
SHA256 a990ecb0d9158ca6fad031aa274af66d7ecb5a59743d1dbe6ee1227afd19b3ae
SHA512 904b1ca6cab5ef11344d001b5f2ebd50fee48777eff413a86629204dcf841b06bcf185c01b7b76f0cad8a5e62dd17d5cfb026f5a95b3bb521027ae7947a6d41d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\15308e724c81972b62d58206216031b2

MD5 e5b300cf54c5faf49a6225af9490f029
SHA1 0851d3f590848a34d5e77dc4d06c3d648d8cc921
SHA256 dc172727791ee25da2b195737d4e9492ea9aec93ee043e81442b46e91e005066
SHA512 8ba62a7c4378177fda061e2e53b9f4f946ac45f5f07b8bd1e933df8b0b371a63324bffd980f7b64cf7fb0d480574f4488498d7d010843ac6122fc5b22bfb9efe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\455b4e68e6216ff03e3a17aec66c43d7

MD5 78b6c69e745219af529065504513916e
SHA1 f60cde09b72c7615e00cd1b86d74ca3af8e47240
SHA256 451f113212173ba5ce67687ad1f00f739580fd7833b0ddcf5ec748a6b861d1b9
SHA512 b0e3a27aa9c7ba1f50b7cf6caecea9001634faf49b7e8cb75a4b7723c885c6a9536c9e046864ce63cbd46fac9c7037380801660228576ca92625af9fca54f8aa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a8f1ff092b7a79dbe84e77719c903765

MD5 9be95553ad5a0d9d30e15345146dc34a
SHA1 e37a37f9a6e16e7aa6a9f3963040e273a8a5b7c7
SHA256 6364ac591575862711bbf5e950810229df03516b6b13755c914bdf7d5117f4d0
SHA512 8026574ca57947b0e9239b7a3c424085e29214b4c0b1eb53a142762257b70a8cb2dd6e912f61642819f0cd6d8b45167bd4ae89a91fcf3e9a66d1461f5acbea77

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ed64bed7a2f21e78a901e58f0c116ea

MD5 bc79b084a176804b1fb981798e7d6a9f
SHA1 0bdfce39817783915e6a52afa458a96b1c9ff249
SHA256 8db5dc650008a984aebf22bbc8effaec9de148374d60145cb5b03cf29f61350f
SHA512 ab7543facc5e9bd261ce0dbca79507dcde2220dfdb74ad63169555dfef9fe9081216f58496755013f2caf6f4903ff869acfb6cb61176c1fd2b165d383d2563b5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\977933f21e0d0116e941f97e698371b1

MD5 1ba6e9112a01ce98a3aed29ca23ec7bb
SHA1 7b9179af33898639fef0f8e6cfdfcb47e25f208b
SHA256 c030b6339beaa008f1aa67e1584f877a03077d1cd7823aa576fe0fb1ea32f0aa
SHA512 7d7e658e9b9408faf34496a239c12a4db35a2be702e45d00c364efcef09e6a573bc47551a9c13c27f790838b3859594b96573555c89db3318120103d21f3debd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e317b71dda94bd913a7b72eee88e69ab

MD5 93115772b91ed8213a8dd2741b2d22bf
SHA1 0747a65cb82ca75feb80145597493616abb2d4a9
SHA256 057c2ee608cacd5a39554bd69f4c049e32b75943d403b1e3944e3a59a4209284
SHA512 e7c2b4fa3567106b21e7aeb6eb359502c00ba322d488f475ae893950e41382e5ada9d65565ba2a7ef0a7c40a73b2e034b0acfcd37f53366f36b5463bf35d8411

C:\Users\Admin\AppData\Local\Temp\Roblox\http\386d36bf840e7a19ec99777ef4e86eff

MD5 e073ee22e9c0759f509183c217fbfdef
SHA1 1423a0db95b9d4d0dfece57d1fe35c1abd82df6a
SHA256 38b4cd61b7dc56fa1f5eedfb4e91e5592beafc35768ade901046c1c7803c64aa
SHA512 15221ac80eac50d11cc9cf1fc86bb611e97d77cdaff7f2fdb6e376bee65141030ccfec6cbedfcd332758b2f43dd3eeca767b98ceed9278b11d05a490321d7f0f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f979fc7ba1db929de3d3c022a34fd21f

MD5 f56c9074f37841a0c3abd434829af146
SHA1 40c10c303094cf2786408b26d52ec163805210c7
SHA256 9c36554ac09d8ba5b144f0181b4078f11c56ffcf2c4add2c8d72ea26e8c8ad4c
SHA512 2958b7c52cdd828d6d1b93ec84ccf5c3d16bbc865d1d853795d82e08a051f235ebf99cea2ce951bd6b63a6dbb92b7416f5b12fb6a0a2461699d64b56c97e9635

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3b4b0b228d31436c705974f1aab6a23e

MD5 e55c6f6b33c7cbacf2585d6792dc761d
SHA1 4ae28c9cda2033ba10d264ccf7ae0d2629f603c8
SHA256 1a4e05c1251448ea5bf588fa841015ed35f9734e5364282108cc047521ec54a1
SHA512 871e665d35fbaf289ef71ba02a2fa81d22d99f1b40879f142997e82cee6d71a9afd15ed848151445196b82b56ee00d92452172b7cc655c289950bdd661289575

C:\Users\Admin\AppData\Local\Temp\Roblox\http\876eee64d5b26ac515d1d622b25d2084

MD5 955a78c3fbef06b8fc5efff1073ab111
SHA1 41aa5c75fed8025287dd0fe95730dd210b3658ab
SHA256 e0a820092ce72a2e157cd7aee51435ab90b351f81627aee65197151af39598c8
SHA512 f8386d2bc843132a71bd91312f1677415ed3cfa87b714b8444f4898e1d46cac736ee7f2975d00e81e8a5326e71d9a0f3b00e3f450332c3ec96915179e92bce84

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f060c9d491feda6b268b9e3a5b68d2ca

MD5 e8dd65d3b5bf5c554659917640759345
SHA1 20afc7adbbd812f09af29ae1bf78a5890d9dda57
SHA256 a6bf69e10852e5671079b50f5c82e1d0de20ec5de2505bcc46febeb3254490b3
SHA512 c57a755308765c1b15757fa76e7b1989ca4edd6cbeffa40d426f7517d1ee4d68f1930ba12cf812aedfbd1618f4822ad35e9c972a6fa12161bf1b468be8c2d94e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7dc12a896cd6e6c0ad283cdc85280341

MD5 24cf264cc0b50769fca26841f024d248
SHA1 e0e20f7131e3735b6e2cfbed584c702dc53ade73
SHA256 110fe4267eef37211c3eef87794e5e68d1ffe2d7ab1fef6825f60fce28fcb6b8
SHA512 c59cadf6f33695649af98f86ed1d07dd9a18278dd2072fe8e87cc6e5d546209ad9723d4c1aee72e48eea4ee16cb5b076e223db0b9cf6a65ff5d92c5111289cd0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\165f2a49b362fa83ccffbb63fd4e12db

MD5 0d39ac21f4eba56ca0bdb9e007174dd9
SHA1 49337b23b0239975fdad92c18972be05c632c09d
SHA256 3edbda1ea2abd9dfbd9173d0998658d880979b95cb18e84801a1e641a50b0ed0
SHA512 21cbb9b9a5f2f49050347e124ce2566c02394c8d8399c9f31513c10da393c66868f8fcab7e851f571f30ef48cbfee06cbe46658176a9add41da8652025bf3c4e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\99e37d8db1c77b42e64389f490f1a537

MD5 42915e657c3a82c0d7ab1cb41755d428
SHA1 3b4ac9f8a00686ee8b41282470b15662c207e186
SHA256 48b215136c16faa768abf4db0987314d67468adbb5ebc30cbedf1b921fa62f97
SHA512 a7c404a56148222f4b5b0d4fcd48fecc7dae671998d5c61ae9649abac73ce795ed792321aca749f3146c606a7981db2dafcb6d0aa70a0154572a62070ee4586a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dd1855fcda5094f9bf3a078edf2dadf5

MD5 d9e8fb08ad5f90b81f78bbdd69a040a4
SHA1 bbe05c37781b8a6dce2c453be5dccbe2763dfdcc
SHA256 6da6731c2ea9f12a153d100b7f78e59721edba087a5d2df80428c0fbc49a0515
SHA512 177ec47bc3c21164c85b81fc76de39845a22d31fe84752da031345d5553c1ba44091a60da688b1db9560411de44ec4be1346768d55a2330a33fa1c3124d681b7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c8bc80d9a61c95e5a654b61175e69e0c

MD5 7531cb1fa2227e9485365077e16208e6
SHA1 49815da12b743a6ba82077c205b8ae298074d91e
SHA256 e08f7ae73343f4f944b937af65b4fcfc24d65c39377725d5a58a5d0d06226139
SHA512 897af3adac4d104cb8645d1ed3df21afd1037538b1f5614bc72d13987904bd42564ec2d8d989cbac0f0d3b998d75f1c2fa3999c6652f86fd4aeeecc77f3d0c85

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a8430ded1d875d4abf35af6d4e37f37

MD5 8a5b7a5263543599fd7438c5be55081b
SHA1 d0f80610772a6a55e94e03251d4232598e0dc3f3
SHA256 cb02dffb3f6014e083edccd8ec7284280ce970d76b4f8583f111e808e1f67a03
SHA512 948272b4d696466c947bb30f96f1a7e019b09340237b3ecc93aa8ad4db7a18438360100f89b4126acd690ce7d3d487ac95f8c87a0172498d216f92aaeef8c9e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c5e4ccfe783bd1ffcbb2430799d0edb3

MD5 309072fb0ae8402021476941f6a65062
SHA1 c4c43647b77898676dbd5a74c86a7967add510e6
SHA256 bbc3520709e55143db3f4d1097cfdb8db25ddfc1f72d43bcfdcd7fd8fd72bda1
SHA512 37e4218334ef8ef63787570c489d843a1702833b1c1c353e66a9b525cfb6e179a98b61f3c9bf4f2e31428827ce1dfc01d24f10b992845208b46665dcb4f3aafa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\492afe03ec828d063fccd275c9cdf9a6

MD5 1ab70abe520b1e160fbaae08d42bed9b
SHA1 9eb19eac6d149b82b3c94f9d77cc39e1636bed88
SHA256 73d5a592820465d3ee34525e989f745960895db4bbc1f9a7ce9004e028b89d9f
SHA512 7c4b6dae2a63df8ae7e2187d18ec578bb1ba54dcd3acc3ccccf7a1e66330e9b877caed9bc9f47615d79adaa95fede6bd38045472342089638580fcab3d5dc18f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\605380952ff58b34de032b4b2ceca9c0

MD5 57b97f3679704e2a05b1c014313e8c2b
SHA1 cc702363284a82d651d9483e1926ece3864336ad
SHA256 22279a668b5291907ac49373d80e7584226bd85b87ca714164e230254099de54
SHA512 4d3d707107e2774f920405624a47fa3cf30666dd835e5ec324a070c323e476b4de3a26ab6da7cb12f67e74b8e2cab73b135ea47cd88afe6b45b9725db1c0ac19

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fedac173c4ad92134df48f7d20dec6a5

MD5 0746363519be0c6a0e697d1e6d17e7d0
SHA1 121db89c55d1ac5bff51f0093f2a18a82f485fb1
SHA256 5b2190d6f1591d58a83ed166d34389a03200773c81d4258cfce01c129275a0a5
SHA512 771480cfdedf780ca4dee7c1b1709f91823c75bc1db54dda97fd9fee904eb2a4f8a96f2bd0b1bd1b8e7ad49bd441c547c45ba4bdc52e58930ae69cb0ef232f37

C:\Users\Admin\AppData\Local\Temp\Roblox\http\93786eaf97a2b3b820f076833de5722e

MD5 2b5a218d1061cc055eec97997f86b647
SHA1 2b86bfbf7e01161c31fd9585c8da0432217f06e3
SHA256 ab1f1423df8364acf91c2f682df40abf9df0c528336568f675a113fd494ed7b6
SHA512 6548671078ee184166174d04b24306816b766ed0de840ac2370727111098aeecc6514bcaa9708d77bb4562c618ca1cfb1b2dec015c1004a930e2783754b6bbb9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\014d20daeaedb509ee0edb84c89aea30

MD5 ed15a6d43286163402d8c0d981463221
SHA1 2f382905cb15929ede63e5e25631a7722bf9fb64
SHA256 653c7f4cfea6bb279432a0da5d820a539a925dae623602583b8481f5236b84d0
SHA512 28475498cfc44da5d306f318dd4b3db69bd3ea30e7e6f7dc4f148b7a8508c09cb807a1cb45a3a7498b47de247185749b567c74e7129e5e57138ab4b9af9f6a85

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a3b7d20dce47d7b11ff35fc054fcf219

MD5 75ea73f6fcbb8f86a0e5166b50675e73
SHA1 ee386a1828e7eb62b6b5c0da5f81400464176a6d
SHA256 17aee568909c983a59348d4578d3183804b4cbd10a3d6c7cb2f323194d104327
SHA512 e7d807d3af08e79209d9fca4cb4277d92ce8cbc218fc7f1ee64cecd4ed14a13af5bc1e4a5918e0009238f25b86c02a245628a5af9cc16e7da0a976b034765445

C:\Users\Admin\AppData\Local\Temp\Roblox\http\801a91b6ccda82089a1f0dfd15cb0290

MD5 c46a26eeab4760379d178a899acbe2b3
SHA1 4489abf84986c081ae885b165368e1ba3dbccfd2
SHA256 201575e88dd2156672ce6c2d1e40deee21729491c618e6bf3e7628c15b80d49c
SHA512 ef3bba66401aa21bf73b89a9917b25c8fa4c3ffc89f9bc1d6cf27ba28330bea94dd8ae0f932f1aa41417e4c584810bb469d3253b164656abc57711e685ca3b4f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\50731702198805e4e883f1ae894b75d2

MD5 9e8d7392d799f795756d914a5ee09b2c
SHA1 0ce3f5d3dd03c326225616045a14e2152d25d8a7
SHA256 23dcacd4edc564f85d6e9a59228beafb5bc6d13c954e3b056609443efa6a08d7
SHA512 dfc3ccdbfdf42871f9c73bf290a3e0736129b5f784d031e35f792c8b3217590533438897aab9145519f3f491fb9e3efac5e6171a20edc3d1f9622f19e6236afa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d9acad94f6365e8308d73157eb776d64

MD5 6d4e3eddf0e7fd1db1964dc53fa90481
SHA1 2a315e8153b2d8149f3cad11591a627907641dbe
SHA256 d0b6541c515f9a46ce2743211e0f1c49114d9a11fd1f4361225df9fce5d0a523
SHA512 df6ce1a3615d8cc58d23cd389664038b55f18432915ecd0fc0947a3f1d2ce64baad9e379e9d0a3cbf0ef8ecd1c313b7adb7275594f18c94aa705dcb8e835c0f4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\926724854934ff5e4193e882d7470770

MD5 0b28a332509ad9df19c19706a05608a7
SHA1 8a6d36526c97aa71c435bc192271edb17e5b081e
SHA256 95dc9ab9fc02a581285559098cf3be0d3e90b38abf0a5a7b22b7e2de657d85a4
SHA512 1a0f66e431bbcc1335e0c00e8a06a208a6a191b3936fee9e599b6def2111ac6c9b3c35268c11c807bde7131cd018c955527c553ee568d53add83514e607e7d26

C:\Users\Admin\AppData\Local\Temp\Roblox\http\39de42154a9cce1a661c81f63a716702

MD5 cc9589986760992fc5e7a09e7aa7f801
SHA1 93030044e8a1bb2e65cbe32d54bae6a705e7001b
SHA256 02fbc97fa50ab7d1d2d98f4c238242e76e892f6111f0c907809a071d75b17c52
SHA512 4846947c6a0f3c727b6c9b196e00b24864bc93e698d15d022371bd9a5d1e73942f2c36bec67c6b4799c0fcdc22b8d4c9e7e9d11f24a352e4cb82adf78df673d6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5897ba047be56c25565d264f7cc1fff3

MD5 fb82b2873c20347ae2a8f0083af552f9
SHA1 027c7d1fb4c3d2d9e48723103c9279cd00a39829
SHA256 493378bb47b9aaf7903c02d0e6e7455d7da18509a44c905f2c658a4d223366ef
SHA512 e7ef7e50f21d7e3c571b434c9c0f0e0e608ea5792bcbb7bf9d8cb08313ab94095316fd610003f72e75e0a84aa7cf6fe4a3ad882c51d9e2b624f54b0c81d6ba0a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0549707594205a0d92d209bba184340

MD5 1a2c24e2a27f7cf396a1d5f26cb892f6
SHA1 dd524f7e0e1266dce1b5e3b37fff737d74e4686d
SHA256 97dd0b8bbdc91cfdf46c6f3d2250b663ff4d05aa76bc14f65fe88cffada5258c
SHA512 21bca862a97b3134223a400fbef12b18d1f1e7d494d2a5202ef234cea9080a8ad1980c0069599b75c3d33bc35924289cb1d26d2c68dfee0c860382b1fcde95d7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\239cc757815dd2b79cd26fa4ce80f977

MD5 c0914ece66acef467c0146e60469dd78
SHA1 8097b1eba9a7f090d42a24267082b7ddedd99411
SHA256 f1ee966c627a2467a736b2ede00bec21d45cdd2c9b0b92383bd2040b23baab8e
SHA512 8022a5d18d7f99e057488879911d14dbd5ba054c686ad2839b638379ec92f3fe0cb6766eb14b98662ca9fdc9e876c7f3cfa030375d39f73864e09c6516b9b7d3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4d15883e9fba67af2ea066760da058b5

MD5 bd21955c37d00c9eb91d039670c70ef9
SHA1 746c4940d1de77d3a4297e4f8f93c0a251da28fe
SHA256 74528b42e7eb8193918b44dce60dfc2e96bece3f0b2475eec8a895b572db8060
SHA512 d98d9153028fe8608b8775cadbc3da851ee5c6c263249dc9fc60bb0c3758f1b8716e740e7be9889ddf0727c8fd61b9147b1b124776ed22c0cddc041bfea251ea

C:\Users\Admin\AppData\Local\Temp\Roblox\http\28ff6aa5cf51955f9702644efef726f9

MD5 f4f2844e96b4e820b6b33d9863a4251e
SHA1 cd626667e3c29d33b89e377a18349c060aaeb048
SHA256 8c3a0a80e82bf97105f658486d89b92c7577cba798c6af2e12cc9d220d79ed60
SHA512 7e0139b31bd36f867f36f928e9648f0b2f607a94db964afe697c80222820ae54e28a7b4c46104e69cbf3298123353e4d32ace460a3a2aa1a8d3a43dba60aa8cb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ab8aa30cc67f1c8b9de5677b8d6534ea

MD5 396229c79775d0bf591ff6bdb0875a5a
SHA1 42db1ea7735ba29a715f001cd104f6357954c571
SHA256 ea760665ad2aea9ba4fce4612f870da72e67d9b4c3554c33e7f0f8506fdc539a
SHA512 2a94fcaa5fafc8a0f543cd4390cea7760292c88bce804ccf02aa86c4bc5e70cc3e7614c4773754dca1b49c237c35acd8cb9bfc2f82379dbdf81bf9eb4c7a5a87

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fa22481e33f3751986722c92ffd18806

MD5 cadafa3e78bc445c330057e157804bb8
SHA1 31a342c92902c120cd24b9d6973a45fff3528d59
SHA256 5dbec505d788e6dfe8d5e12033effe3646c1a1c66261cde540754249be2d75e5
SHA512 0759ccb822b2bbaf51ca39630b7b85d6b38c8bcae909dd6c3872301f63c545653b8c263b9a80fdb18103067f7324b327efad1bd96b7fb59577f44f9b62dd35d9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9e8e41346f317f5d398e5d23706dd2e6

MD5 bf00a3566313591ae32ef12930be5972
SHA1 0f92f5da292e2023e820e1ee4555e0ec866b607c
SHA256 c6c28b0462d371f95e1136b76925c21207150c0303af5d114d00f29379fa6a80
SHA512 14d595cd383d3e2e7461663495969021b7865d571c44a21e22c2001b334dc7d735304dfaf53aff89c3ed121aaa58a80f42c640fd7d8090ea1d89ecc5064de173

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7679856e8f37d861592c025b6171f584

MD5 ec2da96aef60a39b104958fc233936b5
SHA1 441721e1ad26441c55c0043f1cf86fc935ebfd12
SHA256 728c5b77ce7f470a2dabcb1c105295b4576741b9b8592ddf91b012f81a8a1e21
SHA512 68c9f6b249ba09d6787cd5cffe6ccd90ff9d6209e6ce91b550c81a4f6b504e7d3b79b0ee9b2cbd056f32d749b04605a2cf19ff0d85a22467bcf433dee76fd442

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2c7c74ea84d6ae5f61d6b2ae59756977

MD5 1ea71f79197779e17ff2d62e774692bf
SHA1 a3d53aea896c3b9c1106c63d661d5974cf0882d2
SHA256 ec73e461d337c0ec10260c4d86f239f7120515a296718adda4b6e39250ce714d
SHA512 452b63426c2cb7331c76982bba3d134bf949d764260cf7790024763f02fd1302de5f4e782574e882c2443151ae434cbaed2e83f0e979bd2a9563aca5bde85369

C:\Users\Admin\AppData\Local\Temp\Roblox\http\62df5184ae1f060c81401754ada047ae

MD5 80696c7595540638b24e76d1557af8ba
SHA1 8d58e475d0a3c629e5e4781eac657faf6d9ca22b
SHA256 7bbb75c1d5624f35dbfc6f31ef170d3aeb92d1058ddc0784ad3f3b560412378e
SHA512 951013b48cdf1d5d071f161e100359022c300c41d9d32c5f96bea7613d94cc45fa609f7a9187214333611fefd0376bcb401d77ed9cde07ba4a5cb0211ef16d95

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9616de78ce2e92da8d2572477bc1c185

MD5 9d270baaa7520ced9ecaab45db5f8a8f
SHA1 e4c274f9f7dfdb3f670eea757d8a6accdb475b3c
SHA256 7d2dcc56b2fb10e8c758b1efd506c3ca587f2e566a0f6489d3d451d346287b0c
SHA512 6fd067b323a45ce082356fed2b0e5ac4538e008d5d06df80bcf52f6ba460a4a6572431e13f10cace73e9dba898e4b228839ab50657f8824db06a5a93c989590c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\93f8cc03f751e64dea82cc893a30817b

MD5 7720c14a111cdb8daf03d73a062c5057
SHA1 afdf1d7fd0183fc9f5ec32fa02f20bf48d371b96
SHA256 1462fc37d00a57d4844ec76295d04a5a48b31433a40b22adc7d29c89d402bf5e
SHA512 85bc4471f504abc653a83f56ed2b9b0864acae5b0db9498d7b3a02262e50d58c653881275b6777263fcb22ed6d263d5258a8f33e5d93331345d1b58d263b4c5c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\985f88e3501f757576a660256d088a92

MD5 c1cbd6e10891908063d21037b2871d70
SHA1 75ea8a7fcf18575920a85fdb0a47b59dfd80c0de
SHA256 da6a92ad5416a55a1c449494b053357e175630dc007da857c68f0f76afb25270
SHA512 8e5831a4c3f872aa65aa40703f5f8e8ac684630f68a166e6883628610330e10a3bc4b8242da967a08ff9d2776d794f878c0090718a76a23934395d1f3ca71091

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b17bf7b17725fd2991e666a447ba335e

MD5 d59f92d94370dae20818a6c9276ee464
SHA1 00ee82bb5c4047c628372cb0476fa088e78badff
SHA256 96ab5afa8bd06356447cc97969dcfd08b8121cc6fabe1d23bdf5c07722c9d515
SHA512 8c616b95f7d5b848471690082c583f8f64db4736593f22a6db15f3bc7f75df854525d6380eddaf8d72e77178976bd7dab0ee1cc398d4820925f0b7378c345837

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a0b5220fc9af701b387ceb9504817fe5

MD5 f3dec5004b246bb35a931f42292c69c6
SHA1 b086fb17791990f66d3e1f681cd0e7d3c30374af
SHA256 b2acad21f451b11778e0849aab052f0a819a798a4e93e52ccf3e2539f33bc764
SHA512 b60b40f8bf6b4323e76efb92a9736095d30a58896997d963c4e313a4349a69491a29cbc20414b148e7d73d053413ff583e8eb2c9594aa0c386334603ee8ace81

C:\Users\Admin\AppData\Local\Temp\Roblox\http\100568b58a928710ad7186ae76c6086d

MD5 2528c38f5654849955d87df236dee112
SHA1 7dd0f3f7c7b81e57075602ad36e2f09a791b963e
SHA256 0156d899168e446530b5ea228151838eaaaef0595006f548df6568de897a47c4
SHA512 e6eea4b5ee6ffc41ef3c7cc53ce9a16d63d0b6771d31f8083fc7c0a284787999b8b272a4eec95bb00208520f0f8394096bcf3b50f853d072cbfe153c40bd35f9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c92970f573dd37734ed041049efad9b2

MD5 b4547aca9f9d10eb51bb8cfc979b4d22
SHA1 52adb447de34910f9ee4225cfd1144074d1ebe80
SHA256 3fdeafcac3bbedd1f67c49831c7aed9b92c48c3640be50bffb1a1703b390ee5a
SHA512 65753e56f697cc3fe62285ba57da6e8d0334283844e153f01a51c949926f0eb74c4876668b9906fe85d09ff83558ef68da8d81f71dbcfc038a8ec1a6b38111da

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e72e6a845030a80ae6c35abd976a93f

MD5 a2d44fc22f7b77a70426273867da34f3
SHA1 96554c7b1ddc3ec6afaabb5461783a46a028887b
SHA256 15b7ae50df6501e526273b3fabd164f47abc550277709cb46b8b4f3ae73748d8
SHA512 40e6dc1e8c3c217ab1fabd6ef268e8af4b499b1aeaba041a0a1888805fc05dc182081ccf08201a76717e4fa845605b44c3b987c52ea43c3def60d6d85dd7cd59

C:\Users\Admin\AppData\Local\Temp\Roblox\http\acc0850479f78668f37e89fe36acae5d

MD5 2fa7a44f4e82d33f2b7d501eeb7a22e9
SHA1 db322af63dbd0237c0d910d1336dfd462d5cb951
SHA256 cb3aa9a8130939f3e55fd6fae765741173b036195551d430b305db431784f0ac
SHA512 fd1cf84151809fec15941da708b108e0d041d1aae7a4db8c68e5790ec5f4aa874b366866458eeb3eb631db5e0fcd90e5c0ce35dfe17a262a527f4ebad33b5571

C:\Users\Admin\AppData\Local\Temp\Roblox\http\309e13c21d40f7371d238755c8947988

MD5 aa4f0f69aceb33cd815e92c350e75b44
SHA1 081bd9ded1a0b10ccae1d2d43a89388cb144a5fd
SHA256 7dcd3577ac085a8b3875ed6d527aec9ec8cffb5a7f4b0e88455270849c4756b7
SHA512 0da98afb17716fd986878ecd63fa78e1ad83bc85a463652acbbc5f0d4c8f12452b399b349c40e780adce3e8c7cc443216d830b075ac21de180fbf8285e4dfe4e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\17ce141f3a55c10376159f9a07cfb04c

MD5 eef6b697e22179af217abfba0ac550da
SHA1 f23bc6f769b9825fc171a0087a03caa2db55fc6c
SHA256 dd92c1b8f370ccf54e46207e1f726d4eb3b1c568360cb6bf1f29d5276862efd5
SHA512 1536c0ad031e7edee088c64ca07db578f74b59b6f8f2745dfad28b946cdeaa0e22f33a5e306b504e9d20a80d253aa00b8b08ec935e22117e0d60b896968aa84b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\88ed905db2d2d34ffd7e8e48b6f3923e

MD5 22bb3a440cc9d87d6c0aeb983678c055
SHA1 f90958f9dd5e67280c0426b36649f10e19a34eaf
SHA256 5758704bd85930b159ac1265b0e38b02a2368a95139e93d349d6c9db25bc947d
SHA512 7c04a5d4602dbb8adccea47f6433bcc5b2829cdbf5d0ba8bcd5758d0981d046097e183ce3fa0a4850cb5c71798e26519dbffaf1a14302dd5f12e9d80fac512e9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\367c561f6455ab94d4ca8f9f6bf2dfbd

MD5 2ed200083abe37f39e94bd0c7d44170a
SHA1 3f5b7be7873bf95da71fb3163256bb3eba7ea215
SHA256 022a27bdf16d75789570eb2b7fc400fcdb0646889040928682752b97023e0a9a
SHA512 1114d58383407f78c3d98a043f969edb1c7bd57a261e6ccfd76115c9a4a22b344ca45351c85bd3495c66ba54d91989a38b2b5f8f2b648fe5425aca6adc859fca

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2634a3341105a863acdb09562be2b0d7

MD5 577e586f1f64a8b3016f56b19e452092
SHA1 320dd4ef6b62123dcda1295327c631378bc5afe5
SHA256 96d863b92bb2aa0d091789d6ce71da99bcade24ec91bb9bd7691b1d649a30422
SHA512 99583b4b1d3093d21f17c79c540decfae949e109a4fca3b6578745afc4fb71f303bbac9ca244616a0e42783d381c5471e008597ac9f4f62726451f2f2ea4fe28

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f5b47bb9b26c7bb0e80ae6555830c714

MD5 46d1c299d7371299105e141b8be4d200
SHA1 373977c99c906defd9df7982bb119d12141cdd44
SHA256 3df6fb1e14b96f2b4a95e8fd0ff1cb81e63d98270d6c006248192989a08f51e4
SHA512 46fb206e80859bfd01b84ec3c046b7fb5cf09c1f41e2af9998e3ac450c8a83771f2c6f52443f0909f28d19abe7e64fecd1efe212824657e56dc8addab52b2ecb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\60cec14f2d18a7c69b7ec90081a6f20a

MD5 8afee7c046153968762bcc82bd6548d0
SHA1 9e5693af5873e20353d1df1794c1db9c94cbf398
SHA256 59d776674d308c0eb615e21e22fd43a526df64f5e868ff02dbeca9ab6d804d96
SHA512 445b88a744e0b41970e26a4df9541a99e13b1822c3f369ccaeb671f0f9e7e3f3b4a703a0b4cf520d00e2c5ada8756b08c16b419e4392aa8df2c550ff6ca60cf6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a6e72c60dbb9f47a2ca09f528e22320

MD5 41a325b7d4b4cd1a55c4a7f5ea72ee5f
SHA1 f1fc12efd2a981f62b2ffc98d1bf7698c96d3c75
SHA256 359d0ab2fcee837460c647a4430f1d2ea430c82ba241571652a2400e02d7e447
SHA512 07ed7fc1f356210dcef269fb9af705761e3c55d111db85538b365fc1cec71f9aeb6b84a45c0708d1bef823b89e20bc12654d401dddc1d37c1f0f8d9625837fc1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2ff8c2c907132e67fe31ca48760bd58

MD5 1f60e09fef56e5ffaa90eeaf51d504aa
SHA1 03901631a1be85c6bc37544a37efdf54ebdbc5d0
SHA256 8891dade43eaacf5f3a76bb046214bf608586a2e03f165f91e0035d346008585
SHA512 98da3b4afbd8a3741b6c8fb47053f4a4a3355f6dbf6b5433ed90be328cf5e614d0b445f9882b130148705176219e2df857a276fc1e59edeab6e6c06cefc1a7bf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4cf655cc72094ad524b3d2636a9aa91a

MD5 72ec38e6e493c7f416c26dca539f95b3
SHA1 392f6df4980ad0d0e95c968f65d0faf7ee3416cd
SHA256 a92db9715fccf26d3983cb72224e8ad75a0875940cc4918f5b8a1be0720c25c2
SHA512 62a904b3e195555e41f791fcb1961cbbf010ed077af794d275fbe6a6247ce62ee1c2c3749f293835c66d78e94aa72cb13056d68579f61499ae3c40cdb1d9052c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6bf29baae88c53cd9182e9a19662ddf5

MD5 f8986b9ab8820a78e24ba68066511e5e
SHA1 3feeab12c87b3db29137fef251883efbfb6285a1
SHA256 3f6313c8ed48d8987405d875e3c64a7f11a1c507cf712e9dbf80da647dcf37f3
SHA512 21e8a71aceec7b7ac6084176fb4617e2a9a42657a3a94f4f3064c0c810e90819edf96b03e7a2e71cee2beb022e2744a4d5a6ce0efd146dedce8250289bd0fbcb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1ac006f0b424cf96784b8c1b2e14fcb4

MD5 4a8163bfa53437e9edd1e2fb9d49f2da
SHA1 0e615448d5d28828c304fcb258d143b52c918948
SHA256 c0eb1433ce1715e1f26ba6099e2cb9abce1ec706ab315b0968b17bb2077f1ae0
SHA512 183ea1594eb79170031620a3f51ab61324b973ce606a0915ee8f8c66e88d82b7cc200ac330d2e779d709980918a734d975bde599c2db2949c762d2cf99110be8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d85e8570fc43b4d444193e0c1225bd79

MD5 9f6143bd48e89e0706ac1280f06229eb
SHA1 8fc299926ef3ecdb8087e1d44782cf502024f6b1
SHA256 c9fafa762246c06ef15e98437c1789b5adfa61b3aa7ddddd0abc1b588b795f57
SHA512 40bf93315afe60612cfc2379844e325c5d74c84edaf01e5a9875126d73ed2c5e0af9fa384777d94cf3bccba1c690e6ebb78d68ebc497beca27abedc2f469970c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6af92f40467860e107f7e707ecd72c24

MD5 6889aedab6f8ee9b6bacc88b09ede056
SHA1 429eb8a05dbcba071d31a4b29f854ee249e98ed2
SHA256 34649b7bc6381a1a1a7e8766af523af724e2beaf0ce3218598718cae5b77589b
SHA512 c78821da7903774766a30dd37947e8fdf6c3fdd71721bc0f069a70fde29ffcac68589b11dc392f7d16c57bc6e4a3e3b806e24ace0654f7d1341b1255bbe8a7a9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9c62dd7a4881bb27c38f74bf9d04ebf4

MD5 ccc952f83bc4cfbee712623cfc55d6a5
SHA1 633558261765ede85e8da0921c4a900b5ab9aae6
SHA256 c14e39e8f03b3731e086ff68cd9a9316517e2e3fda4f12a3da956de02bb5413d
SHA512 c3dcaaa54129cb8d8f4edb4c5657e1266737cd021a4e9e6f030712d5558810d64353220052de1d9aa6ad7d4cfe8e1d4cde890cdd001403c2bc0c32946af104b1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\65c64882f08c18075416b0af9b55639a

MD5 1af9766ff1a6bf79881a6aa464113cff
SHA1 f9a661265b9690d785080b62862ffe0ee2afb92b
SHA256 f85c04af4adbee75d97857f75509fd756c4281c999608f111b05ebcd07631db7
SHA512 f6cd1f4b71804d1d4dec50e76eedee7886d64c893951bac59253dc39e476affac7a5fe065a572da8088c3c397b81df564d74d3d3bf1891dcb94acd5533a371f8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb9ee8cc819203f05d7637ede0beeb9e

MD5 a56419bc5591c9df7bdf253e676b255e
SHA1 9612185390e998ac3565e7c757f8cca6b9b59872
SHA256 f1335ea78520b8a7d35be3023d35c753c284ac25e749a829050ac047d6b62ceb
SHA512 f028a91defe8354edf28097deb334fe212581ace1f5758e4b5ebad940609cbd17d6c09caa1c86afd9033120329248c08694830b1bc8b84572554cae33224b185

C:\Users\Admin\AppData\Local\Temp\Roblox\http\23d0b120b565a61394ee5c56499316c9

MD5 16db49a9cf33f75d386fb8b2aa547141
SHA1 2512214c326d50019ee72cffaec2654af8784b92
SHA256 8a13eb5de1bafde3268e0ed385e731b05562859e9916c5553d96a6071c385d38
SHA512 c5a4876e0fa7bca46c084046d37eae9356d279cba5daa4a783499dab46283f8e3916535501636f419ac769f2b677c2a8e8bcb3172f40f53bf02378f397327845

C:\Users\Admin\AppData\Local\Temp\Roblox\http\05c771e22b00ee59181f5f202dc7d451

MD5 10cf06e4c99f2a37158ba1a5aca2b124
SHA1 09f0ed71a87b5b48d5288c5087fc86c05f392b01
SHA256 e33df45a4fb85951c6e30ce728bf9ef492b57af6f897e8fa5eb0efd3504fee40
SHA512 5cfd8e460f8b394d68c09f5d27290e7a80e4c5330436ab63f4d1a027d908ab9b53aff85191ecc73a170c60f969eaf5f6556d1d74727d4df0ba92faa3f41ae755

C:\Users\Admin\AppData\Local\Temp\Roblox\http\34e39eb1cc9827bc18b7b65a886d030a

MD5 b24e6c1600309fe1dbcf4a1f3150da7e
SHA1 f6033c0b8c7f7542b5f80bd676748866b7eb2b8d
SHA256 d1df4efade3217f408fcfb249be2aef15fcc02fc8496b2112346c90d16e1ea71
SHA512 52eff6bbaa61a6fc3d1d2afe011e3b086dd9db61473d2d66ec6d57176696bd2d79b5e035dc41ea8ce5b0a5773e2c524f4b522347abe98b0b96ba842449a20825

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 ca475778b830067f2a21a19f6aa3307a
SHA1 002b724b7f3ba85c94c4029cbc73087caca95b34
SHA256 df1718a7c783c9525bc2c1278f0f23521bdf7baa3c780f42c73cde1aa233b2f8
SHA512 d41eb0cddf05377efa780605093bbcbac8ed4ffe5cea8b6b9da551508e2546384d3aa90fbf891c6a116923c9b727e9877635e20c9643d97dcb2553b8f4702aa7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2de8b71e249ec9f3feb3c539d524775e

MD5 81c57641297d742807399d46050b3a8e
SHA1 9da57f93cebdf2b487a23ef31092f3b3a057f6e9
SHA256 8e42959927e7e92b4e95c1ad6f4552220ea16e2ff691b30f562917c49e174a0c
SHA512 90ba7e8da92fa6ea8ca3744df56dd4e8f43b7ed83c44e8eaa3c8d05f0f4d44667b036ab005283eadf0c29743aaa6c6ab9afad24c48567d386da03d777f700a01

C:\Users\Admin\AppData\Local\Temp\Roblox\http\017b3de9988fc8ea01060584b5f2a667

MD5 868c4c937e7f86ee690a12d8ca93f3c2
SHA1 a87cb0e42cfaa543e2c5213841a746acc03bc394
SHA256 a8b134b2a5aaec2da843b54d7a66e1faaceae2fac9419f37fbea939710e3ce9b
SHA512 ea5301cfea07298a78f4849b594172820aa685a4f163e4f73b5bd51f2b0876d0da002c5ea29bad54cd3e5f820d46bc1bbaab0c797f86cf6d5bf48a6c0c7a707f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d271fad040160659fb991dc5a001f149

MD5 1942c4ffcf7fa7fdd0672d63c5c69a9f
SHA1 f4fba1c5f32e23b7d9d8c67cb4ceed4262a6d9f7
SHA256 c9947d640ec9ac21c6f3e4cd4929fb9da6bd4e373abbd4ccae223258be1f596f
SHA512 e86d66e18cb109e443c42457ad67b0f1e00bc16c721de0108bcf224649c5c62a1ec888fd52cd552707fc801b7532ab8f973319d31a3cf221f186e36efb3a4c36

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 98ff5c6a3b13ebecb4de25e7b71bb84e
SHA1 ad89e04dc237886dd3e6047898572ae2da5f056c
SHA256 6ae3f7591d69564f33c6f7878cbbbf8290047a8b148b99f5c5207069a5561c51
SHA512 440e93f348f362badf45605b9ddf7af211ce6695a9fba67b11fdb88c9d9f3c162535abbc7ed9c3a76502aa05799dcbde627578ebaf481a0ecf31906bde95dc8d