Malware Analysis Report

2025-01-18 22:17

Sample ID 240430-x99kragc87
Target https://create.roblox.com/landing
Tags
adware discovery evasion persistence stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://create.roblox.com/landing was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion persistence stealer trojan

Modifies Installed Components in the registry

Sets file execution options in registry

Downloads MZ/PE file

Executes dropped EXE

Registers COM server for autorun

Loads dropped DLL

Checks installed software on the system

Installs/modifies Browser Helper Object

Checks whether UAC is enabled

Drops desktop.ini file(s)

Adds Run key to start application

Drops file in System32 directory

Checks system information in the registry

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

Suspicious use of SendNotifyMessage

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

NTFS ADS

Checks processor information in registry

Modifies data under HKEY_USERS

Enumerates system info in registry

Modifies registry class

System policy modification

Modifies Internet Explorer settings

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-30 19:34

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-30 19:34

Reported

2024-04-30 20:04

Platform

win10v2004-20240419-en

Max time kernel

1799s

Max time network

1735s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

Signatures

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1156 wrote to memory of 4224 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 4224 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 1376 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 5208 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 5208 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1156 wrote to memory of 2152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7ffa1f8c46f8,0x7ffa1f8c4708,0x7ffa1f8c4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4840 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4840 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4240 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,1406169430845128609,5459537137170614972,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4548 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 g.bing.com udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.4.4:53 google.com udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 241.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 1cbd0e9a14155b7f5d4f542d09a83153
SHA1 27a442a921921d69743a8e4b76ff0b66016c4b76
SHA256 243d05d6af19bfe3e06b1f7507342ead88f9d87b84e239ad1d144e9e454b548c
SHA512 17e5217d5bf67571afb0e7ef30ac21c11ea6553f89457548d96ee4461011f641a7872a37257239fa5f25702f027afb85d5bd9faf2f2f183992b8879407e56a0d

\??\pipe\LOCAL\crashpad_1156_NWAWCIONKVZPXLUV

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 4e96ed67859d0bafd47d805a71041f49
SHA1 7806c54ae29a6c8d01dcbc78e5525ddde321b16b
SHA256 bd13ddab4dc4bbf01ed50341953c9638f6d71faf92bc79fbfe93687432c2292d
SHA512 432201c3119779d91d13da55a26d4ff4ce4a9529e00b44ec1738029f92610d4e6e25c05694adf949c3e9c70fbbbbea723f63c29287906729f5e88a046a2edcb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 18a6b60f98da5b8d4fabda5965ec190a
SHA1 5874d5f4c00ad01f6a07a937859dd9925951a4fd
SHA256 a7257cb58f7946f6a772c3809c056034ee83c62eed46f871f0913eb2a5e35207
SHA512 a83298290dfe78de97f53cae63f63a84b913112e3bcbda0ca352d6cb6949e4c7800bdb216b7337ee70ec198eab44f9ca651e5aa4a6b2f44d8199879e8bcfba03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d333781bec0dd445baa30cc4ba308ad3
SHA1 f9ccac721242505aa253fa392fa6e300b1ea96f3
SHA256 8eb3b537af9ca0e9db142317378b3db428295a5bf0a93d1298740608d66e3241
SHA512 28e437f8f9beae2bfe88c6a103812c165ebc6839fecb6185edc0852f9193ea2e1393bf46adea572ad4d5a8e4f6389a4b5eebf5399dcb0da7c55c453dca766e0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 282073a2d24819ce8fbbce1eddc72245
SHA1 8307525edd496bf02c55c230faea06b7c3bfbac2
SHA256 7a7c3267da2f0fcf2c1922e5ebc169c7a97ebd85206fe7e4a5ee9d5425dc30f0
SHA512 5c1436fb25cec2547b4445d36be73033738ccc3fdd724b0e7a7a6d719b57f45b6b564cee386c95bdb5acb7ec87cf5cc8cb68a59ab88b4806ff1471e059dca8ba

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-30 19:34

Reported

2024-04-30 19:58

Platform

win11-20240426-en

Max time kernel

1027s

Max time network

1401s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

Signatures

Downloads MZ/PE file

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUF8D5.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUF8D5.tmp\MicrosoftEdgeUpdate.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CBE56A7E-4B65-4C12-B0FC-37A3F8D07B7E}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUF8D5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{F1A94A92-96B2-4984-BEAA-AC93BB6788F9}\BGAUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\PdfPreview\\PdfPreviewHandler.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO\\ie_to_edge_bho_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=2CF2F137673F44189389F745848F03A1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{F1A94A92-96B2-4984-BEAA-AC93BB6788F9}\BGAUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUF8D5.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUF8D5.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ToastNotification\RoactRodux.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Chrome\Onboarding\OnboardingTooltip.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\NotificationsCommon\Lumberyak.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\DataLoader\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestGlobals-edcba0e9-2.4.1\JestSnapshot.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GamePlayButton\RobloxAppUpdate.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\VirtualCursor\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\TextButton.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Cryo\Cryo\List\removeIndex.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ReactFocusNavigation\ReactFocusNavigation\FocusNavigationContext.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Flags\GetFFlagEnableRobloxCreditPurchase.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\utilities\__tests__\TypeInfo.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestMatcherUtils-edcba0e9-3.5.0\ChalkLua.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaApp\graphic\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Common\renderWithCoreScriptsStyleProvider.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Style\Validator\validateTokens.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppHooks\React.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaChatV2\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\roblox_t\t\t.d.ts C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\String\ES7Types.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\Locales\sr.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\PlatformContent\pc\textures\diamondplate\normal.dds C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\PlayerScripts\StarterPlayerScripts_old\CameraScript\RootCamera\OrbitalCamera.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestUtil-edcba0e9-3.5.0\JestUtil\installCommonGlobals.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\util\getMeshMinMax.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\AnimationEditor\Light\Standard\PreviewInReverse.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\EducationalPopup.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-2fca3173-1.2.3\LuauPolyfill\extends.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ServerUI\Dev\UnitTestHelpers.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\StyleEditor\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\WidgetIcons\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\PeekView.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxContacts-8363ecbf-ce1067fc\enumerate.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends-1016398c-4fdfb9d0\RoduxFriends\Reducers\Friends\requests\order.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Components\FullScreenDropDownButton.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Settings\Pages\ShareGame\mockTranslator.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ProfileQRCode\RobloxAppHooks.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\fonts\Ubuntu-Italic.ttf C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestSnapshot-edcba0e9-3.5.0\PrettyFormat.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\AnimationEditor\icon_delete.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\RoactStudioWidgets\toggle_on_light.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\VoiceChat\SpeakerNew\Unmuted40.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\AvatarEditorPrompts\Components\Prompts\EnterOutfitNamePrompt.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Thunks\initiatePurchase.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls\Label.qml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\Imagine\CheckDelegate.qml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Chrome\Analytics\init.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\SelfView\mountSelfViewOnCloseTooltip.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\Fetch.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\RoactStudioWidgets\button_hover.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Debugger\Dark\Standard\ConditionalBreakpointDisabled.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\AppTabBarRodux\Dev\UnitTestHelpers.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\UserProfiles\RoactUtils.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Light\Large\unhide_hover.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestTestResult-edcba0e9-2.4.1\JestTestResult\init.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Util\maxOfTable.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\TrustAndSafety\Components\DebugCanvas.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\EditProfile\Dev\RobloxAppUIBloxConfig.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "94" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "51" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "48" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "29" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "77" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "49" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "57" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "88" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "7" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "90" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "85" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "41" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "31" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "15" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "34" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "42" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "46" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "65" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "17" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "54" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "74" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "97" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\NumMethods\ = "6" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO.1\ = "IEToEdgeBHO Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.mht C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ = "ICredentialDialog" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\Elevation\Enabled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EA92A799-267E-4DF5-A6ED-6A7E0684BB8A}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods\ = "11" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{69E11C9D-4974-41A2-B067-9F26953CF52A}\InprocHandler32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\NumMethods\ = "26" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ = "IBrowserHttpRequest2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB}\ = "IPolicyStatus5" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\Elevation\Enabled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.html\OpenWithProgids C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.xml\OpenWithProgIds\MSEdgeHTM C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassSvc.1.0\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ = "ICurrentState" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass.1\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Interface C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgePDF\Application\ApplicationIcon = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ = "IAppBundle" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreMachineClass\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\ = "PSFactoryBuffer" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\ = "IProcessLauncher2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\VersionIndependentProgID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\ = "Microsoft Edge Update Legacy On Demand" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachineFallback\ = "Microsoft Edge Update Update3Web" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ = "IPolicyStatus3" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods\ = "9" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebSvc\ = "Microsoft Edge Update Update3Web" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\ = "Google Update Policy Status Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods\ = "5" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 149632.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3152 wrote to memory of 1720 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1720 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 2504 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3152 wrote to memory of 1552 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe782b3cb8,0x7ffe782b3cc8,0x7ffe782b3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1888 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4980 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5532 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1892,8226018332566903394,5950751148860739099,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6176 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe74cbab58,0x7ffe74cbab68,0x7ffe74cbab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1528 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2212 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3052 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3136 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4212 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4400 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4360 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4668 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4704 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4884 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4704 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4100 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4116 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3456 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2600 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4956 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5108 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4112 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5316 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3336 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3332 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MTNGRUZDQ0UtNTk4Ni00ODJBLTlDQkQtQjAxNTdDODg3MDIyfSIgdXNlcmlkPSJ7MzZEREE0OTctQzMzNS00MkVDLUExMUEtMUE2NzVEMjY3QzQ0fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1M0ZBMEY3Ni04NThFLTQ5NkQtQTAxRC02REM4OTRGREJCOTl9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjYwODAyMTM4MzEiIGluc3RhbGxfdGltZV9tcz0iNTQ2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{13FEFCCE-5986-482A-9CBD-B0157C887022}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MTNGRUZDQ0UtNTk4Ni00ODJBLTlDQkQtQjAxNTdDODg3MDIyfSIgdXNlcmlkPSJ7MzZEREE0OTctQzMzNS00MkVDLUExMUEtMUE2NzVEMjY3QzQ0fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntBMThDRjgyRS0zOTgyLTRGNzktQTI4Mi1DOUJCQjJGOThGNTZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbmV4dHZlcnNpb249IjExMC4wLjU0ODEuMTA0IiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iNSIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjA4NDQ0MzkyOSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3404 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1472 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5304 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9F30608B-86C3-42E6-A1EC-420DEBA6067A}\EDGEMITMP_A1C18.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7880c88c0,0x7ff7880c88cc,0x7ff7880c88d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MTNGRUZDQ0UtNTk4Ni00ODJBLTlDQkQtQjAxNTdDODg3MDIyfSIgdXNlcmlkPSJ7MzZEREE0OTctQzMzNS00MkVDLUExMUEtMUE2NzVEMjY3QzQ0fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntDQzRERDE2RC0zRUVBLTRGMzgtQjFBRi0yMzExNzVDMDREOUN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjQuMC4yNDc4LjY3IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2MDk2NDMzOTg1IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjA5NjQ3NDMwMiIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjY2MzQ3OTc3OTUiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImJpdHMiIHVybD0iaHR0cDovL21zZWRnZS5mLnRsdS5kbC5kZWxpdmVyeS5tcC5taWNyb3NvZnQuY29tL2ZpbGVzdHJlYW1pbmdzZXJ2aWNlL2ZpbGVzLzEzMWJkNWQ3LTljNjUtNDc2YS05MDc1LWUyNDk0ZjhkYTllND9QMT0xNzE1MTEwNjQ3JmFtcDtQMj00MDQmYW1wO1AzPTImYW1wO1A0PUN6OW1zMnBrRFpmQWdSQ05xMGVkOEZJYkxKcCUyZlJNeTN4dlZvV2hibEtRVlc3MW5KYmJlbDJjbTc2UERWR1BCTm1JMEJ1ZkJHYzR0OVZXbmVnVk1aQmclM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIxNzI3MjM3NjgiIHRvdGFsPSIxNzI3MjM3NjgiIGRvd25sb2FkX3RpbWVfbXM9IjQ2Njk4Ii8-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2504.4808.11206784274991454859

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7ffe5d29ceb8,0x7ffe5d29cec4,0x7ffe5d29ced0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1728,i,6765399364920820882,228145301943113208,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1772,i,6765399364920820882,228145301943113208,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1988 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2044,i,6765399364920820882,228145301943113208,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3444,i,6765399364920820882,228145301943113208,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3176,i,6765399364920820882,228145301943113208,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3984 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3608,i,6765399364920820882,228145301943113208,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004D8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=5804 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=216 --field-trial-handle=1792,i,12137850838761225041,17416258815576131639,131072 /prefetch:8

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714505993182+avatar+browsertrackerid:1714505881925004+robloxLocale:en-US+gameLocale:en-US+channel:+browser:chrome+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:17337941876+universeId:5932483521

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:/Program Files (x86)/Roblox/Versions/version-e2728ac197f84660/RobloxStudioBeta.exe" -task EditPlaceRevision -placeId 17337941876 -universeId 5932483521 -placeVersion 1 -userid 4155035591 -parentPid 5528 -parentSessionGuid 017EEA0D-C9B2-4C97-BC8A-967E27628DB4

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CBE56A7E-4B65-4C12-B0FC-37A3F8D07B7E}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CBE56A7E-4B65-4C12-B0FC-37A3F8D07B7E}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{27C4D0DB-0CDB-42E5-895E-51D66A5AD911}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjdDNEQwREItMENEQi00MkU1LTg5NUUtNTFENjZBNUFEOTExfSIgdXNlcmlkPSJ7MzZEREE0OTctQzMzNS00MkVDLUExMUEtMUE2NzVEMjY3QzQ0fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InszNjIxN0YyRC0xRDIxLTQ5MDUtQjREMy00QzNFNTJDMTg0QjJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4NS4yOSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-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-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIwIiBlcnJvcmNvZGU9Ii0yMTQ1Mzg2Mzg1IiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI5NDc5MzE4MDE4IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy83MmVkODA4Ny1lZTk4LTQyOWMtOTMzMC1jYTNjMTkzZDQxYWY_UDE9MTcxNTExMDk3MyZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1YdmFlViUyYnJmRUhNeUNIZFpLV1Y5YUg2USUyZkRJTkJ3cXlUZDRBa2xPbDUyYlRhcFZJRjA3SDMzM0RlY1ExRUVkcHNMWjdYSXZXb0hrajFLUm52SWlLWmclM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIwIiB0b3RhbD0iLTEiIGRvd25sb2FkX3RpbWVfbXM9IjU2Ii8-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-PHBpbmcgcj0iLTEiIHJkPSItMSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk3OTI4NDY0OTk0NDAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNC4wLjI0NzguNjciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk3OTU1MjYwNjUzNjAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0iezhBMjdFMUNDLTdDNzYtNDE2Ny1BRkM2LTk5MjYzRTI4MTEzNn0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Temp\EUF8D5.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUF8D5.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{27C4D0DB-0CDB-42E5-895E-51D66A5AD911}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjdDNEQwREItMENEQi00MkU1LTg5NUUtNTFENjZBNUFEOTExfSIgdXNlcmlkPSJ7MzZEREE0OTctQzMzNS00MkVDLUExMUEtMUE2NzVEMjY3QzQ0fSIgaW5zdGFsbHNvdXJjZT0ic2VsZnVwZGF0ZSIgcmVxdWVzdGlkPSJ7MzcyNUFBMzQtMTJFQy00RUU2LTk1OUUtQTQxNDE3MEE4NEQ0fSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-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-

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://devforum.roblox.com/t/beta-place-version-history-in-studio/607597

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe782b3cb8,0x7ffe782b3cc8,0x7ffe782b3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1960 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2656 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3488 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4848 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6116 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2632 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1700 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714506421771+avatar+browsertrackerid:1714506359845002+robloxLocale:en-US+gameLocale:en-US+channel:+browser:edge+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:17341957978+universeId:5932483521

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2620 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NEJENUU1Q0MtMjg3MS00MEZBLUIzRTItRTc3ODMzNkZGRTg5fSIgdXNlcmlkPSJ7MzZEREE0OTctQzMzNS00MkVDLUExMUEtMUE2NzVEMjY3QzQ0fSIgaW5zdGFsbHNvdXJjZT0ibGltaXRlZCIgcmVxdWVzdGlkPSJ7MENBMjM4RUYtRTkyOS00N0IxLUIwNUQtMTAyQzhGODExMDczfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-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-

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{F1A94A92-96B2-4984-BEAA-AC93BB6788F9}\BGAUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{F1A94A92-96B2-4984-BEAA-AC93BB6788F9}\BGAUpdate.exe" --edgeupdate-client --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NEJENUU1Q0MtMjg3MS00MEZBLUIzRTItRTc3ODMzNkZGRTg5fSIgdXNlcmlkPSJ7MzZEREE0OTctQzMzNS00MkVDLUExMUEtMUE2NzVEMjY3QzQ0fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InszNkUyOEM4Ri00RUU0LTQwQTEtQTNGNS1FNkVFMUVFRDc5RkR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-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_UDE9MTcxNTExMTMwMiZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1PJTJmcjRqbiUyZmFDUSUyYlBSbHR3bmZCbmxUQWpSMHB0V1U4bFpTbkwwR2hHTW45MiUyYlgzN1RGNkZRbDJxZnludE9ZenB5YW5qakNSdiUyZjFVWCUyZmZzWENjMDVKZyUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IiIgY2RuX2NpZD0iLTEiIGNkbl9jY2M9IiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjAiIHRvdGFsPSIwIiBkb3dubG9hZF90aW1lX21zPSIzIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjAiIGVycm9yY29kZT0iLTIxNDUzODYzODUiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyNzM1NzgzOTY2IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy81ZjE5NTYxMi0zODRhLTQ4ZWEtODQwOC1iNGVkZTlkYzU2YmI_UDE9MTcxNTExMTMwMiZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1PJTJmcjRqbiUyZmFDUSUyYlBSbHR3bmZCbmxUQWpSMHB0V1U4bFpTbkwwR2hHTW45MiUyYlgzN1RGNkZRbDJxZnludE9ZenB5YW5qakNSdiUyZjFVWCUyZmZzWENjMDVKZyUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IiIgY2RuX2NpZD0iLTEiIGNkbl9jY2M9IiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjAiIHRvdGFsPSItMSIgZG93bmxvYWRfdGltZV9tcz0iMTI2Ii8-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTI3NDI4NDYwOTciIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMjgwNDkzNDMzNCIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjU3NCIgZG93bmxvYWRfdGltZV9tcz0iODc3NSIgZG93bmxvYWRlZD0iMTgwNDQ0NDgiIHRvdGFsPSIxODA0NDQ0OCIgcGFja2FnZV9jYWNoZV9yZXN1bHQ9IjAiIGluc3RhbGxfdGltZV9tcz0iNjIwNSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7d02388c0,0x7ff7d02388cc,0x7ff7d02388d8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3784 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714506547445+avatar+browsertrackerid:1714506359845002+robloxLocale:en-US+gameLocale:en-US+channel:+browser:edge+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:17331054227+universeId:5929921343

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1912,1197116547569912144,16673621245551769211,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff7d02388c0,0x7ff7d02388cc,0x7ff7d02388d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NDM5RjFEMkQtQzlGNC00MDkwLThGNjMtQzA4NkEzMkUwMjE3fSIgdXNlcmlkPSJ7MzZEREE0OTctQzMzNS00MkVDLUExMUEtMUE2NzVEMjY3QzQ0fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntCQjk1Nzg0MS1BRjRELTQyNTgtOEE3OC1EMDM2MDdDOTY3N0F9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtEeE9iakhHYStuUmEyYXRDM3dvK0lFcEM3OCtaWWVBVWJrWHBEQzJjajdVPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTg1LjI5IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9IklzT25JbnRlcnZhbENvbW1hbmRzQWxsb3dlZD0tdGFyZ2V0X2RldjtQcm9kdWN0c1RvUmVnaXN0ZXI9JTdCMUZBQjhDRkUtOTg2MC00MTVDLUE2Q0EtQUE3RDEyMDIxOTQwJTdEIiBpbnN0YWxsYWdlPSIwIiBjb2hvcnQ9InJyZkAwLjQ0Ij48dXBkYXRlY2hlY2svPjxwaW5nIHJkPSI2MzI5IiBwaW5nX2ZyZXNobmVzcz0ie0YzRDY1QkQzLTM3RkEtNDc4RS04RDc3LUU1QTM5MDJENkMzOH0iLz48L2FwcD48YXBwIGFwcGlkPSJ7NTZFQjE4RjgtQjAwOC00Q0JELUI2RDItOEM5N0ZFN0U5MDYyfSIgdmVyc2lvbj0iOTAuMC44MTguNjYiIG5leHR2ZXJzaW9uPSIxMjQuMC4yNDc4LjY3IiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGlzX3Bpbm5lZF9zeXN0ZW09InRydWUiIGxhc3RfbGF1bmNoX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk3OTk0OTk4MjQ2MDAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyOTU3MjEyOTc5IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyOTU3NTcyODQzIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDAwNjQzMDkwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDE1NTYzMTgwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxNTA3MDgwOTQxNSIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjQ3MCIgZG93bmxvYWRlZD0iMTcyNzIzNzY4IiB0b3RhbD0iMTcyNzIzNzY4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMiIgaW5zdGFsbF90aW1lX21zPSIyMDU1MTkiLz48cGluZyBhY3RpdmU9IjEiIGFkPSI2MzI5IiByZD0iNjMyOSIgcGluZ19mcmVzaG5lc3M9IntBOERGNzAwNC02OTAzLTQyNEMtQUExNy0yNEQ3NjEyNkZDQjl9Ii8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNC4wLjI0NzguNjciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgY29ob3J0PSJycmZAMC40MiIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF9jb3VudD0iMSIgbGFzdF9sYXVuY2hfdGltZT0iMTMzNTg5Nzk1NTI2MDY1MzYwIj48dXBkYXRlY2hlY2svPjxwaW5nIGFjdGl2ZT0iMCIgcmQ9IjYzMjkiIHBpbmdfZnJlc2huZXNzPSJ7MDI0OEREN0ItQ0M5Ri00MDVELUJEOEQtODE2QUIyRjdCQTFFfSIvPjwvYXBwPjwvcmVxdWVzdD4

Network

Country Destination Domain Proto
US 8.8.8.8:53 create.roblox.com udp
GB 18.244.155.97:443 create.roblox.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 locale.roblox.com udp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 97.155.244.18.in-addr.arpa udp
US 8.8.8.8:53 134.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 133.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 232.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 43.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
GB 99.84.9.28:443 webblox.roblox.com tcp
GB 99.84.9.28:443 webblox.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
DE 128.116.44.4:443 www.roblox.com udp
GB 104.77.118.122:443 tr.rbxcdn.com tcp
GB 104.77.118.122:443 tr.rbxcdn.com tcp
GB 104.77.118.122:443 tr.rbxcdn.com tcp
GB 104.77.118.122:443 tr.rbxcdn.com tcp
GB 104.77.118.122:443 tr.rbxcdn.com tcp
GB 104.77.118.122:443 tr.rbxcdn.com tcp
N/A 224.0.0.251:5353 udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 2.18.190.72:443 setup.rbxcdn.com tcp
US 2.18.190.72:443 setup.rbxcdn.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
GB 172.217.16.238:443 clients2.google.com udp
GB 172.217.16.238:443 clients2.google.com tcp
GB 172.217.16.238:443 clients2.google.com tcp
GB 18.244.155.74:443 create.roblox.com tcp
GB 18.244.155.74:443 create.roblox.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
GB 99.84.9.28:443 webblox.roblox.com tcp
GB 99.84.9.28:443 webblox.roblox.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 2.18.190.72:443 setup.rbxcdn.com tcp
US 2.18.190.72:443 setup.rbxcdn.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 2.18.190.72:443 setup.rbxcdn.com tcp
US 2.18.190.72:443 setup.rbxcdn.com tcp
US 2.18.190.72:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:50453 tcp
N/A 127.0.0.1:50457 tcp
N/A 127.0.0.1:50460 tcp
N/A 127.0.0.1:50463 tcp
DE 128.116.44.4:443 www.roblox.com udp
GB 172.217.16.227:443 beacons.gcp.gvt2.com tcp
GB 172.217.16.227:443 beacons.gcp.gvt2.com tcp
GB 172.217.16.227:443 beacons.gcp.gvt2.com tcp
US 20.7.47.135:443 msedge.api.cdp.microsoft.com tcp
GB 104.91.71.138:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.81:443 setup.rbxcdn.com tcp
US 2.18.190.134:443 ctldl.windowsupdate.com tcp
US 2.18.190.134:443 ctldl.windowsupdate.com tcp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 8.8.8.8:53 134.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 2.18.190.141:443 css.rbxcdn.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
NL 128.116.21.4:443 roblox.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 172.64.154.86:443 roblox-api.arkoselabs.com udp
US 2.18.190.76:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 142.250.200.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 86.154.64.172.in-addr.arpa udp
US 8.8.8.8:53 140.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 4.21.116.128.in-addr.arpa udp
US 8.8.8.8:53 76.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 auth.roblox.com udp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
US 8.8.8.8:53 doy2mn9upadnk.cloudfront.net udp
GB 99.84.11.48:443 doy2mn9upadnk.cloudfront.net tcp
GB 142.250.200.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 thumbnails.roblox.com udp
GB 99.84.11.48:443 doy2mn9upadnk.cloudfront.net tcp
US 8.8.8.8:53 48.11.84.99.in-addr.arpa udp
US 8.8.8.8:53 t1.rbxcdn.com udp
US 8.8.8.8:53 t5.rbxcdn.com udp
US 2.18.190.133:443 t5.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
GB 172.217.16.227:443 beacons.gcp.gvt2.com udp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51265 tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:51275 tcp
N/A 127.0.0.1:51284 tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:51287 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51291 tcp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51295 tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
NL 128.116.21.4:443 roblox.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
DE 128.116.44.4:443 metrics.roblox.com udp
DE 128.116.44.4:443 metrics.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 2.18.190.76:443 apis.rbxcdn.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com udp
DE 128.116.44.4:443 metrics.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
DE 128.116.44.4:443 auth.roblox.com udp
FR 216.58.215.35:443 beacons.gvt2.com tcp
FR 216.58.215.35:443 beacons.gvt2.com udp
US 8.8.8.8:53 35.215.58.216.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 users.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51757 tcp
N/A 127.0.0.1:51947 tcp
N/A 127.0.0.1:53182 tcp
N/A 127.0.0.1:53184 tcp
N/A 127.0.0.1:53186 tcp
US 8.8.8.8:53 develop.roblox.com udp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
US 8.8.8.8:53 assetgame.roblox.com udp
DE 128.116.44.4:443 assetgame.roblox.com tcp
US 8.8.8.8:53 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
US 8.8.8.8:53 assetdelivery.roblox.com udp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 c2.rbxcdn.com udp
US 2.18.190.135:443 c2.rbxcdn.com tcp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 2.18.190.133:443 t4.rbxcdn.com tcp
US 2.18.190.136:443 t4.rbxcdn.com tcp
US 2.18.190.136:443 t4.rbxcdn.com tcp
N/A 127.0.0.1:53198 tcp
N/A 127.0.0.1:53201 tcp
N/A 127.0.0.1:53315 tcp
N/A 127.0.0.1:53357 tcp
N/A 127.0.0.1:53365 tcp
N/A 127.0.0.1:53370 tcp
N/A 127.0.0.1:53390 tcp
N/A 127.0.0.1:53392 tcp
N/A 127.0.0.1:53399 tcp
N/A 127.0.0.1:53441 tcp
N/A 127.0.0.1:53443 tcp
N/A 127.0.0.1:53445 tcp
N/A 127.0.0.1:53447 tcp
N/A 127.0.0.1:53627 tcp
N/A 127.0.0.1:53634 tcp
N/A 127.0.0.1:53636 tcp
N/A 127.0.0.1:53638 tcp
US 8.8.8.8:53 134.71.91.104.in-addr.arpa udp
US 8.8.8.8:53 135.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 136.190.18.2.in-addr.arpa udp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:53661 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 o293668.ingest.sentry.io udp
DE 128.116.44.3:443 ecsv2.roblox.com udp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
DE 128.116.44.4:443 assetdelivery.roblox.com udp
US 8.8.8.8:53 users.roblox.com udp
US 8.8.8.8:53 premiumfeatures.roblox.com udp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
GB 172.217.16.227:443 beacons.gcp.gvt2.com udp
GB 142.250.200.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 8.8.8.8:53 gamejoin.roblox.com udp
US 8.8.8.8:53 clientsettings.roblox.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 clientsettings.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:53691 tcp
N/A 127.0.0.1:53698 tcp
N/A 127.0.0.1:53701 tcp
N/A 127.0.0.1:53704 tcp
N/A 127.0.0.1:53722 tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:53726 tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:54959 tcp
N/A 127.0.0.1:54961 tcp
N/A 127.0.0.1:54964 tcp
N/A 127.0.0.1:54976 tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:54981 tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 avatar.roblox.com udp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
NL 128.116.21.33:50761 udp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 2.18.190.136:443 t6.rbxcdn.com tcp
US 2.18.190.133:443 t6.rbxcdn.com tcp
US 2.18.190.136:443 t6.rbxcdn.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 33.21.116.128.in-addr.arpa udp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 clientsettings.roblox.com udp
N/A 127.0.0.1:54984 tcp
N/A 127.0.0.1:54986 tcp
US 8.8.8.8:53 c0.rbxcdn.com udp
US 205.234.175.102:443 c0.rbxcdn.com tcp
US 8.8.8.8:53 chat.roblox.com udp
DE 128.116.44.4:443 chat.roblox.com tcp
US 8.8.8.8:53 c7.rbxcdn.com udp
US 2.18.190.147:443 c7.rbxcdn.com tcp
US 8.8.8.8:53 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com tcp
US 8.8.8.8:53 102.175.234.205.in-addr.arpa udp
US 8.8.8.8:53 147.190.18.2.in-addr.arpa udp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
N/A 127.0.0.1:55392 tcp
N/A 127.0.0.1:55401 tcp
N/A 127.0.0.1:55409 tcp
N/A 127.0.0.1:55412 tcp
N/A 127.0.0.1:55415 tcp
N/A 127.0.0.1:55419 tcp
N/A 127.0.0.1:55433 tcp
N/A 127.0.0.1:55435 tcp
N/A 127.0.0.1:55451 tcp
N/A 127.0.0.1:55454 tcp
N/A 127.0.0.1:55471 tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
N/A 127.0.0.1:55486 tcp
N/A 127.0.0.1:55488 tcp
US 8.8.8.8:53 c1.rbxcdn.com udp
US 8.8.8.8:53 c6.rbxcdn.com udp
US 2.18.190.145:443 c1.rbxcdn.com tcp
US 2.18.190.146:443 c6.rbxcdn.com tcp
N/A 127.0.0.1:55516 tcp
US 2.18.190.145:443 c1.rbxcdn.com tcp
US 2.18.190.145:443 c1.rbxcdn.com tcp
US 2.18.190.146:443 c6.rbxcdn.com tcp
US 8.8.8.8:53 c3.rbxcdn.com udp
US 8.8.8.8:53 c5.rbxcdn.com udp
US 2.18.190.136:443 c3.rbxcdn.com tcp
US 2.18.190.136:443 c3.rbxcdn.com tcp
US 2.18.190.136:443 c3.rbxcdn.com tcp
US 2.18.190.146:443 c5.rbxcdn.com tcp
US 2.18.190.146:443 c5.rbxcdn.com tcp
US 2.18.190.136:443 c3.rbxcdn.com tcp
US 2.18.190.146:443 c5.rbxcdn.com tcp
US 8.8.8.8:53 c2.rbxcdn.com udp
US 2.18.190.139:443 c2.rbxcdn.com tcp
US 2.18.190.139:443 c2.rbxcdn.com tcp
US 8.8.8.8:53 145.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 146.190.18.2.in-addr.arpa udp
US 2.18.190.139:443 c2.rbxcdn.com tcp
US 2.18.190.139:443 c2.rbxcdn.com tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
N/A 127.0.0.1:55530 tcp
N/A 127.0.0.1:55532 tcp
N/A 127.0.0.1:55534 tcp
N/A 127.0.0.1:55537 tcp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
DE 128.116.44.4:443 itemconfiguration.roblox.com tcp
US 8.8.8.8:53 t0.rbxcdn.com udp
US 8.8.8.8:53 t3.rbxcdn.com udp
US 2.18.190.133:443 t3.rbxcdn.com tcp
US 2.18.190.136:443 t3.rbxcdn.com tcp
US 2.18.190.136:443 t3.rbxcdn.com tcp
US 8.8.8.8:53 t5.rbxcdn.com udp
US 8.8.8.8:53 t1.rbxcdn.com udp
US 8.8.8.8:53 t2.rbxcdn.com udp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
N/A 127.0.0.1:55603 tcp
N/A 127.0.0.1:55605 tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
N/A 127.0.0.1:55635 tcp
N/A 127.0.0.1:55637 tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
DE 128.116.44.4:443 itemconfiguration.roblox.com tcp
DE 128.116.44.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:55820 tcp
US 8.8.8.8:53 games.roblox.com udp
US 2.18.190.136:443 t2.rbxcdn.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
US 8.8.8.8:53 11.179.89.13.in-addr.arpa udp
N/A 127.0.0.1:55847 tcp
N/A 127.0.0.1:55849 tcp
N/A 127.0.0.1:55878 tcp
N/A 127.0.0.1:55891 tcp
N/A 127.0.0.1:55897 tcp
N/A 127.0.0.1:55899 tcp
N/A 127.0.0.1:55916 tcp
N/A 127.0.0.1:55921 tcp
DE 128.116.44.4:443 games.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
US 8.8.8.8:53 inventory.roblox.com udp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
GB 104.91.71.134:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
US 8.8.8.8:53 ncs.roblox.com udp
DE 128.116.44.4:443 ncs.roblox.com udp
DE 128.116.44.4:443 ncs.roblox.com tcp
N/A 127.0.0.1:57092 tcp
N/A 127.0.0.1:57183 tcp
N/A 127.0.0.1:57185 tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:57230 tcp
N/A 127.0.0.1:57232 tcp
N/A 127.0.0.1:57234 tcp
N/A 127.0.0.1:57236 tcp
N/A 127.0.0.1:57238 tcp
N/A 127.0.0.1:57240 tcp
US 8.8.8.8:53 locale.roblox.com udp
US 8.8.8.8:53 gameinternationalization.roblox.com udp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
US 8.8.8.8:53 badges.roblox.com udp
DE 128.116.44.4:443 badges.roblox.com tcp
N/A 127.0.0.1:57259 tcp
US 8.8.8.8:53 friends.roblox.com udp
DE 128.116.44.4:443 friends.roblox.com tcp
N/A 127.0.0.1:57262 tcp
US 8.8.8.8:53 voice.roblox.com udp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:57265 tcp
DE 128.116.44.4:443 voice.roblox.com udp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:57269 tcp
N/A 127.0.0.1:57272 tcp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:57285 tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:57288 tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com udp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:57303 tcp
DE 128.116.44.4:443 voice.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
US 8.8.8.8:53 gamejoin.roblox.com udp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:57310 tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:57313 tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:57316 tcp
N/A 127.0.0.1:57324 tcp
N/A 127.0.0.1:57327 tcp
N/A 127.0.0.1:57333 tcp
DE 128.116.44.4:443 gamejoin.roblox.com udp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:58573 tcp
N/A 127.0.0.1:58579 tcp
N/A 127.0.0.1:58582 tcp
N/A 127.0.0.1:58585 tcp
N/A 127.0.0.1:58594 tcp
N/A 127.0.0.1:58597 tcp
N/A 127.0.0.1:59956 tcp
DE 128.116.44.4:443 gamejoin.roblox.com udp
N/A 127.0.0.1:60368 tcp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 23.102.129.60:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 60.129.102.23.in-addr.arpa udp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
GB 104.77.160.10:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 10.160.77.104.in-addr.arpa udp
N/A 127.0.0.1:60548 tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 27.160.77.104.in-addr.arpa udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:60562 tcp
N/A 127.0.0.1:60564 tcp
N/A 127.0.0.1:60566 tcp
N/A 127.0.0.1:60568 tcp
N/A 127.0.0.1:60570 tcp
N/A 127.0.0.1:60572 tcp
N/A 127.0.0.1:60577 tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
US 8.8.8.8:53 c3.rbxcdn.com udp
US 205.234.175.102:443 c3.rbxcdn.com tcp
N/A 127.0.0.1:60589 tcp
N/A 127.0.0.1:60596 tcp
US 8.8.8.8:53 avatar.roblox.com udp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 groups.roblox.com udp
DE 128.116.44.4:443 groups.roblox.com tcp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
US 8.8.8.8:53 accountsettings.roblox.com udp
US 2.18.190.134:443 c7.rbxcdn.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 c5.rbxcdn.com udp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
DE 128.116.44.4:443 accountsettings.roblox.com tcp
US 2.18.190.140:443 c5.rbxcdn.com tcp
US 8.8.8.8:53 c6.rbxcdn.com udp
US 2.18.190.146:443 c6.rbxcdn.com tcp
US 2.18.190.146:443 c6.rbxcdn.com tcp
US 205.234.175.102:443 c3.rbxcdn.com tcp
US 205.234.175.102:443 c3.rbxcdn.com tcp
US 205.234.175.102:443 c3.rbxcdn.com tcp
US 8.8.8.8:53 c1.rbxcdn.com udp
US 205.234.175.102:443 c3.rbxcdn.com tcp
US 2.18.190.146:443 c6.rbxcdn.com tcp
US 2.18.190.135:443 c1.rbxcdn.com tcp
US 8.8.8.8:53 assetgame.roblox.com udp
N/A 127.0.0.1:60628 tcp
N/A 127.0.0.1:60630 tcp
N/A 127.0.0.1:60632 tcp
N/A 127.0.0.1:63631 udp
N/A 127.0.0.1:60638 tcp
N/A 127.0.0.1:60641 tcp
N/A 127.0.0.1:60644 tcp
N/A 127.0.0.1:60649 tcp
N/A 127.0.0.1:60651 tcp
N/A 127.0.0.1:60661 tcp
N/A 127.0.0.1:60663 tcp
N/A 127.0.0.1:60670 tcp
N/A 127.0.0.1:60672 tcp
N/A 127.0.0.1:60680 tcp
N/A 127.0.0.1:60705 tcp
N/A 127.0.0.1:60711 tcp
N/A 127.0.0.1:60731 tcp
N/A 127.0.0.1:60748 tcp
N/A 127.0.0.1:60781 tcp
US 2.18.190.135:443 c1.rbxcdn.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 c4.rbxcdn.com udp
US 2.18.190.147:443 c4.rbxcdn.com tcp
US 2.18.190.147:443 c4.rbxcdn.com tcp
US 8.8.8.8:53 c2.rbxcdn.com udp
US 2.18.190.147:443 c4.rbxcdn.com tcp
US 2.18.190.147:443 c4.rbxcdn.com tcp
US 2.18.190.135:443 c2.rbxcdn.com tcp
US 2.18.190.135:443 c2.rbxcdn.com tcp
US 2.18.190.147:443 c4.rbxcdn.com tcp
US 2.18.190.135:443 c2.rbxcdn.com tcp
US 205.234.175.102:443 c3.rbxcdn.com tcp
US 205.234.175.102:443 c3.rbxcdn.com tcp
N/A 127.0.0.1:60814 tcp
N/A 127.0.0.1:60832 tcp
N/A 127.0.0.1:60834 tcp
N/A 127.0.0.1:61193 tcp
US 8.8.8.8:53 t4.rbxcdn.com udp
N/A 127.0.0.1:61197 tcp
US 8.8.8.8:53 t2.rbxcdn.com udp
N/A 127.0.0.1:61203 tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.133:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
N/A 127.0.0.1:61254 tcp
US 8.8.8.8:53 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com tcp
N/A 127.0.0.1:61257 tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:61483 tcp
US 8.8.8.8:53 develop.roblox.com udp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
US 8.8.8.8:53 devforum.roblox.com udp
US 8.8.8.8:53 devforum.roblox.com udp
BE 2.21.16.232:443 devforum.roblox.com tcp
US 8.8.8.8:53 doy2mn9upadnk.cloudfront.net udp
GB 99.84.11.48:443 doy2mn9upadnk.cloudfront.net tcp
GB 99.84.11.48:443 doy2mn9upadnk.cloudfront.net tcp
GB 99.84.11.48:443 doy2mn9upadnk.cloudfront.net tcp
GB 99.84.11.48:443 doy2mn9upadnk.cloudfront.net tcp
GB 99.84.11.48:443 doy2mn9upadnk.cloudfront.net tcp
GB 99.84.11.48:443 doy2mn9upadnk.cloudfront.net tcp
US 8.8.8.8:53 d348twzf7a8p5.cloudfront.net udp
US 8.8.8.8:53 devforum-uploads.s3.dualstack.us-east-2.amazonaws.com udp
US 8.8.8.8:53 c.evidon.com udp
NL 23.62.61.72:443 c.evidon.com tcp
NL 23.62.61.72:443 c.evidon.com tcp
GB 18.172.155.55:443 d348twzf7a8p5.cloudfront.net tcp
GB 18.172.155.55:443 d348twzf7a8p5.cloudfront.net tcp
GB 18.172.155.55:443 d348twzf7a8p5.cloudfront.net tcp
GB 18.172.155.55:443 d348twzf7a8p5.cloudfront.net tcp
GB 18.172.155.55:443 d348twzf7a8p5.cloudfront.net tcp
GB 18.172.155.55:443 d348twzf7a8p5.cloudfront.net tcp
US 3.5.133.196:443 devforum-uploads.s3.dualstack.us-east-2.amazonaws.com tcp
US 3.5.133.196:443 devforum-uploads.s3.dualstack.us-east-2.amazonaws.com tcp
US 3.5.133.196:443 devforum-uploads.s3.dualstack.us-east-2.amazonaws.com tcp
US 3.5.133.196:443 devforum-uploads.s3.dualstack.us-east-2.amazonaws.com tcp
US 3.5.133.196:443 devforum-uploads.s3.dualstack.us-east-2.amazonaws.com tcp
US 3.5.133.196:443 devforum-uploads.s3.dualstack.us-east-2.amazonaws.com tcp
US 3.5.133.196:443 devforum-uploads.s3.dualstack.us-east-2.amazonaws.com tcp
US 8.8.8.8:53 55.155.172.18.in-addr.arpa udp
US 8.8.8.8:53 72.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 l.evidon.com udp
US 52.200.151.143:443 l.evidon.com tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
GB 18.244.155.63:443 create.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 users.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com udp
GB 99.84.9.28:443 webblox.roblox.com tcp
US 8.8.8.8:53 196.133.5.3.in-addr.arpa udp
US 8.8.8.8:53 143.151.200.52.in-addr.arpa udp
US 8.8.8.8:53 63.155.244.18.in-addr.arpa udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
GB 18.244.155.63:443 create.roblox.com tcp
US 8.8.8.8:53 o293668.ingest.sentry.io udp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
DE 128.116.44.4:443 users.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
US 8.8.8.8:53 locale.roblox.com udp
DE 128.116.44.4:443 locale.roblox.com udp
GB 99.84.9.28:443 webblox.roblox.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
DE 128.116.44.4:443 locale.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
US 8.8.8.8:53 premiumfeatures.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.81:443 js.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 8.8.8.8:53 roblox.com udp
FR 128.116.122.4:443 roblox.com tcp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 2.18.190.134:443 static.rbxcdn.com tcp
US 8.8.8.8:53 images.rbxcdn.com udp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
US 8.8.8.8:53 4.122.116.128.in-addr.arpa udp
DE 128.116.44.4:443 www.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 2.18.190.76:443 apis.rbxcdn.com tcp
DE 128.116.44.4:443 metrics.roblox.com udp
US 8.8.8.8:53 170.33.18.104.in-addr.arpa udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 assetgame.roblox.com udp
DE 128.116.44.4:443 assetgame.roblox.com tcp
US 2.18.190.140:443 images.rbxcdn.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com udp
GB 99.84.9.28:443 webblox.roblox.com tcp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com udp
GB 99.84.9.28:443 webblox.roblox.com tcp
GB 18.244.155.63:443 create.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com udp
US 8.8.8.8:53 thumbnails.roblox.com udp
DE 128.116.44.4:443 thumbnails.roblox.com udp
US 8.8.8.8:53 tr.rbxcdn.com udp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
GB 104.77.160.149:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 149.160.77.104.in-addr.arpa udp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 205.234.175.102:443 t6.rbxcdn.com tcp
US 2.18.190.136:443 t7.rbxcdn.com tcp
US 2.18.190.136:443 t7.rbxcdn.com tcp
GB 18.244.155.63:443 create.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
GB 99.84.9.28:443 webblox.roblox.com tcp
GB 99.84.9.28:443 webblox.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 games.roblox.com udp
US 8.8.8.8:53 develop.roblox.com udp
DE 128.116.44.4:443 develop.roblox.com udp
DE 128.116.44.4:443 develop.roblox.com udp
US 205.234.175.102:443 t6.rbxcdn.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
GB 18.244.155.63:443 create.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
US 2.18.190.136:443 t7.rbxcdn.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 ncs.roblox.com udp
DE 128.116.44.4:443 ncs.roblox.com tcp
DE 128.116.44.4:443 ncs.roblox.com udp
DE 128.116.44.4:443 ncs.roblox.com tcp
DE 128.116.44.4:443 ncs.roblox.com tcp
N/A 127.0.0.1:62376 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 ncs.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 ncs.roblox.com tcp
N/A 127.0.0.1:62408 tcp
N/A 127.0.0.1:62415 tcp
N/A 127.0.0.1:62418 tcp
US 8.8.8.8:53 users.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
US 8.8.8.8:53 gamejoin.roblox.com udp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 104.77.160.221:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
US 2.18.190.136:443 t4.rbxcdn.com tcp
US 2.18.190.136:443 t4.rbxcdn.com tcp
GB 104.77.160.221:443 tr.rbxcdn.com tcp
GB 104.77.160.221:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 t6.rbxcdn.com udp
GB 104.77.160.221:443 tr.rbxcdn.com tcp
GB 104.77.160.221:443 tr.rbxcdn.com tcp
GB 104.77.160.221:443 tr.rbxcdn.com tcp
GB 104.77.160.221:443 tr.rbxcdn.com tcp
GB 104.77.160.221:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 2.18.190.133:443 t7.rbxcdn.com tcp
US 2.18.190.136:443 t7.rbxcdn.com tcp
US 8.8.8.8:53 221.160.77.104.in-addr.arpa udp
US 8.8.8.8:53 avatar.roblox.com udp
DE 128.116.5.33:63987 udp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 33.5.116.128.in-addr.arpa udp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 chat.roblox.com udp
DE 128.116.44.4:443 chat.roblox.com tcp
US 8.8.8.8:53 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 8.8.8.8:53 assetdelivery.roblox.com udp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
US 8.8.8.8:53 c0.rbxcdn.com udp
US 8.8.8.8:53 c2.rbxcdn.com udp
US 2.18.190.142:443 c0.rbxcdn.com tcp
US 2.18.190.139:443 c2.rbxcdn.com tcp
US 2.18.190.136:443 t7.rbxcdn.com tcp
US 205.234.175.102:443 t6.rbxcdn.com tcp
US 8.8.8.8:53 142.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
DE 128.116.44.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:62421 tcp
US 8.8.8.8:53 inventory.roblox.com udp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
US 205.234.175.102:443 t6.rbxcdn.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:62431 tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
US 8.8.8.8:53 games.roblox.com udp
DE 128.116.44.4:443 games.roblox.com tcp
US 8.8.8.8:53 client-telemetry.roblox.com udp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:62434 tcp
N/A 127.0.0.1:62439 tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 4.26.95.13.in-addr.arpa udp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
GB 104.77.160.141:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 141.160.77.104.in-addr.arpa udp
DE 128.116.44.4:443 games.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 2.18.190.136:443 t7.rbxcdn.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
DE 128.116.44.4:443 games.roblox.com tcp
N/A 127.0.0.1:63686 tcp
N/A 127.0.0.1:63691 tcp
N/A 127.0.0.1:63715 tcp
N/A 127.0.0.1:63717 tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 gamejoin.roblox.com udp
US 8.8.8.8:53 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com tcp
DE 128.116.44.4:443 clientsettings.roblox.com udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
US 8.8.8.8:53 gamejoin.roblox.com udp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
US 8.8.8.8:53 avatar.roblox.com udp
DE 128.116.5.33:64029 udp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 104.77.160.149:443 tr.rbxcdn.com tcp
GB 104.77.160.149:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 t7.rbxcdn.com udp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 2.18.190.136:443 t7.rbxcdn.com tcp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 2.18.190.136:443 t4.rbxcdn.com tcp
US 2.18.190.136:443 t4.rbxcdn.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
N/A 127.0.0.1:64105 tcp
N/A 127.0.0.1:64114 tcp
N/A 127.0.0.1:64117 tcp
N/A 127.0.0.1:64119 tcp
N/A 127.0.0.1:64146 tcp
N/A 127.0.0.1:64161 tcp
N/A 127.0.0.1:64164 tcp
N/A 127.0.0.1:64167 tcp
N/A 127.0.0.1:64172 tcp
N/A 127.0.0.1:64174 tcp
N/A 127.0.0.1:64176 tcp
N/A 127.0.0.1:64178 tcp
N/A 127.0.0.1:64198 tcp
N/A 127.0.0.1:64200 tcp
N/A 127.0.0.1:64218 tcp
N/A 127.0.0.1:64278 tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 c7.rbxcdn.com udp
US 8.8.8.8:53 c2.rbxcdn.com udp
US 8.8.8.8:53 c6.rbxcdn.com udp
US 8.8.8.8:53 c3.rbxcdn.com udp
US 2.18.190.134:443 c7.rbxcdn.com tcp
US 8.8.8.8:53 c4.rbxcdn.com udp
US 2.18.190.135:443 c2.rbxcdn.com tcp
US 2.18.190.135:443 c2.rbxcdn.com tcp
US 2.18.190.146:443 c6.rbxcdn.com tcp
US 2.18.190.146:443 c6.rbxcdn.com tcp
US 2.18.190.146:443 c6.rbxcdn.com tcp
US 2.18.190.139:443 c3.rbxcdn.com tcp
US 2.18.190.139:443 c3.rbxcdn.com tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
N/A 127.0.0.1:64282 tcp
N/A 127.0.0.1:64284 tcp
N/A 127.0.0.1:64286 tcp
US 2.18.190.140:443 c4.rbxcdn.com tcp
US 8.8.8.8:53 c1.rbxcdn.com udp
US 8.8.8.8:53 c0.rbxcdn.com udp
US 2.18.190.135:443 c1.rbxcdn.com tcp
US 2.18.190.142:443 c0.rbxcdn.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
N/A 127.0.0.1:64328 tcp
N/A 127.0.0.1:64340 tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:64401 tcp
US 8.8.8.8:53 assetgame.roblox.com udp
DE 128.116.44.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:49396 tcp
N/A 127.0.0.1:49398 tcp
N/A 127.0.0.1:49459 tcp
N/A 127.0.0.1:49512 tcp
N/A 127.0.0.1:49519 tcp
N/A 127.0.0.1:49522 tcp
N/A 127.0.0.1:49525 tcp
N/A 127.0.0.1:49546 tcp
N/A 127.0.0.1:49560 tcp
N/A 127.0.0.1:49566 tcp
DE 128.116.44.4:443 apis.roblox.com tcp
N/A 127.0.0.1:50820 tcp
N/A 127.0.0.1:50832 tcp
N/A 127.0.0.1:50835 tcp
N/A 127.0.0.1:50875 tcp
N/A 127.0.0.1:51000 tcp
N/A 127.0.0.1:51231 tcp
N/A 127.0.0.1:51242 tcp
N/A 127.0.0.1:51245 tcp
N/A 127.0.0.1:51250 tcp
N/A 127.0.0.1:51256 tcp
N/A 127.0.0.1:51259 tcp
N/A 127.0.0.1:51261 tcp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
N/A 127.0.0.1:51303 tcp
N/A 127.0.0.1:51305 tcp
N/A 127.0.0.1:51315 tcp
N/A 127.0.0.1:51317 tcp
N/A 127.0.0.1:51319 tcp
N/A 127.0.0.1:51335 tcp
N/A 127.0.0.1:51341 tcp
N/A 127.0.0.1:51349 tcp
N/A 127.0.0.1:51399 tcp
N/A 127.0.0.1:51401 tcp
DE 128.116.44.4:443 apis.roblox.com tcp
N/A 127.0.0.1:51546 tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:51671 tcp
N/A 127.0.0.1:51673 tcp
N/A 127.0.0.1:51737 tcp
N/A 127.0.0.1:51739 tcp
N/A 127.0.0.1:51741 tcp
N/A 127.0.0.1:51753 tcp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:51771 tcp
US 8.8.8.8:53 assetgame.roblox.com udp
DE 128.116.44.4:443 assetgame.roblox.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 34d22039bc7833a3a27231b8eb834f70
SHA1 79c4290a2894b0e973d3c4b297fad74ef45607bb
SHA256 402defe561006133623c2a4791b2baf90b92d5708151c2bcac6d02d2771cd3d6
SHA512 c69ee22d8c52a61e59969aa757d58ab4f32492854fc7116975efc7c6174f5d998cc236bbf15bce330d81e39a026b18e29683b6d69c93d21fea6d14e21460a0a7

\??\pipe\LOCAL\crashpad_3152_XOUYLCCWEIBVDMHM

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 046d49efac191159051a8b2dea884f79
SHA1 d0cf8dc3bc6a23bf2395940cefcaad1565234a3a
SHA256 00dfb1705076450a45319666801a3a7032fc672675343434cb3d68baccb8e1f7
SHA512 46961e0f0e4d7f82b4417e4aac4434e86f2130e92b492b53a194255bd3bba0855069524cd645f910754d4d2dbf3f1dc467bcc997f01dc6b1d8d6028e2d957236

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5dc6fb6-755e-4f53-9346-42c5237e7b8f.tmp

MD5 eeaaa0310b92853bbeab3e9f852607ac
SHA1 9b8bb528ce40f0b16e8d71a2c21a7a08cca5c1dc
SHA256 ea376990945428aa1b80f3c75d5edd7e57fbb8e7b0a79c36bb3712a4ee766bbe
SHA512 7dc72d730b76ad62e1d0e2f2ed5df8fecc68e0c0d39a1238e051a18589e1bda14f8f8a2fd3d6fe2e5ccc620d09183bf2eec30213735fc2d23ef049fc45b9a349

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d1831df0ef111180f501bc5b48d9d67a
SHA1 6d419e95d4f920f6fb792e825545c261aa43ff95
SHA256 010109df420ce0754bf6ead2439f2d480c4dcd94a107a3e93658fe0b9a4fe027
SHA512 1d898c049fb619d45e2171c11b60fec956ae3e47cf8f2c8434556107d8af1dd81d52920e66b11caebc9a6726b5121fa4384242f9eedfff70b31a25f50cdd625c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9de3733fcbc09a65271a29b4c609e897
SHA1 84882d0ca091bb9edbcee428cf730b73713b1058
SHA256 51a0f952f4748cf7cc2ca64b13014f38cff436977dee4df2a183235dadb2e92c
SHA512 a19fbd853e4ec7c51cd2307cbbe35e876fab9518e672df7204d572dbb063a92209e83b53aef338db65bf87d4a0b81cc9ca8ac5ebb694af4d31f4b768f7e055b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4e5118af54663299113318b4265d03d1
SHA1 2cfd2dcd397f848e066d026b5406c78e9601ac71
SHA256 9169a7ed7fc032d09527eddecc2a5ae455b75e4c1245f675ac8c6ab216426083
SHA512 4de86df355f5e74bf5440b1f50487dca0bc5d882bfb0ed4c8ed629e8decee70dbc302a928c12b4a58154b1aa9d8f4f31095958659935cbbf6f686e5f9d9ac541

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 792a98a02ae906ebdb19b01179c7d1f8
SHA1 780c81b26ded4fbfc782abed5e5dc5fe81462f98
SHA256 b12708ef92a7fcd7c136605072cbc472b77541075ceb5623416a8839b6aec09c
SHA512 2ff2c56a64763b32b5f7255627c433be8bf58d91753d81226d46d1fff0ee737308841b6d1d5c5e20c0f17318dbb52df36a670cf8c417fd3cd74ae64fe3062008

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57beeb.TMP

MD5 9b8b3fc51f8466e700f2b28709fe55ea
SHA1 b978fe547dae0eb4e6ad57d50ae564d433823536
SHA256 6596d6aa1cda663c08bccc0ccd6c4aaeaeb3bc914f739b5a967cf464da2ddf72
SHA512 787a146127a6b6b7dc62095c5eb6ab02f565508336a9c707a70e5476a9d84e223d940e58ac320416f52cdc49e7aec6a47fa027d382da77a16e89265283eae1ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c36fc47f0260673f6429bf403347d26e
SHA1 bab8812344f359323a3a2021d776d824c110f914
SHA256 67d3fcb1f0572c10bcd19799f44c409ae97cac810f1ad817cd1b0235fb96e9fb
SHA512 0709eccdbe10211c4b8ba65ead7bb8f83f60df6e241126b0a1a0769262638171494c5c062f266072f289ed3d2368215275da07af285a8475dc136957893fda6e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a32ea1ed893895d5b4f4331a7cb7ee3c
SHA1 a27ae46d50617a6e7f6bc9a5ad8382bb8b742e76
SHA256 a456cfb2230e7346e2fc430ae6db78f13e5a57a9266350a696cccbdab8f17a54
SHA512 40bbec2facbec10416929a6772dd9c3e6cbaa92172ae073e3116b3e0c60c9054ec92ba001ce34fc59ede468c497580a8f05f4f759d3c76a469ea971d16ee3e09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b0b1203be61d634869075bf24bd8258c
SHA1 bea954ccf698d17582b1fd3f31cca307b7b92615
SHA256 87ad0adf16c647bce72c3ad095f488b41d2abf5ffbf4dd009bea23cdd8b518d9
SHA512 97ef6485ca2fb72a2e8b59d488b633ac263cc1ef28ea21c53fe9534a5c8e4ccbf0585526547acf254663d54f99405e31c5c3984c1b745ad2a37b5605aff55066

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 193aeba8550965b19fac82a6a81183da
SHA1 13ca0d58a340bbb2fdbe14256deeac9c1692cd14
SHA256 80df1662f516dcc0b6ea302558d860b379a0c0150e128d0435140b95cc60f5be
SHA512 66990d98b6ae74bdba435a14739b511ce8328253e2df3db4ce1f957092069512f3a036e48da11cd46b75bdf3715c0286ed942b1c66b40c9031a1383c8d7d4618

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1da26cc066f1865783f5f9cd832be9d6
SHA1 740ada251c53c328a91774990323bf118c90a95c
SHA256 0e9e0e6b786a27233c41df2e007821470d9d4b74f9ba8c1eeb192ef2b0cde8f0
SHA512 ba3d985f8c5e864bd212a78e03534289e80b96d6eebfecfbb717b69cc7cbbc5c0af256e771f02306cf98c2e4e6bee073f2ee26f59e9f870678688aba29cb4c0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e4317205ab80b7b78d5cc9a6a50c90cd
SHA1 c6086fe5f37ce8c4bc0680127daaac823c1ea84e
SHA256 81d97718826cb4bd611c9474d5722655858fedb76516e3137144b25339fde4a6
SHA512 49ae6e532278c0390488b2fd3fb1a91253bc14fd22f51cd5d0a2e130938f2ac12eab4a7d4efdbaddc7cefa00e1bb4807d255c10b033645ef28e4d80bdbc5f8b1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 65c8894c9766cf8dae86a45ddbb24107
SHA1 e5859dfdcdd5f38c48a0f88d06d8f3878be0df64
SHA256 3b875398bee0c85ba90ccf0f9a40f1bfdbd2466453c71e7b97217a57e73a5c99
SHA512 5664ee29a47a16bbc003ca33d8e2be7ccbd6bd390d82767670c886df87e1d1665a25ba2df0576694584acf73af20d8fc9a703fb0357d6c0d3a96e5bce98bd3e5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7d7fdc11ba35b4458e7d4ca7749b388c
SHA1 ababa58aa5e5d52a1814bfb274f549f1cfe2017d
SHA256 5392f5f93fcaa2e219de76a0e750347e19c49d96fee8d22e97031e9e7f081080
SHA512 992bc94da79cd7e53736cc4872efe229dedf4a88877958b0645f7e7d457604173a3fa987b9a1094557ecb944425a87f52438f573cb50e8285db73e77ad52feaa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 8d14ec8ae950a75448a8bd6888bd59ab
SHA1 c65b36912e6d7c92da76988002cc59f6b32c22d7
SHA256 177c949effc1892338816b136d8e5e023eab3107d16015e0c61ef81d4df38e06
SHA512 b341bbb0e64373e80dd100a736ee18a3351f8806af63729ca47ca06a3e972ef9d3953304796305bf62e9d9aba73c7335577d622862ddea6f888f20a5aa9d8fcf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b57d3a580fcf2d35e8e01316c7783368
SHA1 618c43400a49e4ce7fd30db8243272e5abc68d45
SHA256 754626b14f470560713f2f2f473b4e38a08d80ac20519b933c3daac0ed26c84c
SHA512 ddf6caed9e4cb7fcf387167a8f5463068ec5190534e8756789d403f3015640f982b9e970449e4dd088c9635cfbc6847f60f27bc9f0c2e3268610f89034116fd4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c7ba51a56039d5b79a6c043b641333d0
SHA1 39524d5c0d2373318f4378c14d0bd75eea8326b2
SHA256 c4cd51ba7d15ef7e9302830212dd022895e9b054d27b8ee1851c91f7cf5e04bd
SHA512 86fc2c28a9979a3dd40513077e14242be68ca0c66dc0ac8da991f5cc213089370f3c74c274de2d09f8b333e003ab1c3df67df08967869afe6cd30dc408dc2f4a

C:\Users\Admin\Downloads\Unconfirmed 563799.crdownload

MD5 f7b9d4063cc68a07d6d772157785b2e5
SHA1 1b618464b48f5d1e1cc005f0cb2fc16f94553919
SHA256 80a929eb80bb80609b63a090102bd86fde551f76f04138098a6f25775800039a
SHA512 2564ac5f98699259541fd4a956a1498ba335043118b9054259f05526fe3a7ad94d656ff95ec077b50f4b2848cbad4887b4373007683b7748da2a84e4714f0a7e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f3fe3dc52441d2705c7669a52903e6c0
SHA1 49be9a797948320f33e2987ee0eb753b8d8883f3
SHA256 cb6a3a1eb4864d1f02ef3f245d72949c30c6987aa4355c9cc540e6a45c07a139
SHA512 8784db3369090f287920848326f153e283802c8448523de22571c681f449b18b50be9c20fc259b423e6594de948cacf551f3dd0342a6b4f2261c567fb5ef68a4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\27f27c8c-9193-4372-9075-6f37b4c0dc0a.tmp

MD5 595eed9176f8e7518eef7e11dfcb167d
SHA1 95d934db110d2628e0f1cbc65c0b1a6a6ff0a70d
SHA256 8fd6ddf99d667b1051311ab26082fec9f74f28f0a4f4c42e478cf817dca647bb
SHA512 fcf37a094bcacd668ced9863d19a6c123eb491d85c7ac3c8e798a65c0492a6e220f380d869778e647da7fbf8741d89dc8a47c3ca01a486a8e2db1f15db38010e

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

MD5 911c020a364b10fe1de664c01de4534c
SHA1 8731aee51722d2e1604864eb8f03abe3e6d35441
SHA256 cb84418aa6ff71e927125f05cd74b10cef07b40fe19a17f9ba5c3bd57f2d9591
SHA512 7e2c2259dde1fcb1a10a3864b1e24f892fb28d1c0a9a8b1b32d6b512d9f49b031cf6119f55dad008f0b2a5dc87ae606ee0c2918fdc44fc307d56bc933537db7b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 234437348c56b74c998d2fa44efc48a5
SHA1 a04be6f6615def765d29d8e5e59d1050a1a2e12f
SHA256 620d0c52f4082031c54aae9f4fdadc5c1d3da4e464c89ef7cb02b90f7d4be71d
SHA512 512f3b0bda2a9f15e96cd9e59b9f07b2227ec9a299786693644eb47f3e673197222db7ed2c1b4e9b1e747b6633a97d6fa14313eb94264ea68c2143ea97bc52db

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 72cd9c9ecb7a46f6bd5e5bdb2443e361
SHA1 60f160a33d8f30195955e57e558e66c8e3a78cf5
SHA256 544eccd3352aa0510a74c5f7e915b821d221bc74dd10e06bdb8f14b58bd3e475
SHA512 2bbb4b941a45f99a32e79e28b517bbd7e0534baa488991e51f1fdbabf4302bf80ff873deb0d8cae2fa840509752259956f51de012d4bc40b68b471b799ea4819

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe59192b.TMP

MD5 bcd6523dabea34ef24ce408e6d4e4ac4
SHA1 42bfa6821441890a5e3fb678eb61620c10a81e8b
SHA256 1b10a2ac0747ee0a353c5fd01b59f00e31364c94f45d1470880cea94147df9a3
SHA512 594e31aaafe29b416d4c0b6da41104ea80b62cc7b512e65f5ff4e1f7f4bf91a548bd22fc203f39b3478ce6dbd180139286528b5fd6ff54847bed788914b5f94f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5bd57715b62b32c41fb204d3ac8f1aff
SHA1 2b725596b407b645ec44038ef927e1602388f974
SHA256 99a30be07bcb41ce93d0819d64a0a3491819674372fcb1fdfe7f39db218031d1
SHA512 b1934fc0c0c7f9c5db1f076222ed32c1b262fdc83e29a2eaa86a87883cad4b7e050519d184671e84b0ae368d21fc3485ddff61a37aea71022235d83cbf4a3252

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_10534D407DF32865AC15C5208A74F233

MD5 3dc1f9753364d4b161708b8eb16901d6
SHA1 16518ac2e78e5ff3cc1cd4202d7a0b56a0669bf0
SHA256 c3086b9e2aaec66488019c6873ed5ca7dac90cf8731b31000e18a79c066b2613
SHA512 9b8f39d9d670049a15e5939e98bf76728093fe66b8c2b0a3e9960bb23a09f1e8434084ae23266fabff81605a633862eeccda5fe5212ca600cffca62f8d3c0ad4

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_10534D407DF32865AC15C5208A74F233

MD5 658eea4d02c964adb010d3d4316b09b0
SHA1 5bbb4ce46c8be650bd2ced882c0df4e916546203
SHA256 7f59dfc0ade86ca0e8f1100867ca02a564046f16c42eb4fd5fa9d1062fe87f9b
SHA512 37cb56671e97f4d3f47d73d1659f29c65dc21f3f7d0d584aca07a22da75c1a971e29cbcad65acda21d276f283e2fc2b0f37ca3cdd14c248bc45adfd64dd9800d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2ef7927bb07cc58a7eb21532254dd2c9
SHA1 fe8524e416380b1f912d8159d7ee818a0136d646
SHA256 c37ccfbef0a81d0a8d74dea187f750e7fec90e7fbfd00250813fcefd31f44153
SHA512 b462b8443fc6edd455948691c071461047a56d6750f26fd2511331b5fca7ef3b93ea02565d2b25d86753e97c57ea65290cd3449cb9d5afb2689b86780c977229

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 122d53ea44be38f8af48b1f77a39d7ea
SHA1 b71fe3a19074133404ef23503a4b661d33f474c1
SHA256 2438c7cfca88289bb54fc8c2312b3489b2d8d18d3d5798b820dc067b7191f4d5
SHA512 716bbe7e60434d0c0a7881da32b74c1ca700fb8d7ae000491416cb341116552a46cb68a0a36b8029852c3eafdf3c80d51655e0318cb6d84f134e9d8d9fe77443

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 2c169e4952f1a897c5b4504871a38d3f
SHA1 c222f6f6b9dbe6202d6085cd2d6039ca5006f221
SHA256 229d31d3583ed12663528c48c9116d7868425a4ba86cb002860dbfd700db130f
SHA512 02ad94ec5ba900e35c13977a3f8d7bdb7e7cb772cf9fea8358837b377c372d11d792d6597e451124bb2c7978c7e36ff6d22934790e8a1040817116b3f5a4826c

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\Program Files (x86)\Microsoft\Temp\EUC0E5.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 7a9418385405e99cb808a237264b5cd0
SHA1 b9e3bd33c7f31ac7c7543f69e2aed9f51558a539
SHA256 e16042d22d5c90d6492793a9a9abf27caa8c56d8923f672278528220daf2f2b7
SHA512 16b3b832d9a7f35dc2b7d69e8a7f2a8982d44154ce3cc4d37aa823a2379d02a5861e1a663753c98fda408b4cf2f73b8d314d8777390bdac101aa2166cb585e50

memory/4872-881-0x0000000000F30000-0x0000000000F65000-memory.dmp

memory/4872-882-0x00000000733D0000-0x00000000735E0000-memory.dmp

memory/4872-892-0x00000000733D0000-0x00000000735E0000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 4553f94154ca9ae969d7c573b5ae610f
SHA1 28e6f2a93afc7b0ad29c26fa3f23a0e9b5fb6960
SHA256 0b3c805e43d91feecf5af5244d700dff332c5438aeb2155660345c9782bb4a5c
SHA512 03903d4d913b69b6b09e6d8b1cdfef26b6550ce98d070b22ced07a24050ca9343b37510fc6b8cf33468bc696e2e4bcf9bdd13c0ebfe83a0a1d882c0ff2a29e8a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d31f00e713b9f2c4605e7b48c3b0f90e
SHA1 8dabf4c7a200862f81bf581f07be357e4e8b0838
SHA256 12213f357bcbfd9cd4a97363d8d8e9de0215717ecfd33d74d8588d6c38631b6c
SHA512 809d046d58249bd143608a5bce1a39d6aa63d0dbd64a65e6b4ffce6237508634634a5d2d78784539d7dc61060dd1bb0d1e5b11a8bf6cf2c2bddd669b87c3bd04

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 e7e3941d55cd6fdd860da41935f0bb9f
SHA1 88b4d889db65e589abe3909be853e9e6e37afdab
SHA256 839cc0e5d2a6a7c1fab0e56539575da3f3d970f7bd2518f125512f20bafb8554
SHA512 ac57b71b3262b5345dac312985ddafa9d1b82f61b5df305a24f27500be12aace21d4935df19e33274169b22f5292cde3c4914621c9aee1c9f8d15fe127dd175a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6938fb35110e42064c1a9125b55f8fd4
SHA1 a5d79c75fbee257fe9be15723f33f26c5c578905
SHA256 fb3a060602d960437e6ebbedf4044c4f75519c7c779d744995a94009e08ce624
SHA512 385a7488af9c6c1caf55fa4623edda90b409b715ea55d52760026030d2248c8224330fd79cc8cc5c6926c0791a8629e179ba9c9aba87b8f38f81cfbb05d4193b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

MD5 f91486c54b8d616678d0b840247b8f69
SHA1 0182a70d729c563290b0248d0742eda50ed366d0
SHA256 d9841dc4a165510ba27aebb7d7eb6fecffebfd74761d4930d351ac58defd288d
SHA512 a383d4a25f94871b3301ccba6dba006a7a5240d434bac8f9c165562f3f1a351ce54601f04768de688dfa48a9aaaed6f875f44bdc14a2b5bf68223523d55a631b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

MD5 68038882b5d4163041f0053d954356f1
SHA1 6b73e774ed684cd915799c57af8187c46b84ffbb
SHA256 d0bb5551db75cef36d9c66ae09c176adc877bf1c0f8d33e0a0220c677c22537a
SHA512 aac79574c52ccf822e7462fa023a4ace0fac48a3a4a4339834d75194b53430259247ef6b0b2ebc2bdf99a298ecc544989fae8c3fd46cfeadbe2feb3c8ea7ca1d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

MD5 dbced7fcd2f38578dc13f251cad4be4c
SHA1 84b4387bb908bdca3864103339d850d632a6d637
SHA256 b743b1b4570d2277fd96e175cdd51ed48de12fa3ccbd84751ae6d48ede4cdda7
SHA512 bff5d74149ef415500af9e0a3a1f0d3d9c4b403d15d2ad714db38e2101ecf40b9a2d1012db93cd9af6e6705bd3c7183be71bca47b2d6ec583200872f6e5259d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 b6b5345051441043b8849d8b5d558df8
SHA1 e24203f318df1c4231357151a5c4bd071eeb2f3a
SHA256 c85cc6ff5da21d10fe2d421ab0736b0ce864c7a046ead49d9c56e66edebb37e3
SHA512 337a29ec553b2afba45c20665d75d8eba31b92cfbc40b86ced07c4beadb637df0a8d309799eba1a0b4b29b47c0bda547bb1b08f6ce72ad7539a2059da71079b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

MD5 e7141696aae15709e9da00a2d9274381
SHA1 b64eb1fdad2919ae8eaa2566e507b9394bb8aa40
SHA256 8ef3065bd5890ad0fbdc4723132f9206f81456783351a6dddc21737a06417b0e
SHA512 7851d1817f1d35caea42719ff57ef5334996c72f6fd68b3967a88cc877b12a83e392ebcd6bd3ded9fe78d1fca8ea510e0e9becd783fc50ca1c77115707909372

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

MD5 e375447ed0a7aa1ca7d5dc5ca4632b2b
SHA1 34cefcc7ffd7b329b63af54d2b35d890d14fa870
SHA256 01bc6b654fbb35db915a7963ab9ce2473ce952985796aa9c07175deb4df28e35
SHA512 2202c9152a15458694c83f25962b8adcdd90cd06a8f4ffd2b062ae88e0803e560cb111c241a81e04f6f07d97348aadbaca0522a5a67613708a747717e7b4356b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

MD5 0c4880fb1de7d2ef097042adee0d2d31
SHA1 ea7b12eae99f8f044352f1dd1bc4f7ea3786eecb
SHA256 506fd688cabceb56eed3a3ffaed6afe80f124c61b223b3c8cc231c74ceb5c73d
SHA512 74d5d2148505142bcfee0f99d3879a4c5baca87575026df3eac7d504b56c849f827645b83fa7fe2d64bc6bc3b53ee35ad458ba56b846b2d4a5e03996e2ddd80c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

MD5 e0a5b5b5b60870c900d4e965d0582b5b
SHA1 324bb751461fb997107f4c2f869042b093ac3ca4
SHA256 a4658e257cd9b7c17301efa73ef9d9d66c9561ceffdbc92fb5e5b64454b87f96
SHA512 e7c17425d5a6954710393ec309e473db216db095072f64caa968b9a3e1943efa75160873c8d965ee1a36a7493816c11a59bc24c245014fb9f8e6b5d043c7455a

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\124.0.2478.67\MicrosoftEdge_X64_124.0.2478.67.exe

MD5 dabc3160a804b9fadd89ceb0fcecf388
SHA1 b52f15e866a18637683bdf0ea4eaa326b787396f
SHA256 53eb39a92ee0d2eb94f6d33c015097bddd9cfe5c4129d3ac9a9facbfb5087bfe
SHA512 74fc0f21d7cf99e07c079224e2af8a4a51bff98a97bc471cfedfbd3a28d3ee681fbd63fa7239948c3c0bf4f9af56dc582dd128f8c08b54cb73389e85f949f431

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6b21f8bba239f2572f693841d76ba2fa
SHA1 fac2ee17bac1c2c37dad32bcfd61ee53c1889e55
SHA256 b1f8cbb5312a37a4ece1071ab2e176a235d8ed170e1d524f53ecf74a19c6cea4
SHA512 cd38e898a5bc30b1688edccbf7c1c6db99d394f43f5dc96d19cc41c1bd8a937a8d876fb3009347805e3f848fd7233afb2e1c5e6d91fa134c031f95592200fa0b

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 3de6604a1b278d3e5a6f7b73e44d15d9
SHA1 60fba601ac105882a61e1ad1dcb978d9544b0034
SHA256 6fa3a50e712d87018d996476d60c0a80aa79b411f7ef9b7a24ea7b712675067d
SHA512 4fbd3f6c78c8b18b877ce347bff16680703bc6a2000b9fc6224452e5d945e59af7f65f9954c2edda12082e6f94e72039372018bee1402d302e5ef9642d80a470

C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Installer\setup.exe

MD5 c31297188ec9fbaa60449f769339963e
SHA1 8502d9e0cef18137529f0a46ad6e69a1577e6cae
SHA256 2e2eff110475dd3dfd732ab514e4692032e67b2d228d0081634a87f45cde5ff9
SHA512 9525e3e08b953fe36270c7b4868959e9bded055c5577e5ca94d79606b671e6660d180f763b54a276bf356e82d7073901c373e0b40cfca924cc4b38384c20e22a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 70cc1b0ce7a100f7e2d0262dd10e33db
SHA1 5fb1ee447f2d5996529b96dfb0590d51a3bce687
SHA256 e5ad294b39927040c6a40ce4fb37c2c076ad0c78615f2c9eb42cb5e83208a558
SHA512 ea5e2725d1d77d357459aa68060c80409263133242d6311bce0d87a40b6da516ce5a7f5850b86035380f70080b1f94912c362da4f73c3c010986b78eff06b846

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fb8622753de21434b3e269046a1bd660
SHA1 2c52f928211ccc783c66cdbff4e1e7d708d9ee70
SHA256 d05978f4ae1bb184bdfdf4c289a7748c7fba4f41f468b4fbd0d6608d13dcf918
SHA512 9c812ecf17c01bd921ffc97d9058481e1eecc003b894c75f41c7d688e72c143e193be3f8e3ae4a5f5638903b85a611d79251a25415132d219cac8352cd4eb49e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 faffa9619711113e24af2e8f0698fe83
SHA1 40cec771bf64646e1c87ded2c94631d1d7577762
SHA256 fc283b2bdc85b7443ecfd568c40899ee7ab0584b5679571fc6237ac7afc73eda
SHA512 c731f9c5e79a1c056942f446511e76d06be6f636bfaea479c7ddd5f8684da2e02ab13d43a428248e525e09449fffeb7b989ff9d6ab30ede72165ec1ef0d1fa57

memory/4872-1384-0x0000000000F30000-0x0000000000F65000-memory.dmp

memory/2504-1389-0x00007FFE60440000-0x00007FFE60842000-memory.dmp

memory/2504-1390-0x00007FFE5FA50000-0x00007FFE5FF9C000-memory.dmp

memory/2504-1392-0x00007FFE60440000-0x00007FFE60842000-memory.dmp

memory/2504-1391-0x00007FF74A750000-0x00007FF74B750000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\ShaderCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

memory/5104-1423-0x00007FFE82640000-0x00007FFE82641000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 b65141939ef717693b62e4561fd12fa3
SHA1 2f4cd4ae19daa6d5de598adb3fd32b26114df9a0
SHA256 46e7b5bf966f5d3d36d40a976cb4d2cfe7252c5650379fc9ec20308582bdea68
SHA512 f492b32aa91a4a4bd872e70d7f3d344f8161a719071fc7f1e7915268a625f1f6258eb6f76433f1d62334c7b9880a24468e36fe62064e2556446e8ba9edd2d66d

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 9ed079fa8993076778e2409eabc293ae
SHA1 b0e37860e01c821d9353e14efdcda9aa4d62b786
SHA256 e12fbadc3577abbddf8647f8ae3bd142acbb289f7e396901d323f3a99aa9addb
SHA512 65094590c6b91e3cd8b0b3fb51cb04c0a94c467dfa1d5ab49f672e2c95a1529066c91c6d3dbec20b3744922eb17ee0b2a24949f4fb70ebd22c1a4925fbf0fe17

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 1c11d748697fce83f47243a7dc491bf9
SHA1 89141a9ed760b5d4508644cf38d583eccaf1a5f8
SHA256 a96b1243cfa5f1f395e38b133f131fc7452c4ffbe672100aca92811acfdf03bc
SHA512 404422e6e613a2389fddcca8858bd988956613c56db6e35cdd94d92db00e1c3749f94a1dd13134f54bf14e8e2ca60b0a5f1bd0c477871be671132dac4c0e2cde

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5b6c05.TMP

MD5 6f81cf2d10e62ff7120661ad74569fcd
SHA1 b9880e8bfbd7b9e7288bfdbba6a3e042f1902e9a
SHA256 e1ec546ee9cca11c4fa3284d4f307977b2e4842474085c632c52fa85c3d6afc2
SHA512 46fbf4f595f7fe4cabdc279ff9f4d9f0fa6e9e7bbd0f089f178491e8cffe1ba0c89219416b648b232820d1f044ec9d1b602032de874960bd6c9be0d066120f73

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

memory/800-1499-0x00007FFE82640000-0x00007FFE82641000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 9fc4667e9bec6aaa4165b315c63c770c
SHA1 daa10de8f94ab69650aef6f2680b1881dd1ae781
SHA256 938850a813ee908cf9fac9f8dd9f25e60edceb2989f7fc977831d4e61cd21e63
SHA512 4648c68920223581c22d4c7b68ecfde8693b36d1663f6f6cbb6baa58c9e9de838aa37a777071ca233612eeb1461f29413929d84322147cbe1a8b21de91552260

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 48ccdd1ff348aaeacfa5fb675e2b60bb
SHA1 7096c65763c59a785138dd6c749867fd09c0f652
SHA256 9cc67280e7c74dad06f8f83216db8c728d2d34c879b9ce9c41e39f28d6e483b4
SHA512 be94d6786ee5b2027e8fbeafd267db46bcd2017016414b92199c724d5c9f688d6cf10aaa62bfd2e8a15985cac19391628ebdb11220131d699982111741beb8bd

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5bbea9.TMP

MD5 3ceea5666c394c9c152e01d03cb26d1a
SHA1 2f5d59f76d6859f742e1e6978105f2ef1881187c
SHA256 91e3805f75fe00be635857270ae583c25c49cf3b659c1c78f4df1063aaf36ab7
SHA512 e217151cc5010329589c9438e1ac89b0752e7892a3ce305655398aefe0d059a8817bbb5b235b6f9ce49134f71b19c7715be68eb44d3112a540c18bc167d462ce

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe5bc0ad.TMP

MD5 a0640402e5c625e6c28071e1925d3783
SHA1 6958103f1dbcae3877fe90d95f81c4eb2e160b42
SHA256 3295ee3f7fcab37b627dac177bc5b81fd5814931aa44cb0ca53342e1127f1518
SHA512 c9ffdfd84aaa29ed1b75152beca11ce9c7c760b72add7ece2e9cd3168ce02303249f88942f8d01ce3ec5bfff4ab886c43a1f5e330ce0d93df963252a19784e31

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\a695b729-2fd2-4cf2-985e-281f4cac7d8b.tmp

MD5 75274fc301e15ddafa919950edb541fa
SHA1 452b39ec2f3fd9bde1ba80f9a3a2c13db24988a4
SHA256 c63ed40e9bfa4ba5e0d2ff678790e27eb4fdfffdf579357188f35afc4a343054
SHA512 fb3e73e7aafac5c88ff9dd314edec8fe0dce40de79890c75d511bbb5ae4d59f1fb2b339eae58eb705ec3cd8c2fd621a570a42ff71122abdeec7d02165ef81687

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 6984009af045731ac9a45195b6086f5a
SHA1 2f0e043770930ff27fcba87d46dd00eccbfd8157
SHA256 b89d922275ef4c95288bb6bad28eb0ffd6dd0dd4e54becc1de7279090807cf44
SHA512 0e0d44f8a64b533e273e900c35e5aadb964ab9e9f7af2bf0d648b0f54f97c2164feb8a863fb8a1cedfd224c12d1a34e83aa30e152322531f5da3b0f34512d69e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 5a4a699b577594f4a700929eee9f5df5
SHA1 34cd82ab5ca7f473bc18334237966a884d6025f9
SHA256 2f499442e3dd82ab42152b10be40d471625a6c8ac0ca9f6fd9a98e003fb70806
SHA512 dc5abcfd4edec905296b818ea5507c70d97ba3834a192fdfc193fdd4d232a6db40b7f877364aaf2de6f93e490d39ba618e5fb836323e17e1b8262a913f54435c

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 7902d721e2749f2495a15387cbdd2b5f
SHA1 33f9252512fe24d568b1dbb287cfdf62da29b1ca
SHA256 c01281e65347c5de2f4eb9c640296ea108b6a8fea9e4eed1bcd141b642ee1f11
SHA512 d6b1fef03ce1f2a968cef36cebbfab68c1672415d6b6eb8a6917beda3ce94e2d119b8b60895093ccdb9b3a2fbc1b741fad34095b37c99e7df60328bb05232cc9

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 de3f7de2c70b4235b3db2aa88f0a81cc
SHA1 43a99421b8017f901e19348366e0fb85f59b7989
SHA256 49d89dce8e73307d4495bc7c294c689a45b598f3409cf067b1d8a17c3d0d5857
SHA512 7d065fc74442a2f289c1d412ced65e6ab8e1bf64a3f33a9ac1e049caa604014fea02c482f5ed199d870c4753534af03538587e0ba6fcaa165282e7097ec9d49e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 9abcb01788fa74cd48f6ac7c1afb945e
SHA1 5314ae45a69fd4985654a59d0b6245bdf21fe52d
SHA256 eb10ec71b1f48b7aa6c8a6f0bdfd2f33a1dada4334811aa293419185059e275c
SHA512 d171c700ce5f0b83f9dedb10cc28c290b2f7fce045e80fa4516581baa12336c55d3520b665ca49235ca81e44f3fc2786059130121afe1b690822ec150fcb4185

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 e8808169c244a3d86d82ace93117796d
SHA1 078380a1090fbf8beaf3dcf51af5bc800554e20c
SHA256 2c025971bfdd3a3b6dcd11187f4c6f6828b49ded7a590ebcd1825b3a77a9df9b
SHA512 26b84b428b71b408353ec7a9e929969dfd9212a088b0d500d8e82adb81426608e489a4c1ca42bc69fabe2475679c2a601874d6dab6bb441e0a2397961e08dd47

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5bd6b5.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

memory/2504-2018-0x0000018AC8000000-0x0000018AC8200000-memory.dmp

memory/2504-2016-0x0000018AD93A0000-0x0000018AD97E0000-memory.dmp

memory/2504-2020-0x0000018AC8240000-0x0000018AC8241000-memory.dmp

memory/2504-2021-0x0000018AC8240000-0x0000018AC8241000-memory.dmp

memory/2504-2023-0x0000018AC8250000-0x0000018AC8251000-memory.dmp

memory/2504-2024-0x0000018AC8240000-0x0000018AC8241000-memory.dmp

memory/2504-2027-0x0000018AC8250000-0x0000018AC8251000-memory.dmp

memory/2504-2026-0x0000018AC8250000-0x0000018AC8251000-memory.dmp

memory/2504-2025-0x0000018AC8250000-0x0000018AC8251000-memory.dmp

memory/2504-2029-0x0000018AD92B0000-0x0000018AD92B1000-memory.dmp

memory/2504-2030-0x0000018AC8250000-0x0000018AC8251000-memory.dmp

memory/2504-2031-0x0000018AD92B0000-0x0000018AD92B1000-memory.dmp

memory/2504-2032-0x0000018AD92B0000-0x0000018AD92B1000-memory.dmp

memory/2504-2033-0x0000018AD92B0000-0x0000018AD92B1000-memory.dmp

memory/2504-2035-0x0000018AD92B0000-0x0000018AD92B1000-memory.dmp

memory/2504-2036-0x0000018AD92B0000-0x0000018AD92B1000-memory.dmp

memory/2504-2034-0x0000018AD92B0000-0x0000018AD92B1000-memory.dmp

memory/2504-2037-0x0000018AD92B0000-0x0000018AD92B1000-memory.dmp

memory/2504-2049-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2048-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2047-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2046-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2045-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2044-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2043-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2042-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2041-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2040-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

memory/2504-2039-0x0000018AD92C0000-0x0000018AD92C1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1f1d96b68e3261cf312b541611c5539

MD5 3adb865c801399c412bc73840d3d8241
SHA1 267f8332eb7486bccd7a6730cfb4f5c2152b11c0
SHA256 10fb505b7ce30ce4bf5582248b17dd47f6a39635007bb77dc5d16b963baf9905
SHA512 609793331ce25c6667067b3616791f3ece470500f797343178948e4b7af18f275fdde226f542610d957b397651e12191aed58dbb88bc1c59eff4625e550160a5

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 30c7b2bdc35c650d2b65150241646816
SHA1 94d466a5f5159784155b6adcc9555bfdae4710c6
SHA256 0784d39379f0a4f971777844ba07550aff31a3d5e32ce1d1eff6f4c7d49b90b1
SHA512 8d51ef924b6c8f46a7ced69f188f2ea583ef3feb7fd84f51a8af8810c51e5099052e2c1513f15ac6fb83fecbef8c984fb4e124ff524c2b20a437943dc127465d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028

MD5 70aaaf736769e4a90cdd36b88b9fd97a
SHA1 a698112feefdde7018505f9aabf106df7029d3bb
SHA256 52d6e7540c790ef65fd662fe2d440d77a7ba4c40bf47a38ce9624fe1038cf23c
SHA512 9d42cfc115a964764f0231ae0ddbd40129b237a1ed203a757c721549a66fea5904e9d807cdce17717b677e959e2bd80f4742489d3928ae7c72b33350ea8f0b17

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c0314772006f460e81f862b339f9644e
SHA1 aceb9a0c6672fc6cbcc0db161fd9d89a1ed41363
SHA256 d236528e7a058a3f3dbdc55bdf99eb221267d242eeda073323c559294767dfde
SHA512 9e94be08f7d225a7fc81d199426c445caba8202ffa218b9c349cf7f2aedd7e5ff623984a5508624a5bed1166d98168e6768364b568f9c069c8bf6ec88834e09d

C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json

MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\64835af0a1c6eb4d0702e2c6591a630f

MD5 792c77c7834a5379ae122b01384dcb94
SHA1 faea87a7bda920d07a3057f2a0831d118916aa03
SHA256 cfa3f5015aec3fc9af7d93c3201650453eef030229a0e054b9b46779aa868d39
SHA512 7bb8e1f87e1920e045c673c81acc957fa8d37c76a8c3cbf14204507fd2482f8898f2eb51004ee580d0a04110f10e977826961f6e9ab2a74e7d7821a51e98b7d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 e5b0974186503a1f73a05a8b3b042aaf
SHA1 aabe210b6e130968053ee7e2911e74f8b34747ad
SHA256 fe3186f5a1be1237d36b0740206a2492ef69aed23892e16fe4dffa0bdb492be9
SHA512 7d9a535632db30cad38ca94054a120ece00a1158841f9821f64db9912391a79f2425f1d4f209e7f83a4bbf2cb97a497a612f553193052a4f268e3924a5c85856

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ba9770f5c4145dce19035365040b2da8

MD5 9837ad2c1782dcf969488ce8d5a0e89e
SHA1 d260962ea72f41a0ef1a13c2dedd773978742cab
SHA256 c93b36f4a933b70924d70624f915e9d7d52f5a5d21233dfb98ff5e2baedfbb8b
SHA512 2458fb3498eb731490fe78d3f23231db1de556c3ee10a503d5a0305cda1054d4902328957df33d260ce0dec40aee775c00f76b92503b8a992b555ef0e3922c68

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2fce0a696ce3dc0f908123d196477f4

MD5 f806a7821e21871e209db202d09027af
SHA1 958d59c9f8ac329bc00373e846d8586a087c1f7f
SHA256 6d76261542389201c25c83a3c2537e438466d82e785f9761106d3e17fdce4d36
SHA512 63f42a9ceb32c6d20f264076298c77213112842806799a578792176ccce7831a2e5b2ccf30e326a3d1f2e0c177cb89c38889aeed757d7bcf0b33754da5b25fd7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\90804f0aac2845bd8a51414702afca06

MD5 257bbf989b74bebf61f7d67b8004d18b
SHA1 6b5b3cbb758c09d5e365ee717f9d37aebfe1cb0e
SHA256 e898b59bd208f3df0827f1b21da9baf98c106a8d4c60f63ec19909306f631922
SHA512 369391b2f4ebc650a2625d5834acf7e6b9823db5a9c0b3dca1bd96e341affd30afb1b51d52ca186457667a5032e03b5778a175f53963bec9ade13ae6b0ea4579

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5966001171c6ec4437ca9872bf1fdaa9

MD5 537d00a59e80166700f05291d92fc80c
SHA1 ce7b388b515e56ff756f8b8a0c023d6bd770849a
SHA256 365de480132c0c9b2e94281b39227b96de274b7c56045c81cec6684269d8b35c
SHA512 42155345e0e40ee1294c6ca2488e415de266902126347b9c4142819f87a69273fdc672c44a010ebe8cbba9efa2f93945a0de87f15211e61deb597639fd1e030e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cddcea087e5bb5cdf8ea7c85d84cef6f

MD5 fe2a35865555af32c4a62622f63dca94
SHA1 a11d1a537d997d77cca3afa557935ca75ebe888f
SHA256 882e1fa0ca4503205acaebaf20785082d577a006519e9be9de8d438ab8263ad6
SHA512 22f4312c1b370486798552908d2e29502fae19c5cc0b0fcba33323664d182ef15022200a1aaf9a300c299f36ab564bc145520c504a2e73dd2373750dd47f4d4d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d6ef4ab12541138295f7c1cd9bfb63ad

MD5 0696295040c6fdd779c28b7deccff441
SHA1 04e46ef38a152823ce8852acd451f9a4666e2ee0
SHA256 a73c8f8b272f2fcf64317aa70f9f746cb1ca6f60dc6464518297405a755ab75b
SHA512 782060c0c415be2b78d13b8b32c50e2460c8cd458366abb390f87f353c00409446abfda72afe7891f557faf1b7fcf7f866e575334cbba0c1b79f06dd0705aebb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\82a93330ef6fa233bcac702f588e403a

MD5 3b96c14c2c48dc0d70cf7b71998e7be2
SHA1 1b12fc646a55754f347d8aa300cf3cdeb013cc3f
SHA256 f4cf4f2110a54ccf1c7a9dfdd9a99f533793eeb4b0585cb4cd6f811550ca1717
SHA512 6c70ed773630bf51a8d983dd6030d718d88b0d531b22aaf11f21abc597c3b4cc6431b14c7f9562e3f4eda4c2b04c0cedc3fdaf250cea7132d1f261d9a071e52a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4f7c20b3dc503c89662a4300a859bf35

MD5 53cb3f93cc620af0e49040f4edff3adb
SHA1 24ac4935156b1f6a6f7aac463a3965c2b183e3bf
SHA256 b8eb1be33e8395fdf37f2fe58f8be7cec68bf09d21456e11ef23e92c0514bc5a
SHA512 2a730d0368e792f268defa928ff09e26fadec48a2a52569df90456fe7f6254866e99f727153e6f4c34f185b8cb62827539bde1c2ed1e5686b1e9391fd0776a49

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d0c2e4b2467d7c28015d6593641ed0f5

MD5 053fd5b7d667f39b1695cbb63e450626
SHA1 afff2f3a92b6c3877ab2edeff53e23e1ec95b37e
SHA256 c98e42096b97acf3d990fb620e3e6b70cd37013525af3cd791d408ba4740c335
SHA512 71887f14a23939d7f53a70ba5ae18330ffd9dc8c8b26337806b3eb2b448eb8997a93a1398adfcee1e18bda229bdf9e5283ade3dc21d6541d358c98b760924995

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9b3e5810d1fb2f3ec89e868e520096c2

MD5 89eded96d98140fbb4bd45edc9bec6e0
SHA1 81b2662353c511d53418ee7034524ccfda0e2707
SHA256 8fcfae79c4b14f80589f17e7d1dd4b664f32c54e23f2b1076fb5804ef4818fee
SHA512 04d4f35b79c1161296e1a9e1aed7ac680f3b3178e24f7fa4f65b7f60622cb542e8e151f673acacc1ea7a7cd3b8025aa02b8c859b36996bc76009f2453d2772fb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\74589ba704ef4c1e4148dbdbe587a85a

MD5 f0d1ba56ea46e8471312f6a74de4c0f7
SHA1 2ab0796ef458b0595756bf7974cef61601c6b059
SHA256 c4561b77ab288c6b2d1222d26b19d1317acf872930090d307d4ad2ba58f54ed6
SHA512 c7e0cd939bfced8f8598300f94f1f3b228e70be3f21339339406c6218ca7df2947f6d8c9015d5d14ccdc7257abf818f3c4d152b00ed060fd790e2470067e1db3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1c3fba7adc7d6385254c235b2078c2c5

MD5 d65abe6dbe71460c50ec3f999aa484f9
SHA1 6119202406d21caa87056497cdef82c6a3f4c6cb
SHA256 1d7f32501d89292f7614d7196d87ea9e1c9b3860331b17789cb6d022cd33c757
SHA512 0efc5513986a5f27f5235aa75bef32369f6a77ed8de715b87e84b86bb02b23251d1b7cb129d3b233e076b7de4e98b300308d099205fe922974b8d93cdf73d3d0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a6d39db68d7a4e9f7e1788bf711a6eb3

MD5 58226c1475a9cc00e0026bf4f6cb6339
SHA1 dd8a819dee75c8f4bb07a32ef4ffcb7baf8c5600
SHA256 bb296ccc667a61149ba49ced557b4684d667a07422174acb953a669b57598ce9
SHA512 2c10259777430357117dcec0d14e20434fe8d4d74ab34ba4e51d3de5d2b38c0f49f6aa7ef38b7b0716b2b5afc7e93298596f170bdf74e76de5a8c2c5fcc67fbb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2daa37ff226483668aa57d815cb8d2ae

MD5 01cfec9503e706a55143eb8b8bc63540
SHA1 aa91036d2dd812821365d7ab70a0a0f0f2b9018a
SHA256 0cf704e2e6f391d6c3be14eacf41595a5f08be84175216d42d1f8584061f9d1b
SHA512 00ea3d14539b369ae8010ee2665cc67df5d1c98b8101dd19bb944b92cadcbe4bfab67bbdb405fed6956d58e8b65b30cb1d84b7e926496886d6ae8b057303dbc6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a5476c5b360d6281ab68e626063eff92

MD5 9d67e78a9cf5a450f4d9acc385c8dd74
SHA1 20a00be35ef84bf74d785f2804b1c53e51e41110
SHA256 f0e414f780a4ea22728b6a5c879050981686ee69b9bd9b0cd185145570ea3de8
SHA512 8e37ac5ad911f3042c12f0e3004339b6c381b4f6cc1e1c32ec521069ea4627511d174aee020e306e29cf8ce95820a4613f8826f94991303dc9edbfa76e5a56b1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\86eeefe9fc59447656995ee624e66acc

MD5 ee77735870eba137876076e61e3ee111
SHA1 e764922c365fe37e806439425eea5ff0163c4fca
SHA256 331b3685920f92885165b87d2dd005d18da3abaa3434684bdd941f100072062c
SHA512 6348bc5cbbb87c4039442874c1a2a2c5be1178868ac3935f9fde75d6f176c600ad9745634204a8a423476137d53c4b6ae9ca6c0b06dde32c272271b3cb9580c7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\256215ef71f2cb1b71efb8087ecd57ac

MD5 5cbc3424e66eeae1f8cd2e76171e07bb
SHA1 049d20ba53761ad9bf133c936fb38c3fe601a906
SHA256 407b99efb794fb87197b5b30de0054d71d7705b049c8db7b8f8a4d8035968662
SHA512 47cf14c7bd525e74c0de66297b1647c65e08d28b977eb8598b477523a83ca6b1a90db918022001590b01fdaee7e3b827e2e9e7444ae05d34400ef5f17ba47c76

C:\Users\Admin\AppData\Local\Temp\Roblox\http\472692e732f42ab4a86acb7082453772

MD5 64acba705557a4f0a01297b062046f54
SHA1 7d053991b44e086a9a4435a873915890cd0aee95
SHA256 708e0ae0329d9792598f2eeeb02ec328341106e6fb5781164f545614b05d004a
SHA512 2a59ee98683a68718cb73fc763064b436dfc0e20b5500d2bed9e311e7d7fd42bf2f4d42faefa5f75dd72b5451562d5fdc5e1f0d047c781ecc843b06680ed1652

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f5c72283651b7f6454d55732170708dc

MD5 cebbda7b840895808b64b1b9b96fd2d3
SHA1 3d8e8119b9df05e9f5af2dc1dcf4e92064e23346
SHA256 4308a9d686100173d654efd41e974bfe4e7e3c0fe41abbe17f26e7da3c7ca530
SHA512 8788c994ccbc05b8725b552569d97f0f1f69ad97635b5956098002b9959a8220e2997741c5bd005208d31867599cf6c9541d51e5bbe6de967d78eeced8db4927

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f8c0236b85cc29bcda20e69dcc7cbd61

MD5 e57dcfccc6e280ecbb114fedf1a86ab5
SHA1 5a4ef17f77fef4c509a15660bd30b7780124e4c0
SHA256 67a779067ed0c4d35111c47ad7a132cefbff766ebd0436eca29f4937d91a0f13
SHA512 5c579d4119becacdedc27ae9d9619c64f3f0f920c2aa750144df112830f435ec89f4ec3751f7ec2a5cf5a50bf8e39415f3cc5cd92d781078a3c267769738c917

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dd0224b4bb7bc1f0f7962424c8ed9a7d

MD5 d588e22a468abd8b0d3d207ed97e0b3e
SHA1 39374c87eb0096d1f6f695b694f9e7144885df2a
SHA256 6e279ce1efbf009bf235265f9bc8f8322f3b24b771ace91c90eda132bb6e2e45
SHA512 b076ef6c966de576ef77d58d1d9fb83a7c5caff513e030cf69e5a954942fd93998cdad77486f7a9f3b446f64e5e3db4ae0e480461243a43858cdf7ce4d1e6247

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0a9bb8e496ec4a09b0af2b21ae65a0fa

MD5 3eda7cbcab164493e9dc94131f9cbc5e
SHA1 56aa15389aa76be3f8a2f5aa64b6917b6d44b71e
SHA256 5e08a25e83b4ec253a8d95cbc20481c5854e8c512712153e3c032b649368e7a5
SHA512 243d23b85d133c580cf413879e62cc63763339b0cda3f19fb4eece937572c6e8ac2ab8e048ece17eadf2282decd2f2fe2f925a024680b6374216e9f97bcbad5d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 eaef4b677b2babd4fb7b29da0f065bf5
SHA1 655dc02137cacabfeebb0705832c3378062b1598
SHA256 c5a33fdff10981930005746e120f5cab8bd1321ea949ea5cd1b2e34a88f7aaf7
SHA512 7ddab6aac206bbd23350667487335e674466d66b3f0c425ec3789a62749bd6073eea1e1f5785ca539a0b7e0bbd8a83605191508d97c8280644088cc7d8161aa3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\39cb73d00b09996e62987c98c4b2058d

MD5 93f331b8602a9e1e57d6ca4b5a52539b
SHA1 b9881450e430162f3b554039e65dc263e39fd0a4
SHA256 2e2f8d35622162c93577492b311df3d9bcf76db94ebc068dcaf6e78be719cba7
SHA512 1c84755a751a5030b2a022f06e2c1b899dbe7156644b33ea110cf5874a9f86aca93cb20c01e12d4855056b63a858637875ea48e97a643742b0b4193e468f9d25

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b2ba93a3216c2d481ef03e753807619

MD5 96a7160e077cc65fbeed010d6a794525
SHA1 21151bbbc1e62d17d16e60b70a5c37162757070b
SHA256 c20f48e3845b554275a1a257e5e1c46fac6089bbd1206a7e758b544b14d5a733
SHA512 a169273b39075e10a7bf4e10bac52ea8d30fec8f9c9657a24125b3a1b5d204c8ffa6a531adc8235c8e351413f2db4d7474344b2de1b2ad4ad1b1085f65da17d7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX1F53960A0AE446C59B7E4AC0F5D0147D

MD5 c7610e2d0c043cfe88b746d88f676048
SHA1 761729251708000883cc6d052bd84795baf1c07c
SHA256 e9aef40ab778206cc5c38d94ea333606f7c4d5c896ae8ae698a6098345924634
SHA512 6a4ae96374428990b49c3fde85353eaaa225217642557a4812ecf607adb1d9898cf9e820c5d16e6da278be43011f39688f6615b81f506990ea08025fc8715718

C:\Users\Admin\AppData\Local\Temp\Roblox\http\df176455bd038809f2937ef0f634ba88

MD5 898120c9e901a6d1261fe1188174112c
SHA1 c8c14021f13afc65730e4ca92dc8d56a88552108
SHA256 8fb24d23b3227336c04b9d2dfd61b4292b3fca04ccd18089b33cb4d2ca00cd43
SHA512 e9091083428d80485a968c5bad5c901140180f8f68c8faa3a385cf3e199917f8da679fe0ac7b733ba1745e7e494a5dc894eb5504b8b4c24e5b054fba8e38f240

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1e73a25932c9dc79f2bb6d9acee14ef

MD5 80f80a1237a5afe8059154407e76f47d
SHA1 45b1957e02c19f21cc3ae820db1f862706d5d6b5
SHA256 f170aac7385d824f48db4b258473445ff26afbdf3cf04fbe1c2d1b9dc0c2f8d9
SHA512 74eaed14c525d28ddefd5cc2fed7c46b7b0993b147d9bd8a034b33c83e70e2c14c871564614ecb8bfbeed4b828ef3f002ecccb941e96f3b2e4050adc5ae3067e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fab6ec692eed9c86a6392837b5143627

MD5 9350f0d90e85e06fd793cbdd0ea7d818
SHA1 643bad976ee97516dc1556eee226f2ad752321de
SHA256 bc15f36e1b5bee9c22724d4a7b3a907573c5a113bb68f189c8fbaad2d219cff5
SHA512 4983876fa5a28a9694a65cecff1751432cb4cdb0fb340ba77e4bf9dfe5d3de4ca7fad8f5e4769ed67e2d32a6f2051a318580152ffb040540eb6b72b70fec21a4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2980ffa087b04e36024318ea2cade6ad

MD5 5b14958f895853f04e18d15be7df8667
SHA1 83b13ee8aef7c3ffedc2117b84c0511f2d626d12
SHA256 2b80cf843daa7a65d0585cb5f858883d8dae166a91892347860f66cc353a26ee
SHA512 ae8f15cb1bf3ffbbe76abac184334436a00b56745d5e4b9662bffc6ab2de3bbc96090e5cc11a1be1decd56787987eced4dd24fa1829e85f25e3138eb6d2dc6b6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4eebc0456b353650dbd14f93fc52b2f9

MD5 0566b9582c8789560f6d9d0667462b91
SHA1 659d30fdd9be4933586ab6db0f6010b6654f6589
SHA256 035ebab1de37242955b634db16c6d04c4975c18b2d457a6071a1e87d94e649b7
SHA512 4568ddc7aee6564486d12273e08ebda47a08e9fd49d87e907752d398cd3a2dd1e30561915c8827fe5b333e6b7c5918b88d5c5d7644e1712afaf681e39c5d6a86

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c2dde3338e751778f6b1f175dcdfbf90

MD5 db5f79609f22c356aaa3eb89e9a986a8
SHA1 efc8a9e27e099a53fdd8a55099de98bfb70686ea
SHA256 9c2af2e977735d2da587a8e20054ab8969971c4a870cf45757dc021ca19c07d6
SHA512 ef8ff6b1641f9e0ab42c05205ddd4116f88179b5b09619aa23b538abd1671f53a6e5cde3a49d380f51d26f8e9fe6062150ea39bb8a37ddaddddb23310a467391

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6f702fe320a917ebc813dedb8ce03738

MD5 b75f73b6d3dcd4aa7bc2b73201369a8d
SHA1 e156bb9242c3f0f54480c25b83abc49878d1fbc5
SHA256 d5489ede98384d9138983fcfb7ed75ba0840022916ae7178976467cde0ee808c
SHA512 d49a86f52ca683fe2e85af3683e9c4ed8fcb4831e3438b9c018fd5d797fe0037a1f467683cb714dbe429519d90eaf793d52c584403289dde6852c627066fea20

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 20c8d8018bcd195b76d4c0fc199c032b
SHA1 3c17eaa8e306eab04f893af634b54ee34be46917
SHA256 d1410cdad8086e07461da448e732e45b98fed5f50d55a821c7efc6b1af1da1a9
SHA512 e615e84011d44f37ab04182bcc4a22f7707ebd480b9b571a9cce8f167a6fe39cd2197e7ead3dd53ba0f11fffc5576a9ccbd6962310b91f0973efd01c2794b0be

C:\Users\Admin\AppData\Local\Temp\Roblox\http\390f7fbc71b8d259baa6da1c9efed79a

MD5 f6f835e41dac7809c23f1e45aa290a83
SHA1 ff218e47227cfa89f1d1d3fba40a300ce4a66614
SHA256 1b66be4c58d274581d3b77bf2e29416b31b409e209bdb0c8085107e5cb78b15d
SHA512 18cfb3f6aeb10d8eab361a20b574db955d1643567f9283ca59864c3ad5c2ac0e8ff40813548f50a88176ebfa8cf666c71225a5564017ca425a3479c795899748

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0282732d28aa28b8f1706a705f443b77

MD5 25449b656b5f7d59eeea7c57ebcc78a0
SHA1 42584031cd38b2a5df8a4ecae39d01365a2cdb86
SHA256 469b374ec4a5b5a8597f2c868b66f61ebecac799ac676dd6a813416133aad9ff
SHA512 4343b1fbf5785e71547e5543c0f5e7502711573a48391800f5a45b50c61e249db2eb6e61936c30e47b0b744db979893efa6651e5e97a682acaa627d0d9d22055

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9bf228844dbff6c1aa948d9c12209cd

MD5 26dac31787d1e317d329ac32a6ed4ee3
SHA1 a2f62b432cefa6c3f18c4bb9a1dac84692e93680
SHA256 08feb53d7eb6d2a3ced38babead4c19ed48c8fb2723cea4c6f78fb3e70323198
SHA512 91c3796e99901a9e3d60beff278c33188552f02eebfba6bad73237b151f5dc53be174724f18cd145023ed6b9e84126f90d9d68892614e245987bab400818c706

C:\Users\Admin\AppData\Local\Temp\Roblox\http\894214849fca70732b2dbf61bd78a06d

MD5 7fd418f841741b4be6d6a0cf9343b902
SHA1 9d41873f24c8efafc46d7eca6f2b1fba4508d714
SHA256 addb058da22611d09db272c886b1b36c4948cb1a0fe16e51423bfd8478ad546f
SHA512 211655bab37d0baad6c8a0a21f029c1cf06d8b073ad2e76e0d52fc432914902e4ca23273590b7149c194bc69c022994281ff174f0f51c20d9882fce0b54ec4c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6a0da0dd3fba1ef274b36157bc0fd344

MD5 3f4829bb203a551d22cbcbe980c721c5
SHA1 f7cc33d7f157898eae90a435859206312e036cd8
SHA256 ed5e5a32c82cdf42d9a36cf9450e97e3915f0026c6960dbf3923cbb9713fa800
SHA512 4a6b173e9838c540370376b58cbf294b3d1244bd6f9ead699015fca3b8c05e396adf12b54e7464bb49676c26cad51e2f00b984401b6c03db175c31b9898b9bd9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\52499a6cac1333aaa8571cd4b0c64c0c

MD5 f9acfd6fcafad65c13c549f80167dbd3
SHA1 5002e0a9bb9bdce916c6f1e52f27afbf9f5fce44
SHA256 f896010a33db2d2b96403a296ad0d9a229d23e080e40e41a885ef8dc8c275df7
SHA512 d8a29a620cd1fcd9531c6bdedb01f3598e8c8368896a3cf4e9632a96d92b7fc747f4503fd159acec4e36e0c3603195319d975af24de6caf144f3174fa51d5560

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d892fedfffb556fcbb1b301d314ebc31

MD5 3855b1a7cd1082dae77d65ca272ad758
SHA1 a36d47bb90d5031836f1b5ed0316f7013f39573d
SHA256 f53ed97261ebb51666ed9239ce9ff06e1bd233baed9961f682719fe5d25d81f0
SHA512 1aecfd3f79518055e8a445f3154d19fd0056a7323d6a086a9393f3333904f9ce8489c855fde41af701a16d9e3a3de82db4ecb853461d3913fdf68ff7d4dbfbce

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2f4b29434ba43ae89f5eed081f2d7f99

MD5 1bc4e6261a8ecadc2c79bfcb388084ff
SHA1 dacfb46a3ad9efcba8e38bf66af72873d2ee8d63
SHA256 d611bf080451edc918ccf7f64c24d2b4a7e2e230429c6f42c2bc839f9daaf0ed
SHA512 febe6d1d47b3fc97af8695a845a719afe8f35ea9ab76d2e6b45e2d2bd7b4df5d05c10955c817738a46f15bd44a253b39775ca7c30095a80a84faf6ec9725f93e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c152af22376fcb4931d35b4b8165b30c

MD5 22a80cef5fa82e165fda3762c5759702
SHA1 2e1eb18218ce0beee00039b5fc78937d408d45f7
SHA256 e13640d898cb4612c05ddb7d60bb77b09d010b7ec25f3156fa196b5381586e5b
SHA512 e0df3d37a9e849cca36650f2d3bc9649db2e0f4573687b6e9f04aea49b1904aa3eb9160fce40a697df6e68df31e2b8a8267d2789249f61aaae5cfe5add73d676

C:\Users\Admin\AppData\Local\Temp\Roblox\http\378b90d101bd872b95690a3de16fadd6

MD5 6d325517310a860bf7f0ae4b3dd5b9bd
SHA1 ca31bf17b1278bec2fb043989e8cfa3b8b6db2d2
SHA256 d00f679f7bce0e12d504fc62717310d8e69de7d3b09dc07fae49ab9f395d47f2
SHA512 c61faa31f8584564ff4fc078c9f883d9ab063e84ceaa677ed7e22450e1e8a873a7f281a27b503492385e0aeb01601e60eeb28023067c9072f1cb02ea58758d4b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\81f830aa0c3d4a7908e82e9b167fc7b5

MD5 b32772c2a8d2b6022f8b2d0ce0baa8bc
SHA1 7f5696a1ae0a507ab78cf2c5959cbd0a5f09844f
SHA256 49c1296cb922b1ee84d9eec354ed82ffa16b55a958be7bd5ff05b14092129e2e
SHA512 771234d2ee9febefb3e5658f7d8a316674faa9b13073f3d2e05371a03207d332b3c18a79606c460342c69d720adde5daa9e2b7a47aa244a65e53b1f1a5b98ba4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\55970dc14e63c66630f4b540e158f97d

MD5 df73e542d3246787b8dae637c5b667c7
SHA1 3d45b55b7601fbbdd9f6eddfc50de83e75aeb239
SHA256 ffa3fb84acc8d7a55badc8e85cb84160976cd47f5ec1b02d623ba94223d6b4cd
SHA512 47fb552993842bd7244192be3abf54078f8d7fc90e16ad1b634db8a0ee7e7c837715b30493831b6b394435152739cfb9b9a5563941e27aa7ad83546f71732dd6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\253b23e5438adf1f4bc44b38b13244ce

MD5 31b28b0eff9e1cfe43c9be7997847c60
SHA1 b07b02d2d3f521f93d17aa1e434a7c5b70c99021
SHA256 4e4518fd6c63a8fe324c20469dfb8a052dc0cf76c3a0b8f78782368e6cd483d9
SHA512 484a7e1e498cf8b8b3fa10b952eec335b1f2035381f3fd9034e38090e90096048c27f715c52f19c600f1c5ade8859f9dfaa5e240e07482ea56402933b165d642

C:\Users\Admin\AppData\Local\Temp\Roblox\http\af2af0ec6719fdcd139e541dbcfc35e7

MD5 c135405eda791c35d7646609e4e46dba
SHA1 04ad569121dc4a9de64e3cd13b1bb24d38aaac44
SHA256 6ece4a3acbe1fc9d1bed31ade9240df055c7d2a3903ec3790fd3fb075e75969a
SHA512 3e4ff1e2fce84fe8d0efb89181c50cc809124833eb875abbf4ed52c0609032becd521570366094ad36e7a45da003db822918edd6af3ac64ee9fb7404111c6832

C:\Users\Admin\AppData\Local\Temp\Roblox\http\319a419b143bef539e6baaa745153b3f

MD5 082263b2ab859e0679b140dbcd84bf8e
SHA1 6de97227b3e335348b628a8409a4bdb792612b38
SHA256 65399135b0c36aca69d19f0c87b4efd37f51993422adcd8733b2472bab84fd58
SHA512 d58cb13bf7ed3c2bd46d04a2f96aa04b3857f6bce23ff6a7a8ad2fefa91bd658aef4fb7a1367b22489274996c768ffb891940e19354d2e3455e4ab901075aab9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0e3af013bd6acfdf2f46f1bd2152e889

MD5 ec0383e04f156b7959daafe0ea8c835f
SHA1 8bbbf7c8f7f44e7c484076f737d5a9be7ea2281e
SHA256 e8bdc621430b83e62cb394ecdda66b2c050cc0c3fe0168e798059e034540e367
SHA512 5094a67827d6ccd42d3010a7b9ebe88f004a740ffe0bf8bd9ca263732bbe5d4250953a65cd23b065faf0085a54248a77b408332aa946018315b4cb1ded6884b2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\95e1b2452134b4271eeeed8f76bb04db

MD5 3ac2892d5e8812dc15bce8e228f9e97e
SHA1 9f8e730cc47c29de99ff4ec09c9eeddc3b7481ed
SHA256 4bac0ea0ce2f265ff9650371fc87570a00b8098179259b18e838d0f4803e961e
SHA512 802cba539159f8568b18318da3b131a488cfcd61330f7630fd25cea6faf5170f71c611e2e7b9c40950aab32d8adbbd18132607239a36e595ffd96e7b5ad77586

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed

MD5 808cb55c51b6fc55fa6cdb17892dc876
SHA1 4487b86a3a42ff05e109800b1827c100390245c0
SHA256 eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d
SHA512 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1faae132446d428db1590bc4096fdb01

MD5 9a00f402a241fef46fad239d3f7ba367
SHA1 8c3840f9e8b546c82bc037f4cb5422a5e31ca165
SHA256 6d16dafe92055e9bf11ddd1923115432bd9f4ab42bf8e4f71c1a68e6ace09bf4
SHA512 2194b14c9002a22af34f276f7ebb819eaf0172828307679664277b17a4f2c9e8263ae32c53f041366550163923c6c66c9e2d9b235867af79bca8b70067c22926

C:\Users\Admin\AppData\Local\Temp\Roblox\http\694f238c620c9c0da0588a98e1b71dcc

MD5 76981870c1640dbcf7c4c11ed70b43de
SHA1 001713bb5c42d01ff1198518c0a613a9919ff297
SHA256 d9d0bf22f77eaacc804f4e89e09a55012f7e693cde47990e3c4a02302f39a19c
SHA512 5d9d4929925d3d1d38279ffe1f79f361212f1fb5556e0d5960f375aa9896893d4437dbd0f13526b47790076454d26240605063614dd888b5b4432075d6688658

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e096c74a88f5e0421395df922bc7cb5c

MD5 c1cafe4c8ac248cf7a5f2cb28cc494cb
SHA1 43d62e28c89fe4c5643c87ffc90af8d05a734227
SHA256 5e6dac2ce6814b355617631278bcbbf1c23cf7e4fde02ad9251f538533e61be3
SHA512 409a10b5a24a0e591d60f960913f42094fae380079395aa854fda8970a4134d6fcc511a898887858bc69d9ee68aa273beb297fadf9438d0098756fb06d58451c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a48bb6e3f8ec8908333d8c8e554bbd68

MD5 426f285bdb06487767bb1592f65fa128
SHA1 7de9d790ac558d1cd46fe39c59e981201971c77e
SHA256 ee15d7fa048568124b845431274e62e56fe238b4c2ba98ef44c8f1fbe7f4c0bf
SHA512 515425cdec1caf5384b3b3eaf60aa7f8958a71d564ee10c58c9b44651f7c5a6d603342254502acc6a5c59ed4009279f0aaab4d9c2ff7ca016f53db5fd04ca110

C:\Users\Admin\AppData\Local\Temp\Roblox\http\33bea63993eb52b3a81c631769c9d560

MD5 e3446bd6051da89386eecd640a421d2e
SHA1 c465c3be9a7e8f6d8c7ec7a2d8bb4ac9f68addb1
SHA256 9cb871b767c4a0f499ec08b3cbe32d2afd970bdf0273b3ccb1c79730e8f8c572
SHA512 348df4d36237b84a2d4e11352de73132fdadfd1c2aaddd414b520428b8bf51de34f7ffd71f340d7b89a0b00b8f37e523b96f330dcbcf4062068026580218957c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c879e9b63f6c490b12e4ff1e53d39c4d

MD5 486e79478efaaeb37327a5743e07428c
SHA1 d132a3bd41af865729f371a4fd6be56d4bcd460d
SHA256 ba4945505d5330413894e97b84b24bd93689f819004a8a59517077a03cd3e71d
SHA512 58c8b2b10ed62f58d9a845065911c38314cebc8e1ebdf7f2b324ef81466d81c67a59afdec2c0ec1fe54583d33c58e34a2848a25f033b50ed494330be52f26193

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4df45a2938942aa784e12877c3db9a56

MD5 284bd59e845c0dd262b9576c2bad895a
SHA1 8e40df00413a9b95509a7a7ab51fc093ef3113c3
SHA256 902de8a0bd871b89832d96693e6464d4487b71ceff92ee55676c8a21b2b821a7
SHA512 c118d54e44e3d2c9fc6b4cc7d53485cfb4b5117f0d7c1b3f3d7090c9752d96360658b410d4db9e4c35551716964dec50962d50ead9a58a7644f1b00587997d83

C:\Users\Admin\AppData\Local\Temp\Roblox\http\183e76a039e6f75a43ca798325dd82b1

MD5 fd5412751551c3899ac09da5bdbecc65
SHA1 980dc62d7509e204e0e2e00626b165c269209196
SHA256 d9edc6a94174fe009a3c23b1e3f56fcd1abf48a3db2a1dec64bf27ff6aeecbf9
SHA512 0660c043a6fd4550b4c1860c1780e516d591ea7abcab6911831288e7e3abb347e16241ae52b6ddf7f0d16223bcd5910878a4a5527863abd85b0092dd1ccfb424

C:\Users\Admin\AppData\Local\Temp\Roblox\http\611ae1f182f1efa9069d4419267a1e12

MD5 8fbb3393fc863f96063bd3736a1d709a
SHA1 4b59268f2f91dae3631c3fa08d9c81c83143b485
SHA256 e00cec3c4518e07deacf21d9d11f3e21cc822dd010ec0fe762e8087926a5c7b8
SHA512 5e0838ca72e43f511e4f537a26c4aebe52fa18e4290ae43ae1c559ad0c89fb91370b805d6f5f6ae410e97247765ed9f1b85f5b30e9f701243ad067eb3ac801be

C:\Users\Admin\AppData\Local\Temp\Roblox\http\047fcc2c2cc8def55c7535f9b146894d

MD5 176f5f0794a531a02c0eb00d5b94a7f8
SHA1 33c9aec94e9318e1b3c5fdf92a0d195d304f364a
SHA256 fdae2956121baa4232768a47347d4a3efb8326e91f889b70185d59018104e048
SHA512 d7a43fe5d2bb8d1ebb7e96f02cee411c737d8bf983e7b7f6ba890054087b776dfd7efc96e9e8068b43127a8011b6b9965d0f0f78b2768e785a7df3a2032ce904

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cded25f12fe09ed29fbfec9a2fc1f562

MD5 df83d290b088376e78b6e6891b9936d5
SHA1 8a96fef8a4c97e272c4acf5387b6f16db5589541
SHA256 fa58a060cf165233645a26a1f60986203eb7c61077fd714db89f8fad5673c1a9
SHA512 e11f2a9a3e65abe9f3ec7c57b0a0155eeecf841e27bb259aaf60f1d544933fce9dadcc183b4ef80f489182070b5e1e30a90de2f8f9adbcdb2f60a7b96ae6251c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4bb9405e6b5fb9fefa7ab542ba045491

MD5 feb1e938519fc20827538f8c0cc2b86e
SHA1 1a3f4dcb352e83b8a193941c4964b105a9dbe9ea
SHA256 c3f1a30dd8d7759c322f28c8a781102d70a461e6ad20bf036b83aec609d256a6
SHA512 ee6d8d67a3dcc0517f75e7b7603a03fcce5bc38dc1c05871c86fd5ce28fdbeb862d63f2785059f1b59b34c9dc56919b2685a29d7b515333f5a9e222e2d26dbfa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8664925e55f0fe4da66660353fb87e38

MD5 e9b1a938d1cde4be24cae027c65e22ce
SHA1 33d81d803d8c3313de5fd959bf7466f29dd430a6
SHA256 33144e2ddc6f54f73b15a16fe2c3462c66d9ec84d7962f78708d6f9c9eaa6e29
SHA512 f7fb903bd5d0984fb9653894cc0abfdb83c2cff96cb2ecc5ecb39c700f6a08077143ecf2ea10357e46c38e1fbdb2d06332cd5a9855938702de0432bb419da7b9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\30511dd88bd58a7369c77927a3e6cf26

MD5 1476173a102029513f22d19b70039d5b
SHA1 bb16cc87a2e793b4f170a58a9a2c02dc65b85754
SHA256 dee479e0c69107aef475e21c74e2506c555085d5d92eafbbec0d63779bce489a
SHA512 b9580dd7949a4f3903c01239ad7ac6e75b0eca7c14d300e053e8a2b6fe80543a5fc2bc1fd9e448b25f8915ac52d38dde2ce2dbe18a7e5a174bec7c2b38977a9f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f46a00cf7794d187e97da28e14ee9933

MD5 29e30bd74d25a983d3763208077bdd7e
SHA1 33e39d8cba37db8e899f237ac9e4a83a3538658a
SHA256 1da80d1f4dbe143cbe20060c7cb9de541436a33552dd288a281a4b87d33e7585
SHA512 3da0425404e8d170e60e48038056e84f94cd112db3980ba440a4c63a48ae1984e172ac957db07736ebe16e2a549d2dd79252b6610d01772915d67e1ef7673a26

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4c5a1faf53342c0934548c99c8d66a35

MD5 50dceb84c62298743c9832243e5b23fc
SHA1 3036ccca95031fd9f7012c3c178680a9a119a807
SHA256 1f604d3b5dd4e0e75f6648ae3476a205a2079e85c8df0d34527917d31d0433b6
SHA512 81c03dfd465fbc1c151017f5aad3ce00c3d5777bbfb508f10cac25af9af2ee47dd864ff9e28801ce0862aacd69aa10a7b5372a10cb1a15830d08396dddf6129a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\580d1eff078f43f81a4a13e776855114

MD5 bf8f66e777522968bd65a12b3925466d
SHA1 4ed3eecea19fb84af7f03c80c8954a4b66bcb859
SHA256 67b31a5133e4e826733620662a35d352e6abc71742f9fba8c064ee878f2010d3
SHA512 9f223bc649ca1c016ee58dce5e8d2e707250bbfe706921b49d6ee47efab5aec68ac58a1ab26c055bbe29807b8226b1d2d598478842fe48da63e73dfeda240dd5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f57ad04647f264ee0690618195f18054

MD5 fd816107fb17e56cc43e2eb228126a3c
SHA1 4d6088af96f0ae08c7a65b15605cfe6109bb6196
SHA256 08138e91dcc2d1ccebef7bbbb2baee76c22eff8f97b0657d32c0b800fea9c928
SHA512 e9a247487a7e47eb5077ad5d1ca3d87d3c251d436a4d148649705da0951fd7fb22d4b742d944b2b9ec9f15fa994af6c78fa2be446f7b865800713fae9fedf561

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3a13b410d6cc06aa1cc75f8e74d8af77

MD5 61ef260dcae1c28d16728cc40e6bc03d
SHA1 d644ed2b9e9d9d852f99ae890a213a228acc859d
SHA256 7871989d13167f176163cdba50640a7393f5a262ce8fda556198113e08b80446
SHA512 3f220db6f2897cad7ea49393fee800a14418789d8dadb250b3109769df6be5810ae11f1c9d2c98b8d414a6e6a6ddbfd58a8dc1da84ee81ee7f2b4dd44f48682e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 052d1d8fa2cd7f55b911a211fc522fc5
SHA1 81bd12f22d83fe9a01b2b98e67820ab7a632ea31
SHA256 63dd70121c9e30e4631d31590899ccf314b8a7c594e7d31153671d8255ef04a9
SHA512 afc7faf802bdf84bd59ccda20caa915a2a4a0887c2b7cb475502cd274488296e43d60cac8b3a534c34dac7987350f8723bb8c153a2bb6bc76185afc91c2d7c05

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc25741a2b3fb8bb321263407a6dd478

MD5 d5fb889c44bc31778ff78ac578b1c14d
SHA1 f829fa8f243bbd667934345d8f6e5f6e259440fc
SHA256 996f7c5b39ec9559d35357fe3cfab93b3f7ff24a699de2f5b855c8b587b61b8a
SHA512 e64e7e98c3d0bb5158d77dd761f4a5e47b4b28ae6187973ad4f0877825b1409c3bfbfd0bd6c4f3906be51dea4db42ecf4787222afcd257152b80731c778c8200

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c851a4963d47d7e88838a2f3fedec464

MD5 518a6cb30163335e55272813b2faf86c
SHA1 2af9f607905199ffcc1507a3d369f181b14e111e
SHA256 bbdcafb0429463829646af2ddfaa9965de22f63f830309649f6c7a63183d7e93
SHA512 4b7117f2c3693a4c1ca517f0eeed3e6eeb95b01b850265653221aa9f6bcfd9d4340f7702be4bebf1ad5bdbe75d0721878b3748436231bdbf00e4221565b2fac9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\970e89c5adacb2361e95f6ff96d2d6d6

MD5 15f2fa148bc7ea9550a8aaf77e428c0d
SHA1 abfa8d0bde20f2b05fcef9ecbb6a66209b1897ae
SHA256 6c3ba9082c110a3f55a94ccc281100694cbeaae4623f94c42cf6e1446b79f00c
SHA512 b006ddcc27a48cf6b5da235f2e867eb90b6aaa5feefdc4d001558ed6ac2490eb8513fecab83bea0aa9690080e06cf28711a10e19bf404d32101c071b27a5df63

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1e8dda6ac08ab1353a6f4e4aa8b3ac07

MD5 2696bf73d541c448f5418c66932531a2
SHA1 ef052873fa09b86a3ba43def45f6948c9796835b
SHA256 f04838122365de21a21236cb9089b449c603554e4a98667d5c91a017bc2f8d19
SHA512 d97d0a33399e4cb3677579b582b454878fb861a08bedb00ac9e1a3579be95afd799a3ce5c53449449ed8bb1d11a4a8f7acb2e44957c455f4b0d42bb15b855362

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849

MD5 7342a963fbe8b3a5bce98391f7c91497
SHA1 d937946afb025eb344dac220aa2d8d3494c759af
SHA256 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd
SHA512 fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053

C:\Users\Admin\AppData\Local\Temp\Roblox\http\376126f4da497e6b0c865b122168f09c

MD5 bf350280535f6208f23e19eefc671e1d
SHA1 dc95d31187b27ba6a01054eee3b83f231a280aed
SHA256 a67eaff0e21930ae018864761da5934c5e99c2978bfff3097a99df6bef208e37
SHA512 6d989f74990d45e11ab73806e7b9b3b4fa62161c090a1757a8923534ce65792ce984912c79e0790e45b3533b7786b3a8737fc9455c86ec66db172b34b832310e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1fc36581ac10efe29861d07a10ad343f

MD5 a65407818f56a25de22db361411b3806
SHA1 e59ee16f8da46900531d6d1aad774c1292f4c2b2
SHA256 07691c56fc14c49ab1ad8e5ef20da4afb208fdac51a0c318ef369567f23ea90b
SHA512 59cbf30340280385ebf0a213c8a1ae11507303c9d9467325714ea7634b06aefdec827c319bdaeb6a71e7480b5a7d6720203e7472d3a8c0f06cbb6c8e622137c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b74f739c4a5166e04bfb01ac91574c96

MD5 3811e093cf0b6e2d8155cc8c3f0e41ee
SHA1 a775927a74d216678db77def38681abb0e964277
SHA256 c4e97806bd504661f4545edaf81576de9fa46fa1d7519ad931aacc5deeb0aa5a
SHA512 2f5703ec1b80f0de1e3ab0ad5a77331291296bada903e0bcd74361d5b6fe753eba995ba7dd82aabfa65eae56c576ea99efec429d3637581a422b19a89f75d79a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\341bf231f0187933d02aa32f42793128

MD5 fe5a95ed3d4ba3cb633a897be9ebfb4c
SHA1 d74b20f9b962a816c3a36cc02996fcab20201519
SHA256 6d9a40713375d94752768be648fcfde3cbd5a16bccf21d6e615ad86c630a228d
SHA512 2e72f10aba95cd525efd500647027229674c9313e2d87cc2a25aadbcf6aa363ebc198c6d9cd39c561a2f2309000a97cc2225f7c3e01b3ef035f701aac41be5de

C:\Users\Admin\AppData\Local\Temp\Roblox\http\828b69a61285e07a18b953fd0b9a224c

MD5 3f7024eedc7ce19aa5873a28998c289d
SHA1 b02ec3378d0f4444e0cc97135e915574d3e5d90d
SHA256 cab5dec69d7d9c8bc497117c2c420d2e7f086172b82633a9776e703f0d13074b
SHA512 6aa45b44e1916105159b7c322d70eeb034a38edd0340350a9c7687b3f3d5cfe494784d4130d63ac2a3b1f08d90f8bd7d4a74256e55283eb54e9266e42066fec4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38dd5bd0f390efe4ab5e5015056ab9b1

MD5 650252936c062e6a1997bbd690a566ac
SHA1 519167c5ff3017cb0ff6ef709cab7a1a953dc482
SHA256 4b3600e900840d6eb912b854565f606b50d8251b09760d98a04d7b2b2fce86d2
SHA512 4eb0606f3be517c915cd98d0ccd9e8dec2ba837eee78105b908ae3d3c8e75a09795ebaa8be2b46f4e608c3f7b6803bc26d1443fd98c84d9e51536b725326b54d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\720e63f3358623c1f0e73bdc318d569b

MD5 95e43fc522302074225de9240ed3e233
SHA1 96a8ace5194f5830c749dafa29380165c092adee
SHA256 2a042e08125883eaeb833ef7eeed3d4d8ea8880c1a295de43b5f1051b6510368
SHA512 fd83966acc1cc93748c52f00fda7893b4a0e86aae87211c58b44de64f9c3e336d25286f381548d35bd1354c5a6b6025014e47bf85b44ac74d63f32cffa5e86bf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\03f765d840f6651bb962b60f3a22743c

MD5 5d97ef952ed7fa8fa967d62a6869496a
SHA1 01c0171ffeceaad8f5139082fe9534a41b3872d3
SHA256 c064ef9efef8237af1afefbf5a9e6a6b63299f43996e5a51778bd0644d2734b5
SHA512 680b5168a40621e42136ff3d8910e9067a97316550005dcc199ac85d919918111a0fcada577be7eb8fc20ae9b30911bd9da047c3608a6011ff94f9529ce27859

C:\Users\Admin\AppData\Local\Temp\Roblox\http\69a63ae74a0f753477ebf8f1b11dbacf

MD5 3fecebe8675698cf85c9562ead988067
SHA1 aea472c4bcda0a5f09984e8e02a608f1ffa8db07
SHA256 eb254307ada7f582a6ddb89b567d6cc79ff4928cd4a962226d97cd584dc64d89
SHA512 47ea9cd3b10d73ca1c8d709c8af1da2f9c8fa1b096c42066cd73ace636a4b579ed522ba4ef473a3b492ba8b92605bc9474de8c408e5af3f60a27571047b665d4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3315caa47254ff0e4c8d0aa36436f55b

MD5 6366de8965b8bd7edd7d18acaf1e205a
SHA1 8666d6cd4025fabd5e49f80bd0881ef6622592e8
SHA256 8745f4e53032fcd7edd1987914129e76b82b0bca3204cd012f02b96916afe4c7
SHA512 109654efd6808630c126dc10ab55c315c9c6f047ca81ed289093a54a7bc7a76102a47689ebad9f35fc721ffa0102f642a58e1c4dd534210d350bd8be43962c21

C:\Users\Admin\AppData\Local\Temp\Roblox\http\72118822a1d711af96156323b38685fc

MD5 2766fc3d120129459f299d62b2f40bbc
SHA1 11db6ff453aaf77eebaf01a6bc61e2127449be40
SHA256 acadf5b10a383623463b33644cde1d5d3a6ea896272473d7d6ab72354ace7b8f
SHA512 dd2846e74666ffb5f40322e9b4fb915e5030c44bad228804214a186239411026c327369f4a8931c73f5af3b83d038d9060276c9cf0f550e0caec366ea7948e01

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6f36c34e2ea49405b6d51310f54cce89

MD5 0f64fce8974acdf7fec2d1b77c5abb3e
SHA1 eea2f3fbbf93312c879d5bb2e1d0b6485f3381b8
SHA256 0835c29bbf7014a20fe24ec0ae172a43a06e349e9bde44d04fc54fbd20ac3268
SHA512 7d382311659189c82b334ab72662ae8696e3478eecf8a59718a116828ce3c9ec8dc733c0277ec6cd71dce9a28f92ffb7e342ba796fe6dfba1a5b84df0d3f3915

C:\Users\Admin\AppData\Local\Temp\Roblox\http\de65b167b06d0f941123666323557772

MD5 e22336e42de09fcd99a8eb257049ef98
SHA1 ed312dbf27685af07e49901ede7f17417bc54ced
SHA256 425b36a528d04dcc358eb5fb962dbe071fcf3241fe7c6311aee19186216521cd
SHA512 d7da02d06e682b19e849cc48e6dce60720bf9181b571eaed607224da662cf6585b36fef3fea8b43626f2724e81885af405badb98f1a64b795aa521cc56f6640b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3075de09ca50d2b93328dc957acb9659

MD5 22f60973e888244dd682dfb26429096a
SHA1 584be7eea5b8c69a686f52f54c73beb3513db72c
SHA256 f47899194bf4c7594a6247461ef1a22bffdbef2e09c7e625ca1ca2677116f91f
SHA512 9259ec4ae2d1a9aa2b95053de3785ebe6525c351fd92c008ed0e57c6bc3a0f87da2a1262e9f1372fb24c2bf7b3bfb1df668548b2f49d487a60bfd126aa80e805

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3ef1d5d968cd771191d2e8df5377027d

MD5 d7597faa268bdb5c1edbcced3dcf6d95
SHA1 2afb9a7b4d3b384b7bbbfce028a2d2ff1d322165
SHA256 f9127f183aced1f9918e70f550502978f0b1c2f80ba43ce80f4a1f22c28bbfd8
SHA512 717a623a6740e1e92feaedb530072ceaee82661d1dc1817c893b487c6bab3cba6445bd9e0b2d240fe79a4145731f3483fcb061e186474a351a45c71e924fff16

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0cd0725ce628c802aea646becfd46a5

MD5 b7c03229a5a8d6586e4532281bf1bcf6
SHA1 e2cf4dcb1a5ed9ec90882b05fd92a1cb2d9b7031
SHA256 2f68626defe72fe2f0f653e4f329dc40a4da28ec0b6805b7e372df74503490e4
SHA512 4b33587bd1e348c0c3c90ab22556c1a1634c9c16a7986d5ca92cf409a6bc9a2d4ef6ff29f1c56fbaeea7ea42b9e6bcac980f3a13869c7321dfa94b3d4c68498b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cb8a45c1430998ec1304e4c79176816a

MD5 933b1f5dc544d9868d257d80e517c112
SHA1 a8d55f9cd5f79ef7f6fa1ffb229d8bcfb30ce348
SHA256 51a66f59fb6018efd308234879746581b50566d967cf1fbf63fd3fb6917f1295
SHA512 6e03ebecd629ec937171a7a2d11a88c83c0267c0f153b86194683fc967f0e1c827e6393a39af735813a1cb3fe2297cd6582d2f7578355e797a5152dd92d6e600

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e2504bf31b5aa0ab48a8ae5f1dc5f1e

MD5 6abaefefcacaf36071c43e9dc51f1bda
SHA1 a562a7fc46cec9c90e86fa570267864ef2249a20
SHA256 55941590b6aff4d570b3531c493c14c46eb687ed9e4de19200de1681987f75ae
SHA512 5fc4b6db68c03630673789ec5f5d017709e5a9011f25575c0e428f4a21c30e1f6664faa9e4ed456ae79c7ea0fc45db30b8d45ad9b4e2e94f49b27c50237872c3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8fbe2ad68bce1f4933b291c365e04e75

MD5 d6a9f27b18ba6c1cd064cfee32420a8a
SHA1 3eb4fe70132f76c96bf7f951070f437ba176fc40
SHA256 612baaa3a5eeebe00562f3ecd4490073f3313811613ead2948c1626128191506
SHA512 1126e9b53315742eedcb4e28bec6330c03cbeff2d311c9bca1e8280720ded31b6ad7f4f4b6899aaf23656ec46b19fc2ea6566226c1fbb1ded1c3790832d9fc1a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXAAB741F08B5D469EA2513964BD4560F9

MD5 5bff0b6da657e8e4ed652a4a5faf57f6
SHA1 ad49b5a7c4734d26061b0eea4496fc41949bc5b2
SHA256 c80ae50ae40768b21e62b593515865bd729b4c0712a006cbaf374a66f14f956f
SHA512 146a0ca1c20471f2921f1c911692223b77c4f528f2de47da9df54c1620242230998b86be05b436a725e64665a008cfc21715e114fb0fd1b9e0786288ad20ff24

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a1d7a8fb35b007494a82bd5304ba1e9

MD5 2414d644ab2dc0d3c58d8546b4cd7ea0
SHA1 77a854549c69f719657f5d404ae9391c705d88f6
SHA256 28be75fd24c5225fe212cbece08722d92c4d2816e5c3a0051294826a5fe79458
SHA512 02bc18971dd372438e6f93b0db0e29a2b647b7e1acc5e8d8321f73857b746c5523e7c720ddadb96363664fd5652c30d5e396f7128813dfc0c30fe7ea4086a229

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d8b0fd3715ff57ba968ae5740d39a12

MD5 a3366bed53be5f4fed574fc819a07072
SHA1 a79b59561cf06c8a209fb701567a67376d83924d
SHA256 ec5c1697be4eba9851b9a413c13e1a94f9846f6dba1d8d0fa33e1ca7292e8030
SHA512 f8424133bac79bbf7547bf7076cbaf0bd0767f220778275c36878bb982bb69bfe64aede42d67c9db009047e66bcf5eb9604205f6b0aa9a801f6827e2034399fa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b80d47fd48f8d137ca2aca87e1d00059

MD5 7dae317d3e65c483f462a48cee3002cd
SHA1 330c91065d277740b721b723ffae4e5511e8da2c
SHA256 ad244e68f3ae289677897bd171703b8ab65bb03b17621b3c8f61594b906f8b78
SHA512 966a981204a7979932981d8870704fbe3d4afc2a0306cf149117eeb30a54debf852c8ef04fda90fb2d1d1261daec60db390a4c9b9fa77740d14171335384ecc9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0fce80600a43748c6cbc0ac23f6cfa2

MD5 3bf49259291542dfee0f89d587c177f1
SHA1 22328c74fce75f7918f6c4b3ca5ad9e1921db437
SHA256 971101824fc41a26f9b1386d72750a69298f4725f266edb3c93b21f9600d2916
SHA512 20366e5775f42da8e313d67ace54bed3b2a010a84d9b3422276a8b544186345683c00663ce4f541c9890f906344ca3400015bef988d4ffa7dd4bf1c38161e271

C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e8a63e8fa08c8135be1c5384c3e0a2

MD5 1221a85cb03fd45c001ef47af9935e7e
SHA1 f209b998e8972ecf158f58270244b831d107ace1
SHA256 e7c79bc6240600fc94d67a9c0e9c1f563a3f30698d7cae3d19b1735865835d4e
SHA512 2e6846a2ea3bcf0892703f3f2024a0acdf277251c55ad9c65e61fb5a8780c67ec707d42818b3d98103504dda9984c109ec0f8e393fc063f734bbc7bce168ad90

C:\Users\Admin\AppData\Local\Temp\Roblox\http\175af5595dfe9780b5b7b10ecb943336

MD5 0c9078c249c45630688d2af7e0574c25
SHA1 8fae18c0c69cf3a58abddcc9a55fba6d81aca2b2
SHA256 b0e7f0945d5de86014379ede1d9a9528a8c944534ab33e58c7b3be1b5706500e
SHA512 24e0cfdac58bc3714541bd39f6992bf0a4bd4c47e492edc40b72d045b4f06573d582d9f4e50e0c23f964ec678d857752caeec6a65ef89b70e2ecbefe749b21f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcbcf8ab7914469e06c8fa6ee80f2201

MD5 958ad6c1423022b1905d452d8772d16b
SHA1 a1c5aef3f0d7550f8a9ac31ac1e295696477c02f
SHA256 8965deb3f4a35faba9f087defdbc2fb071e006f283ee7e6b1ce250c6ec12a49f
SHA512 5185a342c83ca7770ecb1103d95d061cc17c80526f755ebfac53305947b09765515221ba65b43a98eff3860e47bfc7a15f51e67d0636de7596a6859ff20804e5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1daaef2a5ce0ea927443fd099437bb55

MD5 e4a239995837749223ed2039a40a3a21
SHA1 b1cc97f9ffc3a367dd3a55a1a3342d59cb610403
SHA256 36ef28d0243f78f746ddc7abb74563980829c81dcfb91abcdaf6459bc7d374af
SHA512 ad81fe4cbaed589da0a3b97c20e7e5fc0deabf5910b1c41dc7d6e6e8b8f22486f71c9577886689739bdb87e34b330ce43cb60fb2e3c1305d77984ec78cc0879b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5b794cd8b1447c984ba301aa73a6625d

MD5 2740a9a1a4020c08f3ae9fce5509416d
SHA1 371eb56fa91013a45a38486d5d77ccc12ad03990
SHA256 239bce8cdaa04b7e91497dc8fad14e5af36ebf244712d7a04e37c2be5a0e0a38
SHA512 fbbad878010bb317d5ddc6de48c87d838db393fc52c564555883d07e62b77cd37a3584414566977fbaef792ce0d2a00cf851ce871e880d1cda34357d2fd4682a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706

MD5 a0c28b8252eda35f15ff0931e1817ac9
SHA1 3fa429b9d0b8926907abc63b81a301bad2442eef
SHA256 ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d
SHA512 e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac

MD5 d97f6e22eba42d95c89cfd439f36c1d4
SHA1 3a439aff0b80708f6510643f70997b897500d2bd
SHA256 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e
SHA512 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2

MD5 59e7e73fef4a9df2680ff8fe1722014f
SHA1 2b9d42140ad6207b1e3f5cf8d66b345109cb1098
SHA256 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57
SHA512 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc27c501541df155b6fb12496e5bac70

MD5 f635924f866829484247044f991b14ec
SHA1 39c6f43e94e4b0d0ce9c30da5b78aab7fa5086f5
SHA256 30b18b2546442b630f0fb8c6a7c26419a9a73988e8e1a118dae5b7241e98074b
SHA512 ca145397fe454c2623651c9ccaf86fd15212fe83d758fab2f8de35e4ea00f8eb8f58aeecb2fc95a4ceda07c9bfa960ccc29b1a56c2bb317c94297c24a366be68

C:\Users\Admin\AppData\Local\Temp\Roblox\http\706b550a2be783fb6e220ca8181485e5

MD5 be4a508de308b15bf9c711a769ed61a9
SHA1 2b980f20a1466d2f1508bfaf8dc2a2558450c1d9
SHA256 0ac514138710cda19cc114cafa8a3fce046654dda1cce0915f525c6f5ed0b812
SHA512 dc71cf06e2466f17b843b96fdbec856b3b67df95105895597e73fad455340d4237f1b7cf91ac2906efb9efeac89515deb79a045859a0651420edecabfef8cf8c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7948b73360f27446739cb67376a2d7bf

MD5 6c261f23c63795849eba5b1ef6f17cf3
SHA1 464f91ce49db8b5546722bd62c4f59aae33dfc20
SHA256 e4274c467ca592398736e990eaa97a937f209768239400cd90ea59f9e58a27fa
SHA512 ab6f671b1939df79ee60a873148a1763c06fa880e2f17a23c9e09c5401120873167905e49be3abaf546b9fee33096b76a5573a473b72de3806c38a128ab91ab9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd

MD5 74efd118f986358ad4cde9a57e61dc32
SHA1 0cfe0335bb35298456edc9ed791e019b70266c31
SHA256 b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5
SHA512 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733

C:\Users\Admin\AppData\Local\Temp\Roblox\http\32c38bb4f4a560d621ab93aeb6ca5d7a

MD5 f7b60787135cc235066319d2412e77e0
SHA1 ff9e626cfeeb124bc95d830d20e13b15c6427c77
SHA256 e815d7145b898343e81a796bee29e8a71a678c9c3475a7b1107cdbefeefb6152
SHA512 bb21ace97ed300299a276844630c2b30aa0aab87a3a8684391bbe37a0ce7761c82011035f741cc1f596136043f1871d16b0238249d3b943b2c08fdaab8c0d762

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b23ee8121dad68c91dce9a4ec7e6ad0a
SHA1 6d36a119ae48a11429941dd64a3d4b6c5cbc08b7
SHA256 c53958e7904cf9819c7b84b2ecb4b6e8f493f66a3e39558c34affd59df6d60f2
SHA512 54c2498fe90fef919745163598436529f87c0a732f40c2f14686c66d972d641f285fa1629e9ad060e25a556a51bca2d721c8f0834696a0247543e54331a5dc23

C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783

MD5 22b25a819c414b6c626e5306888142d6
SHA1 e7d68968d0848af0e5203409227a1980dfeb4a0f
SHA256 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea
SHA512 bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a

MD5 81927a5a1612202db2ce511c62ced773
SHA1 4414e92b078a515ca699a82cc3bc64a1e264e4bb
SHA256 a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e
SHA512 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77b3cd784a40d8349719b23b5c0e414b

MD5 05c43f778ddcf81fb06a2fdfb4f7624b
SHA1 616dade772feb66bb1b8dee218c7a5a39d43de06
SHA256 f4a00d60cb52477dfdb2eb264470e5daffd44139c118b73c80e8fdef16f9dd45
SHA512 a2443c678bc019dcc50fd7a49d5c19dfa0c45a7c43fffa24ca225f0f24b6839865288b2fe843bb233752fe59c712c54bff8d9b5c4e8ef5ff4ad8ef20b053feed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\09f04b99b82b262e105a232e97395311

MD5 e3a0c050904f457b02b36bfebb1c0b6e
SHA1 a611605082957d8eb5dcb83939e1b6bd3d870bf7
SHA256 02c51e5a41d473f8e0befe8e5fb49073f0dec0ca88ee83e0e6a3c0ba3e18d399
SHA512 f2b6b3a7c193a951feaa1d5abeaf52316773d7895284e806f7267708672f6a7baf37191a244d2c044c785fe967d416353ab83517b28932b9e521172b89e22275

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcece68795e396ad03d6e2608d740126

MD5 0ba72ed050100e6779ea0f1c713ac441
SHA1 ff585cbb4b671bd3a04f3bdb2512a896ff07883b
SHA256 0949d1f525ea9da560f02a0447eb12a33ac6db673e89754b8f3d230e24ccfd06
SHA512 22c09e80f4af164d94ef40999572d2ce35bfb1dfacbd1762b380c9685889d515ed9aa064db4f8ab6746c8a26ea4ecffef9337014293905abb2f0cece7344b851

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c36700f9b5f405f69b210d702f6087c

MD5 94b44243d9e420ff19ff04f4e434b83f
SHA1 04687ed0f779c6873da97da0f16f042b2b459b69
SHA256 f76c45b8c4831588b971b25431b7b85f529a7214f99103ed82b4c2e97d9919e8
SHA512 b7778206ef730254f469214ace61b13f7031d0c4c751b2988decee93dd5a6c8336c40974af74b0aca6d42874d54e23dfcdfc743f5d633610aab2f05e948bea6e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b39eb4053e10b7ff21430e80432eed8

MD5 be1dacdbf4fea39b16e7c11e286b7205
SHA1 28ae9237170d6fa225c54e7a36e35549d191d450
SHA256 3a6d14f833f7da8ddf3139d42e41b2b83d1ea0d4570db39d9c10dd98e33da800
SHA512 72cef9e399c0652a340cb12dd239cc0dfa14a2c832fa63f76dc442308ee9f91b41ddff62fb70331895716b61fdccd332f75c0ba2003f818900e3e6f260303176

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d132016b6bd0b89da2690c24749f6ff7

MD5 2e2350147bec3587e3bc14b7a1e32c2a
SHA1 c275f45e728f71d24ac6d8b496865c218f972b41
SHA256 7ddec5794d779b1ad88ffec41f00c793f21046d18c930328d662a3c2d1c27d84
SHA512 670d3893ab1503dea9437b61b2b1488238d84d3703f94b74b5c20bb7bd26eaa0479e6d3d91319219bae1c1c357c6807101c5960ee2f29ff48475c0e6d9ac3adc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\848d350916ab0af9758cff8167a2aea2

MD5 0042d3425d57e55a4e8c899aa911012b
SHA1 f260334951b11b4ace9af45974e365ecbc6cb9cf
SHA256 f312918dae9b5ebf3028f14575ac8bdb78e7f152061fc59d0885ab7acb3e9581
SHA512 cbab405431b5a95ae3c9d3816b4a1c4d4a07cdc4dfcf64d0977ec80533a6029329db101ac36361114288fa18c769c85a3f238b13f63d2e1e83ef4ef64ae45521

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0af1ae578b1c58a0e785712d31028c1e

MD5 4ffc139d6996c3eba2d40053423d07fa
SHA1 6da7d02805c626596d055c20cf084aafed9b9768
SHA256 0445b87f48bfd12bf0dae91d8dd7c20ee924212b4cc8be782c0a54193546f43c
SHA512 5af3417cdb0d099add05b22090b5aea9ba39069c4704d000aa323b859e47ea67328f616ab03b7b878ef8cce0d528ac0ff5c0f8fe305175b952e840368e0d4a81

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526d6628fea4b1243fbb953bdf85ac9

MD5 3964c0c8b23c560175f4b299e1a9605e
SHA1 6c155c8a5ece5d5d7340ee4ff0fcb730e4d2b0fe
SHA256 20dc4a3272ebc6ff5edf0494d9e6e2d06c690bb079a36bd04e074818f16a2dbf
SHA512 c6f53903aa3a14f3187bcec1afba4b5b07c10ebef6dd10a710f400996f2214703d29d58abff6e7e0025ea91a78ed2f799f69c542bea006dace570464acf90d64

C:\Users\Admin\AppData\Local\Temp\Roblox\http\571e70bdfa73e0cdaa28fdbd2ca19ddd

MD5 bd289aae66f24d373fe9d4388f8ba9b2
SHA1 4d248d4f9aeffef2fdd953bffbacf81ff3ac8554
SHA256 78561a946c48755de0fce9695d30ab82d9e5dfce2eeb0ef6a0824282bc88a0d0
SHA512 50666175b0955dbdf933302016675f035df38deeef6b4a0e8d0cf40b6e3d2c3e4a089a5b78d75015e0048b2e7f91d81b69857004d55436437d3fa0754d1ef8a0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be241f3cbd5449b0c30c651c4834e3da

MD5 2866f1aa81a7f9c354d34be6a58aa88e
SHA1 c470d8ad431f9876d7966796a503c15440a35345
SHA256 38baca61b0de1abef8c3a97557b6e246fbf9091d1193e3732f6011508e5f0a27
SHA512 1af43841070856ee4c509080c286285ef4850d9dd8507381a5045ed748ffdd09fc32843c0d18aaac70621a8ec88064f0a3b74036cbdfe91be207594f55b24ef3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\73b0a5d180fa4202c3e9365c3d577fd4

MD5 2c2e29b04e1f7144017730d5b5ed8b87
SHA1 8a36310825cfb7d8ea6fd487afa46dde29147199
SHA256 6026fca2672513a7a42dc67687850d630434b2260621f77ef5b2634486048d5a
SHA512 bbd5097d544d3bea8b5e97f3262a4f7765b13d5c742c9df8fd07e6a56e7c021a41de575dc1c24749631eb1003db0b9548c634eba7d6d2701fe4035f0a5880615

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e385854d0ae9ba50e28a7a5629fa28be

MD5 0c889bbbf77ec231120674d4843ee0b4
SHA1 fd29658b2fa416059cb30a6729030b6a6b125e92
SHA256 5006fa1587ba1da5b7696daea22929c490049bc0f10661d9c79322b0a647efc6
SHA512 504d43f9104b8c56ba12ae9533ad3554858ebfb4f5b4b8b1692ba339deed831a66f5441a1e4706015cc59f4de4729c0128fe7da2c8c3d095b2993e92eec378f6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be58ec8ab04ff195247b1536cdfb3d44

MD5 d1d2f476fd075d55fa0e77b3c507cb0d
SHA1 5976cdae821737161f6debcba500a2842f988f8c
SHA256 650bcfb9e1c7855d2b72865695c2f4d4212ccedb53584f089c26e2087cc65d41
SHA512 958c07812ae7e89143874ce4effb112eed3bec3436fc0b71ee70de38298130d08d89f6bce42d2b0696839f67be260791d121e81f46a4935f3985e241aec7b0df

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e665da7061b12f952145852fc21ef7ec

MD5 4cfd979bf14b07dfed01ef9a3b1279a7
SHA1 2e7aad8b8909d3117bb151bf4d34b608e3ab9c56
SHA256 589b00b0a2fbada62af8b7daa8755ce68420a009bf6ce7a53e0865fcf262f94f
SHA512 79a25e0af653d6ecb5fd1908c3652c6fc8ad3d0cf1e00510801bb369728dcbe3c5e1e66f73d058c511320badca3c8ea82f2baaa5e0682f304235b68f622685cf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d5ee01099db60480061c57d9831c261

MD5 839f812fb19680ae8e62c2ebe0355e4d
SHA1 a256751297a9f82a082bc4d5ef08d5d9d89a2c17
SHA256 b414e1186136cb1f46c6cdc69dc5b637ac5de6a390d67cf25907907c61b364a4
SHA512 f2209d8bbb8f7ce1e6b675cdd2da3a10bb450d50b4f73a596fc0639f201999f32d3c1a2418e0b92c918c0a667a5750ef122e4331361e0022b66a2fc5e489e5ed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\90d821a0b7efe2541659a0ff6b31b88b

MD5 6f0ea4b31f2f55764db79b43833bf83d
SHA1 2522c29622377d611419babb3eba2e8cb13fe0e6
SHA256 08f380d19a3cf8307b098cdb5e9992ed1d29e5d15226340758a1af3cb4300c64
SHA512 6a5437574ce2db6feac98928a22c7002ce526501335ac00444190febe302dcab5f18ba33a5ae00bcd83f469b5f1cd356474c8cfd31d9992d186fdd0846db5641

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9cfb35c8f272d46d504f99d9c00054a

MD5 5a67e8e85c0ad7280e9f1ca86f138b77
SHA1 b9fc6b3311df7710e1251114946b93a72dd5d5d0
SHA256 09e7111ea12f1236be9b1da699f8c93eb68127d0a98f2ceebfc5c2d7b25f0ed2
SHA512 ac5e400ce21e5e2503a11642cf401ab5ad4e625a01ac87f1711a02a415fc924556d0d3e50386d17e29ec20bb99b5d3a2d0496dc2ac1fc1381b29774b826cd9ad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\697aeac1e8e025f05cf4b76086fb70df

MD5 749deb1ff197b5082e2b07aa55a33d31
SHA1 08b4d7441ffa13b8dc3610d74a56d8eb11d8acb0
SHA256 e593f31edc529b51f9b253994d8aa93d8ab0bc8faf433e737b0a09e80cf2784a
SHA512 eff256220d72675ba4b23344191b963f7acdce9743af8be81020e2a74662d2f3f1b2735e686806b73198463c550b2d18921840271d515dca0b2d4ce226954d0d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf8e7398be5b1007fef514afffffa6c

MD5 864c04942289c1dee2c1aa18ea77f1c0
SHA1 1be7f1b6c2f1472adb9b34fb6f7a51d3d1ba161d
SHA256 9855931b8e0500c6753d77200447963d1981fa7f7b4fb34067bfedbdec0db442
SHA512 6f3934ea3ca2317756e45bcf065abae6cf34ab7c24e1847023ecee8e404294420f5cc978af2afcea986bf160eda88c020fa1b799f5ad75a5e3991e7268192dbe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d27efcc314894472628caf798daafe01

MD5 bdec8723e953241ac3edc46458a6ed7e
SHA1 783605b1587b096807a81e32c488be272e0ad581
SHA256 c31b000a001faa6e08026a24043899ee4941371ce464146a9c78befc2a796e4d
SHA512 221cf258c9c88c857e34fda1da4290c67c3a34459f86b828ab968f5e57b2be53eb4f7aaced83151576fb843a7f1166c267de0efb116740ab2ac2b37ca0cd4d93

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d4f8d4ffe8696350702fd146346140ac

MD5 084a09f4a178b2533a56610f28f252d4
SHA1 70c343a804ea4674a214d5ca8e24bce33cf662f5
SHA256 91b1a39172d8f6f0c98a2a3aaf8c137b29dcc4ed4c1bb4a3bd449dc16fb45e97
SHA512 fd8205ea2edc70743247666bf8ff414ef6038f6ec03bfc7590dc037024ca66eface1f3cc559511919058754a5dfc2224ca04368ed31df8aa942a7d9022b93e5f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6443205f8638cd85aaa1caed016b8ac4

MD5 20db412bf509b564fa765bbc0b917fbd
SHA1 938513617f173454649543b7c014ecc762ba5b5a
SHA256 8b7281d0d0576ed2b73ab842080238d7e006e1524ed48f423f61a86cecf3ad40
SHA512 f6c54fb0478c2df40776125a920621a1789d02239a78cdd3de8eb83a27a00464b2aaf8714776897a4b3ae5488da664befa604ec836fe12010a046d48eaa519a1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5105c207d9317b50c40470887ccfd3aa

MD5 481555658adb9b672941de82171b343c
SHA1 7937e7bac46ac99e1897c00285fd23059828dc12
SHA256 5069797f8a4b926fcc5bcdb668c1f67ece5d5e8f05d6f19a260c55c9a67f289b
SHA512 aa9aae6ac82a3e320ce9c1b83883263d547a82369d8f31d3db0ce6d6bc5cd07ef96157ebf234d6e31b40b32e276c233f7c2c0856394a70d183bd64e03720737d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa3db4232d83f97f5e078c526e25a6e2

MD5 3e1ba08877dd32fe4178a730b0ea5e19
SHA1 c020afb22c7cde0c77a9d1d6be18ac8f1e62973a
SHA256 1a6447007e90d27fc71fa7bedef2219bda30eebc33447c2929e4488315e19641
SHA512 bad57ec1a48f686fbc5842a291c95f01db413600828b198b55615857bb1e50e4b3b6031d5896c8d7b9d6753c290c0253ddb83482f89c7fc348b8b80194a07286

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8aad44a486e1e94cb992a6a0e230f735

MD5 451b527070f0cfb1431ff5052642059b
SHA1 6021d49e6b87b9ae8fa64c3cfd0180d625c7d761
SHA256 b9391062d160f5bd861cf7e5ecda919954e84a87eeb3b000bf9b93c068057c9c
SHA512 3ec22e77061670685a576d96cc3897473d11c45c24e581688da54d8700b186d3583ffc23cc2c3395fd93af36afc45083058a2bad9cffb1362be8bf4edb20cef5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9d72083ee0b41e11170f5a9845c3060

MD5 92e9669fc7c748554c057eccb11a97e0
SHA1 d3fd8c1e136a2ebed238d95bfbfbf3ce61a385b7
SHA256 b29195912662d71be85e0db741dec5ef005d744d3aa0913dad8ad1e51c3aeff2
SHA512 cdc3a1b4c596fd3c9621e53887a9d503205a0d5f8663e1ee3366129ddbfa83f2b15bedef155eda2949f24d1df615ead664114310e3d3dd03f9fb2d95df2e29b2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\74f7241d43fd3efbef367cddf2de0712

MD5 1e996f012273818bd88129d26108d8f9
SHA1 c193db2eca6d190e929375e617f45790cae442bb
SHA256 c7c8ee23804c70ae96b1399c2f6730543f10f7678f5e3ee36fcbce97245aa8c8
SHA512 40ea7f36824cb96dace8ff41b1e92a03e0f7e61cac33a3a81c81cba12714812504554eaa0f4344d30061ce1d89f231ab21cab164a008e1f68d18ccfcf5525173

C:\Users\Admin\AppData\Local\Temp\Roblox\http\afa231f024ffddec5f9d2963d20c450b

MD5 64c05df26d12845b64880218a48e1b3f
SHA1 6ae26e09d6c23ea9ba5ad92d3d40790948b36141
SHA256 e41beb094c8bcc0d8825e031ec9ca5b13e45b94f3c93601c31c10955cfdd8da8
SHA512 d6925cf4d6eeb5275a7c008723410edfe1dd24b9097656e8573f749864f8fc7c61dac61b05230de13a7b9b7b866528c04adca85ad83e8e2831c43b46a70d4c27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77fad0fb4662c6b81630ee443153aceb

MD5 183fe999017d5e5654364c0d8fd895b8
SHA1 64cbdd4bfac3c60803acfb2871a9fc8da27d318c
SHA256 3622ef17da158e25761124720a642153fb6eee615b54da286e731ca2920216ed
SHA512 d5026e42d343185e14360a292c6d13131dbdf081ba44960598e12652d99d999b4f5c70c5c02335596d18302b1cf64128a8bd06273237a48e2cc4eb0267d12307

C:\Users\Admin\AppData\Local\Temp\Roblox\http\251c7269a8dc64cf406e8c2d5f5cc688

MD5 7e7342c1c2e3602906a1fd64acde7735
SHA1 357de58a6c39a0fe4d7e4c13c16d8c1d25f9e649
SHA256 24a5a23ded1de17bc3170afbe5eb7debbb47f0ed7b2a4b5303bc899e927a99e9
SHA512 c6313b65687a5ce03772ff6f1edf761aa91f07a29f8b61db7edebf1beb5c548fbc53aba721ede32d4c4bbdd31361dc724c676d41c06278904291579d25d93202

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2da892c80dea8811c616fe5e0e6c010e

MD5 0dbe0b49a06c4093d004ec7d44303fd5
SHA1 2bac861a6075854f8dc8db470558936c36201aee
SHA256 b136004ec10d66b813386e21fc6c5f86d37071e01e8a82437676902eb3e63e8a
SHA512 1d306115aa97102b5d68552b591f5faeade373ff3a718d9f39dbeade32892e47fd921cd78e5dd71e91072476e5ad933ff9659ee5ea1d07133b55745f00c22828

C:\Users\Admin\AppData\Local\Temp\Roblox\http\993f844b48dbb84a0eece0b1d1aad326

MD5 c05764b76e6db0114c1d6200b56a3588
SHA1 5f96252b5a83e5c0810e4ba604dfc433ee449639
SHA256 427939d6cefb89facb6e71e082e42ed184f0883db715e0bd8ca832a316150430
SHA512 4c6c06afb99e99d6a7466ba40146b7fd02f83de16e5c89acbe64179860547f42dad0562b2a281706cfc6acdc5558e8fba5647874ff15d2778f3f6d8c1cd983a7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\83eeeca932186715a9107df83747a179

MD5 e7ee77fadd485e9a35a1bfb4be99691c
SHA1 bf1aacc9fe769fd1dd111a1009473db1dcac7399
SHA256 d98e995f0160e551443de0eba015bf29192aea408469c2fc2d9c93a5c1c82cd9
SHA512 3ae849a12cabc409e435da98308db2ec0b86f8fa8624a23632ab0ea836a0aed001853eef600bb99f67f8f907dbb641c9c6bc37bbf959dd12c1bf2ad9c8147460

C:\Users\Admin\AppData\Local\Temp\Roblox\http\28c39719e7218d9c2d686d4daccb1b72

MD5 25a0b3d9ce5e6e1cc4cc7f4cdb328273
SHA1 4d2dddbe9502a5373e6ea99771bb1de6e828b95e
SHA256 013275e837c61c631932167d47d5d9b838ba8b9863915d39f06d8ba4914df147
SHA512 20df5153edab7085594382f80b5d7c6afa5f2a84741efb46961e36331c94369a7c7302c9799676e18aab171cf398dae8f314395c22238de6f8450726c4c992c7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\584bbf8c27b2f156742be22b280cc8d6

MD5 7c0764a501b7f8f1eab14fa7f9337a4f
SHA1 2e17a9b6d5bd740c4dc91af9311e4a6e77bd55ce
SHA256 dc0524c0d7f9f637466570c86adad7021f9316e42e69745bf8d27081a98f09d2
SHA512 dba17c07bc4310c556ef62f157dfd3a0ea1a617ffbbc4324f9a046bf47be9a2bd500921bf02bb79d9ac2df1aeca3745ee1cbd7f33bbdb80fe67e1adaa0bd82bc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c677a51b0924e108a9b1485dbdf883da

MD5 e1e4307ebd3e7f8280c75be0ccd3b5bd
SHA1 3f2a56ac3ee57082ebcf4a1ca21001821286e77e
SHA256 10dcbda8315ffe2e7215b8d61dbd26b0553b438fe94b1bdf005758b1b96d9f94
SHA512 7f3ef600e2ecca826fc163d9092bfc10fcca9a9e6206ef29fe5d61902e3e9625bb2bcc07a58ab480ad19354bd0a1c56dd9f13c4e62aed22d87da146252144ef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b39250833fce2d9f0655b124db089d4e

MD5 639a9c5f588be3e48a6bf5601215f027
SHA1 1ab7c1d3d5df21a05324853fb235b848945c351f
SHA256 4fd48841bac69eaaeaa9c936347395f5eab6fd4f5549d65cf6fc541884a4b2d7
SHA512 c3aced88385dbd9b10841f72c422b17cabeca80ad11af01222f8901b950be3b42467851d5ef61fa3a1d92f7977724926f765b8bc594655e93e116d04223497dc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4130cf898fa8b448f1568bfb61305e94

MD5 86df60a0980b57864a2e2d68f857e0d8
SHA1 60c24af81c8406f05ee1721b374ab8a466d878a2
SHA256 ccdedffa29231d609157ccf22019e03a721e9ca248eabf12be511b76f795c247
SHA512 c025bcd3d21ec036712ad8e40afa7da973db770bf5b9b019c73ca8b99202c8e37999e6daaeab3f1c2190f84434a5e4657a8593e8a59066e0feaf38fcd8bc41e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ecc495a0b2b0470e25d688a9077fd977

MD5 741a45f09ceaf9cba7f0ee5b8aac236a
SHA1 aa6b59bba687981191db42af8a8b17dc0fc9150a
SHA256 92ee9b175404bf4aa4e346ebe4948ae5c0ee7edf5693778a5e6a4a1bed508eac
SHA512 97cb36fc2281753eb7a42f762c8ad5cdef7c14665214a71f33518f88cff24ec5e91267f834a6ea5ab0206457c7e9c730dcfb4f7a2ec527e3ce48877e2f34be6d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\477a618fe08d138e560e0c8eab9f3583

MD5 4f9c826223fb8d7fb603bac0b294a706
SHA1 44a185bf8edbfee521dc92ae012e6ed18cfae3a0
SHA256 e12f126277c8b35c48dc15cb2f37850ff5ab0816e5982eaeceb571c99bd17502
SHA512 ecf987dc0d416a7fb1779289a0bd9ba55625abff41491ec3731fd77950e91d5b454b17573be388766b20fc630ee3f125d37feda44e068d2ed0cd2a87be021fda

C:\Users\Admin\AppData\Local\Temp\Roblox\http\388a60aa5e51ff44455d359825078031

MD5 eb62ee1626b44f54b2c444a487ef84fa
SHA1 d3d918dae048e4ee9c9626608693d69c4c4ae55c
SHA256 bf2f079ca21684f382d094af52836d83862c93800e8e054c2f6bc0838c442d86
SHA512 68022f2ac538c51acc24065480cd23670efff68d56a4b5dec2c28316726ab82c81b48fbfe76c44f32dc32b0af75fe3e203aeb40610f34e2e5d75bc684f712381

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5ba3b6fc7c95f933bacb9db38c93e80

MD5 0de2eda8831ddddda130102597e758bc
SHA1 0fa49f0691a4ae61e422a22b07fd4e5def0ae5b2
SHA256 2d60885d3492996ffe223ec6dfddb240eba00a9e03ac0506d3489edc4822e1ee
SHA512 f466e1ea3867fae7618b76a2895cccabb0f646f54bf8c4cb6cf6a5c2eaf4b8e31eb4f8b42971ee53c929241d9f40af6a684647cc09395cfd709774503f274b75

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc86756c9d8f409a887054cf26a854b3

MD5 70461ebd3bf0f7a0beafcba1d52417ab
SHA1 53dd7894e76f0fe7c02f378d7c67107ed4a03d45
SHA256 e3ef21dd9efd05fd1260691d6dd47f76155bd0b5ef1ccb62ef1e588dca161fd7
SHA512 ccc18b368873c76fb25c97009bfd17e4456d488b16da511e61fe1dee031cce48bb25d507d7fb1237345bdc2191085bd384ce45ca98a5864d10b65b28650e553e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\252921e7f19d826cf6778747e86132fd

MD5 e06fafb3ee051c215c7118dcb4a75354
SHA1 c72b3e0f2bb1139344053256bcc3ac48f590174c
SHA256 ea771a4652058a4110a95a6fa24c847e7a50cdfdd711f57e02f9c7caedda7908
SHA512 83008fcb8a91bb42f76568773c98e5dcf6658b0d7972d595eb7059b5a598faf80fcc8492351e9e98a6d3a9ddfc17fca742f07ffe4af644d99c087062ed7b14b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6d1b0fd2905f7655bf0108dd4e655991

MD5 efe7165d72ce56eef26da49dbefa586c
SHA1 b2441c50e501f7121277d205876ec6a5811c4e67
SHA256 4e12e3ed0da10924a1dbc49e464b0b07c017970c839f1c1cb4ecf5a8019d3ae5
SHA512 195b3d7954627b571226a4d5293b19dd0b7b565d4b295b494361ed81f3d9e1c193533dd0e53b2ededa326278294694286669095147d769c5de343aa611ab0238

C:\Users\Admin\AppData\Local\Temp\Roblox\http\23f316746f014ce443f0b0adb0d9d90d

MD5 4843f2fc4404a016a8a7b7f5c352f877
SHA1 1446153b0498dd65dbb53b417d5ce5db49f0dec5
SHA256 46ec4647b950351b091ab0bb34d1964bf24b0eb58760175def7a4a1d7a4e09b2
SHA512 8d5198bd48be46a6aec5cb5d9eb6e75828f88742f12102a1f5091f9c8b51167fd6db13981fb875b032795b9407fa64cf3aa54224a64008262084dbfd3d98dc27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e4317e6c6a87bdf6f00c6c80866345fc

MD5 fa00f598036aff7c2e4728ff840efdd6
SHA1 7873ee7205e2817fc8fdcb3afdc275aab494ea91
SHA256 18fecafdfbf34c5b261f4acbd607c439e35177802c8002a0d88221258108abb8
SHA512 f72faa02c263ed200f7a296ed86ef5da614911c1cd212aedd12923ba551aabc44b33cbced8dac80aae67dc09988d53ee191755afe3d51383ce885750bb00a944

C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c582bbf5493f077bd8f59567067f24

MD5 ed3f4356a5aa9295ec58f77ab387582f
SHA1 99f94109e03097ddf835c06292ecb6142c93fdea
SHA256 60e6db5121cddd5bc13b1019c85b5d962599e2548c347ee3c7d944cb20ff01b7
SHA512 cc7869759564fe9d5e1580be978727c4b0da340c052db74f677bf7cc24d93da0b837d01ae0199c6404e02b49d08fe47a2fec7165cfad841f1b6fbb1d7e8d7fc4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\16f7441682caf62a1789b9d3e75ec170

MD5 cb94125a0b01b9335f3c3c9a9c6cd60f
SHA1 85ae6cca4c661270b389c00299bf7f5d81fc3943
SHA256 afd92a2c0ea64515200f7dd1c6237f18b6d1bd2065296939697d34a3d4e1b0d4
SHA512 649155baa2d26fc6afd0496d11f37d9dcb588726806eec89be58faa54fcf3b90d1becf114c4e2f3964c98e93399b87bf5bb87709a7bd9a3540c7ddb56e2da555

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd52b35df5f543d23b7f35ae9e845be

MD5 2de5aeee01688c41f23b2ddc07c0b442
SHA1 68bd21cd4284ff390c1f4f5f4b61c9ff3b8f2268
SHA256 3ceb6af768ce708d114195ea3521c71370ee69172d4d0cdaeb1efff406571d73
SHA512 ce845ebebe20efbfb1a0565e69cea69e3a4f3e71289ec68379565052a2e8a3e5ac873b52e74ea26f2afae7ff64c789c348b4b9d4426ac0c0d6547d9f12290090

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c288ffb1fe759d2618c218fa0d2bee8

MD5 c914fc7a80c8ebee4ddd7216cb8e63e3
SHA1 2e4bbbe23167be5f26e5f3e9f1e1b2409b38e7ef
SHA256 c718cff1df66ac36549451bc6de0535c3f2f9e74b4fcdcea38af9eeecc42a674
SHA512 7564812cd051e0970b3d06aa1bb839c8fae5d1e95e23615eea42d2f12b6284d06f2936cedd947e9d4d33c4656fec00494121d58cd38ddaf1ce2ad8be8685d0fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc70073e6562a1a0cb99b092be4629f8

MD5 acc9db15cdf0932e73bfd20b9857b80e
SHA1 cb6455b641cdaa693de88e9b0d1f422744faa35e
SHA256 f0e15f7608b3829d33eb8e057f31f21e931d9d2ab4814891b11ecf47494c141c
SHA512 7ca5152691d595acc0f0398e26f82c4cf491bea98f2c81e7a972af8fe763ef5926a716ea44112c2fa257ba0109b8848f8611f071b88902901bdee1d32a315913

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3ca8206460663e9e944ccfb414623b40

MD5 816be237e27ddb79f9fe0c46efa0119c
SHA1 fe0af06e1155ba784ed6ce8b97849eb3fffb5f9c
SHA256 ec6063b82a1adc4187ee0e01f413d4b5ed10277605f741295658acd3f0ceabcc
SHA512 5ca3c5bca3f5559a500de1262c133a972e776dba7192e6cade152245c0e1118fac41c48a79dd0f15c78ef177294867f041bccd3eece6a388eadcc32da8efaf00

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0407c8d6df198f6864381d3e595ae971

MD5 703dee4351832fd18ef5b85c6e1bf992
SHA1 bdea9dbbdae401cd68814d9815a17bab6f3870c2
SHA256 8fb57fee0d1c996a828a3147fdd9a38e8d1624163dad101e4bc1d44894bc3d68
SHA512 d43b5dc41be38f5fbe30a51c1abcbbc5c606c9d911dd164b5106fe2bcf0310ae8b641299c5491bbd5ba66433d87ebd17dc8a487d88d56d0ee8e81309533ef0b7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\852240b4203e72d7bfa66fcea2e589eb

MD5 547ffe689cd0af21ec616bd935f78b14
SHA1 36e70f429bea53fc2c8dd76eaad82f7bf9f3742c
SHA256 abf9ebe04321f9b8926304bc16041965dd79405783b7d3ea56d5fc802863bd9c
SHA512 3683baf37d3da8ac536ae4d2d852acfb49039b3c9d4ab42d972c23e2df6dbfd178a552ef023f48c43c6887161313d516914d26b7cca0c022e2741875d62e38d2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8ead55fcc97d21deacf012df5c33fdff

MD5 16e22cfdc829405af27279c364ba2f8e
SHA1 0c75b97959d7df1586db85cd1166f99c65603c68
SHA256 aa2f6c8bba8aec6b84f7ef8a7d8c30022097b784236806e63da1f0417124a3d7
SHA512 d1f6695e255f5b7ad498ce177a16591757d5570a4ea45d396f3fa159f5658bddcb7d524c102efdd982fd9ccfa557d984280c27e57484b8f61be512ce994d7964

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1489d1b06ae2d917aae075e6fa9b8f7

MD5 5420558b929446bbd89f3d35e72b5836
SHA1 da46e5c797831b47c4d62fb9321c420c6b0ba50c
SHA256 12d1d581ac394291754c5b042baec0904c2f3b3be6a17e0a8761b32b6e53d507
SHA512 e125c8d668b2c73d583c528f6d35bf8a1c9558c594cb3aee98e25eda051f621a6924626d845f200442da65034dd77aa4a51dd1668c07b26611909f76cf9174b4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\06bf3774b39be975c53ba2193da7f90d

MD5 29abb94b78b9a73db28b7ba825833346
SHA1 fd6da6bc273d4a44067d8c2b625980ab8cc52aca
SHA256 d929c9d2ba98883044b81894da3e921de179d5915e1f92ca9d4df9cc89f1424f
SHA512 d5069ac2996929a5d1622f65ab450bd152130978b049f672b1a9f28cadcf724e317024bd95a11109e0ae488834ab184f5e4b10f6a21ba3329cf056a0b7139613

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f1c2eede7a115f0fd9ddcfae03372516

MD5 08ba91e62331009631f755289dcf7324
SHA1 03786d766cac0b39437b98cb61e65c25d16325bd
SHA256 c50ad1d35d0b3e81ef6780da13361923d7525a39db5c9cbc6c5344a0bf5e1380
SHA512 3fe207322d4249f92893d0eb7a93f455374849ca583dd0fd00c79790ab7bc7f0699fe16de332b767689e0a104fb272992ddc37e002b6962cdb6c66a63618e3d5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b597c88ce139f36dee5c4afd7d80a2c1

MD5 f195c3e8ddb6711a2feaad4aec69b8b0
SHA1 20b1011f280842fe6aaa58117a05f57cc17b6c69
SHA256 9c263d2a5db10ebc2d543bbd0c125bcc5da6c2245ed133fe0abb1b308f343a71
SHA512 52ed2e19a2b991880336b6b1694016f4c8e5a5e92a9dc989ab317f7f743f38dddaeba8fb5764826bfd9aa145028a1b3f9fa34a02f39c1e5162aef7ad282b0632

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f40c00885cbd0588eebf8bd59a345579

MD5 9c0241f7306bbf3cd085509dd7840c99
SHA1 21c2a9c916d0e537c5662db2acb565615ef79962
SHA256 e2afaf1d969e104e2ffc22494e2f7e2ec4a0bda49b9de0dcb3bbaa3da9bc8655
SHA512 afdf2c9a29559645e08604b15f023475e8610f41f650f3527a4c2199fc4bda9c291bb24e2f337e00cfac6a5347fae125d8055f0af6eaca38b92ec408343cb9b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\05e6fbe7faeaf27e476e2247265bd7e2

MD5 774331951556eabf4930f06518bfe5f8
SHA1 79a7b332357aa2b18cf400033bfeeb5db7614627
SHA256 c4239a4d05bd3e427245f920cd4eba313e0af75c819f89553c7b6758da9b4d57
SHA512 bf67dd1c1d57779578524ee404de1648d9a4d8ed7f524fd49643ec49c3165b9321d64bda2216cfb8617c32cb500eacc2966263dc03841af51ee37facb2b1724e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7209cd4fd5e4a48a4cabe7e3498368ec

MD5 643d56f3cc2d206fc1eeafd601a0e287
SHA1 0e55be4bc02d884a40a586b44d5728f9e8fefa6e
SHA256 637c7f57eea4b46821e968a691bc2181ac0ed00252691845fefd947a4c594f66
SHA512 10cb34ff5d98467c3de396ef4993a11c7db2545329ea473eb3ffe387f2663cfda6d21d31299f87aa3f298d2bfdb88d705b9236e9f71c48c22970713c2c3f75e6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6e62dea9b6f892b37a40251f84c9e0e3

MD5 f48177bf38c02c3a2cb322b77d627f23
SHA1 e207f206d2f707e7feddc32c02883bb71015d23d
SHA256 4a8a4eb5baa01e72889b67caa16b69a4c2e8a07aa12f84ade87376f344b2fbd9
SHA512 bb3c4ba048199ddd3cf5d554a90c279d7b868871f1a0eea4ce27c641556fb3e483cf839e3f9a27a092021783a25d604c952fb1ea34528d722db9930fe48e38a8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38b0d496d6e95d4a4e1f049ecb71b4d1

MD5 60dc54bc02627b188fbc37f3c81899b3
SHA1 7065242d6e88ff9ed0e0cb891a9a6f6db2be5334
SHA256 35fd7f2804d4edd74c14cb7bb1534edc993ab7ce9e2d64be997b12ffa8ee5b16
SHA512 2b43c5d1f2ee4621055d94f3e04cbfed24371eea9a7c719f8392a993464e7d05635f59bf230e294c60de5656f421f4661bd5b1b8f286c4c15e79bf9c57d686c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1f571bce12b3689efa5586c78436d68a

MD5 aa1cb968768ba580f7e7d559906a49de
SHA1 1a6a0906ac3c68f859790103094a617e0439d77b
SHA256 b9e49fcb7d0be8aac8bf1d990f2277363077dbd34af7f5109a14bea85b9fd35b
SHA512 a72d7246405dea401b6e97963ea624772f65a7b20eacf2c358fdb73d7e5c2afac79b5cd39cd548ea8c43f14b5f03cc38deee8a495e9c7a1f264c1ca7de4f2411

C:\Users\Admin\AppData\Local\Temp\Roblox\http\92ca8d0a36e9ce06a1c3537675677ffb

MD5 ae7d26697baf4e3c0a4f7e4fd800f89b
SHA1 4f2472e39c964861701d80139cdc33bb967b2c34
SHA256 58c1370bf264ecee15638ab670a0af85f8bc3b974670875c757751fd116f4833
SHA512 e93451a30c74751ebd6996efb038016e28370de37bfbfe2fafd1f3c3817f2e720bc3b7d96e1c0e346f08e3c581d13f77a535c30c07a487f2c4a13b4da9970a0f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6105c4318cc0c25a63a6c9b8db84bc28

MD5 6badf7314b5d440a6ec8dea899d7872e
SHA1 003170f75f86922af2aa5bc4b2c3c41f5f14106d
SHA256 c13071122b4ff111c8ee877e0d8bde8f34ab3569df48fa81f6f4f1b0b0ba855a
SHA512 5fd8098470eb97e06e62f6d8753d3dbef34d8db6b3ff463cdc964e61e765ab844168170a64c837fa5d60c029a79ac0fe7cc661b9bae07acbaa2400120037aa13

C:\Users\Admin\AppData\Local\Temp\Roblox\http\234369d070cc483f7122fd415837b73a

MD5 51d45f80859fca2ea5720897d7f1612a
SHA1 2a7d736969502784b96328f4fd1fc7697a099273
SHA256 5bf07b195c3902c69653ca0294f2bdbf9124df501af426b14d6bcdbb87d70745
SHA512 059455bc829431130377e4c8cee87ed3652b712eb46afa6f666d9e4aff7401b59068da840b91f4914d0752880cb2ed8c64a90e79e37f45b4b90996e44f2932b5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec9a7853aa53bb67f2099830ce97922a

MD5 0ab1d8c6659dc5952cb81416c8d9a85a
SHA1 16d889c645dd70901f87cc86f6db8a632b8518a0
SHA256 1ebc2f03253024917e0b562d101603c2f9e04aa70a05accc5e63eed9976ea0b4
SHA512 657a549264297c42e4783cdfc76baff2dab9b5b9c1f991b3aa8b16f2b8f87ccdb0c1a56edc23713ea7f34ffcc4cfc95b7fbba8d5fa06ea443610f06a00433f36

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7df53404f56c9f1787b277ba9d17049b

MD5 ecaba5cf9469daab7c05847af2da45d7
SHA1 78d9c8d289db9815482249769dea663f4999cac2
SHA256 23946e247fe3bb06503a06be2b8e154d724a8c2e86fa4f441fc09ba1e5781121
SHA512 4204260b2efe3b4c95584394b30ad7957b154229828f0ac90a04e5167c7eb78f254777fad0d4fce9c5675fccc390dfccae2ecbd8d17e0e73bb0a6933605df7d1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b00de5dcbb5ba1d0d58ba82e9c2f97bc

MD5 9a3aa49a6c57739a171e507a3b0a90ff
SHA1 f3c154299bec91f215954c1df2b03f68fa08efa3
SHA256 6d61517c2a006e117a5d5032dc1be0f993f275b6d0c8a0fbef25bda8cfc12691
SHA512 0a02917b5eefba73d3420852a5c66719bae97bc3c8f9adfb2dcad89dee9caf5852f660a3e787d84e9b86e3793ae0605b2db10c0a1463e0f09a733b614d2f4c1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6c536340229d1bb052a390124806163e

MD5 8dda220de3bfd073f993acca9cce3f19
SHA1 c78e343e500f592bfc59de89dcf8548cd6fa1f71
SHA256 21710259e1dbf800de1bd2dd8e19f33cf70dcf6ad306f7738a23300e40d385e3
SHA512 d21115712737f5d51c7fc887a14bb7b9dda4b9db295ecf429623a20eee02b2868956e6d66907997f100395625c42464218c36e750224e02fe0245c0292fc9e1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8550d05ebb82e2c3691bc35b7c166899

MD5 f3e7b2683bee3c3628f500d157a7184c
SHA1 17aa34cf9e45a2a10cc370ef0047d6ec844053dd
SHA256 66d177f97d367d8181feedc6db9f92f71dbabf58cef1355439559005be6a24ac
SHA512 48994f038f0cca5a1ad783d05490ccc209ac4ff2a9fc3b508d5225348d2202f9760ac6c0334d12f74ab8227eab5a412370459ab328f44177729f8fb6b8911088

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7deb7c677f433c0b6c649020e88fe58a

MD5 d76037dbae4ae81158187aeced5816b1
SHA1 7858adc6bdb9f9b03fcb28746d7a0d08c297d058
SHA256 8113ac3b2c1f9a16f7c5a9be473b64abfa8c9689afcbcc30750aeb3077e3e27b
SHA512 e9e1b515c621e760968098b8e0a16e00cf1fc17b74065efd2f8793add04d5e506205df5d65be1db885fb958b9c5879ca728528963b4048bfe073d4249c0dc6eb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a479665357e877c36a8bc4ebab8ac84

MD5 f5366499a754da1e3317be61d63cc243
SHA1 8689a3cc6a2e1af5dbd2b6c23b488283362bab0a
SHA256 14873e016597bf69824fb29a219f6d81befb11b19fe2e505544115b33f030e6e
SHA512 6920f31ed14ef4621559e67c75a69ecdb7832aac639c40febd98dcf9b7c02402510e983b84cd309bdcd7b0438b394cd6b1d11bd4c32c58488d24a5d38db930c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\68119f28ce3eca78171a6a8c8822e1bd

MD5 35e84ac53c5b6ac5714c5589d7d79153
SHA1 cedd01f0263fc9e5718b8e77b3467c14a35a1b53
SHA256 47da60997e22feaa88bff58bd2db6320534331990a14e2b64b6d665df77b931c
SHA512 7cbdf8f0eaee0c4e00e3813d1e558cc5aa305d6e9861255d721bfb655cddbf08c70fe61f686e79154f1c36e7a4b5c29f2ecf2776fee9eb0b7ac1da8c87e75dff

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a116d80baa851750ec02ad98f6a28052

MD5 db41d22b9f9f4a43ff8916ff8d513da0
SHA1 00dee570785465bff97ec8a96ebfad3d21f1d248
SHA256 31e6f7d03515207ae87b2f9e9594fc94db77038fcc28ee3990689c6590b7547c
SHA512 df4e09d0f24ec1cf13ffa1a062f9d28a5d36d99b606f27f7ab757f82e4202e51ff4e033b6554b763e6f97c73bbe77b9d133b4b842469b96056654cc2f202124c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX7D798C4938B84AB5A23B2FD511DE6908

MD5 ccdd89dadb2a17edd97a48f05de218ab
SHA1 c8829afdfda3e414304f09f588a9e00cd43de4d0
SHA256 8ebad66a66dec464ea8f6a70c240e6fac36d2155ef5460b2f1cc80451e9949ec
SHA512 79976e6623479c42c3b9babb2bbec208a8f13b580dc19419df33639e3922ab973e740fcf33c94841e833ef3ca8209b5b149d2ba5c064f08e3b6a526a651432f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5e5dbb0d4c20183353b578aad70c4c7f
SHA1 e47527ff49be7209caa9abc50985989782152f61
SHA256 0d378f40c18b4809632269dd62a78871d961a76e5192290b3dd959014d0fd343
SHA512 f73b6a0278c079a9df1c20bfe98bf2804fd55d375bff1bfdd0afd638e0de80e3b4cd249e111368841fe3f3a8db753b89bb07381ace91ec9aa57f4a43052068c7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 5f85eab43a39ae55d7a94aa5c12807c9
SHA1 85ef9e8032ceede6bf53a15b70b786197513c9ef
SHA256 3ec18afd75228e19eabcd294841ab280ed6b391da215b18c76ed41856a52e048
SHA512 ade6401d8e48fd9008f86141b5c4f180d3b82ea7dbafd2d61344519bf0d99edef8a4478a219eb2fc59ddf0791422c48301bd36953c8da69b26d57ffd9946213b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 22fd60b082a42550514b1b7a68b84633
SHA1 bd2a345284850d346d0c408ae67783868a5b4a1d
SHA256 5600e71e1afe55ebe731e5d2384ab0556e015a859c73fc35d00ded185a3ae469
SHA512 c0ce4b714426af8b3cc2ead6a72d09e7aae733570ce4bf92fa15114dd249ac4d805e1ea46a4ccf3950316e148557fe5c287288c450ddd7900bcad4fd0d5afab8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ce8069bd3f11f14a5537cadc7ccbc2e0
SHA1 593ee2079f9fc0a74b7f5d4ffc3f07ce96c933e9
SHA256 f3f652255fa9d5ec3af792faa8e5ffa2c92d29657a92c3634deb00ce3e318114
SHA512 e0d2642988a283944d45e5171a91bb2d9b1067a7eb84ddfc528b83c6ed1274f86fb6b898dabd8e3457d25c9ecc7fc2c297b1d7740d7119962c00b22626b18a6d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9adf00ed7036cc7407cec7748b7b238e

MD5 7542b86089cab44f3e57e36ee142b783
SHA1 6a211edf4d4880292d766752287083860cad1762
SHA256 62cacbac212211d5a2fb875efa3955c4b27a880360d466fd6dc7c31f9fce43f8
SHA512 9e026248071602fca5dd11d6b2c5df0152d5beac101f1ae2f6c3240d602664d4caf078b38cfeb371e756cdc68f7db9a3c51bea43d619f28bc61a24a2dd32c44b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c81813ea34dbe699086525727806025a

MD5 b5ba3ab818183896db650161ba8b373a
SHA1 3a1230392b6da09e7d8ddb6305e80ef6ed30849b
SHA256 8e95b1efee0167e3b8324f58373660df233f240f73338f2dca70c10e3cc32571
SHA512 25ff52f56cc3e973e48b82c5642ed3acd8f1fdc6f303292187463038eefe469ab45eaaeaaccdd5c6f3db2bceeb42e68abf07da8443815e6ff7baa2c3f0c4ad7c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5543f4e4605c355a3469d1d28e83d180
SHA1 476cd6697b6a8c33d32c0c320b03cb8b643cfdd4
SHA256 4181df36cba1b37d051126f77f4b9feeb9cdf48b27c0c7815472095c861b966a
SHA512 51fef51ee965f5d69bae87af49afff113a34f7f4d467cd38e91ed5bb9f07f770230e3b42cfae4b6ae93e6c50f614ff80ef267f62e1ee2f6a9dc5d45b96e8a96e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f9609b138a91616b64cef4770c753049
SHA1 5f39061fb9388b6b2efe2660ddb97e9c67b3bcd9
SHA256 d0a6b6f86dce7cb6b2c29c338d0bf36375d3f455002c95c485ea583307618005
SHA512 2a39649c9e4ce135e3b88a5217e76a03a0064a43c4b7dd9082eb6c6977e627ecc5cb7c1eb4844ae2f317ed6bc43db19b2257c327f3b71acb3acfc1a1917fcb6f

C:\Users\Admin\AppData\Local\Temp\{B57314AF-3BFA-4E28-89BB-8E4ED1E96C90}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

MD5 b18c705b3c68cc49d9bf3649abc75c24
SHA1 6dc8963dea0f3185368790dee2a346301b4fa24c
SHA256 c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa
SHA512 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 35bd2d00a32a0d58b50718cbc6cc9164
SHA1 ad2883e58fcc90109c325a70af68555c33dd2bb0
SHA256 29450b8b62f2f43a22dc373d426cea5094b61b9620b7d04ad76f5a2b334ccff3
SHA512 8b6bf1d67a774784ffac5e2316b517c43e55fa77b5049cc372c5c60ae8e949d2e86b457fbec0e0f46823f3bf2114a0c3b7e8767071e37be7f313627eb83fc47c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\85140613b74777b5ee2cc331328d0ff7

MD5 7ae274566eaa3b3c6df1956bc4d460fa
SHA1 f649839650a04a11e17c54a9520c4fa99843d38d
SHA256 df81fa025d4dd2ae0920d0f266f19eb419f5e85855effe333114cc68ece56ff5
SHA512 e3d98097901f134f3e6bb9bd4e46c68155c50d9402b59b46bbf3c745ac27cb9c96977dc879f9995c94832f5f2e5e92bbdf446cb735ab5e9d66c462b6c0021423

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fa7410b88528496eebb54ea535f7b51b

MD5 6b130be076d108daaf61bf250d4b7d1f
SHA1 ff62f13e0657e1f76d844bd60547334efdc49123
SHA256 b196782b9c2d5161586392b52ae0e6031d2fcaffd503bbdac4dc2be5f6bb4a4f
SHA512 ffe379fcd00e6282d9340203fa62ba172193c1bbe85882853c24f10aeec43f946bade9b7f8434a51e0dc02b824d41548443d8f3c1fa90def499720647fec0383

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d5146db2f8201b78bbe18970a595a253

MD5 c9d7a5449c2416cea3dc4b8697273ad2
SHA1 452f66798b4f15ae1c77aa6c20247d202fc09fa1
SHA256 2b94005f0e346190d6ba38deb3763858acbdae197a6a200f0c7c1220f5f5644a
SHA512 dd637977954052362cf59ab76b8d707243d519398fc51e188ebbd882d4b82abd3cb18f80d0faced0fcd37d06373748ebe493faa0b45b12d41f0af1700c6ece89

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f2e30d3b161a58948d86d332e498f4a5

MD5 a011820ee8789a645fbe9a5f02189a10
SHA1 ec434afcf8c0ccdb1d38bafc9d9b86067d5695a0
SHA256 9aaf8be0d4dca8af69eba1d3dd215891443c6a3856b315dffc8a4705aabeee47
SHA512 bdb4bd263823eacccb58fc03dba01a0d9324f87519a3447a1145fc280f7bf15c94a99453a2f825f11e8a7e4ddf57eb54079535d72358984f2b0ee0a081b44102

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf945cb1379a67c55875bda48ba1fb0

MD5 6d7738f6530904547b564a95302a3fd7
SHA1 2e13d7cf95a2d3c3c1bfc07df018fee45cffbda1
SHA256 106d9ab89111cbda19abfadae33a2c8d8bacbfe2414f8666071a211b702d713b
SHA512 901ae007eea5f480509018f2e2be6c806307d2de7cbfe87db196eeca918698144bb264964ceab0841e9f9ae06e9ccff15e7f9340fc45474df9d67b5e30e80099

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c243b12ad7ef587c03acd6e7beca0df5

MD5 864a7f97f5926190cc1fcef671d3a88b
SHA1 495b87b05317b1feb12ef5c0d1ef634f01b0feb1
SHA256 aaa0a861d0846a8f8306ad878b50343f5936a3aada398d01a5525479bced4536
SHA512 b865154ecd34d315aefccf64e42ad1d74dc6d7c7662e4a061daee88b75358333d23e131aa34e39be4de88752b07278afc4a07e83d0d7c612d9e0678911c46db2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\595ca6c2ea42524146eb3dffcaed3a82

MD5 6e290823c054cfea6911a028759716ec
SHA1 dd2d128bad8de4bcb8df6b7dc6150da3c98b4d16
SHA256 378ce3d78d3e53ae9a29ee877d8b3800176fbb1a56540f95be71604c7266728f
SHA512 0193d729d03c1d57d0335bd0ec26a51f52573a7919bf51a2914995b1a2c86c249c3b91c85cd44b034b4aa2c0836035eca7567b99400da3d5efb6adb7892cc268

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8cd47ee5e1bd5e5ecc3c82d06f7cc8bc

MD5 9a895c016ffaba2a57e691e71bfd4d8e
SHA1 259d7ca7f6039951f3d83ad75d4c1aeefaabb03b
SHA256 bd57f7c46d7e841bb4725b0d0e772982ecc1b07147b42a90cb8d4224396e1f2f
SHA512 50d35cf5d462636c8161e8628961bee6a56a1497c3f4856b93f5ed19c9b2ccc2514ac1a88253d1e9d4496ab2bbd9cb20cf81b9998265ea86d1a7ee02156af775

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5e18a20fa888a73695f052eeee0fde7b

MD5 fdb1cebe71e53d40b5d9966fd2ae075a
SHA1 7b89d8bd732c262bcf650b110bf22cd21617b3d8
SHA256 8493768a194b77ab40aa58215946dca018be6b2dd9df8179f5b26c94aa3e4c82
SHA512 5e8a2ab800322e74e6cc12967bd65537b89c5e6b1ddb214b220b1d2da423b1ab2cdc5f4d3c16356ea210e75b73e877a5cf2f3d3f209c00cd74c1f02f32182f97

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7355109984590782794b57390696c35d

MD5 6fde6c98032ced303ef18853a7f3b563
SHA1 487bbb540d385de6c415817ce0a83114f9c3224d
SHA256 ed03c7d50849ceac33a8ee6df285bf87752c98ff23fbb91c12d2b06c749d6462
SHA512 9d51d7f154e98bc9fcb6eade1e7e06fe769095fc9074c8498124bfe0075a8b61e8b83eb5eef2f33dcfc8c09e0a82c5a0aa12300b2403b4ce5407dfa639ba4489

C:\Users\Admin\AppData\Local\Temp\Roblox\http\226d8c705087f167f071ccb8f6026822

MD5 2b1dec45d4ca6cf48afd9eeabe1b3db6
SHA1 cc25e7b66dfc12a4b06877430edda24414e9fe71
SHA256 0a4384c6ce92fbd139f253049a366916a1b81c881143d5724af2fde3d90fcfc9
SHA512 bab82af1951b85edcd27c7b46a039373dc5c2203b4f2ae9f41617052819567cecc4ddb44e72593fc8aa3e95631f0a32d1ce45d10a09494c9d369164ee47133a9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8b334beef7df5a2cf862b7372c568e23

MD5 a17a11072aa9f154bc13b9f9ff0fbdc6
SHA1 4310476c67fdacd9c4cca0133a60c8e2c959fc5b
SHA256 cf67840aa268dff7cc3513d7d0ec2247b9cf8eba37a0f3a7c901d6491a803105
SHA512 9efda3df0e923ab1797db407feb00f233ab9144eee85810c88f43774578e18c8301ae6be9f435e5ee2c9beb1b539d1a7ee0139954c12c6ae2a6580a1dede026f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\751752b038ed5ef56e9e73b782b08131

MD5 961e8d0598ae7ddf0202b0d4eae71eeb
SHA1 296967682d6a7421c1d55e4b20454775925b519d
SHA256 da79dba418726c24dc3ff5e3754bc332f716f3087d60b30b19e8d66edf80333d
SHA512 bcf5d44a913707bf0d2f69cd3877e7dff736eec7653f6afd16fd69a9828ea6200697e0099179f2987d67c79172a503ce3f688983e328b6a1fd1c80470591ef9b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\168d02b7921a49bfeab00cf70d7c5d9e

MD5 0ae6365c1949f61a81378302c6d7a183
SHA1 b19338be823c112960d1548fb24097ca42100c82
SHA256 88776be0eb8b4d921ea25aabfef5a38f0b915e2c7e157f382788e0c280f257c2
SHA512 70091c14194d7c11a5d0ce914f1aaeb5c26b47544b8bba59a7dba3fde55cb6ffeaaf98cf39a7bc95fdac567c9b9534ac2112c791a6a62386a02594f6a9f5396a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX9A5E334AB7DB424D9F1C2B2559E6436D

MD5 0b62c869e1e4e394c4d980c149741eba
SHA1 a26b25b0cd77f761bbbe727587890e135e512306
SHA256 cf230de22d3c89ed0afbbf905ea2d67427cfcc97404cea54845ced8b4cd8d4d6
SHA512 c905b0a82612b033fc8f674d0828094ba5737dff9864e95dcd768b660710f83ec3617688beec2ee4fd6c1ca31eec8d2d70df9868273cc79a59d0346be83986d2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3d56eba3a93d78d2894db1222fd3d761

MD5 2bf5ec84b00457829b29234293136fb3
SHA1 d8637a4c5ce61c9d460951a0706cedd1f52b749a
SHA256 c3ca3f679195ea7d40e1889d895e0fa78b95c2cc64bbe325f57de96430dbca8b
SHA512 e98aaebb04644759cbd7d8daf93973e88b678776ffe47ad4507a85910cac4ae7fe68b3bc1f441567711de6454e504797d090a66ec1a9bf0f444ac7f9429333fa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7bd769c0bc0313081885ff3208f07166

MD5 9de52d85b06da1acd48afa0d6d1d19aa
SHA1 6683b9c8eabeb1f315873fa6bcdfaaafa9353ad6
SHA256 8b231ef4bd7d12979f583d8c1b89c66ae7e379d6557a1bb6bfeffcafc15f1a2b
SHA512 f3c1210177102ad92dc8661720f12f4c6aed3a86991b59c823471464feb2eed41cc1512acc864cdace009852380701c20a694fdc0311d5a023c2b9298979c8fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5965db33c00199c8da043230c1beea49

MD5 3ae9eece15951e58cb3c3333675f16bd
SHA1 f68f72eb957241ed71bf15acf71d515361c70398
SHA256 262a1a8b853e44e5ea0f8a61549527c9d7ad4a61c43fe03c062297251ca0ef2f
SHA512 c1c4a46bae66037adce49c680b42c91f8a8f3b91fa21da308db6e0070c605f0b6a072922adb7978c11b83912faa5c82fd134d3a38ad7b34842de4c0514dadb3b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\774ad174c53c04e6b1a29c22a5f6e32e

MD5 99bec00bfc46f3e950ee281f6c95acbb
SHA1 38ab6e7d03e5a58a32fa8b93cdfcf4fc1a959e48
SHA256 df51d04572d489f40be555b7273f7ed2e772480f2827e3bda6213fa38c909328
SHA512 04d346260c3083e318e1b7025e78693f97ab7da9511927efe02e9dad7c96755df7b3dec8bafd175c53514bef532c24846b8e9c429ab0f7942bb9adcadb2c757d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\22b19b20581c5f62166a73f4ed0991fb

MD5 908169b22541e44d56f5d1909909805e
SHA1 40f82ea8fdfd3295706176ce7ba412e753f8eeab
SHA256 d52f23e90b859cc5787fcd15679a6c5ac79ea5bc9b03d5f58e6a67f57afe5bfd
SHA512 b4fef403d66bc05f31fc0929d38f44ac15ff6f2d3cb02160073a9d939ba28e985fa77521e558ece1c4ffc73c720c63ff263ae14adb2ec7b19d0cdde82513efcb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\576c7360d7dbf5c209ea184dee932ce8

MD5 8b87e00e15e8b22c07fe61343b921def
SHA1 5275488ffd82741832f38ed90f0ba311e06a8c67
SHA256 e9bbf61c79723b15b5210f18154f102fc48902e154ef8feea2527b78e5941103
SHA512 0aa79e6ac8b69bbfa10dd41ea6200ef2ba9c7354969a74deacbc36e5cdd79093d6f592aecf35280beef8fb51a520ad0f80a44d76e63135c1e2f5fb19bdd4ba23

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXB072AAB999C94CB7990E0FC4519BFECB

MD5 934a11b8eaef18e6790e660f167b251b
SHA1 1195e4573af3ac1c966de8210b162d76f57df7e4
SHA256 8a8ffcca05368fdf6f8941aa5ebf50c565c4946e660dac731827703d5d36665a
SHA512 7b9ec190b7cbdaa40921a775beb6cc245f9e92b12785d0c1a9fc6285a996a809a2c80546a099fbdf5e2628404e4cedc2ab652f3e02c27012fd2fb3ea6d1ddaa1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e508bcc64367cf9b98fe28c4255655a9

MD5 82b21f9bd843529c51bc0e290ca119e5
SHA1 697c8e0ec246effbf2d047870b81f701756b591f
SHA256 a7f86e25dfed056d6c9833e367cb58dec30c5707046b9941edb54726c78620d6
SHA512 8e1ecbea17605f90660dff9c3918bf0ca7a4f661611ca0796bb875098f15d1c1e3dc595a0337162c26ff78949aa66c27f883a71c5c8077f9c29faca1c92c4889

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e60894907471600db01872a1741a0bdd

MD5 5bc34a1c60d2a4bbe7441e8307189156
SHA1 136eea02e3c374521146b9f530ad9c1151e20a37
SHA256 563d0ba1f9dde1fa635ee6f29925712b5a162396d7681d8b4dae1fffabcf5626
SHA512 5c542b3aa5f8036901247fee55c187958546966a9dc6b34c291af2d63fe0c3c8f92f3d87466e02e3b124f4972b1558a743e927520dc9c3fc5256ee8d066aafe6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b36482b1edea43f2633ea464f06858ab

MD5 d6f5e76b38b611737bea4df7021a180a
SHA1 180495d2c8f89bc65cea42c5cbf343e0f3e0db47
SHA256 cb53664e949e16db8ddb57ebb8146b13b785a6f57b9feaf12109670963efea8b
SHA512 bda67757d47ae3e15b5278a8fdca0a73c1aaee595a27e664a936085ff742dca717b3a1981340589d0a270ea93cf3ccf05f61872fe006c33bd52dad8d61301789

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0da1eff9a99725e6873478bb53e6ad07

MD5 20a9b87070a921eb6ca606f4b49e4ee5
SHA1 500f261fd7bbcdaf2b4b2a3a6fa6f0cc69836e49
SHA256 0cafb5b24a63bf21914494b4800b2ab0aaadadf01fd5413b85ba98b573b8cd61
SHA512 65279869345c2add4d752e8db9b2b5d57f2f21f7441559a76a8c1dad56c8759a37bcc0741bb96164e874fa8062e89e2c200816625328126e019b377e79a973f3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4bdacebda49ebc2c2d118b7ade154ab8

MD5 46fe622ae1ed5e04c8e870d2955b0b5b
SHA1 b53f9d01b0b5eed94f7e1efa209fc6fbc95e9006
SHA256 3f64186c98498258f668809710386563ba357ebe3f72afe8da26681539ba6254
SHA512 bc03f8d6cbd1b1dc2a5d0c444d840dfafe51af93fc09b8393f921d5c1e26b58145280d4d51086c3ab9c4938191221c08f3636ad9f317ba718a45fe265b17f723

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0e72d04ad553b3d0c14270c19eab2986

MD5 71998edfcaf6236c9cbb0100558e9e10
SHA1 6efcd23ccc8e4db8814e5a2e6df0db27e198ba81
SHA256 eba46b16e0d6b6402fb3c4ae1ddb02615263f553b1102c0ff9c7d1b939f30754
SHA512 c81c7c5c19fcd4999b9b0a7abdf044621ebd75fc6ab4058472a7e61af90f2fa021e64040e179e98ab7d31bec33ffe042d93025ea01dccfccd014fa0f72588bde

C:\Users\Admin\AppData\Local\Temp\Roblox\http\912f5fc3f8ee84a59c48c411e53edbb1

MD5 c77201c032a8d835884aaef460a86426
SHA1 65082a70376eceba181d6a51f0398813e9e3c8dd
SHA256 6d97a18d7dd1a3971760a44b5c85aef291e6338c1e926ebabca6f5fe31c675d9
SHA512 c66c74ed3df2b1f39f047cb8ae6ef52275b0a3ba2e631ee78ab5af54122fd8a2fcd9dbb9a4d8a70585f50edfd16ab95e4200ec2e3599c28adb8289a8e61afa21

C:\Users\Admin\AppData\Local\Temp\Roblox\http\84757e79ec2d4ea81334496509b1a323

MD5 1c289c14c895dfdf05610074041c670e
SHA1 75ec8d8c4bf89b0d0ba0c1a3487c11988019e975
SHA256 7041f621e57bb76b41d4b329081403cc6bd5a161f8a45ef494f90942762ebbe6
SHA512 04c7d00b7225f604b32a9428860bde90a0a432044878c1060b638761ab8aba20dd41b8ff98e38f98687b587818a13a7f95f32da5ca839956ae56da54dfe3b079

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd32ecc5c32b11bcd2509d541b5579d

MD5 fcf7972a3c5bd7a9a8239778acbeef31
SHA1 ee81b0e3c6d7d6599776bc1d18c207d5264299c2
SHA256 6854ba55b5f4061656e4660ceb37ef25a108dff6f96167c5b2a67e291ee9f56c
SHA512 48eea8ec572bd641c02e860baa0a11c47f65f1f450ca6be43f3502dc8294d9ac6d495ba3268990a867a271a6e2753aa2d2b80bd84bdf77d99cd1c6446a4e0209

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0aaf6f7317997d554f4a87946e18f4bd

MD5 b7fcabc842e34093c2d79eddb9b0a14b
SHA1 a6ac7bc76d847debd8851693a34c9d4652770ec9
SHA256 ea654e6a85aae695ed6a83519d28e14c497685a7d9a1e3113de375dfad9c0105
SHA512 30bd3f1a0f400ec09fb702f60da46d66415fcfbeb38f0c4ccba33ad9ec0f31c536dfa514ab06a7f4fe96b7685195a69f9d30caca2244dda3ec8866193f2ce26c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\373eb9f859dfb4f553b19748d262bbb1

MD5 e6ac2d485aad3b98341b7d126a034c04
SHA1 4193eed9387a9645f6cb6323b48f31d4ae7096c7
SHA256 05defb267e9ef077e09014672106fb227f7166552fbabb131ca26195fbd32b90
SHA512 18ec7a42adabfd627061a45546b2499f9cd51650ee7d3d64b1c5eac1920771f093da37656ae8a07cbff974ef8f1328eb74392d87d6aca52da0d8dffbef4fc700

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a08d3765d6b1f8c890f30a9b040cef77

MD5 b04c0dc18c7d55cd67b193981117e8e5
SHA1 de1b8da5292626c82c5369243ab17e1fe87819e8
SHA256 0e9e0d48cb004bf17d389dc2d43451e7c45546210703bf2c36048568477f538a
SHA512 e6a2aea601a6cc021d9537fd56eaf034dbc5932f9dfeca57fa69921733af8d1c22fa4997a596f2895ca60a9a064ace6a135a8c5893381595521da9cdcfcfbef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2f20103cac5461a1d3547c6e14d7587

MD5 1b9490b907af8da1fcdcca50c8f65b90
SHA1 cc193d424cf6411e6354fa24ab94a1edfd252cf4
SHA256 7332f2665454eadc72aa894f2dbbe8369ed53b1462c8951d2c0f3e1f09616397
SHA512 bbc0bd3e165b69997bce74bf28349edd89dc8e7509457c8a40df3de21745f3e63d0026101b4a31bcdebe0411a620168b49ec0f0431b7ed2315f92e346cf458b9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e81489ca248da128fe61473200c5d020

MD5 520ab766bca67603b739d14545224a36
SHA1 f4034ed446290fc46ec6c34c2477b55d6a07476e
SHA256 c7a8d3923046b6f77cedd9fe94b6dddb725568999a48265e7457c67ede70df5a
SHA512 a13593c5e7f348838561d4afbd8cbb15fb413af7db59f462b0fb87727dca3393b8d1a470b18cfbae8161755f5558b84a23f7d814578882fb1c0fb51a11d0f2b1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c44daeb46ad8bd1a496998a640c77b47

MD5 23e6cb2942e5b2a3bb7c75cfafb45440
SHA1 5a75dcbe56ccf2413ab5966964cd48c40483855d
SHA256 477e431f4cd8994b51cbd3f5813e155a1c20494e1fdd9d3c7f96b3682736ee69
SHA512 5ef3c228255023e9e13b6f8b13e510ef139f00d94a92541a84f1d780163a421501b0074f4033155755d385167ebb24864389bb3ef76e77b5ef8e721864ccc86a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a2f01eb7a4a4966d9cbe25f05155189c

MD5 286120f54763b876b570eeaa81a48481
SHA1 8d358b0cc8b337e002bda352ddcc65fa3746b37f
SHA256 0968a31832a539d69331c2d385509a8f96c9453c21d6314502aaadf6495a52d8
SHA512 9e630f9fb9f1a9a8c4eb0f88dc1e4c4d32312e56e9c975aac308792e75c5dd3220d019c1084e28dac6edd9f5079b7d67f3fd7f79c23fab952854986a92f20cac

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b17bf7b17725fd2991e666a447ba335e

MD5 d59f92d94370dae20818a6c9276ee464
SHA1 00ee82bb5c4047c628372cb0476fa088e78badff
SHA256 96ab5afa8bd06356447cc97969dcfd08b8121cc6fabe1d23bdf5c07722c9d515
SHA512 8c616b95f7d5b848471690082c583f8f64db4736593f22a6db15f3bc7f75df854525d6380eddaf8d72e77178976bd7dab0ee1cc398d4820925f0b7378c345837

C:\Users\Admin\AppData\Local\Temp\Roblox\http\554149bb50d82e476d8024535fe169aa

MD5 9dd646d41968926843693c0143cf48d0
SHA1 7d34e1eb33178f572b6558a4dccf448f4b88c96c
SHA256 c764e8c3eee83026e101337dfe15761e2bd2fd79ca123b91652e1d4b0ef1c915
SHA512 617d1558aed5da0a0a4e5aaf76a5f5e004b494cd448ee4f9ce468498e9445af053e6418c7273297076d65eea2782f26e1981d5b58daeaf02db7ea9e36a43934a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\25899a90c7cc48a4445f95530828429b

MD5 73fc04ad82b32a023d9dad583389ba51
SHA1 6a6766e7ad471e3413b25e3280dfbf2b8bea4b85
SHA256 340611deb4612a9602d6a5474347b93522e3b0dda29066d6ec756dbb32029b57
SHA512 ec6a0b0cf269923d65eacbbfa58a8d32c3cf0c565e32b20fe5ff80def360c01f0e42e2f2fe47686690cfa5e1237fc0a85f82e2ade914ad522e7fe2dde5f174a2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e628708210857eedae1e15dedde2b0e9

MD5 4d56158ef4894e8a90a712c7bb83f344
SHA1 799f080b7fbbdfc974a15b9d7b674835480178a4
SHA256 431d99c76df973fa3bd4332eb9ae76b3c7eca9cdd9d2fb2826452a754a50730d
SHA512 1be664d4093aa473227e4cd85de979189ad8ad55c4f896395a4bedd415afbfa44b7ecf32b0c2987c2e34ab46cdb0d001975ef54b43e96e22114320dc761dd907

C:\Users\Admin\AppData\Local\Temp\Roblox\http\612637e2bd4f4bb37655abf718961693

MD5 616d0c52e0ef136c2f8b8b77377062c3
SHA1 c4e0a6ec4e086c245b3c875a63163b73887a2750
SHA256 1df73596560f9bafd032d4b0aed20f1786ae5f5dceeccc9366e5eda8ad174628
SHA512 f3c55d1b0c57f053bed557087110404374da0a996976428bb56c442fb73a80f9e57e99c06db6f55c024722cca8bb6006aac27ec46c1e9c8ea4db2716d51bb26d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb9ee8cc819203f05d7637ede0beeb9e

MD5 a56419bc5591c9df7bdf253e676b255e
SHA1 9612185390e998ac3565e7c757f8cca6b9b59872
SHA256 f1335ea78520b8a7d35be3023d35c753c284ac25e749a829050ac047d6b62ceb
SHA512 f028a91defe8354edf28097deb334fe212581ace1f5758e4b5ebad940609cbd17d6c09caa1c86afd9033120329248c08694830b1bc8b84572554cae33224b185

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2b30553b07e18a0d003e4a1bebbd61a6

MD5 09c26f8cac35fb8e115d32ac102e5f16
SHA1 7bf890275ed4c9e158ab1bb2c2af6505cfd54f89
SHA256 751554fba217c8e1876d769d3909a63fb3f3dd7fa4ba9a9e7baf0f75e22e3f3e
SHA512 e608500fd78d4a687adfdb9bd69160b44ec3ef564c16fd7cb5e4517f9d2acc64254d3f7bb3d95db27bcab0b01af668ad92c4b7b258ce8a54804a0ba491c39303

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e91043f7393d8df20ba8d27e796875d4

MD5 636cf4edf429497b2f383f3300be47f0
SHA1 efde4f6f6e770065c5f81369ec1f93d7fe12c271
SHA256 52a6ac9a8a929297951fa93a34df88cfc47af72642ea7b1682358854a6212156
SHA512 729f7d68d0cdf6f3ad384b90716c68620f7defacd7c084d829bbb1c6189daa4bd3542636bc0f410a81176878b4327ba9592d6cdcd156a3d09bd425b8cd762776

C:\Users\Admin\AppData\Local\Temp\Roblox\http\15aa102399debb391f38fc5d43f516e3

MD5 2c2421dac112a9f08f76a83c57b9be7a
SHA1 a7dffecabf5cb14b28ab1edf58d77a60859ec7cc
SHA256 8578fb02c9c6ed2c0996ea5bedfaa1c86d13b5528a4929f5c5fa58d7b9fba7e4
SHA512 233f0c1c578412e787a5e4c469bd853a0aedf897d1363eef729c6148fea7c75078f6af0c93a4ae27c90e4f805c9b9cb873d163ba4a42bf8ad54665cdd7882127

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b3002ba810fd3dad730f64dabe06055c

MD5 8647672359f63aa2ba975d707185e278
SHA1 9d8dc7750b803b2d5d6ca624b44609c05e359b33
SHA256 01c312a920d09eacad3def988b53110ae518a291903422b5e21e46b6e7ea020b
SHA512 ab60d25de8010b3d151a6e2f31f7902eaad55087e1a1d3a7b9bdc481278d0ca68ae4351e12ecd07dc21c92cbf00950d79bbc7d70fa27d769624d105a0fcbdc69

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a6e72c60dbb9f47a2ca09f528e22320

MD5 41a325b7d4b4cd1a55c4a7f5ea72ee5f
SHA1 f1fc12efd2a981f62b2ffc98d1bf7698c96d3c75
SHA256 359d0ab2fcee837460c647a4430f1d2ea430c82ba241571652a2400e02d7e447
SHA512 07ed7fc1f356210dcef269fb9af705761e3c55d111db85538b365fc1cec71f9aeb6b84a45c0708d1bef823b89e20bc12654d401dddc1d37c1f0f8d9625837fc1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b3f692949652f0471893c77f9496d15b

MD5 309694506a96de053ad11a13bd28538d
SHA1 2e5ebbeb484a103b46221691bcbf9059d237bd20
SHA256 bb03b0e6a4ea12c1ea31613a7781444f22e913c6de10faad59d108843d200617
SHA512 ec5b6a54aad033b1cb9e35af707832e78750f71bccaada6f536721696d21eadf508253bf53015f2159e447466eb833bc4402242c279e09fd432727d1301a844d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d85e8570fc43b4d444193e0c1225bd79

MD5 9f6143bd48e89e0706ac1280f06229eb
SHA1 8fc299926ef3ecdb8087e1d44782cf502024f6b1
SHA256 c9fafa762246c06ef15e98437c1789b5adfa61b3aa7ddddd0abc1b588b795f57
SHA512 40bf93315afe60612cfc2379844e325c5d74c84edaf01e5a9875126d73ed2c5e0af9fa384777d94cf3bccba1c690e6ebb78d68ebc497beca27abedc2f469970c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e2ad0f4d94a678d0b3b42bafa36b89ae

MD5 d15ea25ae38c4c21c8e2285250b09fb2
SHA1 d2d33ab800f1dc0b1c4f13eef2a05e19b981a76b
SHA256 c744d841131f10dff209a1460c61994ba38f2ac208b35e5377e338d0c606a125
SHA512 f8c4fd7d970762cafd5279e40748293cda5b996a785cbcb7c19ad0ca6b0772bb917b3514a7402d8ee45d62bda5f1d19cf219c6f048a878368c00a5de448b453d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\62df5184ae1f060c81401754ada047ae

MD5 80696c7595540638b24e76d1557af8ba
SHA1 8d58e475d0a3c629e5e4781eac657faf6d9ca22b
SHA256 7bbb75c1d5624f35dbfc6f31ef170d3aeb92d1058ddc0784ad3f3b560412378e
SHA512 951013b48cdf1d5d071f161e100359022c300c41d9d32c5f96bea7613d94cc45fa609f7a9187214333611fefd0376bcb401d77ed9cde07ba4a5cb0211ef16d95

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a97fd9175850260741b74f919cc409d1

MD5 db1eabf353e9e9d193f15131888505e1
SHA1 f0383c6d4ce197c11605b1d2d69797799680ec42
SHA256 3045e626203e23090b4dacf13fb80118deefadeb110b206f8bd7fed4fa88dfb5
SHA512 91cab538eba6c3e18ebc61242ccab59d367ba2e75120e88b1fbeb1da7c890f31bf5b2d24349e6d2cc4db53646f21c1100a666c245302118257c087723692e815

C:\Users\Admin\AppData\Local\Temp\Roblox\http\febbcb5915310bc3b8058391378f832c

MD5 b4d7994909cf1dc455e9b0c3f9c45641
SHA1 78622e6ba3e6aa1243ade852a7b8b5efbeead4de
SHA256 a990ecb0d9158ca6fad031aa274af66d7ecb5a59743d1dbe6ee1227afd19b3ae
SHA512 904b1ca6cab5ef11344d001b5f2ebd50fee48777eff413a86629204dcf841b06bcf185c01b7b76f0cad8a5e62dd17d5cfb026f5a95b3bb521027ae7947a6d41d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ff9a60ec2d57604105a3a09130a4a4b6

MD5 b2bf951020c8c23c4aace10e4a3e7511
SHA1 84a24501e034b083917560736d6e466e61f40418
SHA256 35fda1d60e1c3c184d484bc80d0dfe5430750aaf0cb849b43d681acf79e7d541
SHA512 e3bd8c2ac48ecd815b2fa71c3c0c4f450447cc5166aae5235b2b906ecee02ce0bd2de3ae9871404d1456bfcf929614991fea6083b1c61cbadffdeec3cdce4ef7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\90ba59f60ed0fa6e2744da18f6b9aab6

MD5 78597cf7ca49787ffa824131d9d2b196
SHA1 dcee1175ea2f3ec558bfad0baa73dcc4c0107ea8
SHA256 53749cd382c7356a26df2111b6e91596a65cb0e9db2da4a458f17d0beb188753
SHA512 574238b44785382a63c57c7bb2888836adf249beed8cbb7fbe20c69d27b66c02894bd989350e72ef209d6972e73d17c0f469c0deb2c7e5f65db4a9fc4f949be5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fb79785281b0ad911f62f63179faabce

MD5 94be78b71e89fb67eed52dc2bcaefede
SHA1 8645f083d452cc19b502c345ff4fbfa9b8f0f790
SHA256 11c5a7383fdcbb9e5833225c41dbd8d6657e0359ab8c580800eb132f4b81d2e0
SHA512 1d8ccbc8a58243e13e715e9dc7519d26fe5eb81c52011ecf8458c090a00e21b156df8c5c013af0735de93c07c4fc472b20def03a2bc797210fa27029e096c775

C:\Users\Admin\AppData\Local\Temp\Roblox\http\490c2ca6a2070e88c0597ad2b44b8e95

MD5 91e4fb62a7b8ed4ae98950e288b64d31
SHA1 812e6d840f795f62c9783b7bd52d4e053b6cd2c4
SHA256 b01e6623e1de562b8431439e0058b19e345157a76e9e96815ddbeefe8ad2cc13
SHA512 305fcf7aa6b5f897c7251c81303bb232b3489f44757d7fee5c0c9aa45be3ab49df5854d86dd737fac7b39ab7756f4b37eea3ec9a0b68e256bafb0f5f54bd337f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7de699762fce90d036e2586e7388ba0e

MD5 8419ed2a1f26bc84b600fc8f39cc5a60
SHA1 99899b9470a03f90899a315a192eaeb626887daf
SHA256 dd2fa387129a01018df36f824162db0878e261025f3b380e0d64e6408d874fc1
SHA512 3c076c4aeb74ed399adb798ffc097bd1498ced6ed5795f0c000ac12343f6fc03f06cfcdee3bcb262968d3a9b414eecda66ac3d221b9dfc2808515c7bc3523647

C:\Users\Admin\AppData\Local\Temp\Roblox\http\857817beeab9651cf7a8d618db0d201e

MD5 a3128120f966210ae5352efb14e99d98
SHA1 7657bf8a529a498cf006e1254d02b1f30d80a6ce
SHA256 0bf54aadf068f29e10a8f7f76ec2c2952b160ee6148c6f0f780fc69f4f2d6352
SHA512 3daae3b98fb08dc479918b56d99dfdfc897204fe44f8fd45b719b085f8ae4b3c5f9efbeb1aa22d027f0ce4afa8c47f11dbf85a46d79a91524cd7d1c69b9a5809

C:\Users\Admin\AppData\Local\Temp\Roblox\http\170a59a8416495f72673d666ef51f848

MD5 8ceacde7f362c6dc501a1da212447699
SHA1 b7cb70d6a889b60d7dc58c4a6e431cd25b6a0d4f
SHA256 6d456a2f86ef835af182d6ccca3b414c641f94388cc4aeab886882643750812c
SHA512 50761c1858f8d723ed79c10b4024fe19c8af9f2aa4b5856e80306b7194c733120ea3fc9e132ad90f14e459df42077ac3a3b57bcbb7b9f430f08e00819fb30532

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1749325abbea8f9644034bc3d254f16b

MD5 128c3dc841a7d6af47ea15d39131d085
SHA1 5fd61c469c8d78ad8a352dc4f4df4b5232377708
SHA256 53f7c87e313edc3c4ead904e02eb8e2ea3dae8ac1052b3127bd8e9e0fd4e8974
SHA512 f7d94cf431302537deac9fcfa0e75d3ce0c4088346717e09d56798d4848331c7a42be9c91a4787f571deaa20b9ae8bbf5ee9ed8e714dcb108c420abd96ae8f89

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cfe54c8219b04c56e11d582fc5f6d75e

MD5 b0124cc063b8652bf190dca0c1def1c9
SHA1 64d0005abe98c4c4ccc4dd0ba2153f5df0a41e61
SHA256 5b968bfb40ca17a2c84070ec2de917b427786cb0d09c07e0f2cf98f0bbe931eb
SHA512 0215096c066ec1564c6c5c4a2bbdc373cf115247124fb462d5fe7c8e1274d1c67af8e7de3dbb0a0e1c849b577bb089fa72749d7987bac3722e68472527d93a43

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa7f74687a407743a18b90dff5e2b054

MD5 e60e6f8ff792fdd3deee3ec5b301279c
SHA1 00c53cfcd3e8d6cbde946fba892f8a6fb60fa7b3
SHA256 15e8a2b911a2e0e24dd483552c29a53c8e6583675a4c27a3efabaa6ec7c9a59b
SHA512 2bc7d22bbc8c129cbd5c990aaa038a9140237c7da9add01b02afb6cbf176ecd2b08216e4509b9eee3772840bc1e5b90f46dc2ca76b4f5af793396cfee932b283

C:\Users\Admin\AppData\Local\Temp\Roblox\http\722bba644cae325ebb0275438e164a68

MD5 dae4a824656d717d73f12a5e2d7a4450
SHA1 25a5b3be8237575b8655f0409cb01ba1531b4506
SHA256 ed6e9296521c273ea0e2eab075c8e76550b44e59bbe0759efa605f9ee142bc0d
SHA512 2c8ffa714cb1777a4884e96d85c7f824775b981d3ae0f5472662b97fde9ff350ae19868346f26fdcce9aaba1e08aa5b3f7b00570e8b4d4f880a072fcf14eef42

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9442e64a814289b3ab2501ccc9d8e3d5

MD5 4ad452aa551f88189a8c3be38d6c5b9e
SHA1 c28320266dcb6d418470b75e91d0db8c27e63412
SHA256 7fbab2e9da6b1b5eebe67d3fe21e215373399a80e50d77443613154ba7b19dc0
SHA512 764974ca614d7a52bebb45be2ce065dc639b3161d19323a216eaeab86fb2ded1abfd534b1f73b992d13d4fc8fd57a8021f52832f7137544a82593d98ee3642e7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\765e50db3a3bbcb9c8c3ee8f651e4aaf

MD5 612ee6c77367a776a237dca59a69b384
SHA1 aa6659f38245edb196f8943b813de9961e56f544
SHA256 4543f99f2b074a0f54ae5003cb126983f0465d17fc8e95df7acefe526830ef51
SHA512 857ff41bd6c9f71ffb10e6832c650a063c713ba3c3f1d3f5e7fb50172abcbc19b82d40a909628880d702af41b59da2a8bf5754a968c36d50641e585fc7356c15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 9f30963bea77353bd744f90166c4ffaa
SHA1 bc7b33f3d3915462e3c865e47ae1915096d997ce
SHA256 2c2cb5c0f35b6968da8a594d7234cfe42969328a17fbcfa7240da514cb2ddc82
SHA512 206df5985f5b0b8e75e753962facc06c1098cb218cfd93edf9a98632c7417abdb4525d0c7be7c232579c1fcca78049e6fcaf61125e3bc182bfdb53dff8d452a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3e099a99-ed20-4ea4-af97-f595cdaad115.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 0feba345f2fa3faa3f0e50acc8986490
SHA1 4a765f9cdb65717cf9722d0527eed54b137d26f1
SHA256 a6167f21c59c41df4bcb0027b716b97b84c91a0d94e5168ad1ed998d11cafdef
SHA512 3319cf0711f6758eb316be835cdeab63b31992e97dfa581ef9c3a42114a8df61947f1f449ab77e3b2c7d5104e76d0e6c538deda780e0a73b985c79fe17950237

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0af19e266a199cd40193fac67b898ec2
SHA1 16e9c4205d1596d8d00219a59e46708e93eab7f1
SHA256 c2f94155d5d1f6127f34b71df878967ce7dd755490a724dcbf0bb4bf33a7e248
SHA512 aa0f92795daacddd8093f26c50b450f263584ad208bd0eda27abbdf4462efa68d9cfbf8a0c424a58075540d8128746945ff3adc2ed278ea3588f3d932fbc8380

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b

MD5 6eafc48312528e2515d622428b6b95cc
SHA1 8c21c748004366757a93c587668ab55cb6a4bdf0
SHA256 dee6942321440ad24c989d45fd96bf0c0c11e63e04357af2128118eb75eb887b
SHA512 c501160df9b93014d510cd22060704b434fac4c6ba242d3e625e1bb6e838aca31889197e74fd4d082f4333147ec18197b2a31619d55d37c9157ec275621ee64a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

MD5 adfba1cc30c516b1538ddc2d8d85cb23
SHA1 a19c7e19f2c1053fc9019d0d5be65160b0b99d57
SHA256 848a84a4d9f0aa8c4390c6ea240cd4dabaf286903d92d7aebfcc20197255823a
SHA512 40aa6ab2688f28fea2982a6754ecba7088327e418682049bb7c7981621abb55f4ddbf1491919463d8225b09c3d5c66fefa8fa050dea9b3cc70e3a1b54a9bbaa7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f

MD5 6a0dfd54362ded2a189d3f8a0db1c3ba
SHA1 832c70d90f6ca5c2c84787842908e6d9a2eaa29c
SHA256 03afd0237aef6a6d98b2621d9f7fae7f52962f55a28be234f832c6758efd61d0
SHA512 4670d01a18f0450963d2912f74d4f013863ffaf31e92376ad713ae0b7ab373a871437e207d8ba8dab14be82c6d94ac1560d0f6554ab89c7e5bb02cd26e7af84c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

MD5 e4b0d20f483b4c24ecffd4678479e3ae
SHA1 f0f3175f2c92922d123eac1e3a4c5bc8f6091b49
SHA256 ab25f94f51f31d69f3a7ff1959eafe9ddf3fad8e983fa216c91795bae573e13a
SHA512 54dda1d96956961788768dd0d5cb0ef9f660898b3b4fd1f6c02d5b092fe3629cb38f478e5e2fa5b074963616e63a235593a2de9e3fb420b502b40ded7430a715

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

MD5 740d5efbbe21e49b08e78a63a4f47b00
SHA1 b28bf093b8030c9f37c94f7b2c17e4451312a031
SHA256 65c20a747dc3cd63e7f2fc629aeb1258e4b2828e9b85eb85f70ce500c8f137b4
SHA512 005b8fa6cca8720bbbfd67b176f031d7dde7475503eaa9017a72d234724e146257ae16b7f9ba73a43a7bfd51f09b43fcd0e08db9654027686109689502840073

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

MD5 c2a9a44dafc1c7778a6160348f1bef9b
SHA1 b6f006da4c62788f7a4a01fe6272961bfc99c91a
SHA256 ca2ecd1e95f36eb72ac98a4a16cb74a1f1184764186588c13df91e768b71105d
SHA512 c563e46e3444f5e7a8dd3f21d0cbf973a50cd616bd67221256df1d56848ac9e1d5eaa19c0503154dcf853d837666f22a831f51484f5c386dffb7130f98e60578

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

MD5 28d6deba0823880f8331bd4695469645
SHA1 a9fb38e13eddaed233b777f4db8efb4762c215a2
SHA256 2897ce935bf259f030e1c67dc25840da8793d4b58bc5fc8d5450525490d62590
SHA512 05261445ce6c11d1cf49716c0a2c6c2abbc930af4b7c817d36afa7819446f7e40f740a31b8e9734a5f68a0b140f2424db8779f27bae349a429002bdb30c79e7e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 ef632c156054a683fa8e4ba68d46cbca
SHA1 996f0045ccb2cb2afdd5ec1fadaa940c498dc69e
SHA256 dfbc22478bd963a9664cdc19c40fd8bb2da922fe472ca6d57eb86b15ef38594f
SHA512 7195a5d91bc3a14a6144cc10425bd6fce05d4e80430ce412a0a4c50a32779290f4bbc3c008bec9c3c9374d23ec2dc3d602f03f426825ed11f208bd16960ff705

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

MD5 9b5ef1b7cf19dbdc075f6929ee5b0898
SHA1 51411b7d1982526e2e41081b41a2304170c76d20
SHA256 6848ca275152cb21d5f7f9ef6f617fb5ffb3b1cb6431723b905a2463aac6dec5
SHA512 0fa09f07ae2e213174663621546c8645082e95844d613e42c35e97edc839d3ff6dd5cf630a17c5827900fcd034a85ee20cca1fabf14fd1071730cdabb1085cf1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

MD5 51c3a5f5523fe418aa7a8808e8a56c00
SHA1 836a73c61a244d3fdbd0231d6d1f26ef57532f19
SHA256 4f4740450d6128924e63409a6b11e245a7dad6b1dfcb5dfee6da5910396f5131
SHA512 fe4646420945734fdb177c8b583fbc88c069e62aa20675d3dccefce44d0051c94d054fa1ff8ac964b315f41faeb884c12ef47d2daea1875b8243ced63a59be57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

MD5 443f5977452965c2a8ad60c10c2ecdc2
SHA1 4be28d13939db519775790a122f2243aa7dd1b6a
SHA256 4c3d8f60d0b7208f74ee809bf5e63e68ac1d37a809fe79cd97bf41a6c220fb79
SHA512 47c44439b1691ae15d25ed36df13fa58c7739b9925e52e697f76a2712963f1de681df64467eb569fd9f332f5ccfbdad4eae1e18d560c8c86d820816f5acd8e9a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

MD5 6fd1421c547715cb7b78ca67104bfb78
SHA1 cc7f1d6761d9c7256745ef7586ad53e3183f0e2f
SHA256 57b9a684f743cf229723c1a5e9936d930cf48c3b5056c16c09cdd71ee6fe803d
SHA512 f64899cf62a1696adbf62f597f69c3a1ddd62319071f9a87076977b9f6c80992b333223a07cc1645a2fd578306e30abae12e18afc41cd582ee9717ebcb423a69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042

MD5 15a2f0d9497bdefec193f1951b076696
SHA1 b673c0729fa90d589261edd38bcaa74439297cdf
SHA256 aad6b6bb918d96aa219dcb54ff8a8a9587a9abbe51b4ee131fdb1a82f028745b
SHA512 36cb398ffe146e46e57ba37a2ac92d03476ac0b0368c64ce0102ac3b9d6a484d5e4200c136db9e04f25b327641299457b8f9d140aba6bef6a9fdc04313415e42

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

MD5 db896cefee4f259b95480d6841493253
SHA1 864c5c7d1f43f2dc19bf402b789caabb268d80f6
SHA256 e780fe996d3eddcd12905dff99a7af213dabe343db7fa28af7b61a9ed6b28de2
SHA512 441065b0154db219a190f24e5d3b810a58c631c8e9109d75e1e2e6c10124518faa36a88c1fc0fee1369828bd33dbcfac993fc546cec99071ebd2d16ddc479de0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 efd99f6b50b61e6bc88ab81db271f5dc
SHA1 13a91d8c6aae48306779d950cd3da773bac54a04
SHA256 3eb3416904e2d4354a4760874b015d4b7ad0f4f231889eb2e80a7c2ba79c22b9
SHA512 3532987383c85b0cb80ada4314a3fd155cfb78d23470aa7ea43c40342d48982bb8b3824b65c05fe496662e433ce65598cc902cc9e51d6a32802709683221e160

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b1da68970b759f3bbb2440770adc1029
SHA1 7dbb95e41ea263c852818be5e47221dab013749a
SHA256 8922b4f9fdc5e87cd94da43e16509a1f98652b2557d2b8b7b3276618d0f3651e
SHA512 7c2affbcb378a6741e6c979b7a16c6f4441b264075d982943497ca75f21d9aab2b83ce941bd29c997d1754ed8eddb50bfa730fc8cfc33e1cf6a380109e67071a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 153f690d68b62b5e611403dd5cb73535
SHA1 a241a1d92276d8d91c7253c856295835a35ab071
SHA256 13ad54e99e98c8d757d9f6049fbe78278a3c8ff1cd8c8afbc06fc90359a8eff0
SHA512 5fc04ecbc296466f292978e5e0e062f258989913cf9e15a8135e7d0768981d0c2fec2364cd4002e2d30ac5804a3ea145d065f3c4c51fae2ebc6c529efdfe32f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 d4a9bb7e8de8f088750f8da0db9ddee2
SHA1 d66ee47dab71c9574724661c929edc45bee2f21a
SHA256 0e10069fab6bb3083dba1b56b844c6682e9092ddd9d7932f78aeb902c14a712c
SHA512 d351afa877d7abb9152631d5aa897718b9ad10a87bbada7852891a814ff95a6acc961f81641640ee061f7207df0742b5e5ed3d833fea0a1ffb5e0aa219686c70

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 6817d2ba80c4b764676dbc49feefcd90
SHA1 84ff8f9b1a9fd42a9f3e9c27440c9f312a4ca21f
SHA256 c2463bbc7cb653930151b0c1a3f70272173db75929edd61f1baf61336575bd21
SHA512 bbb1e51c1556dfc76b7754233850aa4f355be190676ce2bf892aa55b6f60273a25cee571de8c93fe355ff3b4cdec1f1708254b393e730ef86de9b76a81e1d9c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5 5686e73cdad32737f07278bde69d3335
SHA1 e364d3a8844879ae6f24f57df12ce92ed4499e25
SHA256 39e523ab1d0c7f7cb84c9d0962388aa528974dda5aba4066378ccb13711d5422
SHA512 c95dfac87a53a22e5061a9e2f262e7f4fa28dd33e66146d34c52e8b4a1eccf61f10a68a88d6ee39950b75f66232273048e4933d63a3d84ae17d4f0ce58317338

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

MD5 7fd069146ea79b16633bc8b45f90482a
SHA1 98dfafac54f6f5db51e3baea698208833ed1b642
SHA256 a746ba588555b584fe98e42ac1a2dfbb92c2831b54c263f51fe91d124b9214d7
SHA512 c31822f497ebb35a5da455e77965f16a83e2007215ae88e64bc21019d8d45fff4671ab4300d9cf518bd2b652d071cc582fdfb99b4807c75e2022755e6c60a06c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

MD5 9eaab132f23a9da7998e0c0e260cfa6e
SHA1 fc8d2cbfa7062bfe08438edfbca63e046029b216
SHA256 850ade08bf44e4d128d93dbccb9b99b71dacc2045aeb1c20697ca2a3be2c332a
SHA512 33d609597682e315e04344c813def0cfb3360002a5ac5b7569588a27830fab396db711874f51832e498eade42d3565f5a0b7927f2497e8ae9a425cc45136c3fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

MD5 28e78d3c692321aa37b1213b1fac219a
SHA1 2139250dc0588a6ae8cde42bf90ea8d734bfed30
SHA256 acd44a814cdf00d9ff2fa2c5c3cdbc2af8db89a8981f8f2368e5a89431250c58
SHA512 3a096eee93bdfccd29b7341260b0a7fad938b810ec64670e048a253de0dfe905bc09518e90b69fb777f97294f5832cb52f2dda70901df45f59936b545bdaef07

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

MD5 f550dad3dbfb045a5d3b91aaeca0b384
SHA1 ae0700d295166c471d2e3640134d7bcfb183bbcb
SHA256 a2d804e54d655a53053419498366fcc7e4a9e485fcc872795b22b31c6b889720
SHA512 1eeab46bbd2eaadd75ba18fa3d74f9ba0555082588e7dfca77425adf6716d9553b669250af5cb2948cd4d4a5a4453866834f018709941da5aa67214c0f6b8b95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049

MD5 66d562e3299ee732a53db150038c026e
SHA1 f514a9e346cd443d196c1bc401f078a9fa147323
SHA256 252d971616775193836fe6c0c057edc13c511ed2bdbdb61fbe3c4567a3a8e530
SHA512 ee24be2709cb98ccbde710654eb1ba533e432819caa8c6bf1fedfeceec452fa3c5f3b2402efc06e75d59e55b6e7beaa71f88bd049fad8e17449c0fde217a6468

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004b

MD5 0acd8ff34f3a5c177d02e9011ee74eb3
SHA1 7985774d3676c27586c71bbf28b1f53598951a05
SHA256 ecc55e4682a2b83956e183e86dc4d475e91bf192ea71faab52a8ed8cde83a3a3
SHA512 bd5402b5214bbe9e499ec5cd9c6933592e1d3599ee80f72fd2ce2076fcd50dbc355cf3d58e923ae2400d09742768bbe9086c7cebc8d2560e741726bb37374ac2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c

MD5 38e00f7de6f417aa3a458560a15e2b8a
SHA1 b451a3a2ab0b04170804d6cf823c6465f33f6f44
SHA256 cafe3fe334035fb21ebef6484cfbe1efa85c46f02113c57f8047c875fb9928c5
SHA512 659f0a9a53e98b2e5dd3256c55b96e5cff82f6b323edd5f92f8eb9897e1376329454734c6c799963ae392833d948eac84fb9b483a5a099c9ab942990a18e7f91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 48c229f42ab87d1ab3b9514b2b9dd1f4
SHA1 ec009a82e9d7044183e112d73bfa99eebe64377e
SHA256 f6d010f8d5ee5a738282ea91afef1df516cf7367c1adf93944060166f022ec7d
SHA512 3ff47d3ee18a4cbb4463e5b537cab7e8a6f63c419391d7a5508eec537d2622a5ec17fe1961f1ad1aa54fbca33d4d1252ecc8c07c306bd23a6111274c8b3e58de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 88dd2a18274aedf7b9eab32749f6fc1c
SHA1 f3829373463be9f322f89a7f78dd92ab4e8b593f
SHA256 287a0f6ea97a5898c912fe0166b9f2a0448d437e011fcf38c7e70186da0003e8
SHA512 f43b158846fa69e748b1ad901155bddee552a6865f18dad59ff1ca0ea7f428ea11438e099d4482a52dd9a514d3ada755bab48a14792bc4286d390e12205e49ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8dde8a5eef8005535077bc73375011bb
SHA1 5f6c9eac976124a665bfa34eb4082df89da509ae
SHA256 bf79416a0cb6fef1ebaed3db382938ce745db369a0b8beed07128b6a0a8c9aa1
SHA512 d6b400fd87d208c31ea7540b52429d127c36d2ad4605f3216dec7d78cdbf7e66ed838ce9e1eb9fc87b3d8061feeee5a2e5a0432e22813603c0bde7aed50d6ba2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 f506434758dd513dd42e43364a24bcf0
SHA1 7f1046281c9fb0ceb75e99d9ee4f5b5df3893861
SHA256 0296bc95f0cfcd15196a5e030687cf5f128dd82221aed947214479ae601da80d
SHA512 e52a213b1f9d5b35ac064fc83489ad093d51816eccb2455e3c6417f1a3c24807f00e8289203fa6e40b4164dbe20a11b9ef12fbc580a5bd7ebd2192dc29d0aea2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe61d8db.TMP

MD5 ce243e5fc6c0175a79f797a75882ab92
SHA1 8a59bf17d782b9ca5918ba2b9ab88a96e61494eb
SHA256 2d2e1c428f69761eaf3659175abff6843ba20ee332bc6e014cfa5d3d491af739
SHA512 1ff765cce4db4e697beab6f81a2d385a79286d58e1ea0a3201485923db27b1c9d3efae3888b94f09564b42cd0c6868da50c92a4efeb912014525fb7e8a012b72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

MD5 5153af5aee1207e631cc17cc213a0f18
SHA1 2528be8676118469231624da0cd9025863f66f89
SHA256 9630a086606591bb95c60878968365008b75141ffdc208aaeaada88ac64c557b
SHA512 53ee01ba6975e693f8c098a2bc1c9f72cb195ab41fae11f50d455a31e5faef5a9bcce187bfc66964b2a0387a9243688ac388206aa8ef5b6bd752475633181fe8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 9e2a36b5c21bca21d846965e4c9223c9
SHA1 a5de6e035e07497629e62c62ee2da0ed6c7f017a
SHA256 4957c18a7434c04799a2ae380c1aec074aeff982b51d20756fab6415999d93cb
SHA512 a8b6e1616c116d01f6a6cf0bb1228e47241f43da39da27240c3cf98ad77f404ea829ff4f1a3344cb4a0f9c1f5f5c7783403b16140dd58fe967a1b83240dc78f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5 7e6a845d3125e8668576105565a25c1c
SHA1 4a0d3e9a6f9aeba967e0ad4112bad2d4b64daf8d
SHA256 e68998098ff1f1d228fb74ab44158ad1a9a6f4e3807e34d48a0f26ae7077a575
SHA512 2b32a14655614a1f27bc4edbea4e4a4b726c1981aeef531e97f25bd812f498e4acb549bd15dcb5d54dc1d09f3d2334a2c21f00411c3fae7f52d1e1e044a22bbf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5 94c4821df010cc107694c2af350f9db2
SHA1 db41816f763a00a1033077fa1b0025cd55ac76be
SHA256 7a7fecfe80fd529015e9d08e7099e6a5707ad968c24715a2883383ec85961c82
SHA512 f75765855aa248f9a094fe3a4eecdaa931631a8b5309f701bc5fa311f52fa2e86dd8aa7d1f0384999504aa8abab1f852b22eb521cb00c7d6238ed69806fcda7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

MD5 7607ee5458059e6b83e44bb84f80ad7a
SHA1 1305afcbd8cef9e01e626a7ca453cf7d62072fc9
SHA256 437491f1b33f1686b54d1f3ff0fbff480ca43e603ee1f9942a3deefdd2f2cc70
SHA512 c09e486137efde73ad0b26eaec1be58dd8de7be27b204c61bec1e49948c88bd2721d4ec196f31f1150f6ef836e93d61326a2d4335fa507974ffbf53534fdebbe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5 74ec7ea0515678716c86f716f89c7a2d
SHA1 04ecb8e0d0041b3b2edef0799ed0c1fe1f720fa6
SHA256 eaad2cf1f9bf708d8adb0bf27d4aa75ce66e9f0c1443243ac87cb09365362679
SHA512 5983ef19739f63967aa5cde2b091d5362f6e806df2722ea95145941cbf828be531129be5d244340477298fa7919494a267799a8e9ee55ec43a052535b474012e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000054

MD5 fe7dfb6995a18040ea61866cf8f465b9
SHA1 52a82d1e5f21f63b6e9813002c2ad4fba3d6bb73
SHA256 6363510cdb96a593704353971fd9d56ed63d4cc9a60f2af5edf96f2021c31f85
SHA512 c30d6c8adfaa4c810d137b27b53a63dbfee930f9e5b3686340742d26b9d471591ed3673c400e137b0f65a716b370365098fc2475891347f11fee11508df0125a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000055

MD5 6baf025adbadc9f20390c8945baccf6c
SHA1 c08d02ec1348305d382f0077a35d7e9ff13900cb
SHA256 f5ecc1d6b74d351ce9cead70ee9f5aac3dc07eac200fb0ead404da3278fcbef0
SHA512 15e43645ed0ea194c395c4f898d08deb2be45bc1165c5c6f7586c7172df94c5a67e303d31d44195e69a00f9e3a37abb24cb09db83eed73c3d72caa9f41f84ed3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 939c63ae60794b54c72da53bd28d322b
SHA1 d6fa2a6b7ba6645c3c2026083ad95665a8c82a57
SHA256 de3fbb7f18a74301ed383db52b961255a60e705ec848b346873c48993095fd5d
SHA512 0b2927c1be9b668fa2bcb2d706eaa3e87add3ed910980bb55ec1d070bee5f76fab3a013cbf241c00d0da5c9d06ed9da2cd7bd97f6b6ccebd8ea3568684930c1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6a24a98792c3c446a8a0d12251ac879e
SHA1 b5e19f6f0df9d8b3781fb29d1b259bca30a220ec
SHA256 67313f4c4f5a2b827f9789f6062258c31204da0fe9a382cce7f6170a0c89059c
SHA512 3e376e0a7595a5d72252089ec9e9327385c5f3961578ceac5de077944b764d7c0ad387d52138a03a631b751ac776bf62bb744d52c664db3bffc0108f4bc20528

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 46de939f51399a6915ef62d0ef98774d
SHA1 400b0c7a10a4cefe0f19dd1afba59435fee89638
SHA256 c9c8d2d8d9a8310cb42e3abfa4d63a25b76312bf744e841091521f52a4ccee0f
SHA512 3862ff0119551d5b6bfd41703b38a2ebb740d3de565e2e89e6476ee510711d909215d4f17ba8aec8aa19f5b39e68bf09162870e06f7eb9a234453160e870ae38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 344c47b91a02825f67d7da33e688c0c1
SHA1 54e5cf9190664be27844887ebf7c367b7b9b6643
SHA256 d2df2ab812677391e648674d4af10ae478bac12be983395e62200d3a33e83163
SHA512 4653705353e40c09815e985cea6d50c7fb5c0aafa4ef0f231341d197ed5d5eaf4ab19ef1ff1b88269704f100bf9415bf426e4ae1eb6ac76bf69f0a4a94d9e551

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d8550f6771c4db9692cada4d6c8bf2ff
SHA1 631120ba127d2b80526080d73d6e10a55f9f1414
SHA256 a3e11d2b14fdb2f4036047845178bb7edec079454b59ca2cd4e5beef6eec503c
SHA512 3d8e537f09927221ecce6dc0b1a6e4fc3139731168ee1cde779c7f941d2dcfad1a6ccfb96ea7cad5bceb98eaf870a509640aabf11d3f2850efbdca30ba54a7f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 318e01ce520d504bebaad5e394044081
SHA1 c160f3a0cb111dc8c9c76bb3b7791bcad9ed8a32
SHA256 3c7ff4a107f4a091ad950df76683599e0b5ce63aaa7ca98cde59cca1b2fef19e
SHA512 2b2b68d574965b95525e48232ec277443fa727037bc696d3e632d93a8f445862aa5395396675bb23d4d018cf0361d28ba2ffeac488db2dd117a8f33b221cbea5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ddf0c9ade4181508560b86f765f01f89
SHA1 98cd73fd4dffdc714834a01d31f9da83a23fbf74
SHA256 40184724fcb25ddc84fbf9498b6f730070542f4dba3eae0d2c577cc90e2bc445
SHA512 86cafa82219a1e33f4db990227e235911d6acf7f3a103d89dcd4938f33d753cc2a4d4b21e6acdf387b4563db9c524ac9beb452077653206803df92ba39f621f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 084e0c1639509a48c310df7c3184cd33
SHA1 77fe732a451080c93072c0f5ad576dc696e0e614
SHA256 ccf976d897363d2c4e5f5145a16a56f2c9df5678da55bbe2ad39c4cb5f5f108a
SHA512 ca2657d902ea50bd000fd0c3b9d1042fdccd41ee40df893169c04bfcb07182dfc9594a56c1360640f97f69d7f38add94e5957a973b23cd4aa73702d95831c312

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c314ee25b011829ba2b5d47fc4c9c47b
SHA1 7c80fcc02fa5d316e678f5447bf6ed76a7879adf
SHA256 8e111e329fa423f3fbbb18b04f2624315801176989f4289b6d02cf998c827b83
SHA512 e6275afe0d7c3fc8c7da8733e1a622316e04ba01a8e070986b7249b8b92c04be961cd56d109828992b80cc750ad025b9e0e4769ac214c465a69923c847617f49

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f10b6865c21c904e29f52a54a31f37a

MD5 38b25c1089062288a7a9a8876138e465
SHA1 d7dc1955cdabe9a50ef4f6b345c9012e3efeb56c
SHA256 e39aceee4952e730f1a101894520b046ff21156ebc79c0f8e070e87af20fdd29
SHA512 198469bc9aa03de2c29b322cee7714a67b1b421a8fb0b6ade7148f54fb5ea0a37f6afe5e80f052f41815174363ca2b2dc8395534c624f0f87d2f7a0e9d773dd5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d34a1f5416fdc978c6e0c7edc7d67a2

MD5 c76ac26f80988d0fcf03874d625b86af
SHA1 b04a5e95018f8eca571daa4077e66626b9ba0de6
SHA256 3dca66141315cdee30f7604013deab2fcc1dd74af93f9630fb700b7606f531ab
SHA512 23ba1357212eb135ad87fcbb81bf73fcf2e189da34f08ca1cccd40d763a856e9ca8ce5514af395caeefca2b0dd3a6fe3b8d43e060c5baf5139fb357fedb90a59

C:\Users\Admin\AppData\Local\Temp\Roblox\http\95d98e1cfee595f720d12856399cbd72

MD5 39be6457e3ff988375205765c4660895
SHA1 8e946b84ba320df9c28aaa6e759e24719ec38aba
SHA256 1194e8aa1e2ff45887bca03f3ddee55de61436c660e162ae343ee64e7d146da1
SHA512 80f75601d5887291d0f2884945dd2ca197090431fb30dab6e6ee9ef601076950922a75f23a577dc58824a8ea7f57c48c1a742cdbc13a28215bead6b2b0b47033

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0cbacc9a3c6aa07deb13db83f658936d

MD5 e3690a37568ee9fe7f191a17a47e2146
SHA1 476c939e0ca065001820946509e36ac2842fb1fa
SHA256 b8da756d34febd98745815e7ee643c49dfdf1adeece7fbdeda22487c06472f28
SHA512 c7b777cb3616fbe210b58c1e2395ffb378ffb36c2fed3af8c634e7d39667b9b433386d1a284f936a1d4e10e76c7a678e97216fe801cf95a0fc3fb313fc4514a3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1aac6bdbb2642f3f23fbed64d042c3f

MD5 2c65a49f36fbe81aed88d7626a0112e3
SHA1 832fc429cd021f288f5ef9531e7dad6c9c6507fc
SHA256 eb8f138e67962a5c7db64722b78454da2e3c3d656ec8d72c9bec566f10a942de
SHA512 4fe7c7a7e439f6b43bc13af9291994ff913fa65ab1d77f162c97b18ae505b1c46ffb2c9236b7c9010580b095526a58204bf182aa5d476e3d0a006b2ca450d181

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ceea000e430b7c9714bd62a61ef5eb0d

MD5 e6bf3b994b7bd85aa47c17406d367d2b
SHA1 b18be2803acd9576aaa72bb19116b09680f0cbd0
SHA256 92638ea5cef2b20242923fd21757df86c8c434ff12243d480250364b8480f2fa
SHA512 3e207bfe1b30c981fb533971769a4051c0c87ffbfcabc012606ec939c5b66f2bf59cefeb85c2b903856d6396584b2c96472965c11d90d6a1ac9f59b29cf3d664

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 f44aa7435a5dcea34eda41358da276ec
SHA1 59e5220c94832a2eadb2c23f48e66893d758051e
SHA256 d44b009ce87c0fe1de17d7e9a60464328a2220d17dda0d8b8b2809c038b04b8c
SHA512 58ee8197faa0cd26a5776f932ba424a9bad51acf37ce15f8e115414c57a8100a29accf17d51fc91c4a35708204dc94c4a6d39632546dfa96d0e3fb20b66279b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2234ec44e19c7c30ba17f25c5117872f
SHA1 c1b601002808f9d27e5e5011ad8eddf91bee7c64
SHA256 bf34437649595e260388a8054a1f52348c88dad66ce1998941706b72691c68af
SHA512 fce1f257ec1145044a0f775de9ae4c5064b7fb49a08981cea92edea642434c14fcda04f088b2789a172b702203169b1ef12e76cc18a53107648d92d5cda134d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 523fbf66739928e9e7c57be5ecb9f70d
SHA1 e7b8d4d9aa6502785e1c18d05050bdd4a8e2616e
SHA256 4e5aa93bdb696af8faa7c8707d04008ae75771a43ec29c3cdd2960cee24284bd
SHA512 a2f398904af1678a7976409ca6c0431610a1041e5c10ce8303bd2e211ec19c5212977e284010a01048ead6d25b48eb15c4537c965b5f251f1c463f1c8014a3d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 00435d2816814a3d83ace83fa9f296ee
SHA1 6743e8ccfce6b6a3014399b98beef01325737b54
SHA256 d212aab953f2d2eb0a8c7c61bf27caac31a821abd7cdfb6ec1b788dd77e7b1bb
SHA512 fc7a599469843cb719d85948fe33fb4365114fb5dd2d5e89931a547c7172c7903aef6d740ec23e53677f96aa2be9dbccb306e6398a0f537b316c8ab1caf43f34

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8591808bd9ad1e205a25e94dd33726a4
SHA1 214177bd2d324f60c764f6ef3d1e7aa22959f594
SHA256 f1f34f1c65963e8dfd8dcb1b6f12b8080c64785bee49dce60a5c8f724ceee354
SHA512 1a6ad5f46eb2290c43cab9c712e5e2e79480a55d96feb03d8f3e826d1a8dfb44af0349b7faf3f60a625c3345823bb4a7db70a0eaefc8a2c9e748d51a48fc801a

C:\Users\Admin\AppData\Local\Temp\{3FA0F317-6E10-46FE-ABFB-C3B7167571B1}-BGAUpdate.exe

MD5 3f208f4e0dacb8661d7659d2a030f36e
SHA1 07fe69fd12637b63f6ae44e60fdf80e5e3e933ff
SHA256 d3c12e642d4b032e2592c2ba6e0ed703a7e43fb424b7c3ab5b2e51b53d1d433b
SHA512 6c8fce43d04dd7e7f5c8bf275ba01e24a76531e89cc02f4b2f23ab2086f7cf70f485c4240c5ea41bf61cb7ceee471df7e7bdc1b17dfdd54c22e4b02ff4e14740

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f3735fd35f1c5000e5b8b3524e9fff1d
SHA1 81b650be57336b45f0bf8169f1278ec601e45ba5
SHA256 58a405f38f5fdbb75b1b1eaac7deb40279d873c3e2451ceb16d4dc228b4e39cf
SHA512 72b1b081dc7e009414ad037ea1cb9687e3f27990870ffbb83fbe5ad23fe47bf2dbdc4aa4ee881f1d759f1fe2d2ab024db70e37b2580ff6703622011e002be31f

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 5350b44fba70558455a8fdacbd4ef755
SHA1 dd7a5489789a12e44bf913c52064ac9bb330a21d
SHA256 8a9c843285258d32f50f404e4feeed5e7d1082de3c75c38110716a733495f9c7
SHA512 6d44b0a9feb41c99900be5b44ebdecb768dd0ddc4330912c1fba49d579ce8a0cc85089bca65e3d2cc558b92d59c34463b6fdf72803d8f0ec0845378b8f93f566

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000056

MD5 823259dc81b40dc318fd4a11c809fa10
SHA1 d533008b60e103b56690d75064e2e35ca4300b2c
SHA256 8028f7b9e38024c24cfc7f25c9bc57d94e4b9683612d1a3a3985bd1a1f9a6db4
SHA512 c0b3a0dfab96ea02f4526768d3398cc44787a0e0fe1224b6aa852a72a683372ca60e85c7f72d01b85c54b98e225b74ec75b1c1fa9238a191c6c62e5e6811cdf5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

MD5 4130f3eae61376552f345ab95aec4abf
SHA1 a4eb87d17f6b07dc1e0a6f583b8ec82f51868dcd
SHA256 50def726503f9f232905dd593a633e07e03041fb439ad7daff9b7b321bd0fb9b
SHA512 021158f37d37eceea13f312e68ac6481d2c030aa3fe3e30b1f12ca9305ead1f1e280bb8be4d48cd67497ec0a1f4810c19560fec34a141e640d60363a22355d54

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{37826EE1-46DF-4B9A-BD42-8B2D592238EB}\EDGEMITMP_E907B.tmp\SETUP.EX_

MD5 5070a34dbada1aaa375cc572b5fc7d0c
SHA1 e74b7ef714755870976abe3d2b4a7db0b9cc21e5
SHA256 03e7a32e1f10fced6a07dfa4e6cfd92510d4bf6929d423798e4fb5ca91fe6c20
SHA512 fed3fcbb64a59070b0efd677ca2edc982d28e37cdf7283f2777af8aca7d3760a7eefb8d01b3c2bf4b4ec3708a74c3412f0dede91e31dca1b6f8a4e4edc673aa7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5984f4dd004872350157b60b1a136b71
SHA1 8ee0d4396c7bc915a014199324c3630103e14751
SHA256 4ea9e637b99c780f283e2ace7af1bb8ddd60f92b298d6667057b412d67cf2418
SHA512 766532e8705fc9abc2943fc42b0564563d004abaccf09a8ccc5f691fb64c4e3a86efcf301065c45c3539948638b670d2a458c6a8265287600815255100208fad

C:\Users\Admin\AppData\Local\Roblox\ClientSettings\StudioAppSettings.json

MD5 0d030bc174fee804e09faefbad2ff539
SHA1 7e0502769fc931eb9e2660d9c61b0f1924cf61be
SHA256 0eb5891219e3ae53a96eee73cb8be0298f2c022205d1f4124d13a6d173182e0d
SHA512 3cd9a3e2309d750ec192013bf8b723df128f25e0b200ce7c4fd30a64a868dbb0fd42e120c24b682b5f3e26f063547530c023edc746e86777da920fca2b9a59a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2b35d69a059f93420fb505855adc105b
SHA1 35d0063fcb6af0fd46d3d59e58af78759db51085
SHA256 15e0c2548f0d81bbebc063c842be55b693f80bd4a2d44a34b81d5f2ab17b5a85
SHA512 be196e9e9b1ce1e618d45919aaa84f1aba962d09897595db42b167dfc764cde3162fc9938f9d2d260da9c3d724a083ed1706f77d52c8101bffeb735f6329d604

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d1412349b1ebd98a0871e6829fa4a4d0
SHA1 3487916506a8255bf7523bd8d85287fb9c99e322
SHA256 5c008ccdbc7216bc78a92725e6ac6fb493a0325a235bbfc837a8f50a78f02bc9
SHA512 ff1c0b8f449a3f21f83a799e211f962eb431bfea46eb57c3403b639dffcc3d1ef14276e5fdf63ffb9a9d23531751fa82855b901ade306e8183cce00fb226b92a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1d6f541b9d533fdebb328d5a1595ed91

MD5 24401377b600165ee3459f5e286b0e10
SHA1 b8026814563ea7ba04b173277aacd4eb8965b44c
SHA256 f4fd573b9dfffbd919291bbfc76aabe9f845be3fa5f9472cd5e38258074db8bc
SHA512 715915534db81da1b7bd1618e34ea23a6464d4cb5818b009e749ed1361a430894203bb8aed1428244c98946ddc4302e4a1be8749f83d028a25f6bf5de0931ec5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e564ea93f70524954af14c2429d2fa0b

MD5 d200bbcc9bcd651ad41a4cdfa84ce933
SHA1 2b11afaf378a3a641e283519529f522b905f6f98
SHA256 a29e341307209002b9fe16e7fcb02a1f44b7287b7753bec7c8f8dd12b408ca4e
SHA512 c7d21893202e4d820c9cff5f679e7412de7238aea2948a7ad0938f185226b2e203326d761b04d9cc39cf885481ea10f3db95690b193d9a5c4f602ebbcc3586df

C:\Users\Admin\AppData\Local\Temp\Roblox\http\82ef3afd883bfd92263184395c282d19

MD5 d0bc8edbd1f20a5acc549fb653fd23a7
SHA1 5100fb2705976d67d10c4016ae89b88f99c4a58b
SHA256 223ebfb34443f26af8a7b1fe400449977cb3d1163a71e31833e5c5d1c4eea756
SHA512 21f1e36eb224111d42301d6e2337187936503d307ee1786a3464ce667db22c67900f2cf20d6076a19c5f7fe678be6a391509ea48582010d5de554acb3b881748

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3349c0e011ea9d7f6e895f2021c14542

MD5 cd60ff98e162c40266de33df999d0e73
SHA1 e136d4668e48d0172ab308ff80b59a7d002285ad
SHA256 01b680c72cc2cddab701d8d144e514a5924294b0fc3c5ecb662facb5e0761d9b
SHA512 5c9d1bd4ca9644174cc454225303c54b01797590a03c5bef536afbf8b246352592e69ca43dc0f0b4ea53041365567a56c4970aaf5f33eb3a68ee0f2289dd021c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0fd13611c88cd78b42bb6676f9ac680e

MD5 f276b5247dc58d9da8527aa1cf88965f
SHA1 22467c9961a081d5f5452a034458889814c73e1d
SHA256 804f23bd3a3b5cd3d150a49bb2c5db2779f79a325d8ee9c5a4868b9b0cfc4f73
SHA512 e9d8f9c3379e6ac6b5e7b82c67d151503cf1519189463ab7aa98c1b92d95e72267d4ed3de64de87242c06a23ca24f9cb09491815de2a869cabcffb88223e75f1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4bf096aee8836ca32b5194cf6401f410

MD5 75f3edad3ab8e6123f5cc3e80d3ae79e
SHA1 45cd757594d0650cf1ee68e47ef6b67421e5ddee
SHA256 7a4c80cbd010ed6fa2edda288259c1513b22ce12b256f2cdd6eaa006764baf67
SHA512 23de461323a0bdab9c2911e4a04731eb274ae39c0367b92c864a6352a68ec327cbc97f5d3f2a4eb0f51f771e9eca369b33246e0ff30847b3c902d38b4d04bd91

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa284439ea3d49d446b4323c515b9e27

MD5 6934a9a17acf3e94bf8b661fa9310ce5
SHA1 8866c7bed5fcf99c35d93fbd5369e8b4f0974eac
SHA256 440fddc0175950039cc33fe8f23ca73e0157eeeb38d23513031ca29fce24ddbb
SHA512 c16dc74e99108a22679c9c293c3b3cd4337ff48578fd5ade4de832979c5ccd8d815ce5555902f722373060a7f8dabf69d199b706341e8f6a8b29884df8b249c3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\16c68c9a96142be6dc51e7c9b8a57138

MD5 4e7ffb5ab209e6e5c0460eaec8038664
SHA1 053d27fc9502e75ff03caf03cc0de389224ad5c6
SHA256 461221b3727d4e093109cf9ad369b9bbfa97b8947175ba5c4780c23629191743
SHA512 993e025141d1604926b1d6f9b419811ae8f62ffdbf3497817b56f36933856089f18927f0fed844600f7baa27286a948b54bd3a69256dd8c076f5f9a3bc0b5925

C:\Users\Admin\AppData\Local\Temp\Roblox\http\de442e6b1c49b6e99833cff082975721

MD5 54917a6d5e39a0b323d24f44db089c5c
SHA1 ae2178f2ab8fe2d83795f5f11c72cd5bd3209f04
SHA256 7cb0e9464b189a897a98787c22fcc3241e42f947cf0d79e5591b54fc83fd2e56
SHA512 1dee554c7f70c71016ab8b7373352d21585b0dfee0c5377650eab04b969354cf01df259638686797acea67797c633d5d18092563f9219e2a8e8186790bb62bb9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\db043dccdb4a8fda1a71347ca65249df

MD5 fa30b8fdbd8f1e312d6ae65d86462534
SHA1 cfe1f674482ecb2e8819a96a7609af0a6db6df80
SHA256 e105b442b73b89a4fba0c822a4887348894666ff99eb518d95f0ba87d570bbfc
SHA512 41fc624f98d2c9c07ab47d9b00df90f7a909d7e39a5ecd64d6902b4cccad6bf13ece8cd9075c237804db45ee2ac722b894d3331a5a84df8286a3131938abd36e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8d74b8e3cc3fd1e3d1d88f37ecc9437

MD5 f91f07eef6e27b761e819e7763a8ba29
SHA1 5c257a30c9654f173e9ec1312d8a4fc9ccd5f7d4
SHA256 0f3dfba690cae8e21fe178bd8b63f8a6f7e9ffd7bb9a9d70a7843bedd199a69b
SHA512 b70c98efefe529457c21213a648ebfa64b39cbe268c2ab659758864d7d60926f49ec88a4b5c12377afb3647585a6840f03dc95c3254928503e30d1a59b17ba03

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5056698692266e2d3e61e3795da7665c

MD5 e0c70180510b1fb13168ddafe71f9c50
SHA1 6d85b19bc836e33bdafd16ce7fcd179d437b2366
SHA256 2479f80ff1678872e22a93a00b824e61dcae1f957e89c44cd1b0fd0624c2fc4c
SHA512 648474de208a8decee3d3de1a92be6cf11f1228eed058ad1f1fa0a20bf8609249b5a5beceacaca9632bf4c2038dcd5fdb2dacf2de17f5924faf10b1d7be2125e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\43851322c99fdcb19dbb87a03d34f44b

MD5 375624a5052b25b47e4d79175626a972
SHA1 4cfbcd3abcafa161a009a559312fda741c5a724d
SHA256 ce02ad33503634d64591c078ca0f91e44c84f28348303a1d341eb9749a2529d8
SHA512 f66393fd087f11aa153f72734acd679a04c6f5a6c7eac9b208492781f952ad941400dcfa9b1ee6da330460b13025ab72be8add4d7d8ade24b7499153442c188f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2fb5743cd1bed10d8eecdc324a1381ad

MD5 88fd106d956468d9eb5a49148a61a957
SHA1 eb425b751a5e4e33b47fd8b87b781e1528a5bb59
SHA256 244891e87481e03c46c1b0db6ee9be2d5c1260feeaa5004f91a5dd0d2497339e
SHA512 5b34f1954d6f41e09e6e529da5d791e73474f4643026b0f44a9d7ce8b0e0ef6eee56daa04787f4b0f7cbcba73c0cd5101b79c61fd23a1de907c47824736bcf4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5de7f0eb0c78d8a8d86d559cc9904235
SHA1 28051d2910557f9ce03f18259acf8ea8988521b3
SHA256 b92cab3d4f74194d286c4c06fa670b837c0dfae2802882a4b8f4a72eb744d9d1
SHA512 304871fa2e978beecb2b4252ed9824cd91a414c6d8969cd94b6436ab8e326272837b68494cd3e50fabbec622c532a5466922ca0e374147949e1d283db57ad7cc

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_Wramrx.rbxl

MD5 efa924a18ee021b613ca6f31a213a84a
SHA1 d13e6c4299b771faeb6655aec4c7e50ce9393783
SHA256 cece7365fe61fe2fb8ac7bbd43b1083f088a4074a9efd2ccb95670e827841996
SHA512 e6040722ff257740bdc3ee3e5de9f7af465a7b8906a73874de17493d0cc83d8e015284a57208dd637eea79f76909238fadf8b3730d3dae284b6f2bdf00fd2287

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a5e29d48fbc95471800e7939396aecd4
SHA1 06d2d6425afb8689d312aa3062673f17c23d9b60
SHA256 d98717ef4df2a29127876d892b46cbe00b3b96063ab5972a31a01c4d5da6415b
SHA512 6f4a8bc1525e0bb06feb4b06f5cf205a56680439e46852e66cf5738ec0bbd25f7b96339111604dea0de6bf1b81fb78819dddaadb646ba4556c81d7c73d4e4f14