Analysis Overview
Threat Level: Likely malicious
The file https://create.roblox.com/landing was found to be: Likely malicious.
Malicious Activity Summary
Downloads MZ/PE file
Modifies Installed Components in the registry
Sets file execution options in registry
Registers COM server for autorun
Executes dropped EXE
Checks computer location settings
Loads dropped DLL
Checks whether UAC is enabled
Installs/modifies Browser Helper Object
Adds Run key to start application
Checks installed software on the system
Drops desktop.ini file(s)
Checks system information in the registry
Drops file in System32 directory
Drops file in Program Files directory
Enumerates physical storage devices
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious behavior: AddClipboardFormatListener
Modifies data under HKEY_USERS
Suspicious behavior: GetForegroundWindowSpam
NTFS ADS
System policy modification
Suspicious use of SendNotifyMessage
Modifies Internet Explorer settings
Suspicious use of SetWindowsHookEx
Checks processor information in registry
Modifies registry class
Suspicious use of WriteProcessMemory
Enumerates system info in registry
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-04-30 20:22
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-04-30 20:22
Reported
2024-04-30 21:07
Platform
win10v2004-20240426-en
Max time kernel
2693s
Max time network
2699s
Command Line
Signatures
Downloads MZ/PE file
Modifies Installed Components in the registry
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
Sets file execution options in registry
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe | C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" | C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe | C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" | C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe | N/A |
Checks computer location settings
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation | C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
Executes dropped EXE
Loads dropped DLL
Registers COM server for autorun
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe\"" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO\\ie_to_edge_bho_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=F3A7224C52134C6A92998EBBEB57F78F" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C05A7DB9-8AB0-45C1-A298-247548F8DF00}\BGAUpdate.exe | N/A |
Checks installed software on the system
Checks whether UAC is enabled
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
Drops desktop.ini file(s)
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Videos\Captures\desktop.ini | C:\Windows\system32\svchost.exe | N/A |
Installs/modifies Browser Helper Object
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
Checks system information in the registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
Drops file in System32 directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\Locales\sl.pak | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Scripting\Light\Standard\PluginRunContext.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaApp\icons\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\2D-Collision-Matchers\2D-Collision-Matchers\above.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\TerrainTools\mtrl_sand.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DesignSystem\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Emotes\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Large\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\Tool.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\utilities\globals\null.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Dash\Dash\flat.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\AmpUpsell\QRCodeDisplay.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\LuauPolyfill\LuauPolyfill\default.rbxp | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ViewSelector\background.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\DraggerTools\Light\Large\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Navigation\Light\Large\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\execution\__tests__\variables.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RbxDesignFoundations-77b1a117-2f841688\RbxDesignFoundations\tokens\Desktop\Builder\Light\Semantic.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\DataLoader\lock.toml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Extras\Tumbler.qml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\DeveloperFramework\UIOff_dark.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Light\Large\cage_tool.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\PlatformContent\pc\textures\diamondplate\normaldetail.dds | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Localization\Locales\en-us.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls\ProgressBar.qml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\VoiceChat\SpeakerNew\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\Notifications\Light\SI-Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\PurchasePrompt.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends-f5bcbc0c-f336d473\RoduxFriends\Reducers\Friends\utils\countUserFriendsInStore.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppUIBloxConfig\ArgCheck.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Locales\ka.pak | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaApp\ExternalSite\roblox.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\react\parser\init.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RobloxRequests\lock.toml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\roblox_lua-result\lock.toml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ProfileQRCode\AppHeaderBar.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\ToggleSwitch.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Server\ClientChat\DefaultClientChatModules\MessageCreatorModules\WhisperMessage.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Locales\ca-Es-VALENCIA.pak | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppToastsRodux\Loggers.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\identity_proxy\win10\identity_helper.Sparse.Canary.msix | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\Fusion\MenuBar.qml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\HttpRequest\HttpRequest\RequestFunctions\RequestAsync.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ReactReconciler\Shared.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppSessionization\RobloxAppSessionization\default.rbxp | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\Universal\PageIndicator.qml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Common\httpRequest.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\NetworkingBlocking\NetworkingBlocking\init.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\AccountSelector.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ToastNotification\Dash.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Lobby\Buttons\scroll_up.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\MenuBar\arrow_down.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Shared\Shared\ReactSharedInternals\init.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\ApolloProfileInsights.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\FriendsLanding\FormFactor.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\UserLib\AppCommonLib.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\GameSettings\Error.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\PathEditor\Dark\Large\BoundingBoxRotateHandle.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\VoiceChat\Analytics.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\VoiceChat\Components\VoiceIndicator.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppNavigation\Dev\JestGlobalsOld.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
Enumerates physical storage devices
Checks processor information in registry
| Description | Indicator | Process | Target |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "111" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "56" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "80" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "136" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "147" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "170" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "179" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "60" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "75" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "104" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "135" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "153" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "203" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "7" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "24" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "37" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "115" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "167" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "68" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "134" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "180" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "85" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "176" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "187" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "154" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "182" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "57" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "94" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "193" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "162" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "103" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "146" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "191" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "199" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "15" | C:\Windows\System32\svchost.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.ProcessLauncher.1.0\ = "Microsoft Edge Update Process Launcher Class" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback.1.0\ = "Microsoft Edge Update Legacy On Demand" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LoadUserSettings = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\PROGID | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachine.1.0\ = "Microsoft Edge Update Broker Class Factory" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\VersionIndependentProgID\ = "ie_to_edge_bho.IEToEdgeBHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeMHT\shell\open\command\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --single-argument %1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods\ = "16" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ = "IAppBundleWeb" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB}\ = "IPolicyStatus5" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\APPID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachine.1.0\CLSID\ = "{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods\ = "10" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\ProgID\ = "MicrosoftEdgeUpdate.Update3WebMachineFallback.1.0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods\ = "8" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\NumMethods\ = "10" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\AppUserModelId = "MSEdge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\.pdf | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ = "IGoogleUpdateCore" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\Elevation\IconReference = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\msedgeupdate.dll,-1004" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\Elevation\Enabled = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods\ = "24" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\AppID | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods\ = "4" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\VERSIONINDEPENDENTPROGID | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\MSEdgePDF\shell\runas\command | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\.xhtml | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\ = "Google Update Policy Status Class" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine.1.0\CLSID\ = "{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NumMethods\ = "4" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
NTFS ADS
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Downloads\Unconfirmed 864914.crdownload:SmartScreen | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: AddClipboardFormatListener
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Windows\system32\OpenWith.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
System policy modification
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff92b6e46f8,0x7ff92b6e4708,0x7ff92b6e4718
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2912 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5228 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5228 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5824 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6256 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2728 /prefetch:8
C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
MicrosoftEdgeWebview2Setup.exe /silent /install
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjY2NjI5QjYtQzAyMC00NDE2LTk2NUEtOEIyNTFERTNFOTQyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1QkEzQTFGNC1CMEIzLTQ0NTQtQUE4NS00N0Y2MjM1MzRGRkV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7RHhPYmpIR2ErblJhMmF0QzN3bytJRXBDNzgrWlllQVVia1hwREMyY2o3VT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4NS4yOSIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUyOTYyMjQ3MTQiIGluc3RhbGxfdGltZV9tcz0iNjEwIi8-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{266629B6-C020-4416-965A-8B251DE3E942}" /silent
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjY2NjI5QjYtQzAyMC00NDE2LTk2NUEtOEIyNTFERTNFOTQyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1MzdDNjQ3Qy02NzcxLTQyRDItOTEzMi1ENjlENzE0RDMzMjJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUzMDEyMzQ0MjMiLz48L2FwcD48L3JlcXVlc3Q-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\MicrosoftEdge_X64_124.0.2478.67.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x22c,0x230,0x234,0x208,0x238,0x7ff63b0b88c0,0x7ff63b0b88cc,0x7ff63b0b88d8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6256 /prefetch:2
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjY2NjI5QjYtQzAyMC00NDE2LTk2NUEtOEIyNTFERTNFOTQyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntENzBBQjlGNi1BOTc3LTQ2RUQtODhDRC1DQzZEQjYyMzk5MkR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7VlBRb1AxRitmcTE1d1J6aDFrUEw0UE1wV2g4T1JNQjVpenZyT0MvY2hqUT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTI0LjAuMjQ3OC42NyIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9Ii0xIiBpbnN0YWxsZGF0ZT0iLTEiPjx1cGRhdGVjaGVjay8-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_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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2MDE3MzE0MzgyIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iOTA0IiBkb3dubG9hZF90aW1lX21zPSIyNDY0NiIgZG93bmxvYWRlZD0iMTcyNzIzNzY4IiB0b3RhbD0iMTcyNzIzNzY4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI0Mzk5OSIvPjwvYXBwPjwvcmVxdWVzdD4
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=632.4180.13035476170489287346
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ff9070bceb8,0x7ff9070bcec4,0x7ff9070bced0
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1760,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1756 /prefetch:2
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1880,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1956 /prefetch:3
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2108,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:8
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3524,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4156,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3576,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x154 0x2cc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714508742105+avatar+browsertrackerid:1714508629942001+robloxLocale:en-US+gameLocale:en-US+channel:+browser:edge+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:15350820071+universeId:5294748261
C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C05A7DB9-8AB0-45C1-A298-247548F8DF00}\BGAUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C05A7DB9-8AB0-45C1-A298-247548F8DF00}\BGAUpdate.exe" --edgeupdate-client --system-level
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Q0Q1MDI5MEItNEUzMi00M0U1LUJCOTMtQjRDNkM3NEFCRUI4fSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntDNzM3Rjk2OS02NTRFLTRBNzItQjVEQi00ODA5QkZDRkE5RTl9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7MUZBQjhDRkUtOTg2MC00MTVDLUE2Q0EtQUE3RDEyMDIxOTQwfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMi4wLjAuMzQiIGxhbmc9IiIgYnJhbmQ9IkVVRkkiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iLTEiIGluc3RhbGxkYXRlPSItMSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4MzA1MzAxMzEzIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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_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-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
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{ACA71243-C09C-4162-8538-AFFF3D82437C}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{ACA71243-C09C-4162-8538-AFFF3D82437C}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{E016445C-3AF6-4B44-98FC-0E00250B7E54}"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RTAxNjQ0NUMtM0FGNi00QjQ0LTk4RkMtMEUwMDI1MEI3RTU0fSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntERjJDOTFERS01OUFGLTRDODgtQThEMi0yOEM4OEEzNTJGNzV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-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-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_UDE9MTcxNTExMzc3NCZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1VRnMzY0ElMmJ1emIwbkFoTG04R0gxSWtkaHNvaVlNc3BpckNkSGNqclV3V0dvWG51dHg2SWJ1Z0lqQnl3VXMlMmJvbjdQb3Jya3hlMUVFMGh0TTI2TEZiUGclM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIxMDQuOTEuNzEuMTQyIiBjZG5fY2lkPSIyIiBjZG5fY2NjPSJHQiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjE2MzA3OTIiIHRvdGFsPSIxNjMwNzkyIiBkb3dubG9hZF90aW1lX21zPSIxMTY4Ii8-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-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{E016445C-3AF6-4B44-98FC-0E00250B7E54}"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzEuMzkiIG5leHR2ZXJzaW9uPSIxLjMuMTg1LjI5IiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iNCIgaW5zdGFsbGRhdGV0aW1lPSIxNzE0MTM0OTgwIj48ZXZlbnQgZXZlbnR0eXBlPSIzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4OTE0MjM3MDc4Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjExMC4wLjU0ODEuMTA0IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSI0IiBpbnN0YWxsZGF0ZXRpbWU9IjE3MTQxMzU5MjEiIG9vYmVfaW5zdGFsbF90aW1lPSIxMzM1ODYwODU4MDAwMDAwMDAiIGZpcnN0X2ZyZV9zZWVuX3RpbWU9IjEzMzU4OTgyMjQwNjgzMjIxNiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIzMTExODgiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyMzcwNTYzNzI0Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\MicrosoftEdge_X64_124.0.2478.67.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff7b63388c0,0x7ff7b63388cc,0x7ff7b63388d8
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x210,0x238,0x23c,0x218,0x240,0x7ff7b63388c0,0x7ff7b63388cc,0x7ff7b63388d8
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RTg3QjVDNDItQTBFNS00OTJFLUE0RkYtOEM5QTc2MUQ1RTAyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntCQ0Y3QzVDNC1CQjUwLTQ1MDMtQTE1MS1CNEUwNEY1MjQ1NEV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-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-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNjMyOSIgcGluZ19mcmVzaG5lc3M9IntBNDgzQzcyRC1BRkE3LTRCOTUtOTI2MS0xNjg0MjMzOTJERkJ9Ii8-PC9hcHA-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-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjAiIHJkPSI2MzI5IiBwaW5nX2ZyZXNobmVzcz0ie0JFRjA0QjE3LUUxMjAtNDZDMy04MzQ2LTUwM0YyMDQ0NTU1MH0iLz48L2FwcD48L3JlcXVlc3Q-
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| DE | 18.155.153.85:443 | create.roblox.com | tcp |
| US | 8.8.8.8:53 | o293668.ingest.sentry.io | udp |
| US | 34.120.195.249:443 | o293668.ingest.sentry.io | tcp |
| US | 8.8.8.8:53 | 85.153.155.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 134.32.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 56.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| US | 8.8.8.8:53 | 232.212.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| US | 8.8.8.8:53 | economy.roblox.com | udp |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| US | 8.8.8.8:53 | locale.roblox.com | udp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| US | 8.8.8.8:53 | users.roblox.com | udp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| US | 8.8.8.8:53 | webblox.roblox.com | udp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 52.222.191.4:443 | webblox.roblox.com | tcp |
| DE | 52.222.191.4:443 | webblox.roblox.com | tcp |
| US | 8.8.8.8:53 | region1.google-analytics.com | udp |
| US | 216.239.34.36:443 | region1.google-analytics.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | udp |
| US | 8.8.8.8:53 | ncs.roblox.com | udp |
| DE | 128.116.44.4:443 | ncs.roblox.com | tcp |
| DE | 128.116.44.4:443 | ncs.roblox.com | tcp |
| US | 8.8.8.8:53 | games.roblox.com | udp |
| DE | 128.116.44.4:443 | games.roblox.com | udp |
| US | 8.8.8.8:53 | 249.195.120.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.44.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 233.69.68.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 3.44.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.191.222.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.34.239.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 204.79.197.237:443 | g.bing.com | tcp |
| US | 8.8.8.8:53 | thumbnails.roblox.com | udp |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| NL | 23.62.61.161:443 | www.bing.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 133.190.18.2.in-addr.arpa | udp |
| NL | 23.62.61.161:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 161.61.62.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 27.160.77.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 88.156.103.20.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 216.239.34.36:443 | region1.google-analytics.com | udp |
| US | 8.8.8.8:53 | clientsettings.roblox.com | udp |
| US | 8.8.8.8:53 | setup.rbxcdn.com | udp |
| US | 2.18.190.72:443 | setup.rbxcdn.com | tcp |
| US | 2.18.190.72:443 | setup.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 72.190.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.31.95.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 157.123.68.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.160.77.104.in-addr.arpa | udp |
| N/A | 127.0.0.1:55798 | tcp | |
| US | 8.8.8.8:53 | client-telemetry.roblox.com | udp |
| DE | 128.116.44.3:443 | client-telemetry.roblox.com | tcp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| US | 8.8.8.8:53 | setup.rbxcdn.com | udp |
| DE | 52.85.92.17:443 | setup.rbxcdn.com | tcp |
| N/A | 127.0.0.1:55802 | tcp | |
| DE | 52.85.92.17:443 | setup.rbxcdn.com | tcp |
| DE | 52.85.92.17:443 | setup.rbxcdn.com | tcp |
| N/A | 127.0.0.1:55805 | tcp | |
| N/A | 127.0.0.1:55808 | tcp | |
| US | 8.8.8.8:53 | 17.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 42.56.20.217.in-addr.arpa | udp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| US | 8.8.8.8:53 | css.rbxcdn.com | udp |
| US | 8.8.8.8:53 | static.rbxcdn.com | udp |
| US | 8.8.8.8:53 | js.rbxcdn.com | udp |
| DE | 52.222.191.12:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.12:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.12:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.12:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.12:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.12:443 | css.rbxcdn.com | tcp |
| DE | 52.85.92.94:443 | static.rbxcdn.com | tcp |
| DE | 52.85.92.94:443 | static.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | msedge.api.cdp.microsoft.com | udp |
| US | 216.239.34.36:443 | region1.google-analytics.com | udp |
| US | 23.102.129.60:443 | msedge.api.cdp.microsoft.com | tcp |
| US | 8.8.8.8:53 | 12.191.222.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 94.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.191.222.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 60.129.102.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | roblox.com | udp |
| US | 128.116.32.4:443 | roblox.com | tcp |
| DE | 52.222.191.12:443 | css.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | roblox-api.arkoselabs.com | udp |
| US | 8.8.8.8:53 | images.rbxcdn.com | udp |
| US | 8.8.8.8:53 | metrics.roblox.com | udp |
| US | 104.18.33.170:443 | roblox-api.arkoselabs.com | tcp |
| DE | 18.155.153.43:443 | images.rbxcdn.com | tcp |
| DE | 18.155.153.43:443 | images.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | apis.rbxcdn.com | udp |
| US | 2.18.190.83:443 | apis.rbxcdn.com | tcp |
| DE | 128.116.44.4:443 | metrics.roblox.com | udp |
| US | 8.8.8.8:53 | 170.33.18.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 4.32.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.153.155.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.190.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | msedge.f.tlu.dl.delivery.mp.microsoft.com | udp |
| GB | 104.77.160.11:80 | msedge.f.tlu.dl.delivery.mp.microsoft.com | tcp |
| US | 8.8.8.8:53 | 11.160.77.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 19.229.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | assetgame.roblox.com | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | udp |
| US | 8.8.8.8:53 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| US | 34.120.195.249:443 | o293668.ingest.sentry.io | udp |
| US | 8.8.8.8:53 | realtime-signalr.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| US | 8.8.8.8:53 | webblox.roblox.com | udp |
| DE | 52.222.191.129:443 | webblox.roblox.com | tcp |
| US | 8.8.8.8:53 | 129.191.222.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | itemconfiguration.roblox.com | udp |
| US | 8.8.8.8:53 | premiumfeatures.roblox.com | udp |
| DE | 128.116.44.4:443 | premiumfeatures.roblox.com | udp |
| US | 8.8.8.8:53 | t4.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t7.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| US | 2.18.190.133:443 | t6.rbxcdn.com | tcp |
| DE | 52.85.92.52:443 | t7.rbxcdn.com | tcp |
| DE | 52.85.92.92:443 | t4.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 52.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 92.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| US | 8.8.8.8:53 | ephemeralcounters.api.roblox.com | udp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:63676 | tcp | |
| N/A | 127.0.0.1:63685 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:63688 | tcp | |
| N/A | 127.0.0.1:63692 | tcp | |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| US | 8.8.8.8:53 | css.rbxcdn.com | udp |
| US | 8.8.8.8:53 | css.rbxcdn.com | udp |
| US | 8.8.8.8:53 | static.rbxcdn.com | udp |
| US | 8.8.8.8:53 | static.rbxcdn.com | udp |
| US | 8.8.8.8:53 | js.rbxcdn.com | udp |
| US | 8.8.8.8:53 | js.rbxcdn.com | udp |
| US | 8.8.8.8:53 | images.rbxcdn.com | udp |
| US | 8.8.8.8:53 | images.rbxcdn.com | udp |
| DE | 52.85.92.57:443 | static.rbxcdn.com | tcp |
| DE | 52.85.92.57:443 | static.rbxcdn.com | tcp |
| DE | 52.222.191.42:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.42:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.42:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.42:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.42:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.42:443 | css.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 18.155.153.95:443 | images.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| DE | 52.222.191.22:443 | js.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | roblox.com | udp |
| US | 8.8.8.8:53 | roblox.com | udp |
| US | 8.8.8.8:53 | roblox-api.arkoselabs.com | udp |
| US | 8.8.8.8:53 | roblox-api.arkoselabs.com | udp |
| DE | 52.222.191.42:443 | css.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | roblox.com | tcp |
| US | 8.8.8.8:53 | metrics.roblox.com | udp |
| US | 8.8.8.8:53 | metrics.roblox.com | udp |
| US | 104.18.33.170:443 | roblox-api.arkoselabs.com | tcp |
| DE | 128.116.44.4:443 | metrics.roblox.com | udp |
| DE | 128.116.44.4:443 | metrics.roblox.com | tcp |
| US | 8.8.8.8:53 | apis.rbxcdn.com | udp |
| US | 8.8.8.8:53 | apis.rbxcdn.com | udp |
| FR | 128.116.122.4:443 | roblox.com | tcp |
| US | 104.18.33.170:443 | roblox-api.arkoselabs.com | udp |
| US | 2.18.190.83:443 | apis.rbxcdn.com | tcp |
| DE | 128.116.44.4:443 | metrics.roblox.com | udp |
| US | 8.8.8.8:53 | auth.roblox.com | udp |
| US | 8.8.8.8:53 | auth.roblox.com | udp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| US | 2.18.190.83:443 | apis.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 57.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 42.191.222.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.153.155.18.in-addr.arpa | udp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | udp |
| US | 8.8.8.8:53 | 4.122.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:443 | dns.google | tcp |
| US | 8.8.8.8:443 | dns.google | tcp |
| US | 8.8.4.4:443 | dns.google | tcp |
| US | 8.8.8.8:53 | 4.4.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:443 | dns.google | udp |
| US | 8.8.8.8:53 | users.roblox.com | udp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| US | 8.8.8.8:53 | realtime-signalr.roblox.com | udp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:64123 | tcp | |
| N/A | 127.0.0.1:64325 | tcp | |
| US | 8.8.8.8:53 | develop.roblox.com | udp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| US | 8.8.8.8:53 | assetgame.roblox.com | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| US | 8.8.8.8:53 | clientsettings.roblox.com | udp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | tcp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| US | 8.8.8.8:53 | thumbnails.roblox.com | udp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| US | 8.8.8.8:53 | assetdelivery.roblox.com | udp |
| N/A | 127.0.0.1:49179 | tcp | |
| N/A | 127.0.0.1:49181 | tcp | |
| N/A | 127.0.0.1:49183 | tcp | |
| N/A | 127.0.0.1:49196 | tcp | |
| N/A | 127.0.0.1:49199 | tcp | |
| N/A | 127.0.0.1:49313 | tcp | |
| N/A | 127.0.0.1:49355 | tcp | |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| GB | 104.77.160.16:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.16:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.16:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.16:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.16:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.16:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.16:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.16:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c2.rbxcdn.com | udp |
| DE | 52.85.92.87:443 | c2.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | t7.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t4.rbxcdn.com | udp |
| DE | 52.85.92.45:443 | t7.rbxcdn.com | tcp |
| DE | 52.85.92.15:443 | t4.rbxcdn.com | tcp |
| DE | 52.85.92.98:443 | t6.rbxcdn.com | tcp |
| N/A | 127.0.0.1:49363 | tcp | |
| US | 8.8.8.8:53 | 16.160.77.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 45.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 87.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 98.92.85.52.in-addr.arpa | udp |
| N/A | 127.0.0.1:49373 | tcp | |
| N/A | 127.0.0.1:49391 | tcp | |
| N/A | 127.0.0.1:49396 | tcp | |
| N/A | 127.0.0.1:49403 | tcp | |
| N/A | 127.0.0.1:49445 | tcp | |
| N/A | 127.0.0.1:49447 | tcp | |
| N/A | 127.0.0.1:49449 | tcp | |
| N/A | 127.0.0.1:49453 | tcp | |
| N/A | 127.0.0.1:49631 | tcp | |
| N/A | 127.0.0.1:49638 | tcp | |
| N/A | 127.0.0.1:49640 | tcp | |
| N/A | 127.0.0.1:49642 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| N/A | 127.0.0.1:49673 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| US | 8.8.8.8:53 | gamejoin.roblox.com | udp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | udp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | udp |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:49694 | tcp | |
| N/A | 127.0.0.1:49701 | tcp | |
| N/A | 127.0.0.1:49704 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:49707 | tcp | |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:49725 | tcp | |
| N/A | 127.0.0.1:49728 | tcp | |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| US | 8.8.8.8:53 | gamejoin.roblox.com | udp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:50962 | tcp | |
| N/A | 127.0.0.1:50964 | tcp | |
| N/A | 127.0.0.1:50966 | tcp | |
| N/A | 127.0.0.1:50979 | tcp | |
| N/A | 127.0.0.1:50982 | tcp | |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| US | 8.8.8.8:53 | avatar.roblox.com | udp |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| DE | 128.116.5.33:60446 | udp | |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| DE | 52.85.92.15:443 | t4.rbxcdn.com | tcp |
| DE | 52.85.92.98:443 | t6.rbxcdn.com | tcp |
| DE | 52.85.92.45:443 | t7.rbxcdn.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| US | 8.8.8.8:53 | 33.5.116.128.in-addr.arpa | udp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| N/A | 127.0.0.1:50988 | tcp | |
| DE | 52.85.92.87:443 | c2.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c1.rbxcdn.com | udp |
| DE | 54.230.206.88:443 | c1.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c6.rbxcdn.com | udp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 54.230.206.88:443 | c1.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c5.rbxcdn.com | udp |
| DE | 52.85.92.87:443 | c2.rbxcdn.com | tcp |
| DE | 54.230.206.10:443 | c6.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c7.rbxcdn.com | udp |
| US | 8.8.8.8:53 | c3.rbxcdn.com | udp |
| DE | 54.230.206.16:443 | c5.rbxcdn.com | tcp |
| DE | 54.230.206.83:443 | c7.rbxcdn.com | tcp |
| US | 205.234.175.102:443 | c3.rbxcdn.com | tcp |
| N/A | 127.0.0.1:51027 | tcp | |
| N/A | 127.0.0.1:51150 | tcp | |
| N/A | 127.0.0.1:51153 | tcp | |
| N/A | 127.0.0.1:51173 | tcp | |
| N/A | 127.0.0.1:51220 | tcp | |
| N/A | 127.0.0.1:51222 | tcp | |
| N/A | 127.0.0.1:51224 | tcp | |
| N/A | 127.0.0.1:51226 | tcp | |
| N/A | 127.0.0.1:51228 | tcp | |
| N/A | 127.0.0.1:51230 | tcp | |
| N/A | 127.0.0.1:51409 | tcp | |
| N/A | 127.0.0.1:51411 | tcp | |
| N/A | 127.0.0.1:51413 | tcp | |
| N/A | 127.0.0.1:51420 | tcp | |
| N/A | 127.0.0.1:51422 | tcp | |
| N/A | 127.0.0.1:51444 | tcp | |
| N/A | 127.0.0.1:51453 | tcp | |
| N/A | 127.0.0.1:51464 | tcp | |
| N/A | 127.0.0.1:51470 | tcp | |
| N/A | 127.0.0.1:51478 | tcp | |
| N/A | 127.0.0.1:51491 | tcp | |
| N/A | 127.0.0.1:51493 | tcp | |
| US | 8.8.8.8:53 | 88.206.230.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 10.206.230.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 16.206.230.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 102.175.234.205.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.206.230.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | chat.roblox.com | udp |
| DE | 128.116.44.4:443 | chat.roblox.com | tcp |
| US | 8.8.8.8:53 | economy.roblox.com | udp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| N/A | 127.0.0.1:51522 | tcp | |
| N/A | 127.0.0.1:51525 | tcp | |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| US | 8.8.8.8:53 | t2.rbxcdn.com | udp |
| DE | 52.85.92.98:443 | t6.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c0.rbxcdn.com | udp |
| DE | 54.230.206.21:443 | t2.rbxcdn.com | tcp |
| DE | 52.85.92.93:443 | c0.rbxcdn.com | tcp |
| DE | 52.85.92.93:443 | c0.rbxcdn.com | tcp |
| DE | 52.85.92.93:443 | c0.rbxcdn.com | tcp |
| DE | 52.85.92.93:443 | c0.rbxcdn.com | tcp |
| DE | 52.85.92.93:443 | c0.rbxcdn.com | tcp |
| DE | 54.230.206.83:443 | c7.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c4.rbxcdn.com | udp |
| DE | 52.85.92.72:443 | c4.rbxcdn.com | tcp |
| DE | 54.230.206.16:443 | c5.rbxcdn.com | tcp |
| N/A | 127.0.0.1:51536 | tcp | |
| N/A | 127.0.0.1:51538 | tcp | |
| DE | 54.230.206.10:443 | c6.rbxcdn.com | tcp |
| DE | 52.85.92.72:443 | c4.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 72.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 93.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.206.230.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | itemconfiguration.roblox.com | udp |
| DE | 128.116.44.4:443 | itemconfiguration.roblox.com | tcp |
| DE | 54.230.206.16:443 | c5.rbxcdn.com | tcp |
| DE | 52.85.92.72:443 | c4.rbxcdn.com | tcp |
| US | 205.234.175.102:443 | c3.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | t0.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t3.rbxcdn.com | udp |
| DE | 18.155.145.96:443 | t0.rbxcdn.com | tcp |
| DE | 18.155.145.96:443 | t0.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | t1.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t5.rbxcdn.com | udp |
| DE | 52.85.92.50:443 | t1.rbxcdn.com | tcp |
| DE | 52.85.92.50:443 | t1.rbxcdn.com | tcp |
| DE | 52.85.92.60:443 | t3.rbxcdn.com | tcp |
| DE | 54.230.206.21:443 | t2.rbxcdn.com | tcp |
| DE | 18.154.167.22:443 | t5.rbxcdn.com | tcp |
| DE | 52.85.92.45:443 | t7.rbxcdn.com | tcp |
| DE | 18.155.145.96:443 | t0.rbxcdn.com | tcp |
| DE | 52.85.92.45:443 | t7.rbxcdn.com | tcp |
| N/A | 127.0.0.1:51662 | tcp | |
| DE | 52.85.92.45:443 | t7.rbxcdn.com | tcp |
| DE | 52.85.92.98:443 | t6.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 96.145.155.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 50.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 60.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.167.154.18.in-addr.arpa | udp |
| DE | 52.85.92.15:443 | t4.rbxcdn.com | tcp |
| DE | 52.85.92.15:443 | t4.rbxcdn.com | tcp |
| DE | 52.85.92.15:443 | t4.rbxcdn.com | tcp |
| DE | 52.85.92.50:443 | t1.rbxcdn.com | tcp |
| DE | 52.85.92.50:443 | t1.rbxcdn.com | tcp |
| DE | 18.154.167.22:443 | t5.rbxcdn.com | tcp |
| DE | 52.85.92.50:443 | t1.rbxcdn.com | tcp |
| DE | 52.85.92.98:443 | t6.rbxcdn.com | tcp |
| DE | 54.230.206.21:443 | t2.rbxcdn.com | tcp |
| DE | 18.154.167.22:443 | t5.rbxcdn.com | tcp |
| DE | 52.85.92.98:443 | t6.rbxcdn.com | tcp |
| DE | 18.154.167.22:443 | t5.rbxcdn.com | tcp |
| DE | 54.230.206.21:443 | t2.rbxcdn.com | tcp |
| DE | 18.154.167.22:443 | t5.rbxcdn.com | tcp |
| DE | 128.116.44.4:443 | itemconfiguration.roblox.com | tcp |
| US | 8.8.8.8:53 | inventory.roblox.com | udp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| N/A | 127.0.0.1:51903 | tcp | |
| N/A | 127.0.0.1:52303 | tcp | |
| N/A | 127.0.0.1:52315 | tcp | |
| N/A | 127.0.0.1:52317 | tcp | |
| N/A | 127.0.0.1:52319 | tcp | |
| N/A | 127.0.0.1:52345 | tcp | |
| N/A | 127.0.0.1:53540 | tcp | |
| N/A | 127.0.0.1:53542 | tcp | |
| N/A | 127.0.0.1:53544 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| N/A | 127.0.0.1:53612 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:53615 | tcp | |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| N/A | 127.0.0.1:53627 | tcp | |
| N/A | 127.0.0.1:53630 | tcp | |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| N/A | 127.0.0.1:53635 | tcp | |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| N/A | 127.0.0.1:53639 | tcp | |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| US | 8.8.8.8:53 | games.roblox.com | udp |
| DE | 128.116.44.4:443 | games.roblox.com | tcp |
| US | 8.8.8.8:53 | voice.roblox.com | udp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| N/A | 127.0.0.1:53644 | tcp | |
| N/A | 127.0.0.1:53647 | tcp | |
| US | 8.8.8.8:53 | friends.roblox.com | udp |
| DE | 128.116.44.4:443 | friends.roblox.com | tcp |
| N/A | 127.0.0.1:53650 | tcp | |
| N/A | 127.0.0.1:53652 | tcp | |
| US | 8.8.8.8:53 | economy.roblox.com | udp |
| US | 8.8.8.8:53 | badges.roblox.com | udp |
| DE | 128.116.44.4:443 | badges.roblox.com | tcp |
| DE | 128.116.44.4:443 | badges.roblox.com | tcp |
| US | 8.8.8.8:53 | locale.roblox.com | udp |
| US | 8.8.8.8:53 | gameinternationalization.roblox.com | udp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| N/A | 127.0.0.1:53656 | tcp | |
| N/A | 127.0.0.1:53658 | tcp | |
| N/A | 127.0.0.1:53660 | tcp | |
| N/A | 127.0.0.1:53662 | tcp | |
| N/A | 127.0.0.1:53664 | tcp | |
| N/A | 127.0.0.1:53666 | tcp | |
| US | 8.8.8.8:53 | avatar.roblox.com | udp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| N/A | 127.0.0.1:53674 | tcp | |
| US | 8.8.8.8:53 | 24.173.189.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | msedge.api.cdp.microsoft.com | udp |
| IE | 20.166.2.191:443 | msedge.api.cdp.microsoft.com | tcp |
| US | 8.8.8.8:53 | 191.2.166.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | msedge.b.tlu.dl.delivery.mp.microsoft.com | udp |
| GB | 104.77.160.11:80 | msedge.b.tlu.dl.delivery.mp.microsoft.com | tcp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| N/A | 127.0.0.1:54209 | tcp | |
| US | 8.8.8.8:53 | users.roblox.com | udp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| N/A | 127.0.0.1:54212 | tcp | |
| US | 8.8.8.8:53 | groups.roblox.com | udp |
| DE | 128.116.44.4:443 | groups.roblox.com | tcp |
| N/A | 127.0.0.1:54216 | tcp | |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| GB | 104.91.71.141:443 | tr.rbxcdn.com | tcp |
| GB | 104.91.71.141:443 | tr.rbxcdn.com | tcp |
| GB | 104.91.71.141:443 | tr.rbxcdn.com | tcp |
| GB | 104.91.71.141:443 | tr.rbxcdn.com | tcp |
| N/A | 127.0.0.1:54219 | tcp | |
| N/A | 127.0.0.1:54221 | tcp | |
| N/A | 127.0.0.1:54223 | tcp | |
| N/A | 127.0.0.1:54225 | tcp | |
| US | 8.8.8.8:53 | 141.71.91.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | msedge.api.cdp.microsoft.com | udp |
| US | 20.7.47.135:443 | msedge.api.cdp.microsoft.com | tcp |
| US | 8.8.8.8:53 | 135.47.7.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | msedge.b.tlu.dl.delivery.mp.microsoft.com | udp |
| GB | 104.91.71.142:80 | msedge.b.tlu.dl.delivery.mp.microsoft.com | tcp |
| US | 8.8.8.8:53 | 142.71.91.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | ephemeralcounters.api.roblox.com | udp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:54417 | tcp | |
| US | 8.8.8.8:53 | assetgame.roblox.com | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:54420 | tcp | |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:54450 | tcp | |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t7.rbxcdn.com | udp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| DE | 52.85.92.108:443 | t6.rbxcdn.com | tcp |
| DE | 52.85.92.52:443 | t7.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| US | 8.8.8.8:53 | develop.roblox.com | udp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| US | 8.8.8.8:53 | thumbnails.roblox.com | udp |
| US | 8.8.8.8:53 | 108.92.85.52.in-addr.arpa | udp |
| N/A | 127.0.0.1:54460 | tcp | |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| GB | 104.77.160.27:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | t4.rbxcdn.com | udp |
| DE | 52.85.92.118:443 | t4.rbxcdn.com | tcp |
| N/A | 127.0.0.1:55419 | tcp | |
| N/A | 127.0.0.1:55429 | tcp | |
| N/A | 127.0.0.1:55514 | tcp | |
| N/A | 127.0.0.1:55563 | tcp | |
| N/A | 127.0.0.1:55788 | tcp | |
| N/A | 127.0.0.1:55790 | tcp | |
| N/A | 127.0.0.1:55792 | tcp | |
| N/A | 127.0.0.1:55794 | tcp | |
| N/A | 127.0.0.1:55796 | tcp | |
| N/A | 127.0.0.1:55928 | tcp | |
| N/A | 127.0.0.1:56141 | tcp | |
| US | 8.8.8.8:53 | 118.92.85.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | t2.rbxcdn.com | udp |
| DE | 54.230.206.9:443 | t2.rbxcdn.com | tcp |
| N/A | 127.0.0.1:56145 | tcp | |
| US | 8.8.8.8:53 | 9.206.230.54.in-addr.arpa | udp |
| US | 8.8.8.8:53 | msedge.api.cdp.microsoft.com | udp |
| US | 20.7.47.135:443 | msedge.api.cdp.microsoft.com | tcp |
| US | 8.8.8.8:53 | 25.242.123.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | ephemeralcounters.api.roblox.com | udp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:56324 | tcp | |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:56513 | tcp | |
| N/A | 127.0.0.1:61495 | tcp | |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:61564 | tcp | |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | f53207a5ca2ef5c7e976cbb3cb26d870 |
| SHA1 | 49a8cc44f53da77bb3dfb36fc7676ed54675db43 |
| SHA256 | 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23 |
| SHA512 | be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499 |
\??\pipe\LOCAL\crashpad_2468_YYHCRALWNBOZPIYF
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | ae54e9db2e89f2c54da8cc0bfcbd26bd |
| SHA1 | a88af6c673609ecbc51a1a60dfbc8577830d2b5d |
| SHA256 | 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af |
| SHA512 | e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 6ceb05115d2037452b92610938415254 |
| SHA1 | b835172d0af5e2f0908dc4fd8620b9acab1219c6 |
| SHA256 | 1a892a78fc002ed1798ff42a1a808728ab4bdf279a0527f5d99e2c2058a5db1b |
| SHA512 | 3e5f6840f282031a53dc2c1b3fa4afda0ceac89da272d67f0e065e09df372ad726006c93ba8ef19fd4258cefd07a0fa687d255185517fcdec1732b829759a0ab |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 6752a1d65b201c13b62ea44016eb221f |
| SHA1 | 58ecf154d01a62233ed7fb494ace3c3d4ffce08b |
| SHA256 | 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd |
| SHA512 | 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 13518ef25e422b245fb3a46229839e69 |
| SHA1 | e09603894249a93d1e3dd31ca00f17ef9aaf3bf4 |
| SHA256 | edc2824d72d2649754cd02b01fc7c8b314e614d95c958732dc9a3c799953b68a |
| SHA512 | 24aae90b8b2a7b72912a40551f5a982c6fe122776f3b91e9c6425a24541c544cc90f7ded9b531b7ea6703016a0e457ac6d5f6d300d45056fb8be7bb4837562bf |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 8852f5389962e58f61b39b7ee27cc218 |
| SHA1 | f20e4722829fe3be24d66f779590c22188a88dfa |
| SHA256 | c108795ea9ea9743b4862f63fc16c046bd77c560effcea26b575615fc8e37fa2 |
| SHA512 | 784f45d94692a31b76aeac4694bfde2ae865d1b2d0e9ce3b3b3755124c3833f3172a980b62fd21e1cad8c9023ed94766a92f876ade4bdf9762d959c8a0f1f94a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 1f17906f7a70c573396843d5fe356554 |
| SHA1 | 27be2915738bcbd0848c4fcf4e0e1d5af1b2a275 |
| SHA256 | ee7314913345e703c06f3ed9a63bec2f235bdb1a36ae56ae2f2aac57a83908bb |
| SHA512 | d5b54c1c2d304d56f2dd754bbea6522331444c2be0ba63b5314f9130dcf74cf0c0c38d2df42ef00b6a1e32b54f960612c639e68ba40ee2a5b4d000417b0759bc |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5795c8.TMP
| MD5 | 09e95c41f01f73665c72451fdcdbab5b |
| SHA1 | ffcd92dc8de5993e4a838f6c5cd808e7a621c6fd |
| SHA256 | 1e9ba5d3e9328951137516712dd50a50d6f003f9e9bbb5308c4a6b217a6838b6 |
| SHA512 | 612944ec1d97ac6184c4afe395ac02c7c91fed4c46daa273319631c624d3a58b54d5917f49d99fb0160912a8bb240b2e1f54ade341bbfcf7f6cfc1fa4064690f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 908f501c0d28d4537ae53e93be412c37 |
| SHA1 | 365b98a33829779a6ba6726166a4d5e0f44579c3 |
| SHA256 | 6157ecd1c2037dcee0f7567c8cef899deb153be52e47ec7149e401d8615cd8a2 |
| SHA512 | 7fa9746e148c5b8b1ccd89e6140562e0d2f11bd5c4a23806afd9168db23007df1673eda10c46882bfb7d1c6197bd9bc3bf2f255f860e3414da04a3bc41d721e1 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | d68f62a2ecb8ba69e043536f38dd699c |
| SHA1 | 10e113e13ec7b9118f907b2b81cafe3237ff9bfa |
| SHA256 | 3d6a2a5e077cf04360085ac71b79c6582b91d85d544ef56b08a51103eb27c7ea |
| SHA512 | a882fc637eeebdc97ebe546ad5eeb0032009bda116048be6d14bd0fdaed2f81f26f310cf04dd3392af3bed4a125078ad04bb1dd1a7fdf6ffa40261492e3a68e0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 57dbf7a9d00d5e0f0f0eaec142e31b01 |
| SHA1 | 2a1c03c22fd991345ae66eee4b75c2399a4024ee |
| SHA256 | 0558911d955327a084e041d525e4a1f605baeee845dc59104fcb3f34beb3f324 |
| SHA512 | f2ebb456536988db656dfe774bfd30521c79aca523bbe60f3dcb5752d25ad68499af400748575bbc51c7fd9617b6c07a94b8b810c7851b5305f9c4107d403ce0 |
C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
| MD5 | 911c020a364b10fe1de664c01de4534c |
| SHA1 | 8731aee51722d2e1604864eb8f03abe3e6d35441 |
| SHA256 | cb84418aa6ff71e927125f05cd74b10cef07b40fe19a17f9ba5c3bd57f2d9591 |
| SHA512 | 7e2c2259dde1fcb1a10a3864b1e24f892fb28d1c0a9a8b1b32d6b512d9f49b031cf6119f55dad008f0b2a5dc87ae606ee0c2918fdc44fc307d56bc933537db7b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 04afccc1feb610094ec5b603c0794ceb |
| SHA1 | 27d68789805f201f38b50563f0009cb39322096e |
| SHA256 | 8c8ee2a8764bfe4e3d9c6a45ddd0a6edf44da8992411aae41ac035bd39883fe5 |
| SHA512 | 3ca4e7d2ab51015f3190137f1a0f8e7fe5fd816a9fdf05e8de59c3cabca122523aa870e41b9e02fe0bff5db2579bda6ed4c376d6d92efca6146fe8bcdb66fb17 |
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
| MD5 | 610b1b60dc8729bad759c92f82ee2804 |
| SHA1 | 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552 |
| SHA256 | 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08 |
| SHA512 | 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe
| MD5 | 4dc57ab56e37cd05e81f0d8aaafc5179 |
| SHA1 | 494a90728d7680f979b0ad87f09b5b58f16d1cd5 |
| SHA256 | 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718 |
| SHA512 | 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdate.dll
| MD5 | 965b3af7886e7bf6584488658c050ca2 |
| SHA1 | 72daabdde7cd500c483d0eeecb1bd19708f8e4a5 |
| SHA256 | d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19 |
| SHA512 | 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_en.dll
| MD5 | 4a1e3cf488e998ef4d22ac25ccc520a5 |
| SHA1 | dc568a6e3c9465474ef0d761581c733b3371b1cd |
| SHA256 | 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011 |
| SHA512 | ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_ca-Es-VALENCIA.dll
| MD5 | 2929e8d496d95739f207b9f59b13f925 |
| SHA1 | 7c1c574194d9e31ca91e2a21a5c671e5e95c734c |
| SHA256 | 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df |
| SHA512 | ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_cs.dll
| MD5 | 16c84ad1222284f40968a851f541d6bb |
| SHA1 | bc26d50e15ccaed6a5fbe801943117269b3b8e6b |
| SHA256 | e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b |
| SHA512 | d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_el.dll
| MD5 | ac275b6e825c3bd87d96b52eac36c0f6 |
| SHA1 | 29e537d81f5d997285b62cd2efea088c3284d18f |
| SHA256 | 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0 |
| SHA512 | bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_en-GB.dll
| MD5 | d749e093f263244d276b6ffcf4ef4b42 |
| SHA1 | 69f024c769632cdbb019943552bac5281d4cbe05 |
| SHA256 | fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e |
| SHA512 | 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_de.dll
| MD5 | aab01f0d7bdc51b190f27ce58701c1da |
| SHA1 | 1a21aabab0875651efd974100a81cda52c462997 |
| SHA256 | 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c |
| SHA512 | 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_es.dll
| MD5 | 9db7f66f9dc417ebba021bc45af5d34b |
| SHA1 | 6815318b05019f521d65f6046cf340ad88e40971 |
| SHA256 | e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819 |
| SHA512 | 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fa.dll
| MD5 | cbe3454843ce2f36201460e316af1404 |
| SHA1 | 0883394c28cb60be8276cb690496318fcabea424 |
| SHA256 | c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59 |
| SHA512 | f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_it.dll
| MD5 | 497ca0a8950ae5c8c31c46eb91819f58 |
| SHA1 | 01e7e61c04de64d2df73322c22208a87d6331fc8 |
| SHA256 | abe2360a585b6671ec3a69d14077b43ae8f9e92b6077b80a147dfe36792bb1b7 |
| SHA512 | 070398af980f193ff90b4afaecb3822534ef3171eca7228bce395af11ca38364bc47cab7df1e71187ef291f90978bdc37a8611d2992b1800cd1de6aa7fda09d9 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_is.dll
| MD5 | 5664c7a059ceb096d4cdaae6e2b96b8f |
| SHA1 | bf0095cd7470bf4d7c9566ba0fd3b75c8b9e57ec |
| SHA256 | a3a2947064267d17474c168d3189b0d372e36e53bf0efb9c228d314fc802d98e |
| SHA512 | 015dcb17b297a0aaad41c7b0b2199187e435855fd3977d16402be774622cc4f6b55d04ba9159a89e26e350c5602928c76dd9386be3974437b41888a0cfdddfa8 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_hu.dll
| MD5 | f4976c580ba37fc9079693ebf5234fea |
| SHA1 | 7326d2aa8f6109084728323d44a7fb975fc1ed3f |
| SHA256 | b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791 |
| SHA512 | e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_hr.dll
| MD5 | 0b475965c311203bf3a592be2f5d5e00 |
| SHA1 | b5ff1957c0903a93737666dee0920b1043ddaf70 |
| SHA256 | 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0 |
| SHA512 | bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_id.dll
| MD5 | 03d4c35b188204f62fc1c46320e80802 |
| SHA1 | 07efb737c8b072f71b3892b807df8c895b20868c |
| SHA256 | 192585d7f4a8a0cd95e338863c14233cdd8150f9f6f7dd8a405da0670110ee95 |
| SHA512 | 7e67ea953ea58ff43e049ce519ae077eec631325604896479526627d688f2fa3bfc855a55ac23a76b1c9ef8cd75274265b8238423b95a2437be7250db0db31b1 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_gl.dll
| MD5 | 84a1cea9a31be831155aa1e12518e446 |
| SHA1 | 670f4edd4dc8df97af8925f56241375757afb3da |
| SHA256 | e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57 |
| SHA512 | 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_hi.dll
| MD5 | 34cbaeb5ec7984362a3dabe5c14a08ec |
| SHA1 | d88ec7ac1997b7355e81226444ec4740b69670d7 |
| SHA256 | 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9 |
| SHA512 | 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_gu.dll
| MD5 | f9646357cf6ce93d7ba9cfb3fa362928 |
| SHA1 | a072cc350ea8ea6d8a01af335691057132b04025 |
| SHA256 | 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150 |
| SHA512 | 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fr-CA.dll
| MD5 | b534e068001e8729faf212ad3c0da16c |
| SHA1 | 999fa33c5ea856d305cc359c18ea8e994a83f7a9 |
| SHA256 | 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511 |
| SHA512 | e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_gd.dll
| MD5 | c90f33303c5bd706776e90c12aefabee |
| SHA1 | 1965550fe34b68ea37a24c8708eef1a0d561fb11 |
| SHA256 | e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c |
| SHA512 | b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_ga.dll
| MD5 | 3b8a5301c4cf21b439953c97bd3c441c |
| SHA1 | 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a |
| SHA256 | abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0 |
| SHA512 | 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fi.dll
| MD5 | d45f2d476ed78fa3e30f16e11c1c61ea |
| SHA1 | 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e |
| SHA256 | acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2 |
| SHA512 | 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fr.dll
| MD5 | 64c47a66830992f0bdfd05036a290498 |
| SHA1 | 88b1b8faa511ee9f4a0e944a0289db48a8680640 |
| SHA256 | a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961 |
| SHA512 | 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fil.dll
| MD5 | 7c66526dc65de144f3444556c3dba7b8 |
| SHA1 | 6721a1f45ac779e82eecc9a584bcf4bcee365940 |
| SHA256 | e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d |
| SHA512 | dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_eu.dll
| MD5 | a7e1f4f482522a647311735699bec186 |
| SHA1 | 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd |
| SHA256 | e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4 |
| SHA512 | 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_et.dll
| MD5 | b78cba3088ecdc571412955742ea560b |
| SHA1 | bc04cf9014cec5b9f240235b5ff0f29dbdb22926 |
| SHA256 | f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085 |
| SHA512 | 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_es-419.dll
| MD5 | 28fefc59008ef0325682a0611f8dba70 |
| SHA1 | f528803c731c11d8d92c5660cb4125c26bb75265 |
| SHA256 | 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d |
| SHA512 | 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_da.dll
| MD5 | d34380d302b16eab40d5b63cfb4ed0fe |
| SHA1 | 1d3047119e353a55dc215666f2b7b69f0ede775b |
| SHA256 | fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f |
| SHA512 | 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_cy.dll
| MD5 | 34d991980016595b803d212dc356d765 |
| SHA1 | e3a35df6488c3463c2a7adf89029e1dd8308f816 |
| SHA256 | 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e |
| SHA512 | 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_ca.dll
| MD5 | 39551d8d284c108a17dc5f74a7084bb5 |
| SHA1 | 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884 |
| SHA256 | 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07 |
| SHA512 | 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_bs.dll
| MD5 | e338dccaa43962697db9f67e0265a3fc |
| SHA1 | 4c6c327efc12d21c4299df7b97bf2c45840e0d83 |
| SHA256 | 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04 |
| SHA512 | e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_bn-IN.dll
| MD5 | a94cf5e8b1708a43393263a33e739edd |
| SHA1 | 1068868bdc271a52aaae6f749028ed3170b09cce |
| SHA256 | 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c |
| SHA512 | 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_bn.dll
| MD5 | 7dc58c4e27eaf84ae9984cff2cc16235 |
| SHA1 | 3f53499ddc487658932a8c2bcf562ba32afd3bda |
| SHA256 | e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98 |
| SHA512 | bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_bg.dll
| MD5 | 8375b1b756b2a74a12def575351e6bbd |
| SHA1 | 802ec096425dc1cab723d4cf2fd1a868315d3727 |
| SHA256 | a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105 |
| SHA512 | aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_az.dll
| MD5 | 7937c407ebe21170daf0975779f1aa49 |
| SHA1 | 4c2a40e76209abd2492dfaaf65ef24de72291346 |
| SHA256 | 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9 |
| SHA512 | 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_as.dll
| MD5 | a8d3210e34bf6f63a35590245c16bc1b |
| SHA1 | f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693 |
| SHA256 | 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766 |
| SHA512 | 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_ar.dll
| MD5 | 570efe7aa117a1f98c7a682f8112cb6d |
| SHA1 | 536e7c49e24e9aa068a021a8f258e3e4e69fa64f |
| SHA256 | e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01 |
| SHA512 | 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_am.dll
| MD5 | f6c1324070b6c4e2a8f8921652bfbdfa |
| SHA1 | 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf |
| SHA256 | 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717 |
| SHA512 | 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_af.dll
| MD5 | 567aec2d42d02675eb515bbd852be7db |
| SHA1 | 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37 |
| SHA256 | a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c |
| SHA512 | 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\EdgeUpdate.dat
| MD5 | 369bbc37cff290adb8963dc5e518b9b8 |
| SHA1 | de0ef569f7ef55032e4b18d3a03542cc2bbac191 |
| SHA256 | 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3 |
| SHA512 | 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\NOTICE.TXT
| MD5 | 6dd5bf0743f2366a0bdd37e302783bcd |
| SHA1 | e5ff6e044c40c02b1fc78304804fe1f993fed2e6 |
| SHA256 | 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5 |
| SHA512 | f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeComRegisterShellARM64.exe
| MD5 | 7a160c6016922713345454265807f08d |
| SHA1 | e36ee184edd449252eb2dfd3016d5b0d2edad3c6 |
| SHA256 | 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9 |
| SHA512 | c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe
| MD5 | 60dba9b06b56e58f5aea1a4149c743d2 |
| SHA1 | a7e456acf64dd99ca30259cf45b88cf2515a69b3 |
| SHA256 | 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112 |
| SHA512 | e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7 |
C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdateCore.exe
| MD5 | c044dcfa4d518df8fc9d4a161d49cece |
| SHA1 | 91bd4e933b22c010454fd6d3e3b042ab6e8b2149 |
| SHA256 | 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2 |
| SHA512 | f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c |
C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
| MD5 | e8c26832ef1514425274911b9705baa1 |
| SHA1 | 5c31947af4d20a76c58db5d289c8a877643b3a55 |
| SHA256 | e959cf8b52acbc3a766213c9129a333453fe5ab0ffa483344e9d2577a567da33 |
| SHA512 | b9af27c8953c845995266192150c9dfbe7ad0d0ab58a01f7a9e898a238d0af871df119afc8a78f03a9098c686ab86e2fbb417288dfbee088aed24019cd2cc6d4 |
memory/2524-680-0x0000000000E60000-0x0000000000E95000-memory.dmp
memory/2524-681-0x0000000073400000-0x0000000073610000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | d47f272ca63086f648792e504b7a171a |
| SHA1 | 4ca69aee9f5832ab461184f8341ffa8935579828 |
| SHA256 | 09951595f65c00d3ef51d0769706178a1828df591af908f7c9d309443237c810 |
| SHA512 | dd89354bdfc7588f500633eb842011c93577dc148ece865296bf2cb5423f403aa4d604f44fdd1a0705330e0bdb50a6eaee213fb4b6f4f174ccfdfcf58c0cb643 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | d18781e2ab27eaccebdbc0eabb44c5f6 |
| SHA1 | c5046846fcae60e6b7871af735482501e775612f |
| SHA256 | a07becd59ede6aa09965154bd2b70b8563fd1765c19599234704682f9b29071c |
| SHA512 | 2465b54f90ad71c9c8a1cc3c794f7b1bcb6d81e35a9aac877b517325aeff5b0dab13490f8bbb583905cfef5a46bbbee46874f80f9f6dd827086e9b6cdec87cb7 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
| MD5 | a79977ade374a7cb2b0c523a16d298b9 |
| SHA1 | 4c6e4c996b676c542c030773a5e1fd8373f16c22 |
| SHA256 | 3200e95c6c49cbd900ba1fcc131d174dbba5d9740b8bd89590a368fdd190ca3e |
| SHA512 | e6b1e98b850ac848ef9da67978995d0c859cdb9442f2f0440d34a584393fd655189095964bb07e9f25c1ecc0478cb6e482152812616da38ad471646fd6afda2f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
| MD5 | 87e8230a9ca3f0c5ccfa56f70276e2f2 |
| SHA1 | eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7 |
| SHA256 | e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9 |
| SHA512 | 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
| MD5 | 8adb35257977af9c83ec424616de9a01 |
| SHA1 | bc2b0f93895b081bb58aa6a873d8357dd683b392 |
| SHA256 | 5e53ea6453da517a15374a9864f231084387e9dfbfb711990c05ed1def7ed66d |
| SHA512 | dd70ae52f7199bc1c75d21159cc0ac91dce0feb529d115840a720479ab3dd0372742245d47fc9d196789574f617631f12b76a2032647cd5d84cc356a28d14472 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 43ab494173b560efde207bf1c73aa3a2 |
| SHA1 | 62ab7aaa854c9c09871dc4ab6f19267f9060c762 |
| SHA256 | f153ab0ca50f0bac5f103717fbe0791bf1216da1cf9c8ba8e9104f20bde40bfc |
| SHA512 | 3d434eacb6d384181450e22e12f06ef25aaa586aa3ef598b77f070977b94caa5053571ed953c88024b4a07444f77e4d1ad19d1ed78b255807521b068be1ace31 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | fa5b421fca4336bb88cdf08a534a5611 |
| SHA1 | c90af5ebe729e96f767f4d3303a1877de41a7f20 |
| SHA256 | 9fcdcc4615aa225a785bb6516a8e38c4830954e4e410f3974929c170d404059c |
| SHA512 | ef92f90c17e2559804de14800bd0c54067636aa40a8c17a540bb06c0915578b884424f02942e1b7caed77d5be0bd075bbb8fd823f242ede08a92fd493291914d |
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\124.0.2478.67\MicrosoftEdge_X64_124.0.2478.67.exe
| MD5 | dabc3160a804b9fadd89ceb0fcecf388 |
| SHA1 | b52f15e866a18637683bdf0ea4eaa326b787396f |
| SHA256 | 53eb39a92ee0d2eb94f6d33c015097bddd9cfe5c4129d3ac9a9facbfb5087bfe |
| SHA512 | 74fc0f21d7cf99e07c079224e2af8a4a51bff98a97bc471cfedfbd3a28d3ee681fbd63fa7239948c3c0bf4f9af56dc582dd128f8c08b54cb73389e85f949f431 |
C:\Program Files\MsEdgeCrashpad\settings.dat
| MD5 | 3500d14e0b0db5ff81b56cf17a0b7e2c |
| SHA1 | a61085058ccef35fb0732b2b5681e3c8b14cf0d8 |
| SHA256 | 068edd204ea6ab143d78467301cb4b9f4646788f795a7689ad1b5ea639b93a32 |
| SHA512 | 1915b399a8e9ac448d134545ea80989f85598e48c63cbd00b88e64fb873c3000a40c82e47d7bad195cbc4fed3a09a1b65035f658b2bd254a6c1bea246ddf38e7 |
memory/2524-976-0x0000000073400000-0x0000000073610000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 2b9471dfa937dbbdef65d56b35246f86 |
| SHA1 | ec3d2dfbac54752d15359f149b565f267f435cc7 |
| SHA256 | 6cebb9218d908d7709b002eb92ab41fdcee4ddd68d4d992c609ccbc3d5a72cc9 |
| SHA512 | f9538c9895097fb7cb82f946773dfd6aa5d3585cfde7da47d3e880e76b076e90d4b267ec1ce41fe98b9e0bb87c3c630820dd6ad5a4f3170049d448097f2bf065 |
C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Installer\setup.exe
| MD5 | c31297188ec9fbaa60449f769339963e |
| SHA1 | 8502d9e0cef18137529f0a46ad6e69a1577e6cae |
| SHA256 | 2e2eff110475dd3dfd732ab514e4692032e67b2d228d0081634a87f45cde5ff9 |
| SHA512 | 9525e3e08b953fe36270c7b4868959e9bded055c5577e5ca94d79606b671e6660d180f763b54a276bf356e82d7073901c373e0b40cfca924cc4b38384c20e22a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | fa5c5576c93a4dae9264a76e062384c5 |
| SHA1 | 0491428e50bb3ff1569e415362ece5a09fc087d4 |
| SHA256 | 44425c146c511f0bfd79aeb93ce8fec287d9937d10490d482a3129b7ba188207 |
| SHA512 | e057e98ae8350239bade1d3e14beb32275e332868ff37b01cf9241749895f5b95960caf511329fdc6fdb6876a164e38d79a0ebf4303ce19bd0def1676ecc5143 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 572da45848dc2fcfb797a320bac35221 |
| SHA1 | a0a075d25f6edeb485e8a91ccf90266824432c08 |
| SHA256 | 7c07180cf70c698e52be2c5eca652115bc9f32e4e0de134daf81bb3450b427d7 |
| SHA512 | ec53aa59c327e5377aa1d4ccdc086078f38447e4ccd3505c86a0ff57c8242183d246f1446c7bbeebffa49ef0dab1daa5dd8bc795748fc4d8c7ecc92459d045d4 |
memory/2524-1047-0x0000000000E60000-0x0000000000E95000-memory.dmp
memory/632-1052-0x00007FF9180E0000-0x00007FF9184E2000-memory.dmp
memory/632-1053-0x00007FF917870000-0x00007FF917DBC000-memory.dmp
memory/632-1054-0x00007FF648950000-0x00007FF649950000-memory.dmp
memory/632-1055-0x00007FF9180E0000-0x00007FF9184E2000-memory.dmp
memory/1880-1147-0x00007FF939890000-0x00007FF939891000-memory.dmp
memory/1880-1148-0x00007FF9385B0000-0x00007FF9385B1000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
| MD5 | 5af87dfd673ba2115e2fcf5cfdb727ab |
| SHA1 | d5b5bbf396dc291274584ef71f444f420b6056f1 |
| SHA256 | f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4 |
| SHA512 | de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | f6e349b60e8ce08be98785804e93b342 |
| SHA1 | 54d6c61c86c8f2bd943f00c75ff11f1f3522dd97 |
| SHA256 | cddf05ff14354b95c1c2d41fd41146f0a3e15ef874f90255950d6e92ae333b8b |
| SHA512 | bfb4842dee9982bc528ebf695abc274b23160f2017339d1fea0fada6c3b039c08f3e281c5a2eaa45d6f6ad6e574c5d9b02a2a506233e85396012862445fe66e3 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 177dafeeb72762254e3e42b3a0d5f145 |
| SHA1 | fb7259b2506cc0731838826bf830f4ad53cb366e |
| SHA256 | 45b8e519d5a7116e042d157084386b8de341f19695d7fa0791ed2982f8f5eb8e |
| SHA512 | 233e947d18d92d2b022527751315c810ddd9a71d95c5b99c983c41ded70ab271cb005807c5e848dc0a86cf8ddfb11037fb7198c63b979f85bb412745436d0a1f |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe599aa0.TMP
| MD5 | 9467b3aa9dbc85aa0a48fb79d83ba190 |
| SHA1 | 5b85dee65d01cddeb3901a922813d8753ea35917 |
| SHA256 | 9413e631edba81ca069bf9fa89da8f0ef4457c8fc36b6a85b01c1eba44e0bc7d |
| SHA512 | 1a857c9fcdaf4fbf260a17264a73cabc8f5ef033eb039bea5a53ada1f0e1b5e9a2f77c89c5b8acd42b0d81ca86d8be017309337a2d6f7405ed7834b654301dde |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
| MD5 | 46295cac801e5d4857d09837238a6394 |
| SHA1 | 44e0fa1b517dbf802b18faf0785eeea6ac51594b |
| SHA256 | 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443 |
| SHA512 | 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
| MD5 | a4a87f1d64c5e7bd93de5e93299f20ea |
| SHA1 | 55e42131d73e13afa86209b27fd9aba1fe9d6533 |
| SHA256 | 1c52ae2f18ddef75feb9dcdeb31245b40a59d9d02da2fc5c9a5cc17537702c91 |
| SHA512 | 8db6920342b0f7b5944a9d9ffc6142b78f8f0ee75a098341ef51916b8d5196053a2aff6c6342787c676d205c50c5fb48c1bb34ab687151bca289aea579fc6f7a |
memory/224-1088-0x00007FF938AB0000-0x00007FF938AB1000-memory.dmp
memory/1696-1166-0x00007FF938AB0000-0x00007FF938AB1000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_3
| MD5 | 41876349cb12d6db992f1309f22df3f0 |
| SHA1 | 5cf26b3420fc0302cd0a71e8d029739b8765be27 |
| SHA256 | e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c |
| SHA512 | e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_1
| MD5 | d0d388f3865d0523e451d6ba0be34cc4 |
| SHA1 | 8571c6a52aacc2747c048e3419e5657b74612995 |
| SHA256 | 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b |
| SHA512 | 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2
| MD5 | 0962291d6d367570bee5454721c17e11 |
| SHA1 | 59d10a893ef321a706a9255176761366115bedcb |
| SHA256 | ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7 |
| SHA512 | f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_0
| MD5 | cf89d16bb9107c631daabf0c0ee58efb |
| SHA1 | 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b |
| SHA256 | d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e |
| SHA512 | 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 45fa29a9ee86f226481433acfd732429 |
| SHA1 | bb552f08154a1926f10cd4687c4a5708b2624fc5 |
| SHA256 | 17307717bcd26e08dcc7c05715890990c2127692fd4bf5949869d7d4d9199463 |
| SHA512 | 7b0ce3fbc57ffe4a3d9c8c8d03c0df5bfcfc91b61c5da60eaff5748a702a445831481f5c9d5e24ee82aaae2d2875177c74597347f9652f34e163aa89bc61ec9e |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
| MD5 | d751713988987e9331980363e24189ce |
| SHA1 | 97d170e1550eee4afc0af065b78cda302a97674c |
| SHA256 | 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 |
| SHA512 | b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af |
C:\Users\Admin\Videos\Captures\desktop.ini
| MD5 | b0d27eaec71f1cd73b015f5ceeb15f9d |
| SHA1 | 62264f8b5c2f5034a1e4143df6e8c787165fbc2f |
| SHA256 | 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2 |
| SHA512 | 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | e19d4784d6fd9a31e1eed2a19a336c59 |
| SHA1 | 74ad3b40688bb1bf9c6de2d83bc97093956d5ab3 |
| SHA256 | 05d11e6e98a3eaf2ecc4276cdc7b7ef7d1149db36b6f4ba41c64b95396931035 |
| SHA512 | 843c2b7accb1c0c1eea278b8e6d3d5e800c0fedb8f63f747abef4c5e8affe284d96424888c7849b328e23dcebb1f3cc8a0ad685f0ddb032a4d30dab24abd3a46 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 2c3f856b31c6f69f677e6249bf61c505 |
| SHA1 | 206d6a69735bda3550b1d1c60c67166b5a6c5ad2 |
| SHA256 | e5d2192fdca434283d1a2b4b22f2df320a91442dfbe4bc10a7d481850c58588e |
| SHA512 | 849fd9fc4688ca00bd4d37f78871af92eec6b9070177fa944cb7431ef7a051b2d1a2c3e61934be7f37e1d0e595efa2bc27ad1d080ce029719b7521efd1699c8d |
memory/1880-1454-0x0000021302F80000-0x0000021302FB0000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
| MD5 | 3fd11ff447c1ee23538dc4d9724427a3 |
| SHA1 | 1335e6f71cc4e3cf7025233523b4760f8893e9c9 |
| SHA256 | 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed |
| SHA512 | 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 1c14c6c535e5612305694eef9e5f2692 |
| SHA1 | d792b319348bfc6d2d6594cabf104968131f0fa7 |
| SHA256 | 3170f9c56e019c7722df94f96beb766abaf244b0bcbd202cc97ac59d742bff0e |
| SHA512 | 2d197cb77b58ad45785b3c9bb4df756bafb017f1c0456a75d233eab22a36ebdb649ed3ce4b4e103d2fd98224c3b6d784cde75c3066e8da2f446d5551e8cd63ab |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
| MD5 | c3c584145a88d4b1e7f6a512c1ecefb0 |
| SHA1 | 0e79ed098a711efba038fa2032be1d14a0f846bf |
| SHA256 | 7102b87f8942c2eda6501664977d85442f2a8919398f3d2c0258575628d6665e |
| SHA512 | 94788d582c89f9eb4bc0c1de7e4220db63e5b7f5d6ef963a1cb529ab1cbefc1acd26b73f8b389d438429ab89739261a1742a66d4d15767870a135854cbf4110b |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
| MD5 | f2e450f49d8c5dc65173119d087bade7 |
| SHA1 | 45139c7bce02df53edadadf7c9f199c354759693 |
| SHA256 | 092818625b871507f84d412b0c8686c3f2fb6f32b21ada654ac40cf09eacf759 |
| SHA512 | 600d2c87eae8bb4174d4618949a8739002874546a79578d6f19f4b80d016805aeca2302997ff30dd4097d6075993002b1c6c7104ec4b83d7d083a2ab37157527 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
| MD5 | d8061b3f4e651cd8609b5bb1d2bf2ed2 |
| SHA1 | 0dfe1d776184b0f197486a92e88d43fe07cc97fb |
| SHA256 | 5b1adf008fe4d745bc7c8df768f38eb2a0da5c338037910119f29aed823cbf16 |
| SHA512 | 56bed753a8c25eef458352d7e4e14778050d8579a80ecf41e88c15c9c19d2dae4f74e8e65b33d9ff9a40fa4ee4945544c1056b628cef3f4ae83069aa36baa67b |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
| MD5 | 2004612882294561eef8d8f8c61cfde9 |
| SHA1 | bd88fcbd0ef19dd11353c8d6ca5b380015c355b5 |
| SHA256 | c45234f1de221236f09d4431407a75d0697cc58bc01cbbe9ab01a15c583e6a92 |
| SHA512 | 8952883cd7c98ed879a5fb92d31e4773dd9cec6c6238910881f1e59183e4fd1dd853c5b85148693d3e9ff3aa2183fdad008b53879ed295c3aa7928fc5aa2df76 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe59dbef.TMP
| MD5 | 2800881c775077e1c4b6e06bf4676de4 |
| SHA1 | 2873631068c8b3b9495638c865915be822442c8b |
| SHA256 | 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974 |
| SHA512 | e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
| MD5 | 60b72b6d9e5183208ad540a9c459edfc |
| SHA1 | 8e370e81ade581faaa38b3dbebba1a86e42e59b7 |
| SHA256 | cdc464f198c20c4593c245b4d880041aa896b5f0ccefe0e254a550bc863ce370 |
| SHA512 | d67c09528d36bf8917a1c14e7551412237ac27af137332a42a64c3925ebc9b153f8a87f08cac41441b408e19962c43360f1fc548e3f24deb4205a189c3e44e19 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe59dbdf.TMP
| MD5 | 731833c92f05af575117299b083ea234 |
| SHA1 | 3c1247fa31acda3be2c3e94068da7e844c42dede |
| SHA256 | e3d68ee1b4188d2330558d299a8652cc8a1bf49d4441e6d15c2189ba44953d2e |
| SHA512 | 95fcd92ceca63e7a9c445aec2b0746b6087d056bea5bbe0f775d7076ecfa473e80474f5260a63441097ae93b49b76d943e65ab75348d347cb95936f0ec2b9426 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59dbdf.TMP
| MD5 | 9e81c15adbd86c4c51efe7225e86c241 |
| SHA1 | ba64fbd0ad57a50326f623c8eeb81e1fac43628a |
| SHA256 | 8f2221cf2a85e5b23cdcc6a4f7b2d7bc0c52f9b6136766aa2abfa574896fb374 |
| SHA512 | 951fc493cf510679178c654482ba97dbe98198c83104b477ab00613114ec9fde8b9581a7fbdd799f9745ff6fbd0694aa6a0ba8df3115393469ee72f33c650158 |
memory/632-1660-0x00000192195C0000-0x00000192197C0000-memory.dmp
memory/632-1658-0x000001922AC10000-0x000001922B050000-memory.dmp
memory/632-1662-0x0000019219800000-0x0000019219801000-memory.dmp
memory/632-1663-0x0000019219800000-0x0000019219801000-memory.dmp
memory/632-1665-0x0000019219810000-0x0000019219811000-memory.dmp
memory/632-1666-0x0000019219800000-0x0000019219801000-memory.dmp
memory/632-1667-0x0000019219810000-0x0000019219811000-memory.dmp
memory/632-1669-0x0000019219810000-0x0000019219811000-memory.dmp
memory/632-1668-0x0000019219810000-0x0000019219811000-memory.dmp
memory/632-1671-0x000001922B0E0000-0x000001922B0E1000-memory.dmp
memory/632-1674-0x000001922B0E0000-0x000001922B0E1000-memory.dmp
memory/632-1673-0x000001922B0E0000-0x000001922B0E1000-memory.dmp
memory/632-1672-0x0000019219810000-0x0000019219811000-memory.dmp
memory/632-1675-0x000001922B0E0000-0x000001922B0E1000-memory.dmp
memory/632-1676-0x000001922B0E0000-0x000001922B0E1000-memory.dmp
memory/632-1677-0x000001922B0E0000-0x000001922B0E1000-memory.dmp
memory/632-1678-0x000001922B0E0000-0x000001922B0E1000-memory.dmp
memory/632-1679-0x000001922B0E0000-0x000001922B0E1000-memory.dmp
memory/632-1682-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1683-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1681-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1684-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1686-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1692-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1691-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1690-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1689-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1688-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1687-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
memory/632-1685-0x000001922B0F0000-0x000001922B0F1000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1f1d96b68e3261cf312b541611c5539
| MD5 | 3adb865c801399c412bc73840d3d8241 |
| SHA1 | 267f8332eb7486bccd7a6730cfb4f5c2152b11c0 |
| SHA256 | 10fb505b7ce30ce4bf5582248b17dd47f6a39635007bb77dc5d16b963baf9905 |
| SHA512 | 609793331ce25c6667067b3616791f3ece470500f797343178948e4b7af18f275fdde226f542610d957b397651e12191aed58dbb88bc1c59eff4625e550160a5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 7ba70f14c1a71dbfce94c40039576d6e |
| SHA1 | 71f26aeedb19a9743521698e57a03b810912f5a4 |
| SHA256 | d2a772900c03ba220cee2c6b2075dabc8b200e21bb8372df41b3035f228e292a |
| SHA512 | abd88731911989f093e9e5e925664f3473a0be6a8fec157d2798c1ca066ad4e96144fc7efcaa6e75d132c08dcdac8e0af3476f12513969e0398164fb3d9c0ac5 |
C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json
| MD5 | 7a39cae24c1d13e38fd10bcef98c80ce |
| SHA1 | 58d8a40b4d16215399749b563ba610c5cd3e4159 |
| SHA256 | 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40 |
| SHA512 | 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\718a2cb54ac4b5af0c976bd94763849a
| MD5 | 342b07240c769086897e46525f4369ce |
| SHA1 | c59d211daedfb8b529cd6a720129f95254b636d5 |
| SHA256 | 2405cb269e35a590435520b4e307c90680ea40da976ab8e47fae3762b8af5479 |
| SHA512 | e8c5ca5483d8251dc912de024d359f64457df67fffd0f440ffe2fc473fcf7f496f7e7c1656c8a6cbde9f059579f3fe377961530fe835bf1cfcf4fbea6c1a74c5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7ada9a0679dd88187c316afffa890fcd
| MD5 | 741b294982a5930718cd6ec12daf1d94 |
| SHA1 | fcd1131b9750cd628abe1dfb9b2833cf54324dfa |
| SHA256 | c3636df410f0c5f15d211bd51648a1e5c2ed789bf2bbe5753691d74ef8501b99 |
| SHA512 | 665aa0e7223b50c7feca47fba58808f6d731f930108a86c1c260e67e2d878ed1e0df6f3d5a35edf3de874aef55f7d657356a64ae4eca3e06b75a98a70202e318 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c0314366f5f2d1fc86caf19c3d672cc0
| MD5 | 79ce108ec4b518677227502d92cd6b8c |
| SHA1 | a53e28d72a9793bf955c49379a4af3e0edd64e98 |
| SHA256 | 8291a8b4445985351cf8ce9fe3aca7a86bca810ad00f71a036a63e7511bdc921 |
| SHA512 | a0a548fdcfaf1fb91ccf726b01d876c0b866cc8ea2bbe8a930d07cc63fad04a3df3a98d53142cd505719e84a7a1360fa6ae59e1f981ea5da5d8a40d9683155bd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5870b6aedc9d44c9e24c2c83fa0d0432
| MD5 | 6392f14aa408c1046bd501a7c45ab13d |
| SHA1 | 74ab7b677a41124e2b48424ed267487520c41b46 |
| SHA256 | 59bfa5adc22afa19103e59fd9dbc07cdf7dbe89bbe577e765d78234d73ca9260 |
| SHA512 | 5dcb4375c7bc7dc1aec0b7d80ff009e8bcbfd7ce5c3dfcef11e2d251a3b85983bd182654edd626c8ca2e0ed6f71fc9388fbbfdec0023edf0846c2ed521f6b484 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2ce13b65be783703a5cebfd010fa9707
| MD5 | 51fa942896281b8e0010990bea8d8215 |
| SHA1 | 1ed89b8817fd2adc94ce6517b1b6bfb7f27f2fdc |
| SHA256 | 1148260c6ebcbd35aa8b315753519089a97aaab70fa901f39be7359688829664 |
| SHA512 | 88454821016735ba2177047792701ac2b4a7c916419bf332f5c924550c2a0d02d050c182c69b47ce07606f46b0e0d02f15246512165aac0510c75124cae2115c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8432475a505b3b243465952d91532f53
| MD5 | 383629fcaac9fb0f2bbded51221d099e |
| SHA1 | b1f1f4637cf01234ffa4368063b67d90653fe8a1 |
| SHA256 | 52ce81f879fb4051ae5a1520b8ed0f253c6a02e57be35707fb3db65b39731ece |
| SHA512 | 43c141700cae57173d10ba61e3f54ac5f76c18f409b6ebcbebe2a1efa19523627416198128c5349fb983218a3de29d8fa0d0cb35c2f5c27d04a644988bd61827 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526f27474ff5eb0a688d39a85d0c599
| MD5 | ba88734ba90eb05ed6bc44156edf5817 |
| SHA1 | 2aeb94a144d88aa4c62a9987aff500d46d872a56 |
| SHA256 | 9a9e3084f81e46cfd18f387d57fcb1b46d5693d1b6889ebb756053fd9943fd11 |
| SHA512 | 3e9d20d49ee3c3136441aaaee40f98d72b9a62c41ac044a298848d1a73c2f605cfb639abb6a16270800d62aa2b539ed9e9371f1fb1beb30f864118836b5221d8 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\66b3942f0831fc98e9ef8f76da2dcee1
| MD5 | e2008e5b774392ef31c12e6cc343a459 |
| SHA1 | 739511b10d849742e5527d093c92ba255b72f6a8 |
| SHA256 | 0d985d5cde8d5aed933a885384123f1eb323b7dc2de5d2fd0dd5fb78c46fa538 |
| SHA512 | 2542323e0b26f2da4913766ef809da0f0b77dd6e708b7393022c6044648672ae10add50cf2cbce3b239918a52219ca95c8e19634160a4e227ad6fd5ce44e2bc2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f10b6865c21c904e29f52a54a31f37a
| MD5 | 38b25c1089062288a7a9a8876138e465 |
| SHA1 | d7dc1955cdabe9a50ef4f6b345c9012e3efeb56c |
| SHA256 | e39aceee4952e730f1a101894520b046ff21156ebc79c0f8e070e87af20fdd29 |
| SHA512 | 198469bc9aa03de2c29b322cee7714a67b1b421a8fb0b6ade7148f54fb5ea0a37f6afe5e80f052f41815174363ca2b2dc8395534c624f0f87d2f7a0e9d773dd5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ceea000e430b7c9714bd62a61ef5eb0d
| MD5 | e6bf3b994b7bd85aa47c17406d367d2b |
| SHA1 | b18be2803acd9576aaa72bb19116b09680f0cbd0 |
| SHA256 | 92638ea5cef2b20242923fd21757df86c8c434ff12243d480250364b8480f2fa |
| SHA512 | 3e207bfe1b30c981fb533971769a4051c0c87ffbfcabc012606ec939c5b66f2bf59cefeb85c2b903856d6396584b2c96472965c11d90d6a1ac9f59b29cf3d664 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac
| MD5 | d97f6e22eba42d95c89cfd439f36c1d4 |
| SHA1 | 3a439aff0b80708f6510643f70997b897500d2bd |
| SHA256 | 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e |
| SHA512 | 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d34a1f5416fdc978c6e0c7edc7d67a2
| MD5 | c76ac26f80988d0fcf03874d625b86af |
| SHA1 | b04a5e95018f8eca571daa4077e66626b9ba0de6 |
| SHA256 | 3dca66141315cdee30f7604013deab2fcc1dd74af93f9630fb700b7606f531ab |
| SHA512 | 23ba1357212eb135ad87fcbb81bf73fcf2e189da34f08ca1cccd40d763a856e9ca8ce5514af395caeefca2b0dd3a6fe3b8d43e060c5baf5139fb357fedb90a59 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6af2d287cbfdd785c20430e5eade76e6
| MD5 | 6f27114708b23f39ab64468b751e59c7 |
| SHA1 | 8107d7b136d85389949422739fc133cb7bf535b8 |
| SHA256 | 8a1b708a756ccc13f0a38b44c71f149e89c440a4ca242d591589dca3517db845 |
| SHA512 | 516454cc1bea3871516331749d6e08d91c72cb04cea400907ed193fb68bcdf4ff2e9f84cb2e65950f5eb69a593aa6cf0e913ecd921506b447f8fb869a4424f98 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1aac6bdbb2642f3f23fbed64d042c3f
| MD5 | 2c65a49f36fbe81aed88d7626a0112e3 |
| SHA1 | 832fc429cd021f288f5ef9531e7dad6c9c6507fc |
| SHA256 | eb8f138e67962a5c7db64722b78454da2e3c3d656ec8d72c9bec566f10a942de |
| SHA512 | 4fe7c7a7e439f6b43bc13af9291994ff913fa65ab1d77f162c97b18ae505b1c46ffb2c9236b7c9010580b095526a58204bf182aa5d476e3d0a006b2ca450d181 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0cbacc9a3c6aa07deb13db83f658936d
| MD5 | e3690a37568ee9fe7f191a17a47e2146 |
| SHA1 | 476c939e0ca065001820946509e36ac2842fb1fa |
| SHA256 | b8da756d34febd98745815e7ee643c49dfdf1adeece7fbdeda22487c06472f28 |
| SHA512 | c7b777cb3616fbe210b58c1e2395ffb378ffb36c2fed3af8c634e7d39667b9b433386d1a284f936a1d4e10e76c7a678e97216fe801cf95a0fc3fb313fc4514a3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\754379216f793b8b83ce74b0e1694d45
| MD5 | 33613fadfd68d29b9abdf5d0c107bcb7 |
| SHA1 | 186937368ad26632ebf8fb35e0e69da35a362caf |
| SHA256 | 57eb2daa6b2e991777533b5cc3548e8b274be4f13ec05e3d2348358670a7b81e |
| SHA512 | 2930c4dbaee031a281682e2ca0a3bda682ae760446a065f418b21f61ca8834b89c84df1a489a2c9b57565ed6843facad8648f472c88c22b944d53f74c82b6bbc |
C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json
| MD5 | eaef4b677b2babd4fb7b29da0f065bf5 |
| SHA1 | 655dc02137cacabfeebb0705832c3378062b1598 |
| SHA256 | c5a33fdff10981930005746e120f5cab8bd1321ea949ea5cd1b2e34a88f7aaf7 |
| SHA512 | 7ddab6aac206bbd23350667487335e674466d66b3f0c425ec3789a62749bd6073eea1e1f5785ca539a0b7e0bbd8a83605191508d97c8280644088cc7d8161aa3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a047f675d79d75b9a00bb356cdca2847
| MD5 | f514f9b1afaed54abfdea5c334a02023 |
| SHA1 | a73d2dd2a3a86be386d7c2400a8fde5ba866c8de |
| SHA256 | 344e3af9bd32d57b31b318c3c53ea0dc511ef77463e431ab39c788051e94561a |
| SHA512 | ae15a2602193826742ddc5468bfa56887b9c98c3413af5ebef29558882be5e264a4c7c0e9ddf4e725d402b276bff1a46dc51e501347cac4039081435c677ae93 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\00128013d18182993eb38b8ae2427999
| MD5 | 382616ef7d34c3d608af4db50adbbdb9 |
| SHA1 | 9ac0c9b2f92607c7c71e78ee648a458e2054370c |
| SHA256 | 3baf0849e226d3c53489bf0df25d2941c21e5955c9910091917913d716cfed66 |
| SHA512 | beb2f02037a6e3c5fad783be2f6d92fe9c51117bb1a32d2694ae1fadea1875abae95d82007998f1254af82965372284f6f1d8b821f61a4aa42d791cad1277f99 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d21f46a262d8aaa4da9f6cc89f58556
| MD5 | 8e950e640c9cc7089aea727d685bae6b |
| SHA1 | 4d7cb24ef5025429f04facc6e0e700334f49bbb0 |
| SHA256 | c068495897eb9c493ba12e6adf5ee5a5ced9347387d0e26d4a4627b9c784c4c0 |
| SHA512 | ba7be090fe1df0993467d1cbef5d6eb51f426bb039fecdb6b6da7f976394eb6568a5b57f93820e19f83e0a570bee243c69d46487e5435998d19c153ba012c7d4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9dc8b7e692754869e54603687e84187
| MD5 | 7ad352a680571f528742190154e73aa0 |
| SHA1 | 8a9c4c094bcc22171e045ad6be26dad515203cbf |
| SHA256 | 12f8878772e10c6948075ff8617dde5467f02000d0d513eb6d1ccf121e15328b |
| SHA512 | 6041e29fb944deabc65193769f2864fc67859840f21edd5c5a98fb8ce521aac28177f716dd222ec85c90e65171513af9de4b1a62c2e4b480c8bf781fc92569a9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e3796e76ce90647100c66d13ea6808d1
| MD5 | 5d07fd3313b76787fb99e190262b3d37 |
| SHA1 | 9126f383c31dbf3dca6cdb8fd25b9c2cbe8497c1 |
| SHA256 | 54830d2281dd8e30a41a5538bab9b90389adf19191ddd28495c1e83d8b960f56 |
| SHA512 | 5a026f548534d144dc4b2428a982f7859dd80c62b68cff5a7fcaf8d38aa70d8448f7aa060bb7aec3a087f3bcf32f3a29794b04ed460dfd16bc313ae51962a36f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb20f3facb23ee30000f1bb324fdfefe
| MD5 | 4df81c60373a100f8a543a4f621d37ad |
| SHA1 | 9061bda709486381ffa87ab1b6c0e9ba22d903e6 |
| SHA256 | fd709c9a0e21a82468684024616d75348dfead30ec6aa13221048c9d6734c163 |
| SHA512 | e6d2f3fb41cf0bc180c44f313d58437ef1d9851491f52723db4ce6919b7732c0752ec8d37048de35baf6dbe56935447f210e27c3bf9daafd858f40979d1df740 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c7cd25665debd5cd216d1edb0b9e0df0
| MD5 | ae247ab53663426df5f4e412dff7043c |
| SHA1 | 021c478ecc07f49752b6bc9299cc895d286d6794 |
| SHA256 | 1b9d7bab30844c27448919f52bb5625e4c2d8ae177a35ae830ec2a1394233d52 |
| SHA512 | 92dfbb642e493543e4d335412431a9fc6d07773cc4ceb60a13fe748fa82094f737053d449f07661b43116556aef692fdfa8594ce5ed5845e58f675489dee75f7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9a4f84b23113d388fbb317ac6060737
| MD5 | 9cecc8f05a77358dc4bf858463c23f69 |
| SHA1 | 61432cf637da04add4bee8f53cb9466dd5f0a3f4 |
| SHA256 | a28040f98218f7ad53ef6f32c8d77701ccfe2e10657f9b293225616324e3e070 |
| SHA512 | f2b0c1f0b5979d23f093384b0e255403561688e9c05bc20ac0cbf46f09fa989eaa714e342693c18398e5f8511de2b093c45e2d800cd87fc12336b39a3afb23dc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3265fe7177f3627b334db31255712b76
| MD5 | ace27972ba2541b3be0729e29b528303 |
| SHA1 | d43b19d5d07eeab6f9623f1c9bb4c547d1821338 |
| SHA256 | 7a6973930dfe5ac63b51366f87ee7f578c9cac23410343804912562584a1a50f |
| SHA512 | 658eeb88da3a1bf8fb0f0a7ed78c347a4f25969d83a5c6504202b4ab4f94498d4e0e3c934fa8b6305d75e8729afce83abb02ccfba601689c7e71421f265192f9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4eee26b4cb90ca62dc42bf90184b8ffa
| MD5 | da4e7351b997dbcbc9b378bf2807da4e |
| SHA1 | 1d942be852065789c6756a5183ecfe74e49b45d5 |
| SHA256 | a198d018314bb90549f990394bf12b497c1f6878dafe362018cfb7b22a74131c |
| SHA512 | 07ffb617558fa4c55403044172aede1ecabdfca917e202fce74a7720ce122ecd6ace8ca07da0bae29afbbaf026dfcb7405223fa00006b2b21ac2fee2293eef6c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7b6953b891495be71553859070571054
| MD5 | 504f7989be8fca8b55966b519bb80825 |
| SHA1 | 803123d1ac1dbcc2c17503493f229b160eca8a4b |
| SHA256 | 1b8d45abf86246856f1b98e9654a32ca64ffde296c18b8ba8175c975892e8ba7 |
| SHA512 | b05e52aca725097cb0fa8f8e0f1b284a930b29bab55c779be9c53ee76913495f3d51210c5f6d67b6cd633ca16a4776b83203c7efb00ec86fbc4cdcb7cfdb4f52 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\54476e66a9fbaa85706f927864b88178
| MD5 | ee0911edacc9a072654887bcbe92503c |
| SHA1 | ae1e5a4835b1a494b4f38659cc2fefe1b53f34a3 |
| SHA256 | 6964c8c7bfc40fa27e54f4d0d2db929f7951c37da2b53da2c5f01786a50ae4a3 |
| SHA512 | 202e6270c3d5ad226f077c1b2433ffe72bf205c8c5efd27455732d037b945866aca2913c32607a42422c10a73d4b998574c4bf1292096b609ff6735de3ea6caf |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\495cc3ecb6a4986562889184c6e6019b
| MD5 | bafa1f0fc394195a95117909085e00eb |
| SHA1 | 4a248065e4f081b0bbe90e56789501c808efd5d3 |
| SHA256 | 9ab637c1922d6bb6bfb35dd8871e882306d61c8c16be8e6ab3f201c367464ec6 |
| SHA512 | 38c6fa8ac7773676071c4a4c61a1bd95d0f9f1bdef7347519c854934b7ba21787ac343e073b0cd86353e8897e375c30e6750028b43971b445bed22ffc05ef866 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\db3726db31ab25e116eb10f974990833
| MD5 | 4e67a24ef89810f62f88d24df9995e42 |
| SHA1 | 3a49280c328436f8af28dcbe16f10fb385d57606 |
| SHA256 | cabc5d6cfa61de41105f4b183cb80d90b8b3059a972209a2774d5962f56b3c2b |
| SHA512 | 07829c7b4dd34c6d37ffe2aa954dcfd24f344a5e90ab4a762ca2b7c1ad2dec6f7c1a5c431d8b67177b33ff45abffb327781726831cdc068330a1be69f076639c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b861525b1d252d02a15adac8cedb92f
| MD5 | 594415511c04984ac95bf06831863a23 |
| SHA1 | c40143c1e6439461824291d3eb2565e4d7febfa5 |
| SHA256 | 54db5486c638d02a9a876e7b0faef2a52ed8a7f3474fa950b6b1fa1be902f66c |
| SHA512 | aa19b6a10bb2b7dbf63cbf7f0328143d1e776199a59e5d718e185a896022edaabc051f2dc96c3f34b73f6836ce1ae47d40b44728cd04a0fee2268c63d4224a10 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a3ee384db070a836f944775124efdf26
| MD5 | 6129a7031a30ce61f437114d1ffe1088 |
| SHA1 | 7acf1e016c7a72761212d1b69fbd3398f5e47b19 |
| SHA256 | 41bbd813a374ffae226b8ead7df678d92fac5cfccf63d096bb49fa0eef443098 |
| SHA512 | 2fa9cb6320c00e263800c7c29f1e948c6f875c857aae0c0370fc8025e6cb28432c0598f9d429f7934659346b7173433a38dbafd8c2223cb3553c02fea7364037 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0be75a716b7c73990a992444527c542
| MD5 | c77d8975f27de1a2f9cc5f6207435b45 |
| SHA1 | 87e208e17b361af4101b6c3189843bbd35b0708b |
| SHA256 | a403748e121614c005a3e43a72ed61061542c09f25abc7d3f6949abaab23eaac |
| SHA512 | bb9f73acdb0f545016120e6ceb1d6d828e0a91047d870fcdeb0dc175678040ef0b654729300a81b1390b545c14b1b43da2f4d6e3ffda62fc5f6e02f91a4c4302 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a53cf1adf73a4268705313006fe2763d
| MD5 | 60b5ba406426db2f25c9023c5127d113 |
| SHA1 | 69b13965fac77a0c45a0812dae0610f27274bf9e |
| SHA256 | 64eb6f3ca9ff393f966e63b51efe3713405e58c07d151f320e7e2e81c261e75c |
| SHA512 | 5bb6fa4f026cdabbed81cc77daa48ec30ec2aff776992f43c60839f16cddb6763d9c17b41081e10b83d60b00312a95c5cbbd9d8162ceaeed09abe126cfb20ad8 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b192ccb080f4e0b1fe81ad8d20a44b96
| MD5 | 6db072eb6dbd8d74e6ce3aa9903002a5 |
| SHA1 | a774c42050203606f3641d03e9a059b48a33828a |
| SHA256 | 641864647a907fe22ed50ddc214f39200f4f62c8cc392b5fe3606a5b94bf4bbe |
| SHA512 | 811bf46ba8ed1fb1b020b4a71fc06632bbb9c1176452f6f612155f5306147f971fd765bdc25dc817cc5cb1a523f0cd1e01bec23bcd0165d33d7ebe472703ef03 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\26ff072de5a7837a15b1c7dac962d6bb
| MD5 | 46f54b1584d2ae2a9036d0d250631e8f |
| SHA1 | 426b16c5e4ef87f9fcce6c0287f16c787ccefa5f |
| SHA256 | ed8ca40659ae55192f7ee984881a309d810618c96196fdb472755108014672ce |
| SHA512 | 50e1a30f37ce9c10d2995f3383ed98cb419742e3422eb2d21aa78ded84154f84ee8e883bc8397dadd5137f4f7b3c945688aca272794ac45db18d66350485931f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1714423a717ccf1ab92653c5216f7942
| MD5 | a13ab709f62b96164860448cb18715a8 |
| SHA1 | dca4dcf3ff22b8c7d4a6e89d0a0673d1e9546b65 |
| SHA256 | f71e3d16ee49642fff486775536442cb3d30ded8fb29292db48e1024ad5c55b1 |
| SHA512 | 0452bd52897dca7ef72d7a0e436dab87c779143b4331d6b27708407fb3702a642db8a8d8cc3edadf3d9c43cc2dcff5e25cd7547c5db3b694ec88a30c867d78bf |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\59dd0e071775e3dd64085028bb74a4f3
| MD5 | b54aaaf80b82c880aff035d5bd38c05c |
| SHA1 | e0e0296952908c28f7001f4fbbdfa4e32753774e |
| SHA256 | ccf81eaeafb9dc7f11c2fb49fd9d94b65c33f24543f42026315aba78a816bb3b |
| SHA512 | 640b19bfb24c689f93ef15c558905784c470ccad84bbb36739b69c26f32a0095f74a2b8f98e0354ce3aeb78dc81198cc15ef8378d3b0b93354f8ead9e290c4dd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\75b65158744b4825ae253dd50eb9c926
| MD5 | 41a558e6e4eee1413f1252fbe465621e |
| SHA1 | c395a74557588dec36906f7316d5ea823cf782cf |
| SHA256 | a44e9ebadf4e418aaf08b2a6c2b1676e86e5ebc9b8e4acfe126eb56076eeca62 |
| SHA512 | 7405fd344d6273bfa5891ee87f21b2c6a784a635dc34ab25ac439fc010cd36ff4d0d9ce8e808c9d52f82cd9687a2699da8e29e60896bc388877bf703c26924a3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3d6faa9a137db91687797c80cd697502
| MD5 | 18ff45e8615a4e2929f21f458206edc4 |
| SHA1 | 5fd2b1cbb08095ee1166292c869ff27e43b44425 |
| SHA256 | df923db444b03645e5763d93b9c490b0fb4178a1df0da85c1d9a1aca2bddac37 |
| SHA512 | 7bdc0d6d26afec67f4084759e675c611afae7c5e27f3d24f38b3ab5b2b869d34a788d0168ae7b6f36c3744dbd190fe1829f38d293a61f11282804a9aabce9966 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\01eae8c4c957f8f4a50b8e913ef210c3
| MD5 | 7ea62db988162abc9168054d44f31243 |
| SHA1 | f4ebd161a6ee138370b92d8eebd4786e36f4ed25 |
| SHA256 | a3ccf13fdb872c76cdf54b22f4d5ed9b272a82749367f975851f9be37ec13ecb |
| SHA512 | 02010cb3e016db622ea34ec78b688935971eb586f3fd30c29a145d3eb894f7cbd1b61f46f1ced33533fc12ebea31708fa4924ac5b87cde0dc82052f16e92a2ca |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d283aac4570666e6e4d5bac2bbc9dfe
| MD5 | a77e37f7b0f3e26f1ca4cd0b68cfcd33 |
| SHA1 | bec85b1f1d57688d3a7882e290680259bfe96226 |
| SHA256 | 9785741aae3e6925fe3a27cb59c69c58fa8d6966885eebdaba62b6df48539efa |
| SHA512 | 8475f77ad4fdd81050dc1476d9c1a80829d0b7f249f44a416121591526ed8edc88d66ac0cdc3df9a80ab44dd87ac297e483b6f5bec99e289c630a205009ebfc3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\89b41c31dbe93fa48b08d202a7da1417
| MD5 | 48d53c5efe4539e912984c3b024720aa |
| SHA1 | a523cfe1603e8fbc6fd74833efd2d84f0802c4fb |
| SHA256 | 0f25d5b860fe1f72d2b421c3ed2bbf8a335a45e58768814059757fd74adcf953 |
| SHA512 | 37287cada8a63470415a17537c02359950096c27df554ed100e38b0c7a815d0f91078d0ab38272cf9c9f9530690fc7ecd7bd7d11b0dd1875ec566fafd7e563fa |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2e5e47c3d9cba4042580de66bbbd5f4e
| MD5 | fe945525c84edc1acc1bfac6635b118d |
| SHA1 | dbda737d498c286e30cff75b9efc22411aed7cbc |
| SHA256 | f778f97398d72866437a7ceaf33715a81a2b92273d023a281529f6632f943df0 |
| SHA512 | b9092a08c8913c552bc59551f2543d42fecfeaa018f7805f2afc10536761e91b36540a2c7dc5ea8549f331b4cb2a558279a205af325f884d16bc67d7f3f3c5ed |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f6b148909109dd85aa003af8a35e3413
| MD5 | 81106a32f8e4dde99f7298af42b8bbbd |
| SHA1 | 3aa18ea83559bb0deb3a5ee3585b9c0508f88bb5 |
| SHA256 | 50cc83a8c8fe9e3148b70028861f510905c5065240cd207fee59ca9768fd70d8 |
| SHA512 | ff211d63ab2852aec65f0b976a27263dc165922093ddb26c1fb84435e620c3d582750cd1230df8bda09ce3e054ef5b1280fba07a7e95ae0a1fe8d4f0c58aa7dc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e2472982042e74309bbb1aface51b558
| MD5 | 2bfce4842ac478869b5ea058fc505bc5 |
| SHA1 | 2656af4cbec255465000f4847c26ec10afc23977 |
| SHA256 | cf760b1e3334f82b16b8e80d0a97268184d2f95fee67d167f94d09cb8969e126 |
| SHA512 | 2901a6be2a2f31f9b57ef215bdffd490d1d1d026c0c446b30adb1a8d06f04f34765a6fd0ce9a03bf4bc1de54e2825f6d71c0c4a371ac378e8c58271c85b82c11 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\651bc3fdc4656edf847879ed5b6afe85
| MD5 | c85bb0e8bbe6d9c81c43074fe709899f |
| SHA1 | 6b8432b62ad75332e1df3f665264b21d05508f8d |
| SHA256 | 20745852a8c2f8c48be66af5e8a5392577ddc46d7e1b96f1806d62ebe60dc5b3 |
| SHA512 | 5c98b1863474a26e76d40174f919f85cdd0d2f0b92f2d5277d56536ae7b938cacaf34b1576ed4811d673621aadfb1626d6d5a74672333e76744ed642c05edd09 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\19055f7cdd2ece34888f693128d4a4d1
| MD5 | 0d1c25821b17953c8d6248b1dfbbe96a |
| SHA1 | 1e88bba6b46e51300312be99013a1b44a305fcfb |
| SHA256 | 707786d46f5ab52138fabe96a7ae1cbcfaa5e61b995559295b49a346adf12da0 |
| SHA512 | c22b950f1b87e212c6947fbdf432fcb2ad24dee08f1da49e8bcb2cb5353cb704f86ad4d72734ade1275ef771e3c903d7e6e6f10965b6d71575b15979f6af1920 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d3abb290d36a519a6c5dbc8db5117c7
| MD5 | ebb58794216ceca3af8a25d383720a28 |
| SHA1 | 50c568e03d99bced27f5133a204acc978be3c4b7 |
| SHA256 | 6ea95386e171636ba7099f42ea1cdf965283d90faea776ffdbb787bc495f7f81 |
| SHA512 | 11272eeebc2fca596d07184d006abc4d02a59c9a77694e3cd88b259295853ca943fc429b1476244fa2c7036bc179820339d09f02147b96fe8e1351b6dae7a524 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\72cbe120ab8db1dc5b0d1c401d505684
| MD5 | 14c29e8df3f86f8125b57bbb2af40d60 |
| SHA1 | 8da5d1ff7faa28b64169fb1cf96c5a02d3bbbe97 |
| SHA256 | cd696decd30c28f3b049cbe49539b8f623fb7ebd110eadd9906ed8600b76cf3f |
| SHA512 | 60fffeaf1b8ca88f84e9c4f148c4f9e81e14b09f1816015e30853f16274210a7134774a143346bbe030b47fb7b8d122f116d0f89171b9828085eb1bd89c55b6c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a910d833f8759368e2955025c4cc9920
| MD5 | 794ef191233d3bbe211e66f64af5684d |
| SHA1 | 78c21e33495fde67e2ade4c5f15afe99b195b4a1 |
| SHA256 | eba9b671f79b2652c0f155dadc609d49a01518611e4d90bc230d1139e262675f |
| SHA512 | edcc0fbee4978210e39c38759b36301389e2f0a0ce4e480f512457af7e4e3aa158a3b3dc9dc156a4433524968fbdae785d844790b24f4ea79ecd8f8cc353215e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc9aae890e352e50343ae472b2141005
| MD5 | ed64f6ec40c00588f89c3eecdd10163d |
| SHA1 | cdeb494e6ea1e679c926f89182d152b11f5842bb |
| SHA256 | e4b0186dd72045a0bcf2254fe6c5f8c804ab1d5adf729bb4edcc436258a207cc |
| SHA512 | ba1288ed3f6d3319ce7d37cea15f3f0dbf6b3ada0593e65af9b6cbed2c0c79c33c994d0dfbeab54dc511ab48b12329e80b9bb29135e9eb10f96c536029b1dc2e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3891c37444d7cb78ce9833f5a34b3e33
| MD5 | 5c3a6b8583b7b94de09c5ef23247a40f |
| SHA1 | ae5f55d5b0ddce64f6cb10ba1dcbfdb5bae6de6b |
| SHA256 | 5f8c8c200771bdf43e3f3f26f1020f63a052b214b79a685315d373dace181b81 |
| SHA512 | 21b2db7b4eda260190c37e897774971873174d54cb5686072659e8f3bec2f4ef9d35876728f37be8a65b8d2a1904f13cf3c7d07bbe73da4b51b79579228ab561 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4ca54d10d5f2579654f5b21aeeb5c790
| MD5 | 0dd71a112fda0fc9a44c9dd3576ec84e |
| SHA1 | 9c4d8a5ce23a03e3101f0f2edea742b7d452c72d |
| SHA256 | d10f45628288695d95af2690e3a0e29c73c99829e0b8555836cdbf14e9231fd2 |
| SHA512 | 5464c5d5bb51e5f5141c2486b7de88dfd10c27eb3e028b358d22c9e382ee7ffedd78bb4be1ab018fa242e4208ed733035f9e624d0c850fc55c2ee68fb41acd2c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\11695da29356786c643b6a9c912741af
| MD5 | b62c6ce947f3a577140e98b1f4d80bac |
| SHA1 | 4d1ad9136d250767b683dce4bfbfa621c170384d |
| SHA256 | fb8bca04fa43d4422319d89de0e7ca9fb8a608a08a943c37a3fe924816749ffc |
| SHA512 | bf2b8e580a3960d637c1510c658a29e59cc04d6f1647ba0fa4ab10d28dd9ae63ab070c175ab9e9a5bf50d5a51ab3173b27a44ae48d74879411969f3515bae2ec |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f75ef358025a97a1c84fc111a9cc680a
| MD5 | 007ea50f06963b9ccc7ca726b9ce2d63 |
| SHA1 | 2852f043f3bf4c9594756763ba405124b7ccb12f |
| SHA256 | 134cd9a508e4d07c49237b8eedcfed1866fe654cf6c7ddde798627d579217fcd |
| SHA512 | f243dd33f1c1b71818f7b7dccd5a68a68e556a884eeaeea059d941d750557d050de12f250a88d53006e8ef0eb61bf40cc0fcad4bc8d2c03aad014e8f5c71ac73 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\856d17675a6d72e37e34f4fd33f6a512
| MD5 | a6c88c52554888dfa7d7bb5ddbc5f270 |
| SHA1 | c666237b961de1b6f72cc0ac6f2e6d581686d7d0 |
| SHA256 | f7c721dbd633754d332cb0547b72e9571f401041436e476f057fbaf195d3bef5 |
| SHA512 | b153720f385d599fc31bc1056dfa5d49b9b8e25d566bd27946abef52ae9fbe4ca40fb86c0c5ad47c0dc59ffe96e58e3f2f4448940e3f21dcc63e495a9301cb56 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f58c1dd3d93cb8498e44fa1fdf6de6c3
| MD5 | a11d047cfee997e5efdbe167302903a2 |
| SHA1 | 47061837e0c5c3f292335893831b9b4aa9e9dc95 |
| SHA256 | 4059c012c88e3c1e7ff4e4d5c0cdd0ba0861ddc0e9fafe09b850e1decae2900d |
| SHA512 | 344c0ad0e927e112a09498c4213d59327a35682e72605da1bbdb762c1afd15a1b46fe8cb2cd06951c459df4dbfdac72e0a91bc10312b0f2d5569b1826fff2e8b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\00909264c9be94c3866acf864ff95098
| MD5 | 72d2197343d3b23756adc9376b632c53 |
| SHA1 | d4df976d34c311f497d101b547509b6bec1a707c |
| SHA256 | 012a7620b67e312183e68343df4894590c9d084d83db97d1cd5c410592852de9 |
| SHA512 | 89f4b4a16181cad272454a6865684b40f2f3b53db5c49e1056e1283227a7225635fa3bce83c11b7321997c7584464137092815064a8c59bf66da472a6b1c4ae0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849
| MD5 | 7342a963fbe8b3a5bce98391f7c91497 |
| SHA1 | d937946afb025eb344dac220aa2d8d3494c759af |
| SHA256 | 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd |
| SHA512 | fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4236da697af790bd058153e31a25d382
| MD5 | 5e24843180b21359eafd68f292e8e6ac |
| SHA1 | 7ebcda1f14a12ef9affaa7fe3d33654a2c247a10 |
| SHA256 | 1a1e69f786b2b1c22e37c882db4e157f90b955589c7e5c1434d6884a71cc4c54 |
| SHA512 | c25d06e555b516f997271f7368f49a12e9120702d0d5a08e494381636602102cebfe90a0ac0970c6e746b081dc97ffe6aa3f4ff66077072dab19000e1afe018a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5fa00ec3731ae9117f079b4799d6cbcd
| MD5 | 61e1573e05b5d1454274acdc99114b2c |
| SHA1 | 4d38d0500e5282bd7b5835a1a1e322bf68da443f |
| SHA256 | 04457d4e163412caa0f42fd459a0b93d6a299568ce376420c51fc7339b6dabfe |
| SHA512 | c8e0bab0cfe3d191e29d327bf723e2c28546aa4fed5336a473c7ca8f52a56265efcd77ac4f7fd5fecc875e06cc927ebf12ab35a16e0016450df0317c4c9a9ab6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3b3f1b5c8afcd651834250af3aa17d4f
| MD5 | 29aba75e4e0e32d5e111bde6f950d099 |
| SHA1 | a1d83af5bc91e99a09dc76e2a8758d7dd3f87b95 |
| SHA256 | e0cfddce7495a9d9cdce7845c5912bd24e453318d55612a4548bde58721bd841 |
| SHA512 | c0456ff2f70e94f699724eef7f720cd16f8cd2586d8964dc16ffccbd7e465719582942b805110d368110984b2978b2334eab547a40638f15779d9202507b2bac |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6f2f8eef3bb2d049849f2733e6ecb031
| MD5 | efb15de15901530e52f0bb5822bd4025 |
| SHA1 | 4c9d9dab5741581d34867d14f6db5f4b679dd1df |
| SHA256 | d43a25fa14f7a67097c8a8ba0b42e746d8a9e4335c68ff51100aa4c427737d19 |
| SHA512 | d63da70c4608e52af8f5cb29fb7bf3e9ed7c9d9a17b349c5eaa4c0da4556c0e75f1803586133adf1066bd74fa013d3ccbf308199022946725e61b64cceb35965 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5980c9641eb1d0357e095cddbf13a046
| MD5 | 54ea7560c0a74104b423d9b6d939f034 |
| SHA1 | 11a0a7b7a422184d6efad322d6ee4cba2e5700ea |
| SHA256 | 69250c0c17197c0470ace89b6b8002851f035b9fdd13d764e62091d12bd86c9e |
| SHA512 | ed3cab035c1acd562363c5f31d55875fcd9f2dc98975a70cca9dcf0a387783b9e85e97d5bd1ddffe47387e5c66852b9a8a0aeaa31ca557fa2b3798657932088c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9791591b9248cd54c32da627f23b583f
| MD5 | b1f1d15e4b5b4b3e6587c9d71a277274 |
| SHA1 | 9633914d4e04e9fefb329112b00d39a1954bc1bd |
| SHA256 | 1f8efb0fb72559a6b14478d2f34d65b523ef326ec2974191ff585e72ae797c50 |
| SHA512 | 4c3b023d7522bc46c12f124327eabc3dbad87fa299e4e8dac888d1f4c430f983b0aea55e33a2e02978025f7d562d86ef066d91c3548fa502b023887d3c67e16c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\40b60da8968dc05b6111859396c860d9
| MD5 | edc97112b55dad074bae20d6bcf33e4f |
| SHA1 | 9c581b864323c975d36f10ed4dbf619bd1d35c5f |
| SHA256 | f2584bc3df293fccbe301bd8491dd2385a1a43b66ed25ecad1e7a8d04d83d9c3 |
| SHA512 | f6e2d9942126379a16d90ee9a92e1ffbb32db13024d694ca95db8fc12c74471eed86d3d232faddfbcde47c1ef27df85259176376a37103072a37e9bf01912637 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\374b2c6c69b63ff3a8750fa96de75058
| MD5 | 29105938a972c8fe4687cafd00823295 |
| SHA1 | ff9e17642d58eb08dcef5c6e06b835ba9ad6f167 |
| SHA256 | 8ea5b20288eac220ecfcb95b09d26c70362fc225a871d22f78b0b9565a5cba7e |
| SHA512 | f9cb42506f90065c51462b1d60a5187651cf6abd2fbdcec14121749b2b9e3154330c3c43358de65700208789becbe8a85c60a735afee4322913760c487dea772 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\72f4f02d578f1ed1373b71798ff44a02
| MD5 | 9bab3bc9e5ab031d8322abac3a189b48 |
| SHA1 | 6b1dcccb376fa2ea04f6afa3bd1cccd7d4907011 |
| SHA256 | fd155452ad24cff5c4f9aa7e9f6c09549e409f54c2b033bc14ec75986fbcded6 |
| SHA512 | a42b6483172df7ee439bc74016fe57781355e3495213f52d18af7f39cc56945c216502a9de0c8107b1de787f4eb20afa822450e601a20cee8dae0502f7e8cff3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1135cbcc74aa168d3992ed8ab748e124
| MD5 | c9540abbf881ff987a9f4e496528d020 |
| SHA1 | b3d22ae2605bfc976fc42128c4509901d927e1b2 |
| SHA256 | a22fc25db8252152d1cb7e07d1bf7e5de47e1d00e70b729b49ac9f94e6fdb2da |
| SHA512 | a587ccab901b632ebf9763acd157b66742132b9dfb67ed6239796be507c4f76b0470dabd4c41429d1814317cd2bf852e9d0e798ad685850dd5d37de3b1f9306f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\de9837ce3bfd03c0542b5d09f2816a25
| MD5 | 3cddfa5065e4d7a4313b5a2699410323 |
| SHA1 | 683135ce5f6ad488250b00f107999d1e5831f5d8 |
| SHA256 | 2bae931356d7d2f35ebb18cd03acba9172047dbfd9b220b0b8fb9fa93cf6edca |
| SHA512 | 3e4151be4938a2757e6e9e4f3f54862bde72534f1e547f09d45596f48876a926fd8cc52125c125df3bc9c461595e6faa39b56ff464524519ece87844d9a391bb |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\001bb9eb8e1494affad1a50e43c8c3c9
| MD5 | 355063dec8a3eec2a49edf8945e8ce58 |
| SHA1 | 797370427188744d7e62a0ad3db74e009ebb49aa |
| SHA256 | a83e7800acb7a11fa111bf7400c1a2762022615737f19acc89bc8dc2d907ee8f |
| SHA512 | b63ba388ffeb3c7f6db99d00cac0c8279774995757ba3f87f21072692792079d1141589c0cf022354b7e06d66d4be9cd51d8293fc0daa53660982e0a21ae029d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\182ee01918a28b544fa99f5ed2990f07
| MD5 | 774082b85c8035a01ac804b7c007dc12 |
| SHA1 | 864fdfacd9bc667b0e2278b0abf2c20cce815e3c |
| SHA256 | 9a0242bf0634e9fb76c58e2b2235f2e8faf5198b50483983b3de5fe7471c5e3a |
| SHA512 | d38bbf5ffb62bde8f31715bf24cffecdc3cf3ee4489d6ff5fe7d3381db06ab6652f8795bb51c7b2192ea29bd6355fb4bdae1194532c307d8865f02dd62d11dfd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX05100F3AD5C04F4EB1FCEE2FAFD64551
| MD5 | f5696211033f6ebbbc4384739d505d68 |
| SHA1 | be68f1a440ef125f2b4763378cc79f42d10d5aab |
| SHA256 | 8820d58f00186cc8a0b12ba103efe022d9acd9de1b44b3f057cb01e61885a910 |
| SHA512 | 3b2e179900e2c69e5d944de49df36018b6207293c45864695520086d48eb4364fee9b707ee993deac34fdd797b2a0a15ba1c24982e614393d41170ac1b30d2d4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\30a3a99467a97f92f7a6501a97f2ef86
| MD5 | fbd323164b524770b1cd80ec5a32661c |
| SHA1 | e0be0dc70259fa3d82ff269a7a1d7f2b307b6d2a |
| SHA256 | ced1fb97dd64590401268b297bcb5ef14af73f45e9dc2e7fe15d1186c54fa8ad |
| SHA512 | 795dd0fe16de0962087be4c7e6999683aa875303422613f99e8874d2e262781b07f4460f89dafa08a3ad6ce8fe17ff9965d81cd62b3d228c59b903f26607a185 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed
| MD5 | 808cb55c51b6fc55fa6cdb17892dc876 |
| SHA1 | 4487b86a3a42ff05e109800b1827c100390245c0 |
| SHA256 | eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d |
| SHA512 | 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\70c6985c96eda5892f7844ae12f01007
| MD5 | f9449e6e3930740e18433f7208861dc3 |
| SHA1 | 81807fcb63e8037804262c886b5d3e8587fd16d8 |
| SHA256 | 6cc569e6b8a878c96f8e537ccfed781a03e5a00fcc2bb6de349ac1f1e63e2ace |
| SHA512 | 1f010614c7a1882783b965a08d907d9c71e147acc365128e50380864bb582839a41fa05dfa0ba99cc23615b12e15b9018fe4bbd8a170dee1614ece732486e49c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\978c2478dc7043a66abbc1fcad480a63
| MD5 | aa74f13aa30cd6002a8d179484f83df2 |
| SHA1 | c9b83234c9d72099282892a948f790612c376c17 |
| SHA256 | b6f2707fce2a4c323b1ea7372f9c42cece1a3e4d6278d40a1f01b7ac5ac9fe1b |
| SHA512 | e0f6f9e4e0e4cd003292a1ba75ec6aadeb5d8ee3b68d5e0267af46749fb7789b9ab3dab6ba1f3efed37de65d035fd4d04dffbd93cae525ffde6277f8a8c2db1d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\be698f40d8a545dcaa98f53f7d4dccf0
| MD5 | c41f6d52e5373d843f9c7731504a908f |
| SHA1 | 2dbcf9fec2647ad8754aa32b572a9d1f3b33c7db |
| SHA256 | 6d60e5462482191db879dd6c8bbfad4c8958302f7522206652670eec41054c26 |
| SHA512 | eec380e769dd93b52760f1f721b006e2a66f068c49ce3081062ccc7cabece6aa9ccf5658d9b6206d3acd9641642327f5fa91ba048d5d502c44b79c4ad8e49aec |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d40d36924d3799e150516368898fb62
| MD5 | 0fbd0f2df1fbe5c786ef68900ed13004 |
| SHA1 | 0060513d1ca677da93ede81f1f256ced4ecefca9 |
| SHA256 | 50d059799d24999ffdb97cceca9af52402722a2a02600f8eed0650e2fb502354 |
| SHA512 | 8ffb88ca666bed68bbae2b7b4a90a8b5c0851c9c41397e95fca22ea3bab42bb2df1e448df9ced134be0a139c458998ce8e47ad4b920f4f818c7b40e8b7913d97 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\03c68ca992a675bf0928260feaedbe8e
| MD5 | 44e57acee3cc74ebb464310a10e672b0 |
| SHA1 | a1a6b3f75157f137da2fba56988db210f02094bf |
| SHA256 | 821c03614094db95bc6cb3a0efc1b1dc941b2516f7115c3af6ba23dbcb04e9ed |
| SHA512 | 029ebb41d5ad7134eaab611b551ed4cf3d6f518c22a7c906731f0191c7598def1898fc9f34622dcf8bd2695d36e6d9b476e7d8a18df55b997d844425d5461df0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6cb1981018bc5e8d0ad3be7ea1daa4ff
| MD5 | cc3a6bd21998b9c6e66fdb0d98dd235a |
| SHA1 | deb7cc6bfb089fa58e80e040fd44d4f8c7880066 |
| SHA256 | 20f3a7e264f78281fe9c3ae9d40f4acdf36508563da95c5611fa222e6f990d24 |
| SHA512 | 0b8629456f36da406741ffe85832669c14755163887f3b6df9c4565e5ccbd50e4edf4235bd6e5b643d38355ac99efdec797fd842186d27cd42e3a4193be18128 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0886a3ac76fe10a7b667bcefec4bb362
| MD5 | 505baeb46fbf5b2e30a3d90843227dcf |
| SHA1 | 664f3e98f6e7af53788a8c6cb7f80de4430f29ed |
| SHA256 | f52fa427571651fcb4e355c366b4a2b34ded6d2943c3cf96a0948fdf08cbde12 |
| SHA512 | 378009c75ab1eeeebe9dce7f192ddd309fbd1f97354e38fd5c769f64eb9bdeb7003b4fbe5c35840945c3a086824ed3787f1e66a862dffc1562b7003e10d0a83f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f184a5004549c3ff189ec40a5ad2bca2
| MD5 | 5d5c39b58cbbfa7fc209799c8079b28a |
| SHA1 | 707241f86f252ccf4a744f291e4ea4ed9205ce77 |
| SHA256 | ea8de38252b1125f5aa2160279a183d477083f4ac9df4757a7d718bcd8e3066b |
| SHA512 | 4c99e34aea0fa6e9c0700aec6a49a9328ebc4060b413acb38818fb49faf6e6c6de9639efec714de9a8026babb59dbad5211e25d65dc2a5c6cd611d2a0621498e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbeca67a0665ae2bb164d90ee8160fe1
| MD5 | a35def95f60bbdf981fc811e40c12a86 |
| SHA1 | b120667d4d55bfd90f17037a68f6dcbe0359a67e |
| SHA256 | 85121fe7f4586c2cca548ae9ea0ab76df017c0489da86f2d43e1f367402b1ee9 |
| SHA512 | a31814e35c5ce5e20332614e267afc78b36d4ec83df4d8d6185c4cba837440a998f2890ab27f110ab006f2b3baa28e9487399e10f32820c52f9ab47b09d9ea9a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0cd0725ce628c802aea646becfd46a5
| MD5 | b7c03229a5a8d6586e4532281bf1bcf6 |
| SHA1 | e2cf4dcb1a5ed9ec90882b05fd92a1cb2d9b7031 |
| SHA256 | 2f68626defe72fe2f0f653e4f329dc40a4da28ec0b6805b7e372df74503490e4 |
| SHA512 | 4b33587bd1e348c0c3c90ab22556c1a1634c9c16a7986d5ca92cf409a6bc9a2d4ef6ff29f1c56fbaeea7ea42b9e6bcac980f3a13869c7321dfa94b3d4c68498b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d037793126f8c0f73ffa0ef15b3fbdb2
| MD5 | eca94f0121a88e999a541f12a9f19ed8 |
| SHA1 | ca4842f8b5b7ce6b010b14ac7615a37f4e8eccc0 |
| SHA256 | 25f69dc787882fdd0c3806bcf4127f2cb8759fed38f3d35b964f2dd3ae91551f |
| SHA512 | e7ee1e03cecea48add2ccd2cb74f205063c43bedd49d1135ea45da5e9bc138bce689de92f25dfb67b10cdccd2ee0f5ba3386dcc568c7fd1d2a526b1de7e22c1c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ebfbf1d5a524626307a4be8a205afbf7
| MD5 | 008bd9e6bf85e71c74d6334e70b21c70 |
| SHA1 | e3e77fb6fa38026435c2a4274e75ba4f0640eee1 |
| SHA256 | b36c294031fceede537d76bc737a1aeeaeb7f34c4b13f96c4864767c386fe918 |
| SHA512 | 2b430b5ea89a88401d77663fd89f408af8dd5efdfe953f4b38aba4f47f7512fdce97cba5f8b89db5984441d9a18fb612a8b66958a674738da8f82cf2ff994d69 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b6e15c3f2f2e506a7da13ddbd4c8b068
| MD5 | 389c96f42d1e2463adb4819d92e9b7ba |
| SHA1 | a6c21d603126c5faab5339e456898080f6c2f7af |
| SHA256 | e40dbf8dd9e9909507f30d7b33a890fa5acdc953de89d2aafe569a6ac0531d57 |
| SHA512 | a092a1973141ea3d8105a1a4b7d87d9730843b57360178c5c09a3c1baa4a2e278b84e5229cb8538a66dbf5f46a4034227a3e62944738af921c1a6a6ea98d8bf8 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\27d0d0c685dcf98940d3a4bf6563f753
| MD5 | 29ef861777ba73d7eb42731faf81634b |
| SHA1 | e019980ebede3d5f8b427a265a027e0dc1c6117e |
| SHA256 | c3b7f4ec724ab34558b5b3da7851fcb2314a74c06c47741811afbdad699f33f9 |
| SHA512 | 8d9b14324c676f7665ad203e8b0f55f86f41df63eec297f283115affc9e8405b1083f8c0cb57ccf19df2e251cc3e036430b343da5abf692f272c9a7278c3a51d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\53de67f464e60344c09bf888ae385af1
| MD5 | 0c9f8871ec461e19939af0ca1496c34c |
| SHA1 | ef474c03ae416d943318a6b25a80d6fa1e07e172 |
| SHA256 | e7f4918fd3e151e7d85943377c0e5083ffdeed5342d9e64a83c609ad7e6e27e5 |
| SHA512 | 0458c1361a93f31def41846b012bd976d58d608735b7bc702061bd8b645051c9869e9e8131c66f3b6436176dcd9da73217f025790f83ea0a2a626a0864135a00 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ada6af400b11d1a135a735cf4734e898
| MD5 | 2f69e27d7f38c2f563f8734b1befdcbb |
| SHA1 | 5c5648ed2bf745918f0ddde7b349d09e43875241 |
| SHA256 | c6e66bda60e250acb4344194180ef4bf661cf3e272292d16207206a576086f2e |
| SHA512 | c749bfe445c2e2b801550462b0aa1f8048c62310d90839466361390fbf35fed16bf07e9c5c906fe03aa4042067e3870edc7d1ad75500efa9dc43d7a35f3dc0a5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc3ad132dacfa9ce4a937445447d42fc
| MD5 | 980a23b69316ac6cfbcd199a10344451 |
| SHA1 | faffe45bdb79b96ec59bff318e2880cc8acf83a0 |
| SHA256 | 627744c6b0baa8472b26f549ebf7534fd1e1406af6a1ac7d642b09e40ec258fb |
| SHA512 | 8adc28315328e762f2a7de418a6a7defbfecc884bec60eb466aaf094d025acaf61b789f866453589b2bebfeb4a1914b106a09199e4b33228d373cbc1fb118525 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\43f78d28b4b04abc57bd0731090e04cc
| MD5 | 5534709b5eb8e91f578101ee5e04694a |
| SHA1 | dfc4e8b1b2dde730b74a3642ed2d197a57468cc5 |
| SHA256 | ecebf0618efdefeb25498afa3976382f1503b9c817f439c910cb39e622f15682 |
| SHA512 | b4c784f2d5ffc84d9f6c9253bab30b12110ff9db9dffdbb1ece121c41bd173b192463c60fcaa9d4efe092fff6b922d71a69ffbb3c4b78a03c56375d1d2af96f0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8226a965c9af5aae83fb50f4ea75cd32
| MD5 | 5bc05175f24861fa8d756c3a433873b2 |
| SHA1 | a815675f3770f1aee3643dd4334d400caf85f6e4 |
| SHA256 | 7d2319995cff21eab461034f01d894c9fc64231ebc9aa4af363ffaab1634777f |
| SHA512 | 7688314fc935e3080bb9a315378343d7955a5e168a6f67662d771f59a694b5fb9b99a9955282c1b2dce09e5feaf5fb0da6d96341a4c60b6e3ffe9a05a26bcf43 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e68e7507c9a3f6a728687a53b6e629
| MD5 | 1d4696897c95b702690492b15fc4efcc |
| SHA1 | 20df6eb1dad22c8ed4c18e93eea58bce9b0ba5db |
| SHA256 | 09e5d656a9749a8861515f7d185654d351fd73ff3d038a6a05d07e051d2e0c74 |
| SHA512 | 9c492d8ddb357ece518adeffa66f1490680758a3e2a2e45100877e6a3390e2bcfe0d0698a188c03046bd90bfb43b7e5fe9d22a1fd298e58c37697214551fb520 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5fb2f45401b75c496b0c37939473ce5d
| MD5 | 94af67c473454083886cec7785952d1e |
| SHA1 | 82b7a6066d0c3c6eb5fe3c26caf771ae5035b636 |
| SHA256 | d4183d6bf2f3ae55b3c7168d5514a355307957e6868e47b42d6ffd679e277439 |
| SHA512 | 189da23924cb3517cbf87b55959d64e7233c2a205124787363a1d8b87967f3a16c8031eb3e2afcbc886c67f17430f36f50a238d9bbf163a00b55b9c369901804 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5abafd9ff326849eaefb551e7350d5b
| MD5 | f2af62e217d803cd1f95cef14239fb26 |
| SHA1 | 18eee29b523bdd92dba5b8e6c088feb7cdc65926 |
| SHA256 | c6d2cf97f693b073c84f7dc698f831fad3aa03d241b783ed251ad3f1a54d05c4 |
| SHA512 | 2c21deb9c15802500067d769bae6899fa415798d44236c20660a5b5725559315d5586b7f7b6cf86bf575ca5b5f00fd97a4654b6febb853ed4488b7da7136a9e7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ab7c55df5f407e0cd30ec88a0f64c0f5
| MD5 | 94ea0587c67c2508a3e3dcae6140909b |
| SHA1 | 51b67880d15a8c8264036b61434fddcb71d839b2 |
| SHA256 | 6b2f9fe29e17e1b9258640c961b15ee9d408097e01329acbd39feca78cb3f1b9 |
| SHA512 | 2994140d6d24a0e3e39dde1cef20313d99640d63583ca3801c25bf51a6d930c8b32e7c63b2b85953575a8313b9e8b966bc42591f0fbba7c51a66eb54f9815c93 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8e6b29b515cb2a94fedfc768edba9f91
| MD5 | bae5bfba203adab510534d88c0ec3bf0 |
| SHA1 | 3850cd2d5056c35f1b32013e7f07ea720dc61a36 |
| SHA256 | 85718b5eb2c27d6246bf22090b6c93cce669a603e2de2a0204f998bd0ec16e80 |
| SHA512 | c70d0dad2fe7b55cfb61e542d6372f2def4738c2d2229981cbf60d15749e0fcc5d123a71c9c9cd7f195cfc0c979c45e3d1272d34169b21492b6cf1f7b1f070cd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\253c2021e3d223aab532c9914bc2486f
| MD5 | 1abfb03204d207a27ac2c005a233a118 |
| SHA1 | 21574dd466e88679ebca53e6e6e3207ae9105c38 |
| SHA256 | a666e886ac6834d854c4713f287744874b4d2ebc4690a34f4f005e7a5d72806f |
| SHA512 | be5af67c16cb52eb73f7ae0e1215410904a4f888229cee1c2348a1e3f6959faf5d99a883d6293e07e52781e54ce5850ee4bf72ba23f8c56d66dd80ea7ceaa616 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b7f79d5563deb36faed5a0ddb89ed7c
| MD5 | 90235fb071ea7cefe9d46959de74a0c0 |
| SHA1 | 7c96d8900c7e2372a16810d8183c7d036fbe1f2a |
| SHA256 | 7a08049b4d5c86cf2367883aa8dcd86e2ab2a4ad15da293d62d67d188b8908e5 |
| SHA512 | c71d7152aac4e4127e0b5719fe65ffc21aa7da97cc89087c5aacb49b7f0f25c4bb4ab431fb886a8b3b41ccb004762e36aeadeb7582dd16d4315eb4888c378acc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8a6afe004058df8c2c93fe7730419fc4
| MD5 | 767d1d050f84f0c2ae08428d01279f42 |
| SHA1 | e27dc3c27b6ea8f5572fc86f5651288dff591829 |
| SHA256 | 956a63d8bcdae2ab3d0acdfbdee4fec16194f5a6ab83e21977054ef6e2bfb902 |
| SHA512 | 138fef3836255740bcedf6fa57a8963e58a8b89bc9b2e0d90b8c2869d4459c827646ce09da4063bd6742aacc818ee5e4f8e9d110b1944666c2f138a25ee7c74e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\990629caefdf3f2d7bc959264b81d433
| MD5 | 1e9c00b3559f4838b1d0e48b4b505d2a |
| SHA1 | 01ff2de0939fb49fb6fc51958b01a787af0c5b63 |
| SHA256 | 2f9fb2ba916b26b4d7891727cf6d66289bb5d2264cdac6a08e386d95671a9eea |
| SHA512 | f210e570869fee73075d91dd16f9fcad22a2e41a979c971d2a6add91773c9f9387972459aea3135c2653eee92be8659587069bdc080509d36e17720811c77e20 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 7cd29b5482f8f7f6a1fe575870be9c01 |
| SHA1 | 68ef7dc67077dadef06c382374d52400f6573a4e |
| SHA256 | 6ccbe834d19ff9de7b9266129b41484a63be9fa58ec3390e905b61350d5dff0e |
| SHA512 | b7c1c4561f4c76de5760fcc916a11a8ba6cbeec2bdcf6db43c28d97e75e63bd92bd627eea9deb0de61f0b16cbf3f29f21b2339f66761cf31cc36f26183d233cf |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\82759c0b4aadea64e10588433cdb015a
| MD5 | f8b169bc71b92f3a1da9db6f8f5f7af6 |
| SHA1 | f3f47a97eb66b18237901aea5adfaa5934e253f3 |
| SHA256 | 6e3d0a4c47724ea9922c7957458cff61a4acae75ddaf0ffba34e81ad6094a904 |
| SHA512 | 1bad9a9e49e6f063e8eee6324ef197e0f66ec9b464953107b7eda2b5a912f80191ff1fa65502aa20b6ebd8cd47c9f39e0d28f8c8369caa5989fd1892758b0da6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7028a620955cf89c5963b96e3853d56b
| MD5 | fb5be4c71f61c6c35a81624acbab8536 |
| SHA1 | 7f0fbffd1a77d3d7811811db946152f55c1b8d1a |
| SHA256 | 66a9f6e155348a8909c758fc0c1421bbcc0ce4ce87109a2c80a6a06da7e73149 |
| SHA512 | 6c811676396f117268e7ce876ce1a4d7f6657ebb554cf946ec3902bd2af0150e103376515298865a959b133bd84f63e04a5ca2972b116b51ed983b00211d9c89 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4b33904502208474fe8db975dde463c2
| MD5 | 37259c25fa870b294111d0eb7ea90a15 |
| SHA1 | ad450cdc8167a47b076af0bb30adb35bc9d0cc17 |
| SHA256 | a1ae2c2c0a8937e449b3792218b0b68eeb6540e0d5748b17af2903dabdae0192 |
| SHA512 | ee8285724666a5c8665c502bba1eb2e41a32fc921eba732831b83b1649da8d40f7c342806055bb7fc5a7d611488ad764f66be44d969feefc38baf7bdfdadd869 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5ad07209dc8f4d247d59d842969f513d
| MD5 | da47f84d0c7a1619f11795f4b4c48e35 |
| SHA1 | 6d15c72b599509d221cab6d652d26fc569ab6714 |
| SHA256 | ba8b345e1c896c2b20107296fdeabe5297409d797d666b71861896bf69773a99 |
| SHA512 | 755f3b24c36b749469d100b11789fed59a21b020868ec887709f9628ca43446b59ebfab8c466a6763dbcf3ef35df34b9c2267acf96fd20d0b06411bb4c79c6a5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\63d7abb4c507a541ce8ad142a5d0dc0c
| MD5 | 191eccefa2359922b34e19f395af8da4 |
| SHA1 | a75144fa2bc0dd85253a6bf22c523deffce66f33 |
| SHA256 | 42e13bacb7feceb386ce3d51d1ac301163bcfa581af8ed9d88eeb3b4d5f92a14 |
| SHA512 | c47044ecc9fabaec445b3e14d9875aa64fae6c6132ea3d62c382139c5e5ffe74e0dc9fc52f243018bd8b8472eb05e5d9d139ddb1d806339bbe32e0dcfbda371f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6040d243f4ab8514ec2d8b7945edd49f
| MD5 | 6bed41dd4fe9f6f51c8d4a8ca8364335 |
| SHA1 | 1cf02aa77036ec5132aa843727eb195c62771fdb |
| SHA256 | fb91c1837a8dc0be87615a969330ff1759b841df29ebf7f30f547405c5f5062d |
| SHA512 | 8859e29252fc2b244a777de28b10571ac79b961d7f205ee66dd547386a9bd3ca2c033bd0fe278bb1dd45499bd414eb42eea631aae32dd37b2783696bf7926617 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b77b65c183155924d462d7dd5a2d19ba
| MD5 | a3f73742c043fffa1031b3d6fc6f6507 |
| SHA1 | 5a8183529767d1cfb84a2098fda024e74e75e5fd |
| SHA256 | c90b4343e85e98288471dc1f9ffd87d67ea565d9f9d217c0772babaacbedba0a |
| SHA512 | 4b5d7c496d1b63d1d2dfc7c1b02461c79d42b823da16c0443c362c7df79c4e339a8de6e48d8da9cd2c568b3b005ec464e241e0eeb88f71d5139dbfc721422ec8 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a37f84537126d484607d1a1b050d8059
| MD5 | a579a54abae37e988709aedce5de0ea6 |
| SHA1 | 90e44095ad5e5f71bda29b9ae29631c28027a724 |
| SHA256 | c172a7965096ba2fbc75377eee557cda2eaeaaff11f148621640e2b19cf7fcdd |
| SHA512 | d1586cd2d3b77a03920d66e8bc0775b1b72637a9c4b8e4dd8344d5383bb91a89a45f30affe232c1110570f0de26e77ba985ce8299f2fdd970542975fc0c386ed |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ea052f280ec2b34c02fe8bd5f5fa420b
| MD5 | 6f6e11f7655c8a1bb7737ee180dbad1c |
| SHA1 | d9052fa1d6da963781130ec6f6f1c27c3f2d3d76 |
| SHA256 | cec8bfaaa00a99a6fa3f8c54a07c157fb13d7493ed3346a205f84ab51da11aca |
| SHA512 | e5692067f368c2b48818b144abd0ec20b946908352e181896c5732b52d078396647328d88c222ca58b46a65e8fb54fa2f9d29f2312539333f1e050e0e7619561 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d252749c493839768b508b0213086515
| MD5 | 1153ed6d0cdc8f97774112e624189186 |
| SHA1 | 60de97b200468b2199928045e5da9e6c5b0af18c |
| SHA256 | a7b8c27a03d933867ae17fe915cc8361a2bb83f2b650480c698518b8c64b032c |
| SHA512 | 80c3f2e5c2e1888b4bc50d5f468d864c5eea11182c7ae419cca47433b911c210e887526c4d36a044974d1a5d46845e6858bf400d584bad5c9f548bf463c26725 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7d47f33e80d4df6db5c2df3167bcec5b
| MD5 | 5ab59961f00668fa2b6bea31bab29112 |
| SHA1 | f66905a891bbf0bb6d9b1845982884e9b724a768 |
| SHA256 | b08f047cc2b45010fd7ac657e6e181f39af2193e3bada51d11940ce67be0ffb1 |
| SHA512 | c7cbd0e34c768eb7b2edf98983a93d18440cd7b7c2d7d06fc99eb638e7197c8936330926d0b4f79728b1206dc939eeac8f1a29d1b14d5796a243b1c1be59d7c1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\aecfd827995adfe5c7a03ebe776d1f47
| MD5 | 64cd5a53a0dc337cb978b26fe1167b04 |
| SHA1 | 262a3aa44b06ebc395fbe565e687ff9b0e842aae |
| SHA256 | a5cd5d0fc1be39fbc6da24cc882f942d6ea82766068385c7b8cbc7cbb967adbc |
| SHA512 | 127c9fa960620b3268991049f7d609ae563e5d43c44991f59376478ed49210652b8c1b5acd6b5efbd984974d4ea024907a5edf2271e60513bcc203485503b8fe |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\03e96aad1fd37e77ba53bf23f9a02ffb
| MD5 | db177913fb4bd03b4faba11a68499a5e |
| SHA1 | 58d4962087ce4d8f5b247c70ac4b1a62fc04e638 |
| SHA256 | 4b09ab03c182903d64b34cc1bc5ecca02c7ae423c0b7ef36e08dceea80a07350 |
| SHA512 | b86726e10e6a1620e51568ac2665a1e73baf89893a8f4f358f9e1ebfc7b5bb21fdf6f31ff7f4699c123dcd5ee2f4c9db51cbc2d3297d78b55768aa046cc9fc8e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c9e6cdeba5ee5d0532aff3dc7bd3ad3
| MD5 | 7e58f4d772391684d2ad23b43c1489b9 |
| SHA1 | 7d455c903408f0ec3fec45ceafc1ae68c517bb94 |
| SHA256 | 40f7d75d2a27bad9ab62481e9418f1ed0749a6528ecee7ae43fcf2124abe2f77 |
| SHA512 | af56a7e4cc8876d1aeaeb17b8904a95ce6c03be070a6477261d78ef6c5a5d331f6bdc48ebfee6138f8d3b785fb978c2a721ff749017bac133c2596fefec30947 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9d69baad0e3db3b0a5ceb0b61a5dba84
| MD5 | db4be961063486b65717ff5cc7863cb7 |
| SHA1 | 21154d26705a15a647c2c954d2e64b5ea392272f |
| SHA256 | c36b006c0934b4ec79311adcced52d8c9e54b5e390b519b1880016b9a393de74 |
| SHA512 | 7836c2854f6708d15f5712bb7526eb930d1dcd21ab9cc38913f1adaebd77ff72050570dcbab9c36ac3a61af3bebab3d12ae863176952df5f3e7db3c66d3a3ec2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\804bbd5c61d348fe51a4725e0c64d251
| MD5 | ef11c439220ac4b9732e870efd42596a |
| SHA1 | 61111e06b59652bd0191f13f0275933dc99f148a |
| SHA256 | 26d4e99e698bd69375a338af6686f3b92f90baa279babf12dce2bbc1af7a891b |
| SHA512 | e6322c7a2ad7dd15ecd445566f29eec85de784f2724ee9e08a79706c59c61e0cdb463035836757874ec188dfecfcd67f3da9f867a28cec2032e9996fbce039bb |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\65801cb7264b6c4d278037bbc700407b
| MD5 | ae670219166539bcf61fe2f787f14464 |
| SHA1 | b0563386cd87dbb8977329b0eed5b00eed792042 |
| SHA256 | c6c5af9b4280a1fc6df26fa58443bf3ad5921540fc14cc5a9667c8f8fcaff207 |
| SHA512 | 1c9b2880908422ca36132ce7b7b6ab263d4bf25e4110ae9fe4e8f72fdf07e4a327fdaa0a192692095f2ac399982925a9a3dcc291aaa6b91a8cfe570e51070d5c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1bd0b313b884f44ee8315a9ca7666b0
| MD5 | bd4a062f547b5ce527b54987c658881c |
| SHA1 | c4941f08a0d3299600ba8df8cef52a68508458ab |
| SHA256 | 4f425728e4ec6df9b03a54ba7ab141a8d0190ef89fde6e854241c946714f1847 |
| SHA512 | fd4f21e5eb1fbbdba9b0b77605f43f244dd4c8f4e8763389220eba207578b0c349002bb6a34752f2813d8bf474e6c9ac0f0b2b483da4d84e7e032f415869f597 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\979020a6a55d12bae83a5284637269d7
| MD5 | 2be70afa5b8bf66380f478350be3ca8a |
| SHA1 | eb5b9a02d0d44265b49f279b69aba372b1b0c03a |
| SHA256 | 9e06c9b13595e2ac761ae8f67ecd20240d98c0d4b0fec6fe44d2fd201ced6b93 |
| SHA512 | 77adc6900b60cb2da21328140a5b52acf426b0ecd5f4a0ced47c52a6f61e9c5312ad125f44a5f9d3e3a16bbc0f81993bca5b796950a22024a99c6556794c88f0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d888883c772c2e4a33d0b57bcf3aad2c
| MD5 | ee128b929cac2cb8660959386552644f |
| SHA1 | 9223b8c3fbf556d9ce88571a9104e031afc255fd |
| SHA256 | 149a3c33c0d9d83389b3de6e02c1db28112a9f81c54c342b5e1dd930750b87a7 |
| SHA512 | 4a9a4467f5b8f992ec430840bfb3348f0ea62caaf5fd947b52d82be9f576100f0b1349fd202486464cfd73cecd8413bab5c3eaa8b5935790f36ab4f76b9f8d17 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2cb0502e4728bd0c80ec6a286d23f640
| MD5 | 50f17155f38d3bacb6798088b5970597 |
| SHA1 | 85c336d46120ca2c74f2c2b6d1210218ff8e8282 |
| SHA256 | 8d3f3cc56ab9aa5ff6a4317d93200e67d0261b670ded5f3aa46dc0727fc64f7d |
| SHA512 | 5774cfd32cb0868ccf6e8e5a9ebca62bcc9cdfd5ddd29aa45abe35149e2a19fcab339810b5865be7488b8db7e8f8d5888a5cc6773054bba700f6965e93d31ae7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\33fc14c0696a0074820b79f5b06f0304
| MD5 | a203e1e80d9f221a7cf63749114dbdfb |
| SHA1 | 63d4da7bd62ee01a225ca0b3e20aa358885fdfa8 |
| SHA256 | 37e919ed3b51ca509d2819d4837f57e9781057b107376af76b4bf7db9137ff4c |
| SHA512 | 902e0208a089d1e537405e4845c1e794c604575cfc0c4c35c50d5d298d0268ba46fd733f6a22236af8156a29c9bbc67fd547c3331fd68b46b7066870db75d696 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc2da89d303545f56d70f7b01c0485e8
| MD5 | 75bc74964f01186af2142d19aeed1c7d |
| SHA1 | 608a8bd53765731b89546587f04068d880776067 |
| SHA256 | 098d4154427c20e5624dd81753cce95a4af5ee1a0db6aa5dad9324e11fdfec43 |
| SHA512 | 1ce31cac717a22d7509c7babab7fa8a44e4da97c0856ffc4a5f6199b9c76646889d2013f0627a1861af24a2dd63236364af7fa11e15921416607e57ae51ab46f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5ddc155c69e4830c16a14250014d1795
| MD5 | 0ebe79f064e7ebde996ed3203a501622 |
| SHA1 | c3bab4298733b7992f477c1300e67441ac161cb9 |
| SHA256 | 9935e8cda17242432b4e3c20be2cde35709b386201bd0e945840c85fe704b2d9 |
| SHA512 | 6417e666512477672bd80609c91036b08aa1029a01432630c07217b39f3dafafebd7fe42b20bbf12bd793faf920973db39da50be1b03ac9f4ca7ec1fd0eb89cc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\25e6f2e2071c1297444147bd65ecfd3e
| MD5 | 5ed7ee02eaa588458d200f8acf0e84b1 |
| SHA1 | 92566a7dbe29411f2d2de8c3de6809b01919f295 |
| SHA256 | a91616d83d49f95278131c08544857ba3d68274ae20992071804a0dd7088a9e5 |
| SHA512 | 656ab6cea37c32bbd258d7b80ebf72b33a41defff93e3884e90b4d0d7c581ddd92c663d57a3b32d578be757cec29bebfd06d99af07601db6069e712682494cd8 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\89449ed9bde68b012c33dabbd5fd72a1
| MD5 | 554447dc88bc89cea05f5ff80ddcccbb |
| SHA1 | f33aedb08881debc8918c1629a21798f1e56e406 |
| SHA256 | d7304507d68761a5eb41015f6630c462648478d4a0c5cbc0bee5df03e4bff231 |
| SHA512 | 81015284ea9aa71d6640e501b2d9ddf9c05499e2b948519b060fc7bb7dc2f607e59591efd7fb333fc0f99c665d0e994b5ef74a627ee00f5de3c1b0d5f9be5a36 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\25d6547d26602b0ffd4efd61d703bbba
| MD5 | 72c07a03e3274cda2b35f1694d2f2cec |
| SHA1 | f7068945185dff621b99f3c2071baf26dc591145 |
| SHA256 | f191e60a2592634e7b7ba9c694dc8182889fcd66e04c1c4c8ad8e5d1d8f2e21b |
| SHA512 | bfa173888e1fc43047b05bdf8d793c7eb4ee8972f99affd8a15c560efaa5ce9993214ea525c18e3c090ffce8b2a9fba08936c8d29afbf15e7aa0762a682f1bff |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\44c5142d261ff8ddea48b817ba4d6da7
| MD5 | 341ca4a42265cd4f885cd5b44840da9c |
| SHA1 | cfd11f8c683f2ff3569ac4b982d553e2977929ac |
| SHA256 | 6f792b416aab00d66570371fa3b41a834492ca159afef89ec3965899d633e414 |
| SHA512 | f953ffe4e3764189f318579eab92773fd486d0dae5616d3cbbd9e210bdd2efb2060179a665487d9b18fa894ea21aeb2a0ad2501157e2ab0d29ab02d9ddb02c38 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b690ec7ccc78bc7b512083ea5b8f2610
| MD5 | 59cdbb8888c54c3119e4cf094571ef78 |
| SHA1 | 529c178cbf7fd7f60702a3b338d0d0ee3da85776 |
| SHA256 | 33f61564ea0c830a66ff7e6709a935191364549b0d62528aa62d5762c744c354 |
| SHA512 | 96b73a28e141ea263145774e6dd63552c21d023f640384ee6cc4cca5a869f1c9407d1d9a919f7316959f6e21276449da3786365f45b7b399037008118588aa26 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\da809dd9fe44b9d83509d61ecf879d53
| MD5 | 88a9f63c76d5b1eabf37742555788a04 |
| SHA1 | c27cb4902307e6aa43451113d6372e4b1f6a757c |
| SHA256 | 38890a6ea0542a25c83cd14a1048ef720f25c60e06bef35df607209d13453a1d |
| SHA512 | 15c4e0df83f9bc2290059751948c663cb33540130c3033c31ab770e992f211a365bb688b63ea0c9075e8aa001dae6a93f144c55f1780fac1fffb0ed59a7592b8 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f14a36928afa9717b75a6ea0680a4a26
| MD5 | 1db1802155f879559a62249ed30e1969 |
| SHA1 | 937e30b0915bd22182499e95ac83fe32ae0f7d5d |
| SHA256 | f5ccb52a9cd5158f76c306cecc2dc3fbd12a0594d8d3bb5fe0f06b89fb84f0a0 |
| SHA512 | 4d1ce04732bc79177fcd4f357e7009b67ae12f029514f6b281f84bea38bdc992dc647fde00c7a98e35727645eec78259dde854640eac28e41e1559355f864fa5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a02f3e78efc9ce46f03d2366b9fdb4b6
| MD5 | 65789d36bed8f975e24b1c60165f4066 |
| SHA1 | 27b17996f39a717de230d6347947bd63d3465aa2 |
| SHA256 | a68431e7ad25864abe326de3c1043c77571bde3ca5863e1f82a293befa2273da |
| SHA512 | f5a3c3362d45d16916693e474c02739b330596ee293d9049bdf014005472501093da33931ba26b98432238e8819a263a726ab36000568b5a0bdcc70fba9eb07b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c0b56746502d688296e7708318493619
| MD5 | 1ee3d702762fe1a09abf150c14d20094 |
| SHA1 | d2bdf08e180f3b5e7a80c4e1b6e47eaea40fe2c3 |
| SHA256 | 5237bffc510a12e9990e0427c32cb27affbfb5e52c6f8e4d69dcd99dc20e0033 |
| SHA512 | 33d3b1d206956eda445518216422376fc822fa838ade1ef1fbce68729968f7762aacbf1117c822ca7ce3f082abd1e98792f2474d6f4b7ad1fca0513364b91700 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bb44d8ab0bb6ba5d32e1e92e57780764
| MD5 | 3797ce114a1ad3657f8e39645b205efb |
| SHA1 | 81abb82a47e98142588569eb8e50c36bec0c21ef |
| SHA256 | 463175750005a9c2f81116d305a754d6791e57339a7f17cbf9798a568afcd4be |
| SHA512 | 125e7e106e696255e1ae079de39faa515c6776555a7eab2054e3ed55efeee62dd058dfbe976bf6c7e4f1b11bb28e8ac982abcc9bd7a5c81886e7c8d4e2ca375b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\72267a660e13be41aac7a1751a569c73
| MD5 | bf1f82283ac59a0e31e89ee8a811e779 |
| SHA1 | 10e263f9f80a3906407f28bc8f26e1b4057ce1be |
| SHA256 | 1af562895b32a7cad69024736e1a3ca247963c604ec6bd0996624acfb5abcd39 |
| SHA512 | cbcc5ff28502a43964fa7d21bf437a953e6e4272a458c72500783b15840a639254c1b548b876e9a9dbdf252a3c18f7c091ee03a5228b6fdc41aa9b18afb7a0ff |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\efc84fe2b5f4086c4dda2da7c363170d
| MD5 | b68c4ae07727f4d3ab3cb09e4a6ef55f |
| SHA1 | 158d7fae9e82cbb69e5244399bd6eaad049e979d |
| SHA256 | 8f3144904fd7ef179a72a2ca5fafae832346a64ee5b34abc937cc3a9ec4087e4 |
| SHA512 | 825b9792191252ed57eb60b9b6f8fdde30c19a84b74211c385ba717ff8150c6090ba756e5801c512e8b5a335ec207f20fd78f3c0551b8c58c4bb9a1517a68782 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\765171cc37c1f0e439c32adfecb912c5
| MD5 | 01c36dd97b5c557e5d488d16b9d9d556 |
| SHA1 | 9e270e67295731fca966358f2f3cce25adae082d |
| SHA256 | d2b004d134cbd38fadfb51fa923af1a2f99f65b9cedfaed644e116d91a0e9290 |
| SHA512 | fe9131380b068b7fc06d4e7413a91825daa3a5208af1abb66be51cd44e30942d6e185c411b8b3d2fae77293f6e1391a100d21c3f3c3d3cdf892ac7de0d0f7b42 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e7034cfe0945f9c65ebe3dd7f6e771c4
| MD5 | e0654cbfe8bff6eed582d3cdc889fd24 |
| SHA1 | e9e563fff96b22f3d5d988e57223a0bdaf814912 |
| SHA256 | 066237655c4190526a54ae87089c05555c131025e5269f5cac04a045c3c9b6d6 |
| SHA512 | f649d907a37d4bb47a76ff519b8e3fa727c84c2f6a2f50e7c58140a7ad4bb14b4c09a4a384faebd1b7bc19fd86000c673d10f16f60e80841bedc344fcbe40197 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\cb8a45c1430998ec1304e4c79176816a
| MD5 | 933b1f5dc544d9868d257d80e517c112 |
| SHA1 | a8d55f9cd5f79ef7f6fa1ffb229d8bcfb30ce348 |
| SHA256 | 51a66f59fb6018efd308234879746581b50566d967cf1fbf63fd3fb6917f1295 |
| SHA512 | 6e03ebecd629ec937171a7a2d11a88c83c0267c0f153b86194683fc967f0e1c827e6393a39af735813a1cb3fe2297cd6582d2f7578355e797a5152dd92d6e600 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e2504bf31b5aa0ab48a8ae5f1dc5f1e
| MD5 | 6abaefefcacaf36071c43e9dc51f1bda |
| SHA1 | a562a7fc46cec9c90e86fa570267864ef2249a20 |
| SHA256 | 55941590b6aff4d570b3531c493c14c46eb687ed9e4de19200de1681987f75ae |
| SHA512 | 5fc4b6db68c03630673789ec5f5d017709e5a9011f25575c0e428f4a21c30e1f6664faa9e4ed456ae79c7ea0fc45db30b8d45ad9b4e2e94f49b27c50237872c3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8fbe2ad68bce1f4933b291c365e04e75
| MD5 | d6a9f27b18ba6c1cd064cfee32420a8a |
| SHA1 | 3eb4fe70132f76c96bf7f951070f437ba176fc40 |
| SHA256 | 612baaa3a5eeebe00562f3ecd4490073f3313811613ead2948c1626128191506 |
| SHA512 | 1126e9b53315742eedcb4e28bec6330c03cbeff2d311c9bca1e8280720ded31b6ad7f4f4b6899aaf23656ec46b19fc2ea6566226c1fbb1ded1c3790832d9fc1a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX740B436860564AE1B6D0071B29BDDBA3
| MD5 | 5bff0b6da657e8e4ed652a4a5faf57f6 |
| SHA1 | ad49b5a7c4734d26061b0eea4496fc41949bc5b2 |
| SHA256 | c80ae50ae40768b21e62b593515865bd729b4c0712a006cbaf374a66f14f956f |
| SHA512 | 146a0ca1c20471f2921f1c911692223b77c4f528f2de47da9df54c1620242230998b86be05b436a725e64665a008cfc21715e114fb0fd1b9e0786288ad20ff24 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a1d7a8fb35b007494a82bd5304ba1e9
| MD5 | 2414d644ab2dc0d3c58d8546b4cd7ea0 |
| SHA1 | 77a854549c69f719657f5d404ae9391c705d88f6 |
| SHA256 | 28be75fd24c5225fe212cbece08722d92c4d2816e5c3a0051294826a5fe79458 |
| SHA512 | 02bc18971dd372438e6f93b0db0e29a2b647b7e1acc5e8d8321f73857b746c5523e7c720ddadb96363664fd5652c30d5e396f7128813dfc0c30fe7ea4086a229 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d8b0fd3715ff57ba968ae5740d39a12
| MD5 | a3366bed53be5f4fed574fc819a07072 |
| SHA1 | a79b59561cf06c8a209fb701567a67376d83924d |
| SHA256 | ec5c1697be4eba9851b9a413c13e1a94f9846f6dba1d8d0fa33e1ca7292e8030 |
| SHA512 | f8424133bac79bbf7547bf7076cbaf0bd0767f220778275c36878bb982bb69bfe64aede42d67c9db009047e66bcf5eb9604205f6b0aa9a801f6827e2034399fa |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b80d47fd48f8d137ca2aca87e1d00059
| MD5 | 7dae317d3e65c483f462a48cee3002cd |
| SHA1 | 330c91065d277740b721b723ffae4e5511e8da2c |
| SHA256 | ad244e68f3ae289677897bd171703b8ab65bb03b17621b3c8f61594b906f8b78 |
| SHA512 | 966a981204a7979932981d8870704fbe3d4afc2a0306cf149117eeb30a54debf852c8ef04fda90fb2d1d1261daec60db390a4c9b9fa77740d14171335384ecc9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0fce80600a43748c6cbc0ac23f6cfa2
| MD5 | 3bf49259291542dfee0f89d587c177f1 |
| SHA1 | 22328c74fce75f7918f6c4b3ca5ad9e1921db437 |
| SHA256 | 971101824fc41a26f9b1386d72750a69298f4725f266edb3c93b21f9600d2916 |
| SHA512 | 20366e5775f42da8e313d67ace54bed3b2a010a84d9b3422276a8b544186345683c00663ce4f541c9890f906344ca3400015bef988d4ffa7dd4bf1c38161e271 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e8a63e8fa08c8135be1c5384c3e0a2
| MD5 | 1221a85cb03fd45c001ef47af9935e7e |
| SHA1 | f209b998e8972ecf158f58270244b831d107ace1 |
| SHA256 | e7c79bc6240600fc94d67a9c0e9c1f563a3f30698d7cae3d19b1735865835d4e |
| SHA512 | 2e6846a2ea3bcf0892703f3f2024a0acdf277251c55ad9c65e61fb5a8780c67ec707d42818b3d98103504dda9984c109ec0f8e393fc063f734bbc7bce168ad90 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\175af5595dfe9780b5b7b10ecb943336
| MD5 | 0c9078c249c45630688d2af7e0574c25 |
| SHA1 | 8fae18c0c69cf3a58abddcc9a55fba6d81aca2b2 |
| SHA256 | b0e7f0945d5de86014379ede1d9a9528a8c944534ab33e58c7b3be1b5706500e |
| SHA512 | 24e0cfdac58bc3714541bd39f6992bf0a4bd4c47e492edc40b72d045b4f06573d582d9f4e50e0c23f964ec678d857752caeec6a65ef89b70e2ecbefe749b21f0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcbcf8ab7914469e06c8fa6ee80f2201
| MD5 | 958ad6c1423022b1905d452d8772d16b |
| SHA1 | a1c5aef3f0d7550f8a9ac31ac1e295696477c02f |
| SHA256 | 8965deb3f4a35faba9f087defdbc2fb071e006f283ee7e6b1ce250c6ec12a49f |
| SHA512 | 5185a342c83ca7770ecb1103d95d061cc17c80526f755ebfac53305947b09765515221ba65b43a98eff3860e47bfc7a15f51e67d0636de7596a6859ff20804e5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1daaef2a5ce0ea927443fd099437bb55
| MD5 | e4a239995837749223ed2039a40a3a21 |
| SHA1 | b1cc97f9ffc3a367dd3a55a1a3342d59cb610403 |
| SHA256 | 36ef28d0243f78f746ddc7abb74563980829c81dcfb91abcdaf6459bc7d374af |
| SHA512 | ad81fe4cbaed589da0a3b97c20e7e5fc0deabf5910b1c41dc7d6e6e8b8f22486f71c9577886689739bdb87e34b330ce43cb60fb2e3c1305d77984ec78cc0879b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\32c38bb4f4a560d621ab93aeb6ca5d7a
| MD5 | f7b60787135cc235066319d2412e77e0 |
| SHA1 | ff9e626cfeeb124bc95d830d20e13b15c6427c77 |
| SHA256 | e815d7145b898343e81a796bee29e8a71a678c9c3475a7b1107cdbefeefb6152 |
| SHA512 | bb21ace97ed300299a276844630c2b30aa0aab87a3a8684391bbe37a0ce7761c82011035f741cc1f596136043f1871d16b0238249d3b943b2c08fdaab8c0d762 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5b794cd8b1447c984ba301aa73a6625d
| MD5 | 2740a9a1a4020c08f3ae9fce5509416d |
| SHA1 | 371eb56fa91013a45a38486d5d77ccc12ad03990 |
| SHA256 | 239bce8cdaa04b7e91497dc8fad14e5af36ebf244712d7a04e37c2be5a0e0a38 |
| SHA512 | fbbad878010bb317d5ddc6de48c87d838db393fc52c564555883d07e62b77cd37a3584414566977fbaef792ce0d2a00cf851ce871e880d1cda34357d2fd4682a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2
| MD5 | 59e7e73fef4a9df2680ff8fe1722014f |
| SHA1 | 2b9d42140ad6207b1e3f5cf8d66b345109cb1098 |
| SHA256 | 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57 |
| SHA512 | 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc27c501541df155b6fb12496e5bac70
| MD5 | f635924f866829484247044f991b14ec |
| SHA1 | 39c6f43e94e4b0d0ce9c30da5b78aab7fa5086f5 |
| SHA256 | 30b18b2546442b630f0fb8c6a7c26419a9a73988e8e1a118dae5b7241e98074b |
| SHA512 | ca145397fe454c2623651c9ccaf86fd15212fe83d758fab2f8de35e4ea00f8eb8f58aeecb2fc95a4ceda07c9bfa960ccc29b1a56c2bb317c94297c24a366be68 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706
| MD5 | a0c28b8252eda35f15ff0931e1817ac9 |
| SHA1 | 3fa429b9d0b8926907abc63b81a301bad2442eef |
| SHA256 | ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d |
| SHA512 | e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\706b550a2be783fb6e220ca8181485e5
| MD5 | be4a508de308b15bf9c711a769ed61a9 |
| SHA1 | 2b980f20a1466d2f1508bfaf8dc2a2558450c1d9 |
| SHA256 | 0ac514138710cda19cc114cafa8a3fce046654dda1cce0915f525c6f5ed0b812 |
| SHA512 | dc71cf06e2466f17b843b96fdbec856b3b67df95105895597e73fad455340d4237f1b7cf91ac2906efb9efeac89515deb79a045859a0651420edecabfef8cf8c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7948b73360f27446739cb67376a2d7bf
| MD5 | 6c261f23c63795849eba5b1ef6f17cf3 |
| SHA1 | 464f91ce49db8b5546722bd62c4f59aae33dfc20 |
| SHA256 | e4274c467ca592398736e990eaa97a937f209768239400cd90ea59f9e58a27fa |
| SHA512 | ab6f671b1939df79ee60a873148a1763c06fa880e2f17a23c9e09c5401120873167905e49be3abaf546b9fee33096b76a5573a473b72de3806c38a128ab91ab9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd
| MD5 | 74efd118f986358ad4cde9a57e61dc32 |
| SHA1 | 0cfe0335bb35298456edc9ed791e019b70266c31 |
| SHA256 | b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5 |
| SHA512 | 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a
| MD5 | 81927a5a1612202db2ce511c62ced773 |
| SHA1 | 4414e92b078a515ca699a82cc3bc64a1e264e4bb |
| SHA256 | a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e |
| SHA512 | 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783
| MD5 | 22b25a819c414b6c626e5306888142d6 |
| SHA1 | e7d68968d0848af0e5203409227a1980dfeb4a0f |
| SHA256 | 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea |
| SHA512 | bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\77b3cd784a40d8349719b23b5c0e414b
| MD5 | 05c43f778ddcf81fb06a2fdfb4f7624b |
| SHA1 | 616dade772feb66bb1b8dee218c7a5a39d43de06 |
| SHA256 | f4a00d60cb52477dfdb2eb264470e5daffd44139c118b73c80e8fdef16f9dd45 |
| SHA512 | a2443c678bc019dcc50fd7a49d5c19dfa0c45a7c43fffa24ca225f0f24b6839865288b2fe843bb233752fe59c712c54bff8d9b5c4e8ef5ff4ad8ef20b053feed |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\09f04b99b82b262e105a232e97395311
| MD5 | e3a0c050904f457b02b36bfebb1c0b6e |
| SHA1 | a611605082957d8eb5dcb83939e1b6bd3d870bf7 |
| SHA256 | 02c51e5a41d473f8e0befe8e5fb49073f0dec0ca88ee83e0e6a3c0ba3e18d399 |
| SHA512 | f2b6b3a7c193a951feaa1d5abeaf52316773d7895284e806f7267708672f6a7baf37191a244d2c044c785fe967d416353ab83517b28932b9e521172b89e22275 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcece68795e396ad03d6e2608d740126
| MD5 | 0ba72ed050100e6779ea0f1c713ac441 |
| SHA1 | ff585cbb4b671bd3a04f3bdb2512a896ff07883b |
| SHA256 | 0949d1f525ea9da560f02a0447eb12a33ac6db673e89754b8f3d230e24ccfd06 |
| SHA512 | 22c09e80f4af164d94ef40999572d2ce35bfb1dfacbd1762b380c9685889d515ed9aa064db4f8ab6746c8a26ea4ecffef9337014293905abb2f0cece7344b851 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c36700f9b5f405f69b210d702f6087c
| MD5 | 94b44243d9e420ff19ff04f4e434b83f |
| SHA1 | 04687ed0f779c6873da97da0f16f042b2b459b69 |
| SHA256 | f76c45b8c4831588b971b25431b7b85f529a7214f99103ed82b4c2e97d9919e8 |
| SHA512 | b7778206ef730254f469214ace61b13f7031d0c4c751b2988decee93dd5a6c8336c40974af74b0aca6d42874d54e23dfcdfc743f5d633610aab2f05e948bea6e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d132016b6bd0b89da2690c24749f6ff7
| MD5 | 2e2350147bec3587e3bc14b7a1e32c2a |
| SHA1 | c275f45e728f71d24ac6d8b496865c218f972b41 |
| SHA256 | 7ddec5794d779b1ad88ffec41f00c793f21046d18c930328d662a3c2d1c27d84 |
| SHA512 | 670d3893ab1503dea9437b61b2b1488238d84d3703f94b74b5c20bb7bd26eaa0479e6d3d91319219bae1c1c357c6807101c5960ee2f29ff48475c0e6d9ac3adc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\848d350916ab0af9758cff8167a2aea2
| MD5 | 0042d3425d57e55a4e8c899aa911012b |
| SHA1 | f260334951b11b4ace9af45974e365ecbc6cb9cf |
| SHA256 | f312918dae9b5ebf3028f14575ac8bdb78e7f152061fc59d0885ab7acb3e9581 |
| SHA512 | cbab405431b5a95ae3c9d3816b4a1c4d4a07cdc4dfcf64d0977ec80533a6029329db101ac36361114288fa18c769c85a3f238b13f63d2e1e83ef4ef64ae45521 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0af1ae578b1c58a0e785712d31028c1e
| MD5 | 4ffc139d6996c3eba2d40053423d07fa |
| SHA1 | 6da7d02805c626596d055c20cf084aafed9b9768 |
| SHA256 | 0445b87f48bfd12bf0dae91d8dd7c20ee924212b4cc8be782c0a54193546f43c |
| SHA512 | 5af3417cdb0d099add05b22090b5aea9ba39069c4704d000aa323b859e47ea67328f616ab03b7b878ef8cce0d528ac0ff5c0f8fe305175b952e840368e0d4a81 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b39eb4053e10b7ff21430e80432eed8
| MD5 | be1dacdbf4fea39b16e7c11e286b7205 |
| SHA1 | 28ae9237170d6fa225c54e7a36e35549d191d450 |
| SHA256 | 3a6d14f833f7da8ddf3139d42e41b2b83d1ea0d4570db39d9c10dd98e33da800 |
| SHA512 | 72cef9e399c0652a340cb12dd239cc0dfa14a2c832fa63f76dc442308ee9f91b41ddff62fb70331895716b61fdccd332f75c0ba2003f818900e3e6f260303176 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526d6628fea4b1243fbb953bdf85ac9
| MD5 | 3964c0c8b23c560175f4b299e1a9605e |
| SHA1 | 6c155c8a5ece5d5d7340ee4ff0fcb730e4d2b0fe |
| SHA256 | 20dc4a3272ebc6ff5edf0494d9e6e2d06c690bb079a36bd04e074818f16a2dbf |
| SHA512 | c6f53903aa3a14f3187bcec1afba4b5b07c10ebef6dd10a710f400996f2214703d29d58abff6e7e0025ea91a78ed2f799f69c542bea006dace570464acf90d64 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\571e70bdfa73e0cdaa28fdbd2ca19ddd
| MD5 | bd289aae66f24d373fe9d4388f8ba9b2 |
| SHA1 | 4d248d4f9aeffef2fdd953bffbacf81ff3ac8554 |
| SHA256 | 78561a946c48755de0fce9695d30ab82d9e5dfce2eeb0ef6a0824282bc88a0d0 |
| SHA512 | 50666175b0955dbdf933302016675f035df38deeef6b4a0e8d0cf40b6e3d2c3e4a089a5b78d75015e0048b2e7f91d81b69857004d55436437d3fa0754d1ef8a0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\be241f3cbd5449b0c30c651c4834e3da
| MD5 | 2866f1aa81a7f9c354d34be6a58aa88e |
| SHA1 | c470d8ad431f9876d7966796a503c15440a35345 |
| SHA256 | 38baca61b0de1abef8c3a97557b6e246fbf9091d1193e3732f6011508e5f0a27 |
| SHA512 | 1af43841070856ee4c509080c286285ef4850d9dd8507381a5045ed748ffdd09fc32843c0d18aaac70621a8ec88064f0a3b74036cbdfe91be207594f55b24ef3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\73b0a5d180fa4202c3e9365c3d577fd4
| MD5 | 2c2e29b04e1f7144017730d5b5ed8b87 |
| SHA1 | 8a36310825cfb7d8ea6fd487afa46dde29147199 |
| SHA256 | 6026fca2672513a7a42dc67687850d630434b2260621f77ef5b2634486048d5a |
| SHA512 | bbd5097d544d3bea8b5e97f3262a4f7765b13d5c742c9df8fd07e6a56e7c021a41de575dc1c24749631eb1003db0b9548c634eba7d6d2701fe4035f0a5880615 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e385854d0ae9ba50e28a7a5629fa28be
| MD5 | 0c889bbbf77ec231120674d4843ee0b4 |
| SHA1 | fd29658b2fa416059cb30a6729030b6a6b125e92 |
| SHA256 | 5006fa1587ba1da5b7696daea22929c490049bc0f10661d9c79322b0a647efc6 |
| SHA512 | 504d43f9104b8c56ba12ae9533ad3554858ebfb4f5b4b8b1692ba339deed831a66f5441a1e4706015cc59f4de4729c0128fe7da2c8c3d095b2993e92eec378f6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\be58ec8ab04ff195247b1536cdfb3d44
| MD5 | d1d2f476fd075d55fa0e77b3c507cb0d |
| SHA1 | 5976cdae821737161f6debcba500a2842f988f8c |
| SHA256 | 650bcfb9e1c7855d2b72865695c2f4d4212ccedb53584f089c26e2087cc65d41 |
| SHA512 | 958c07812ae7e89143874ce4effb112eed3bec3436fc0b71ee70de38298130d08d89f6bce42d2b0696839f67be260791d121e81f46a4935f3985e241aec7b0df |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e665da7061b12f952145852fc21ef7ec
| MD5 | 4cfd979bf14b07dfed01ef9a3b1279a7 |
| SHA1 | 2e7aad8b8909d3117bb151bf4d34b608e3ab9c56 |
| SHA256 | 589b00b0a2fbada62af8b7daa8755ce68420a009bf6ce7a53e0865fcf262f94f |
| SHA512 | 79a25e0af653d6ecb5fd1908c3652c6fc8ad3d0cf1e00510801bb369728dcbe3c5e1e66f73d058c511320badca3c8ea82f2baaa5e0682f304235b68f622685cf |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d5ee01099db60480061c57d9831c261
| MD5 | 839f812fb19680ae8e62c2ebe0355e4d |
| SHA1 | a256751297a9f82a082bc4d5ef08d5d9d89a2c17 |
| SHA256 | b414e1186136cb1f46c6cdc69dc5b637ac5de6a390d67cf25907907c61b364a4 |
| SHA512 | f2209d8bbb8f7ce1e6b675cdd2da3a10bb450d50b4f73a596fc0639f201999f32d3c1a2418e0b92c918c0a667a5750ef122e4331361e0022b66a2fc5e489e5ed |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\90d821a0b7efe2541659a0ff6b31b88b
| MD5 | 6f0ea4b31f2f55764db79b43833bf83d |
| SHA1 | 2522c29622377d611419babb3eba2e8cb13fe0e6 |
| SHA256 | 08f380d19a3cf8307b098cdb5e9992ed1d29e5d15226340758a1af3cb4300c64 |
| SHA512 | 6a5437574ce2db6feac98928a22c7002ce526501335ac00444190febe302dcab5f18ba33a5ae00bcd83f469b5f1cd356474c8cfd31d9992d186fdd0846db5641 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9cfb35c8f272d46d504f99d9c00054a
| MD5 | 5a67e8e85c0ad7280e9f1ca86f138b77 |
| SHA1 | b9fc6b3311df7710e1251114946b93a72dd5d5d0 |
| SHA256 | 09e7111ea12f1236be9b1da699f8c93eb68127d0a98f2ceebfc5c2d7b25f0ed2 |
| SHA512 | ac5e400ce21e5e2503a11642cf401ab5ad4e625a01ac87f1711a02a415fc924556d0d3e50386d17e29ec20bb99b5d3a2d0496dc2ac1fc1381b29774b826cd9ad |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\697aeac1e8e025f05cf4b76086fb70df
| MD5 | 749deb1ff197b5082e2b07aa55a33d31 |
| SHA1 | 08b4d7441ffa13b8dc3610d74a56d8eb11d8acb0 |
| SHA256 | e593f31edc529b51f9b253994d8aa93d8ab0bc8faf433e737b0a09e80cf2784a |
| SHA512 | eff256220d72675ba4b23344191b963f7acdce9743af8be81020e2a74662d2f3f1b2735e686806b73198463c550b2d18921840271d515dca0b2d4ce226954d0d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf8e7398be5b1007fef514afffffa6c
| MD5 | 864c04942289c1dee2c1aa18ea77f1c0 |
| SHA1 | 1be7f1b6c2f1472adb9b34fb6f7a51d3d1ba161d |
| SHA256 | 9855931b8e0500c6753d77200447963d1981fa7f7b4fb34067bfedbdec0db442 |
| SHA512 | 6f3934ea3ca2317756e45bcf065abae6cf34ab7c24e1847023ecee8e404294420f5cc978af2afcea986bf160eda88c020fa1b799f5ad75a5e3991e7268192dbe |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d27efcc314894472628caf798daafe01
| MD5 | bdec8723e953241ac3edc46458a6ed7e |
| SHA1 | 783605b1587b096807a81e32c488be272e0ad581 |
| SHA256 | c31b000a001faa6e08026a24043899ee4941371ce464146a9c78befc2a796e4d |
| SHA512 | 221cf258c9c88c857e34fda1da4290c67c3a34459f86b828ab968f5e57b2be53eb4f7aaced83151576fb843a7f1166c267de0efb116740ab2ac2b37ca0cd4d93 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9d72083ee0b41e11170f5a9845c3060
| MD5 | 92e9669fc7c748554c057eccb11a97e0 |
| SHA1 | d3fd8c1e136a2ebed238d95bfbfbf3ce61a385b7 |
| SHA256 | b29195912662d71be85e0db741dec5ef005d744d3aa0913dad8ad1e51c3aeff2 |
| SHA512 | cdc3a1b4c596fd3c9621e53887a9d503205a0d5f8663e1ee3366129ddbfa83f2b15bedef155eda2949f24d1df615ead664114310e3d3dd03f9fb2d95df2e29b2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d4f8d4ffe8696350702fd146346140ac
| MD5 | 084a09f4a178b2533a56610f28f252d4 |
| SHA1 | 70c343a804ea4674a214d5ca8e24bce33cf662f5 |
| SHA256 | 91b1a39172d8f6f0c98a2a3aaf8c137b29dcc4ed4c1bb4a3bd449dc16fb45e97 |
| SHA512 | fd8205ea2edc70743247666bf8ff414ef6038f6ec03bfc7590dc037024ca66eface1f3cc559511919058754a5dfc2224ca04368ed31df8aa942a7d9022b93e5f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5105c207d9317b50c40470887ccfd3aa
| MD5 | 481555658adb9b672941de82171b343c |
| SHA1 | 7937e7bac46ac99e1897c00285fd23059828dc12 |
| SHA256 | 5069797f8a4b926fcc5bcdb668c1f67ece5d5e8f05d6f19a260c55c9a67f289b |
| SHA512 | aa9aae6ac82a3e320ce9c1b83883263d547a82369d8f31d3db0ce6d6bc5cd07ef96157ebf234d6e31b40b32e276c233f7c2c0856394a70d183bd64e03720737d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6443205f8638cd85aaa1caed016b8ac4
| MD5 | 20db412bf509b564fa765bbc0b917fbd |
| SHA1 | 938513617f173454649543b7c014ecc762ba5b5a |
| SHA256 | 8b7281d0d0576ed2b73ab842080238d7e006e1524ed48f423f61a86cecf3ad40 |
| SHA512 | f6c54fb0478c2df40776125a920621a1789d02239a78cdd3de8eb83a27a00464b2aaf8714776897a4b3ae5488da664befa604ec836fe12010a046d48eaa519a1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa3db4232d83f97f5e078c526e25a6e2
| MD5 | 3e1ba08877dd32fe4178a730b0ea5e19 |
| SHA1 | c020afb22c7cde0c77a9d1d6be18ac8f1e62973a |
| SHA256 | 1a6447007e90d27fc71fa7bedef2219bda30eebc33447c2929e4488315e19641 |
| SHA512 | bad57ec1a48f686fbc5842a291c95f01db413600828b198b55615857bb1e50e4b3b6031d5896c8d7b9d6753c290c0253ddb83482f89c7fc348b8b80194a07286 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8aad44a486e1e94cb992a6a0e230f735
| MD5 | 451b527070f0cfb1431ff5052642059b |
| SHA1 | 6021d49e6b87b9ae8fa64c3cfd0180d625c7d761 |
| SHA256 | b9391062d160f5bd861cf7e5ecda919954e84a87eeb3b000bf9b93c068057c9c |
| SHA512 | 3ec22e77061670685a576d96cc3897473d11c45c24e581688da54d8700b186d3583ffc23cc2c3395fd93af36afc45083058a2bad9cffb1362be8bf4edb20cef5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\afa231f024ffddec5f9d2963d20c450b
| MD5 | 64c05df26d12845b64880218a48e1b3f |
| SHA1 | 6ae26e09d6c23ea9ba5ad92d3d40790948b36141 |
| SHA256 | e41beb094c8bcc0d8825e031ec9ca5b13e45b94f3c93601c31c10955cfdd8da8 |
| SHA512 | d6925cf4d6eeb5275a7c008723410edfe1dd24b9097656e8573f749864f8fc7c61dac61b05230de13a7b9b7b866528c04adca85ad83e8e2831c43b46a70d4c27 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\74f7241d43fd3efbef367cddf2de0712
| MD5 | 1e996f012273818bd88129d26108d8f9 |
| SHA1 | c193db2eca6d190e929375e617f45790cae442bb |
| SHA256 | c7c8ee23804c70ae96b1399c2f6730543f10f7678f5e3ee36fcbce97245aa8c8 |
| SHA512 | 40ea7f36824cb96dace8ff41b1e92a03e0f7e61cac33a3a81c81cba12714812504554eaa0f4344d30061ce1d89f231ab21cab164a008e1f68d18ccfcf5525173 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\77fad0fb4662c6b81630ee443153aceb
| MD5 | 183fe999017d5e5654364c0d8fd895b8 |
| SHA1 | 64cbdd4bfac3c60803acfb2871a9fc8da27d318c |
| SHA256 | 3622ef17da158e25761124720a642153fb6eee615b54da286e731ca2920216ed |
| SHA512 | d5026e42d343185e14360a292c6d13131dbdf081ba44960598e12652d99d999b4f5c70c5c02335596d18302b1cf64128a8bd06273237a48e2cc4eb0267d12307 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\251c7269a8dc64cf406e8c2d5f5cc688
| MD5 | 7e7342c1c2e3602906a1fd64acde7735 |
| SHA1 | 357de58a6c39a0fe4d7e4c13c16d8c1d25f9e649 |
| SHA256 | 24a5a23ded1de17bc3170afbe5eb7debbb47f0ed7b2a4b5303bc899e927a99e9 |
| SHA512 | c6313b65687a5ce03772ff6f1edf761aa91f07a29f8b61db7edebf1beb5c548fbc53aba721ede32d4c4bbdd31361dc724c676d41c06278904291579d25d93202 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2da892c80dea8811c616fe5e0e6c010e
| MD5 | 0dbe0b49a06c4093d004ec7d44303fd5 |
| SHA1 | 2bac861a6075854f8dc8db470558936c36201aee |
| SHA256 | b136004ec10d66b813386e21fc6c5f86d37071e01e8a82437676902eb3e63e8a |
| SHA512 | 1d306115aa97102b5d68552b591f5faeade373ff3a718d9f39dbeade32892e47fd921cd78e5dd71e91072476e5ad933ff9659ee5ea1d07133b55745f00c22828 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\993f844b48dbb84a0eece0b1d1aad326
| MD5 | c05764b76e6db0114c1d6200b56a3588 |
| SHA1 | 5f96252b5a83e5c0810e4ba604dfc433ee449639 |
| SHA256 | 427939d6cefb89facb6e71e082e42ed184f0883db715e0bd8ca832a316150430 |
| SHA512 | 4c6c06afb99e99d6a7466ba40146b7fd02f83de16e5c89acbe64179860547f42dad0562b2a281706cfc6acdc5558e8fba5647874ff15d2778f3f6d8c1cd983a7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\83eeeca932186715a9107df83747a179
| MD5 | e7ee77fadd485e9a35a1bfb4be99691c |
| SHA1 | bf1aacc9fe769fd1dd111a1009473db1dcac7399 |
| SHA256 | d98e995f0160e551443de0eba015bf29192aea408469c2fc2d9c93a5c1c82cd9 |
| SHA512 | 3ae849a12cabc409e435da98308db2ec0b86f8fa8624a23632ab0ea836a0aed001853eef600bb99f67f8f907dbb641c9c6bc37bbf959dd12c1bf2ad9c8147460 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\28c39719e7218d9c2d686d4daccb1b72
| MD5 | 25a0b3d9ce5e6e1cc4cc7f4cdb328273 |
| SHA1 | 4d2dddbe9502a5373e6ea99771bb1de6e828b95e |
| SHA256 | 013275e837c61c631932167d47d5d9b838ba8b9863915d39f06d8ba4914df147 |
| SHA512 | 20df5153edab7085594382f80b5d7c6afa5f2a84741efb46961e36331c94369a7c7302c9799676e18aab171cf398dae8f314395c22238de6f8450726c4c992c7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\584bbf8c27b2f156742be22b280cc8d6
| MD5 | 7c0764a501b7f8f1eab14fa7f9337a4f |
| SHA1 | 2e17a9b6d5bd740c4dc91af9311e4a6e77bd55ce |
| SHA256 | dc0524c0d7f9f637466570c86adad7021f9316e42e69745bf8d27081a98f09d2 |
| SHA512 | dba17c07bc4310c556ef62f157dfd3a0ea1a617ffbbc4324f9a046bf47be9a2bd500921bf02bb79d9ac2df1aeca3745ee1cbd7f33bbdb80fe67e1adaa0bd82bc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c677a51b0924e108a9b1485dbdf883da
| MD5 | e1e4307ebd3e7f8280c75be0ccd3b5bd |
| SHA1 | 3f2a56ac3ee57082ebcf4a1ca21001821286e77e |
| SHA256 | 10dcbda8315ffe2e7215b8d61dbd26b0553b438fe94b1bdf005758b1b96d9f94 |
| SHA512 | 7f3ef600e2ecca826fc163d9092bfc10fcca9a9e6206ef29fe5d61902e3e9625bb2bcc07a58ab480ad19354bd0a1c56dd9f13c4e62aed22d87da146252144ef4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b39250833fce2d9f0655b124db089d4e
| MD5 | 639a9c5f588be3e48a6bf5601215f027 |
| SHA1 | 1ab7c1d3d5df21a05324853fb235b848945c351f |
| SHA256 | 4fd48841bac69eaaeaa9c936347395f5eab6fd4f5549d65cf6fc541884a4b2d7 |
| SHA512 | c3aced88385dbd9b10841f72c422b17cabeca80ad11af01222f8901b950be3b42467851d5ef61fa3a1d92f7977724926f765b8bc594655e93e116d04223497dc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8ead55fcc97d21deacf012df5c33fdff
| MD5 | 16e22cfdc829405af27279c364ba2f8e |
| SHA1 | 0c75b97959d7df1586db85cd1166f99c65603c68 |
| SHA256 | aa2f6c8bba8aec6b84f7ef8a7d8c30022097b784236806e63da1f0417124a3d7 |
| SHA512 | d1f6695e255f5b7ad498ce177a16591757d5570a4ea45d396f3fa159f5658bddcb7d524c102efdd982fd9ccfa557d984280c27e57484b8f61be512ce994d7964 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f1c2eede7a115f0fd9ddcfae03372516
| MD5 | 08ba91e62331009631f755289dcf7324 |
| SHA1 | 03786d766cac0b39437b98cb61e65c25d16325bd |
| SHA256 | c50ad1d35d0b3e81ef6780da13361923d7525a39db5c9cbc6c5344a0bf5e1380 |
| SHA512 | 3fe207322d4249f92893d0eb7a93f455374849ca583dd0fd00c79790ab7bc7f0699fe16de332b767689e0a104fb272992ddc37e002b6962cdb6c66a63618e3d5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c288ffb1fe759d2618c218fa0d2bee8
| MD5 | c914fc7a80c8ebee4ddd7216cb8e63e3 |
| SHA1 | 2e4bbbe23167be5f26e5f3e9f1e1b2409b38e7ef |
| SHA256 | c718cff1df66ac36549451bc6de0535c3f2f9e74b4fcdcea38af9eeecc42a674 |
| SHA512 | 7564812cd051e0970b3d06aa1bb839c8fae5d1e95e23615eea42d2f12b6284d06f2936cedd947e9d4d33c4656fec00494121d58cd38ddaf1ce2ad8be8685d0fd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc70073e6562a1a0cb99b092be4629f8
| MD5 | acc9db15cdf0932e73bfd20b9857b80e |
| SHA1 | cb6455b641cdaa693de88e9b0d1f422744faa35e |
| SHA256 | f0e15f7608b3829d33eb8e057f31f21e931d9d2ab4814891b11ecf47494c141c |
| SHA512 | 7ca5152691d595acc0f0398e26f82c4cf491bea98f2c81e7a972af8fe763ef5926a716ea44112c2fa257ba0109b8848f8611f071b88902901bdee1d32a315913 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc86756c9d8f409a887054cf26a854b3
| MD5 | 70461ebd3bf0f7a0beafcba1d52417ab |
| SHA1 | 53dd7894e76f0fe7c02f378d7c67107ed4a03d45 |
| SHA256 | e3ef21dd9efd05fd1260691d6dd47f76155bd0b5ef1ccb62ef1e588dca161fd7 |
| SHA512 | ccc18b368873c76fb25c97009bfd17e4456d488b16da511e61fe1dee031cce48bb25d507d7fb1237345bdc2191085bd384ce45ca98a5864d10b65b28650e553e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\477a618fe08d138e560e0c8eab9f3583
| MD5 | 4f9c826223fb8d7fb603bac0b294a706 |
| SHA1 | 44a185bf8edbfee521dc92ae012e6ed18cfae3a0 |
| SHA256 | e12f126277c8b35c48dc15cb2f37850ff5ab0816e5982eaeceb571c99bd17502 |
| SHA512 | ecf987dc0d416a7fb1779289a0bd9ba55625abff41491ec3731fd77950e91d5b454b17573be388766b20fc630ee3f125d37feda44e068d2ed0cd2a87be021fda |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6d1b0fd2905f7655bf0108dd4e655991
| MD5 | efe7165d72ce56eef26da49dbefa586c |
| SHA1 | b2441c50e501f7121277d205876ec6a5811c4e67 |
| SHA256 | 4e12e3ed0da10924a1dbc49e464b0b07c017970c839f1c1cb4ecf5a8019d3ae5 |
| SHA512 | 195b3d7954627b571226a4d5293b19dd0b7b565d4b295b494361ed81f3d9e1c193533dd0e53b2ededa326278294694286669095147d769c5de343aa611ab0238 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\388a60aa5e51ff44455d359825078031
| MD5 | eb62ee1626b44f54b2c444a487ef84fa |
| SHA1 | d3d918dae048e4ee9c9626608693d69c4c4ae55c |
| SHA256 | bf2f079ca21684f382d094af52836d83862c93800e8e054c2f6bc0838c442d86 |
| SHA512 | 68022f2ac538c51acc24065480cd23670efff68d56a4b5dec2c28316726ab82c81b48fbfe76c44f32dc32b0af75fe3e203aeb40610f34e2e5d75bc684f712381 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e4317e6c6a87bdf6f00c6c80866345fc
| MD5 | fa00f598036aff7c2e4728ff840efdd6 |
| SHA1 | 7873ee7205e2817fc8fdcb3afdc275aab494ea91 |
| SHA256 | 18fecafdfbf34c5b261f4acbd607c439e35177802c8002a0d88221258108abb8 |
| SHA512 | f72faa02c263ed200f7a296ed86ef5da614911c1cd212aedd12923ba551aabc44b33cbced8dac80aae67dc09988d53ee191755afe3d51383ce885750bb00a944 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\23f316746f014ce443f0b0adb0d9d90d
| MD5 | 4843f2fc4404a016a8a7b7f5c352f877 |
| SHA1 | 1446153b0498dd65dbb53b417d5ce5db49f0dec5 |
| SHA256 | 46ec4647b950351b091ab0bb34d1964bf24b0eb58760175def7a4a1d7a4e09b2 |
| SHA512 | 8d5198bd48be46a6aec5cb5d9eb6e75828f88742f12102a1f5091f9c8b51167fd6db13981fb875b032795b9407fa64cf3aa54224a64008262084dbfd3d98dc27 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\252921e7f19d826cf6778747e86132fd
| MD5 | e06fafb3ee051c215c7118dcb4a75354 |
| SHA1 | c72b3e0f2bb1139344053256bcc3ac48f590174c |
| SHA256 | ea771a4652058a4110a95a6fa24c847e7a50cdfdd711f57e02f9c7caedda7908 |
| SHA512 | 83008fcb8a91bb42f76568773c98e5dcf6658b0d7972d595eb7059b5a598faf80fcc8492351e9e98a6d3a9ddfc17fca742f07ffe4af644d99c087062ed7b14b0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd52b35df5f543d23b7f35ae9e845be
| MD5 | 2de5aeee01688c41f23b2ddc07c0b442 |
| SHA1 | 68bd21cd4284ff390c1f4f5f4b61c9ff3b8f2268 |
| SHA256 | 3ceb6af768ce708d114195ea3521c71370ee69172d4d0cdaeb1efff406571d73 |
| SHA512 | ce845ebebe20efbfb1a0565e69cea69e3a4f3e71289ec68379565052a2e8a3e5ac873b52e74ea26f2afae7ff64c789c348b4b9d4426ac0c0d6547d9f12290090 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\16f7441682caf62a1789b9d3e75ec170
| MD5 | cb94125a0b01b9335f3c3c9a9c6cd60f |
| SHA1 | 85ae6cca4c661270b389c00299bf7f5d81fc3943 |
| SHA256 | afd92a2c0ea64515200f7dd1c6237f18b6d1bd2065296939697d34a3d4e1b0d4 |
| SHA512 | 649155baa2d26fc6afd0496d11f37d9dcb588726806eec89be58faa54fcf3b90d1becf114c4e2f3964c98e93399b87bf5bb87709a7bd9a3540c7ddb56e2da555 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5ba3b6fc7c95f933bacb9db38c93e80
| MD5 | 0de2eda8831ddddda130102597e758bc |
| SHA1 | 0fa49f0691a4ae61e422a22b07fd4e5def0ae5b2 |
| SHA256 | 2d60885d3492996ffe223ec6dfddb240eba00a9e03ac0506d3489edc4822e1ee |
| SHA512 | f466e1ea3867fae7618b76a2895cccabb0f646f54bf8c4cb6cf6a5c2eaf4b8e31eb4f8b42971ee53c929241d9f40af6a684647cc09395cfd709774503f274b75 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c582bbf5493f077bd8f59567067f24
| MD5 | ed3f4356a5aa9295ec58f77ab387582f |
| SHA1 | 99f94109e03097ddf835c06292ecb6142c93fdea |
| SHA256 | 60e6db5121cddd5bc13b1019c85b5d962599e2548c347ee3c7d944cb20ff01b7 |
| SHA512 | cc7869759564fe9d5e1580be978727c4b0da340c052db74f677bf7cc24d93da0b837d01ae0199c6404e02b49d08fe47a2fec7165cfad841f1b6fbb1d7e8d7fc4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f40c00885cbd0588eebf8bd59a345579
| MD5 | 9c0241f7306bbf3cd085509dd7840c99 |
| SHA1 | 21c2a9c916d0e537c5662db2acb565615ef79962 |
| SHA256 | e2afaf1d969e104e2ffc22494e2f7e2ec4a0bda49b9de0dcb3bbaa3da9bc8655 |
| SHA512 | afdf2c9a29559645e08604b15f023475e8610f41f650f3527a4c2199fc4bda9c291bb24e2f337e00cfac6a5347fae125d8055f0af6eaca38b92ec408343cb9b0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4130cf898fa8b448f1568bfb61305e94
| MD5 | 86df60a0980b57864a2e2d68f857e0d8 |
| SHA1 | 60c24af81c8406f05ee1721b374ab8a466d878a2 |
| SHA256 | ccdedffa29231d609157ccf22019e03a721e9ca248eabf12be511b76f795c247 |
| SHA512 | c025bcd3d21ec036712ad8e40afa7da973db770bf5b9b019c73ca8b99202c8e37999e6daaeab3f1c2190f84434a5e4657a8593e8a59066e0feaf38fcd8bc41e1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ecc495a0b2b0470e25d688a9077fd977
| MD5 | 741a45f09ceaf9cba7f0ee5b8aac236a |
| SHA1 | aa6b59bba687981191db42af8a8b17dc0fc9150a |
| SHA256 | 92ee9b175404bf4aa4e346ebe4948ae5c0ee7edf5693778a5e6a4a1bed508eac |
| SHA512 | 97cb36fc2281753eb7a42f762c8ad5cdef7c14665214a71f33518f88cff24ec5e91267f834a6ea5ab0206457c7e9c730dcfb4f7a2ec527e3ce48877e2f34be6d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3ca8206460663e9e944ccfb414623b40
| MD5 | 816be237e27ddb79f9fe0c46efa0119c |
| SHA1 | fe0af06e1155ba784ed6ce8b97849eb3fffb5f9c |
| SHA256 | ec6063b82a1adc4187ee0e01f413d4b5ed10277605f741295658acd3f0ceabcc |
| SHA512 | 5ca3c5bca3f5559a500de1262c133a972e776dba7192e6cade152245c0e1118fac41c48a79dd0f15c78ef177294867f041bccd3eece6a388eadcc32da8efaf00 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0407c8d6df198f6864381d3e595ae971
| MD5 | 703dee4351832fd18ef5b85c6e1bf992 |
| SHA1 | bdea9dbbdae401cd68814d9815a17bab6f3870c2 |
| SHA256 | 8fb57fee0d1c996a828a3147fdd9a38e8d1624163dad101e4bc1d44894bc3d68 |
| SHA512 | d43b5dc41be38f5fbe30a51c1abcbbc5c606c9d911dd164b5106fe2bcf0310ae8b641299c5491bbd5ba66433d87ebd17dc8a487d88d56d0ee8e81309533ef0b7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\852240b4203e72d7bfa66fcea2e589eb
| MD5 | 547ffe689cd0af21ec616bd935f78b14 |
| SHA1 | 36e70f429bea53fc2c8dd76eaad82f7bf9f3742c |
| SHA256 | abf9ebe04321f9b8926304bc16041965dd79405783b7d3ea56d5fc802863bd9c |
| SHA512 | 3683baf37d3da8ac536ae4d2d852acfb49039b3c9d4ab42d972c23e2df6dbfd178a552ef023f48c43c6887161313d516914d26b7cca0c022e2741875d62e38d2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\06bf3774b39be975c53ba2193da7f90d
| MD5 | 29abb94b78b9a73db28b7ba825833346 |
| SHA1 | fd6da6bc273d4a44067d8c2b625980ab8cc52aca |
| SHA256 | d929c9d2ba98883044b81894da3e921de179d5915e1f92ca9d4df9cc89f1424f |
| SHA512 | d5069ac2996929a5d1622f65ab450bd152130978b049f672b1a9f28cadcf724e317024bd95a11109e0ae488834ab184f5e4b10f6a21ba3329cf056a0b7139613 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8550d05ebb82e2c3691bc35b7c166899
| MD5 | f3e7b2683bee3c3628f500d157a7184c |
| SHA1 | 17aa34cf9e45a2a10cc370ef0047d6ec844053dd |
| SHA256 | 66d177f97d367d8181feedc6db9f92f71dbabf58cef1355439559005be6a24ac |
| SHA512 | 48994f038f0cca5a1ad783d05490ccc209ac4ff2a9fc3b508d5225348d2202f9760ac6c0334d12f74ab8227eab5a412370459ab328f44177729f8fb6b8911088 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1489d1b06ae2d917aae075e6fa9b8f7
| MD5 | 5420558b929446bbd89f3d35e72b5836 |
| SHA1 | da46e5c797831b47c4d62fb9321c420c6b0ba50c |
| SHA256 | 12d1d581ac394291754c5b042baec0904c2f3b3be6a17e0a8761b32b6e53d507 |
| SHA512 | e125c8d668b2c73d583c528f6d35bf8a1c9558c594cb3aee98e25eda051f621a6924626d845f200442da65034dd77aa4a51dd1668c07b26611909f76cf9174b4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1cb6044427da36923148711b8796b750
| MD5 | ccdd89dadb2a17edd97a48f05de218ab |
| SHA1 | c8829afdfda3e414304f09f588a9e00cd43de4d0 |
| SHA256 | 8ebad66a66dec464ea8f6a70c240e6fac36d2155ef5460b2f1cc80451e9949ec |
| SHA512 | 79976e6623479c42c3b9babb2bbec208a8f13b580dc19419df33639e3922ab973e740fcf33c94841e833ef3ca8209b5b149d2ba5c064f08e3b6a526a651432f9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec9a7853aa53bb67f2099830ce97922a
| MD5 | 0ab1d8c6659dc5952cb81416c8d9a85a |
| SHA1 | 16d889c645dd70901f87cc86f6db8a632b8518a0 |
| SHA256 | 1ebc2f03253024917e0b562d101603c2f9e04aa70a05accc5e63eed9976ea0b4 |
| SHA512 | 657a549264297c42e4783cdfc76baff2dab9b5b9c1f991b3aa8b16f2b8f87ccdb0c1a56edc23713ea7f34ffcc4cfc95b7fbba8d5fa06ea443610f06a00433f36 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6e62dea9b6f892b37a40251f84c9e0e3
| MD5 | f48177bf38c02c3a2cb322b77d627f23 |
| SHA1 | e207f206d2f707e7feddc32c02883bb71015d23d |
| SHA256 | 4a8a4eb5baa01e72889b67caa16b69a4c2e8a07aa12f84ade87376f344b2fbd9 |
| SHA512 | bb3c4ba048199ddd3cf5d554a90c279d7b868871f1a0eea4ce27c641556fb3e483cf839e3f9a27a092021783a25d604c952fb1ea34528d722db9930fe48e38a8 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7209cd4fd5e4a48a4cabe7e3498368ec
| MD5 | 643d56f3cc2d206fc1eeafd601a0e287 |
| SHA1 | 0e55be4bc02d884a40a586b44d5728f9e8fefa6e |
| SHA256 | 637c7f57eea4b46821e968a691bc2181ac0ed00252691845fefd947a4c594f66 |
| SHA512 | 10cb34ff5d98467c3de396ef4993a11c7db2545329ea473eb3ffe387f2663cfda6d21d31299f87aa3f298d2bfdb88d705b9236e9f71c48c22970713c2c3f75e6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6c536340229d1bb052a390124806163e
| MD5 | 8dda220de3bfd073f993acca9cce3f19 |
| SHA1 | c78e343e500f592bfc59de89dcf8548cd6fa1f71 |
| SHA256 | 21710259e1dbf800de1bd2dd8e19f33cf70dcf6ad306f7738a23300e40d385e3 |
| SHA512 | d21115712737f5d51c7fc887a14bb7b9dda4b9db295ecf429623a20eee02b2868956e6d66907997f100395625c42464218c36e750224e02fe0245c0292fc9e1c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7df53404f56c9f1787b277ba9d17049b
| MD5 | ecaba5cf9469daab7c05847af2da45d7 |
| SHA1 | 78d9c8d289db9815482249769dea663f4999cac2 |
| SHA256 | 23946e247fe3bb06503a06be2b8e154d724a8c2e86fa4f441fc09ba1e5781121 |
| SHA512 | 4204260b2efe3b4c95584394b30ad7957b154229828f0ac90a04e5167c7eb78f254777fad0d4fce9c5675fccc390dfccae2ecbd8d17e0e73bb0a6933605df7d1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\38b0d496d6e95d4a4e1f049ecb71b4d1
| MD5 | 60dc54bc02627b188fbc37f3c81899b3 |
| SHA1 | 7065242d6e88ff9ed0e0cb891a9a6f6db2be5334 |
| SHA256 | 35fd7f2804d4edd74c14cb7bb1534edc993ab7ce9e2d64be997b12ffa8ee5b16 |
| SHA512 | 2b43c5d1f2ee4621055d94f3e04cbfed24371eea9a7c719f8392a993464e7d05635f59bf230e294c60de5656f421f4661bd5b1b8f286c4c15e79bf9c57d686c5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1f571bce12b3689efa5586c78436d68a
| MD5 | aa1cb968768ba580f7e7d559906a49de |
| SHA1 | 1a6a0906ac3c68f859790103094a617e0439d77b |
| SHA256 | b9e49fcb7d0be8aac8bf1d990f2277363077dbd34af7f5109a14bea85b9fd35b |
| SHA512 | a72d7246405dea401b6e97963ea624772f65a7b20eacf2c358fdb73d7e5c2afac79b5cd39cd548ea8c43f14b5f03cc38deee8a495e9c7a1f264c1ca7de4f2411 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\92ca8d0a36e9ce06a1c3537675677ffb
| MD5 | ae7d26697baf4e3c0a4f7e4fd800f89b |
| SHA1 | 4f2472e39c964861701d80139cdc33bb967b2c34 |
| SHA256 | 58c1370bf264ecee15638ab670a0af85f8bc3b974670875c757751fd116f4833 |
| SHA512 | e93451a30c74751ebd6996efb038016e28370de37bfbfe2fafd1f3c3817f2e720bc3b7d96e1c0e346f08e3c581d13f77a535c30c07a487f2c4a13b4da9970a0f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\05e6fbe7faeaf27e476e2247265bd7e2
| MD5 | 774331951556eabf4930f06518bfe5f8 |
| SHA1 | 79a7b332357aa2b18cf400033bfeeb5db7614627 |
| SHA256 | c4239a4d05bd3e427245f920cd4eba313e0af75c819f89553c7b6758da9b4d57 |
| SHA512 | bf67dd1c1d57779578524ee404de1648d9a4d8ed7f524fd49643ec49c3165b9321d64bda2216cfb8617c32cb500eacc2966263dc03841af51ee37facb2b1724e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b597c88ce139f36dee5c4afd7d80a2c1
| MD5 | f195c3e8ddb6711a2feaad4aec69b8b0 |
| SHA1 | 20b1011f280842fe6aaa58117a05f57cc17b6c69 |
| SHA256 | 9c263d2a5db10ebc2d543bbd0c125bcc5da6c2245ed133fe0abb1b308f343a71 |
| SHA512 | 52ed2e19a2b991880336b6b1694016f4c8e5a5e92a9dc989ab317f7f743f38dddaeba8fb5764826bfd9aa145028a1b3f9fa34a02f39c1e5162aef7ad282b0632 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6105c4318cc0c25a63a6c9b8db84bc28
| MD5 | 6badf7314b5d440a6ec8dea899d7872e |
| SHA1 | 003170f75f86922af2aa5bc4b2c3c41f5f14106d |
| SHA256 | c13071122b4ff111c8ee877e0d8bde8f34ab3569df48fa81f6f4f1b0b0ba855a |
| SHA512 | 5fd8098470eb97e06e62f6d8753d3dbef34d8db6b3ff463cdc964e61e765ab844168170a64c837fa5d60c029a79ac0fe7cc661b9bae07acbaa2400120037aa13 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b00de5dcbb5ba1d0d58ba82e9c2f97bc
| MD5 | 9a3aa49a6c57739a171e507a3b0a90ff |
| SHA1 | f3c154299bec91f215954c1df2b03f68fa08efa3 |
| SHA256 | 6d61517c2a006e117a5d5032dc1be0f993f275b6d0c8a0fbef25bda8cfc12691 |
| SHA512 | 0a02917b5eefba73d3420852a5c66719bae97bc3c8f9adfb2dcad89dee9caf5852f660a3e787d84e9b86e3793ae0605b2db10c0a1463e0f09a733b614d2f4c1c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7deb7c677f433c0b6c649020e88fe58a
| MD5 | d76037dbae4ae81158187aeced5816b1 |
| SHA1 | 7858adc6bdb9f9b03fcb28746d7a0d08c297d058 |
| SHA256 | 8113ac3b2c1f9a16f7c5a9be473b64abfa8c9689afcbcc30750aeb3077e3e27b |
| SHA512 | e9e1b515c621e760968098b8e0a16e00cf1fc17b74065efd2f8793add04d5e506205df5d65be1db885fb958b9c5879ca728528963b4048bfe073d4249c0dc6eb |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a116d80baa851750ec02ad98f6a28052
| MD5 | db41d22b9f9f4a43ff8916ff8d513da0 |
| SHA1 | 00dee570785465bff97ec8a96ebfad3d21f1d248 |
| SHA256 | 31e6f7d03515207ae87b2f9e9594fc94db77038fcc28ee3990689c6590b7547c |
| SHA512 | df4e09d0f24ec1cf13ffa1a062f9d28a5d36d99b606f27f7ab757f82e4202e51ff4e033b6554b763e6f97c73bbe77b9d133b4b842469b96056654cc2f202124c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a479665357e877c36a8bc4ebab8ac84
| MD5 | f5366499a754da1e3317be61d63cc243 |
| SHA1 | 8689a3cc6a2e1af5dbd2b6c23b488283362bab0a |
| SHA256 | 14873e016597bf69824fb29a219f6d81befb11b19fe2e505544115b33f030e6e |
| SHA512 | 6920f31ed14ef4621559e67c75a69ecdb7832aac639c40febd98dcf9b7c02402510e983b84cd309bdcd7b0438b394cd6b1d11bd4c32c58488d24a5d38db930c5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\234369d070cc483f7122fd415837b73a
| MD5 | 51d45f80859fca2ea5720897d7f1612a |
| SHA1 | 2a7d736969502784b96328f4fd1fc7697a099273 |
| SHA256 | 5bf07b195c3902c69653ca0294f2bdbf9124df501af426b14d6bcdbb87d70745 |
| SHA512 | 059455bc829431130377e4c8cee87ed3652b712eb46afa6f666d9e4aff7401b59068da840b91f4914d0752880cb2ed8c64a90e79e37f45b4b90996e44f2932b5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\68119f28ce3eca78171a6a8c8822e1bd
| MD5 | 35e84ac53c5b6ac5714c5589d7d79153 |
| SHA1 | cedd01f0263fc9e5718b8e77b3467c14a35a1b53 |
| SHA256 | 47da60997e22feaa88bff58bd2db6320534331990a14e2b64b6d665df77b931c |
| SHA512 | 7cbdf8f0eaee0c4e00e3813d1e558cc5aa305d6e9861255d721bfb655cddbf08c70fe61f686e79154f1c36e7a4b5c29f2ecf2776fee9eb0b7ac1da8c87e75dff |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1faae132446d428db1590bc4096fdb01
| MD5 | 9a00f402a241fef46fad239d3f7ba367 |
| SHA1 | 8c3840f9e8b546c82bc037f4cb5422a5e31ca165 |
| SHA256 | 6d16dafe92055e9bf11ddd1923115432bd9f4ab42bf8e4f71c1a68e6ace09bf4 |
| SHA512 | 2194b14c9002a22af34f276f7ebb819eaf0172828307679664277b17a4f2c9e8263ae32c53f041366550163923c6c66c9e2d9b235867af79bca8b70067c22926 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\611ae1f182f1efa9069d4419267a1e12
| MD5 | 8fbb3393fc863f96063bd3736a1d709a |
| SHA1 | 4b59268f2f91dae3631c3fa08d9c81c83143b485 |
| SHA256 | e00cec3c4518e07deacf21d9d11f3e21cc822dd010ec0fe762e8087926a5c7b8 |
| SHA512 | 5e0838ca72e43f511e4f537a26c4aebe52fa18e4290ae43ae1c559ad0c89fb91370b805d6f5f6ae410e97247765ed9f1b85f5b30e9f701243ad067eb3ac801be |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f46a00cf7794d187e97da28e14ee9933
| MD5 | 29e30bd74d25a983d3763208077bdd7e |
| SHA1 | 33e39d8cba37db8e899f237ac9e4a83a3538658a |
| SHA256 | 1da80d1f4dbe143cbe20060c7cb9de541436a33552dd288a281a4b87d33e7585 |
| SHA512 | 3da0425404e8d170e60e48038056e84f94cd112db3980ba440a4c63a48ae1984e172ac957db07736ebe16e2a549d2dd79252b6610d01772915d67e1ef7673a26 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | d023b7981d056910a0dce4fc99213248 |
| SHA1 | fbdc929b46891fcb5d920ccc3e2e5a71ad58f3ba |
| SHA256 | 93d52e11b59a7a8e62f9173e844c0cfcdd3e26e460c637d8dc11a1ed8c902c68 |
| SHA512 | 99a7d71563e488b5d9338eaa6fd6269f4382b9b32c43b19eb02b51dc6430d5207c39483784b0898e596c050e3afc22fdc5f358cd0e95260b20dfc26c138a8d96 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c81813ea34dbe699086525727806025a
| MD5 | c3ba004f016dde238b673a3e7c51fc13 |
| SHA1 | 9cda786a9b57c7872fc2eb0f3f9749217ec7f5f6 |
| SHA256 | d16601df861191bf29e6aebd1f1092da237da518de09ed310cf9dc0be3ef5012 |
| SHA512 | 81f3192ccb8ee44b71edbbd79fe310472c0d648ed7de9ca8487531ac2dd2bfe984c947ef34f4bb59128fd8efef17784eacf09a9266f6ab3f24fe747ac961e947 |
C:\Users\Admin\AppData\Local\Temp\{6D98E0BC-DA82-40A7-AB23-4A89F72DE1A3}-BGAUpdate.exe
| MD5 | 3f208f4e0dacb8661d7659d2a030f36e |
| SHA1 | 07fe69fd12637b63f6ae44e60fdf80e5e3e933ff |
| SHA256 | d3c12e642d4b032e2592c2ba6e0ed703a7e43fb424b7c3ab5b2e51b53d1d433b |
| SHA512 | 6c8fce43d04dd7e7f5c8bf275ba01e24a76531e89cc02f4b2f23ab2086f7cf70f485c4240c5ea41bf61cb7ceee471df7e7bdc1b17dfdd54c22e4b02ff4e14740 |
C:\Users\Admin\AppData\Local\Temp\{B716FA4D-8008-44FD-A366-AA0718D10FAD}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe
| MD5 | b18c705b3c68cc49d9bf3649abc75c24 |
| SHA1 | 6dc8963dea0f3185368790dee2a346301b4fa24c |
| SHA256 | c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa |
| SHA512 | 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b |
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\SETUP.EX_
| MD5 | 5070a34dbada1aaa375cc572b5fc7d0c |
| SHA1 | e74b7ef714755870976abe3d2b4a7db0b9cc21e5 |
| SHA256 | 03e7a32e1f10fced6a07dfa4e6cfd92510d4bf6929d423798e4fb5ca91fe6c20 |
| SHA512 | fed3fcbb64a59070b0efd677ca2edc982d28e37cdf7283f2777af8aca7d3760a7eefb8d01b3c2bf4b4ec3708a74c3412f0dede91e31dca1b6f8a4e4edc673aa7 |
C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\OTADataCache.json
| MD5 | 11a17ccab96a24de7ffcaef84e378fcc |
| SHA1 | 73f18d2438e46d1006506ae6edd754e17ea25106 |
| SHA256 | 05858b9864ab11fee682bb6e6028b56d6328dca077041f58f2989f24ae14d9c1 |
| SHA512 | e3d6fee7cfb04e5b03c0782b5f647032fe948ce2a85e225b0cdecd8f2729e6ef055caf171e0cdaef50179f3e90d01a1589af44a61415889f5b4cb18db6f6b348 |
Analysis: behavioral2
Detonation Overview
Submitted
2024-04-30 20:22
Reported
2024-04-30 20:52
Platform
win11-20240419-en
Max time kernel
1680s
Max time network
1684s
Command Line
Signatures
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff858d33cb8,0x7ff858d33cc8,0x7ff858d33cd8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1964 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3832 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5484 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3520 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4508 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4452 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2868 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3664 /prefetch:1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | google.com | udp |
| US | 8.8.8.8:53 | google.com | udp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| US | 8.8.4.4:53 | google.com | udp |
| US | 8.8.8.8:53 | 4.4.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 22cececc69be16a1c696b62b4e66f90e |
| SHA1 | b20b7f87f8bc64c1008b06a6528fc9c9da449c2f |
| SHA256 | d940b85bc83f69e8370a801951eb6b8bb97efbb3aa427664105db76e44707258 |
| SHA512 | 2b2e548f2c8f84d321ef2afdf31128065c3593b884ca8111b05800960b5378b99c7efa6165d02fba4c11e6e4b49b14e419d89f76d55ef574f4ac2b7d6ecb3d48 |
\??\pipe\LOCAL\crashpad_4304_TTQLUFIFZNJHZNAZ
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 5a85ad170d758e61ae5648c9402be224 |
| SHA1 | e6dfce354b5e9719bc4b28a24bb8241fc433e16f |
| SHA256 | af0da8b5ad8127ae0ef7773bc9c4b145ed3fe7fbef4c48278649e1e3aa5ce617 |
| SHA512 | 641414d91c993f74b6b71654522359d606c7f94ac0fcca6478d1bc33c30f4a9fdb9ce6f8e281c79a2f9b9670fda8a4ccdd80e7d64347c1f66d8c9ef024bcb09b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | ebf043702719f9c7a15815ae7008c87f |
| SHA1 | 2d6cde126d64b44b80a70fefa3d3974fca0a27cb |
| SHA256 | f13f3ad7c7d9d1f9d77c0c785262e8000cd2979dbbb6030c7a7688b860154bff |
| SHA512 | 34361a7863254d08513a102fb055d185ec8dc9b168bd8b8e1bbacb023cd1cc748422275cc76b32620c136469c87f94770f58760ec7d3ee3d2801aaef907f36f8 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 9ee75dcd8d1f238e92bb9265e8423ac1 |
| SHA1 | 71be94c300bace9e5f6ba00e79134db92951473d |
| SHA256 | 749d9344604b873050a3cc879e3df63cacabc7c09c5e13f5db787e6b2ad69400 |
| SHA512 | f9e45331f3174f3b2e36cfd1ecccd6a2730dcccd7b96ff17a1a49009c50e5d9b16bc2fe62d415acbea13cae62909dd111e8dfae94ececa30524cb2b1b0b33b55 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 206702161f94c5cd39fadd03f4014d98 |
| SHA1 | bd8bfc144fb5326d21bd1531523d9fb50e1b600a |
| SHA256 | 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167 |
| SHA512 | 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 46295cac801e5d4857d09837238a6394 |
| SHA1 | 44e0fa1b517dbf802b18faf0785eeea6ac51594b |
| SHA256 | 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443 |
| SHA512 | 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 8fb433e4436408892253f48ff3182946 |
| SHA1 | 624899e33c777f30fb075dd2bfd4872ef842bbcd |
| SHA256 | 09cfdef66863a7eb4a059360eb99b929633d0e9a2cb28a0916e9e7e869fc32f9 |
| SHA512 | e724d4c52037770bd7679fddafd55810f70ad02dcbcb731cb52e69b5870ecf8462d87fcfef3a050216dcf43acd7a467042d436cacdb0228c2d378ab4d4b7bb3c |