Malware Analysis Report

2025-01-18 22:16

Sample ID 240430-y5jn7sfb9z
Target https://create.roblox.com/landing
Tags
adware discovery evasion persistence stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://create.roblox.com/landing was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion persistence stealer trojan

Downloads MZ/PE file

Modifies Installed Components in the registry

Sets file execution options in registry

Registers COM server for autorun

Executes dropped EXE

Checks computer location settings

Loads dropped DLL

Checks whether UAC is enabled

Installs/modifies Browser Helper Object

Adds Run key to start application

Checks installed software on the system

Drops desktop.ini file(s)

Checks system information in the registry

Drops file in System32 directory

Drops file in Program Files directory

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: AddClipboardFormatListener

Modifies data under HKEY_USERS

Suspicious behavior: GetForegroundWindowSpam

NTFS ADS

System policy modification

Suspicious use of SendNotifyMessage

Modifies Internet Explorer settings

Suspicious use of SetWindowsHookEx

Checks processor information in registry

Modifies registry class

Suspicious use of WriteProcessMemory

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-30 20:22

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-30 20:22

Reported

2024-04-30 21:07

Platform

win10v2004-20240426-en

Max time kernel

2693s

Max time network

2699s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

Signatures

Downloads MZ/PE file

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C05A7DB9-8AB0-45C1-A298-247548F8DF00}\BGAUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{ACA71243-C09C-4162-8538-AFFF3D82437C}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO\\ie_to_edge_bho_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=F3A7224C52134C6A92998EBBEB57F78F" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C05A7DB9-8AB0-45C1-A298-247548F8DF00}\BGAUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\Locales\sl.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Scripting\Light\Standard\PluginRunContext.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaApp\icons\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\2D-Collision-Matchers\2D-Collision-Matchers\above.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\TerrainTools\mtrl_sand.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Emotes\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\Tool.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\utilities\globals\null.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Dash\Dash\flat.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\AmpUpsell\QRCodeDisplay.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\LuauPolyfill\LuauPolyfill\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ViewSelector\background.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\DraggerTools\Light\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Navigation\Light\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\execution\__tests__\variables.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RbxDesignFoundations-77b1a117-2f841688\RbxDesignFoundations\tokens\Desktop\Builder\Light\Semantic.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\DataLoader\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Extras\Tumbler.qml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\DeveloperFramework\UIOff_dark.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Light\Large\cage_tool.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\PlatformContent\pc\textures\diamondplate\normaldetail.dds C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Localization\Locales\en-us.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls\ProgressBar.qml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\VoiceChat\SpeakerNew\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\Notifications\Light\SI-Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\PurchasePrompt.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends-f5bcbc0c-f336d473\RoduxFriends\Reducers\Friends\utils\countUserFriendsInStore.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppUIBloxConfig\ArgCheck.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Locales\ka.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaApp\ExternalSite\roblox.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\react\parser\init.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RobloxRequests\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\roblox_lua-result\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ProfileQRCode\AppHeaderBar.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\ToggleSwitch.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Server\ClientChat\DefaultClientChatModules\MessageCreatorModules\WhisperMessage.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Locales\ca-Es-VALENCIA.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppToastsRodux\Loggers.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\identity_proxy\win10\identity_helper.Sparse.Canary.msix C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\Fusion\MenuBar.qml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\HttpRequest\HttpRequest\RequestFunctions\RequestAsync.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ReactReconciler\Shared.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppSessionization\RobloxAppSessionization\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\Universal\PageIndicator.qml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Common\httpRequest.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\NetworkingBlocking\NetworkingBlocking\init.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\AccountSelector.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ToastNotification\Dash.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Lobby\Buttons\scroll_up.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\MenuBar\arrow_down.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Shared\Shared\ReactSharedInternals\init.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\ApolloProfileInsights.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\FriendsLanding\FormFactor.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\UserLib\AppCommonLib.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\GameSettings\Error.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\PathEditor\Dark\Large\BoundingBoxRotateHandle.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\VoiceChat\Analytics.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\VoiceChat\Components\VoiceIndicator.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RobloxAppNavigation\Dev\JestGlobalsOld.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "111" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "56" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "80" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "136" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "147" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "170" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "179" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "60" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "75" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "104" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "135" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "153" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "203" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "7" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "24" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "37" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "115" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "167" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "68" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "134" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "180" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "85" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "176" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "187" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "154" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "182" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "57" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "94" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "193" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "162" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "103" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "146" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "191" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "199" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "15" C:\Windows\System32\svchost.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.ProcessLauncher.1.0\ = "Microsoft Edge Update Process Launcher Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback.1.0\ = "Microsoft Edge Update Legacy On Demand" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LoadUserSettings = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\PROGID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachine.1.0\ = "Microsoft Edge Update Broker Class Factory" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\VersionIndependentProgID\ = "ie_to_edge_bho.IEToEdgeBHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeMHT\shell\open\command\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --single-argument %1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods\ = "16" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ = "IAppBundleWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB}\ = "IPolicyStatus5" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\APPID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachine.1.0\CLSID\ = "{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\ProgID\ = "MicrosoftEdgeUpdate.Update3WebMachineFallback.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\AppUserModelId = "MSEdge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.pdf C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ = "IGoogleUpdateCore" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\Elevation\IconReference = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\msedgeupdate.dll,-1004" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\Elevation\Enabled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\AppID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\VERSIONINDEPENDENTPROGID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\MSEdgePDF\shell\runas\command C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.xhtml C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\ = "Google Update Policy Status Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine.1.0\CLSID\ = "{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 864914.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2468 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2748 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 2748 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2468 wrote to memory of 1116 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff92b6e46f8,0x7ff92b6e4708,0x7ff92b6e4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2488 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2912 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5228 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5228 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5824 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6256 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2728 /prefetch:8

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjY2NjI5QjYtQzAyMC00NDE2LTk2NUEtOEIyNTFERTNFOTQyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1QkEzQTFGNC1CMEIzLTQ0NTQtQUE4NS00N0Y2MjM1MzRGRkV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7RHhPYmpIR2ErblJhMmF0QzN3bytJRXBDNzgrWlllQVVia1hwREMyY2o3VT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4NS4yOSIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUyOTYyMjQ3MTQiIGluc3RhbGxfdGltZV9tcz0iNjEwIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{266629B6-C020-4416-965A-8B251DE3E942}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjY2NjI5QjYtQzAyMC00NDE2LTk2NUEtOEIyNTFERTNFOTQyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1MzdDNjQ3Qy02NzcxLTQyRDItOTEzMi1ENjlENzE0RDMzMjJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUzMDEyMzQ0MjMiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A81CD734-A58C-4F11-B9EB-8209A456E9BA}\EDGEMITMP_3D39C.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x22c,0x230,0x234,0x208,0x238,0x7ff63b0b88c0,0x7ff63b0b88cc,0x7ff63b0b88d8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6256 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjY2NjI5QjYtQzAyMC00NDE2LTk2NUEtOEIyNTFERTNFOTQyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntENzBBQjlGNi1BOTc3LTQ2RUQtODhDRC1DQzZEQjYyMzk5MkR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7VlBRb1AxRitmcTE1d1J6aDFrUEw0UE1wV2g4T1JNQjVpenZyT0MvY2hqUT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTI0LjAuMjQ3OC42NyIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9Ii0xIiBpbnN0YWxsZGF0ZT0iLTEiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iOSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNTMxNjU5NDQ0MSIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUzMTY2NTQ0MjIiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1NTYzMjQ0MjQ2IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuZi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy8xMzFiZDVkNy05YzY1LTQ3NmEtOTA3NS1lMjQ5NGY4ZGE5ZTQ_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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2MDE3MzE0MzgyIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iOTA0IiBkb3dubG9hZF90aW1lX21zPSIyNDY0NiIgZG93bmxvYWRlZD0iMTcyNzIzNzY4IiB0b3RhbD0iMTcyNzIzNzY4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI0Mzk5OSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=632.4180.13035476170489287346

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ff9070bceb8,0x7ff9070bcec4,0x7ff9070bced0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1760,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1756 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1880,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1956 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2108,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3524,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4156,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3576,i,4255816758739258036,15503813640149144430,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x154 0x2cc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8682362824733375506,15382946539982810276,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3168 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714508742105+avatar+browsertrackerid:1714508629942001+robloxLocale:en-US+gameLocale:en-US+channel:+browser:edge+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:15350820071+universeId:5294748261

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C05A7DB9-8AB0-45C1-A298-247548F8DF00}\BGAUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C05A7DB9-8AB0-45C1-A298-247548F8DF00}\BGAUpdate.exe" --edgeupdate-client --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Q0Q1MDI5MEItNEUzMi00M0U1LUJCOTMtQjRDNkM3NEFCRUI4fSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntDNzM3Rjk2OS02NTRFLTRBNzItQjVEQi00ODA5QkZDRkE5RTl9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7MUZBQjhDRkUtOTg2MC00MTVDLUE2Q0EtQUE3RDEyMDIxOTQwfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMi4wLjAuMzQiIGxhbmc9IiIgYnJhbmQ9IkVVRkkiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iLTEiIGluc3RhbGxkYXRlPSItMSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4MzA1MzAxMzEzIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iODMwNTQ0MTMxNyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIwIiBlcnJvcmNvZGU9Ii0yMTQ3MDIzODM4IiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4Mzk5Njg3OTY2IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJkbyIgdXJsPSJodHRwOi8vbXNlZGdlLmIudGx1LmRsLmRlbGl2ZXJ5Lm1wLm1pY3Jvc29mdC5jb20vZmlsZXN0cmVhbWluZ3NlcnZpY2UvZmlsZXMvNWYxOTU2MTItMzg0YS00OGVhLTg0MDgtYjRlZGU5ZGM1NmJiP1AxPTE3MTUxMTM3MzAmYW1wO1AyPTQwNCZhbXA7UDM9MiZhbXA7UDQ9V2wxQkljRnVBTW85b0JzSUlIJTJibExoR0hPRSUyZmF5dGl3UG45MXRRdG9jZDJmN0s3RG80MnBiQUp4aklRRHppVCUyYmFSd3FYd1pjc3UlMmJzamZWVFN2UlVnQSUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IiIgY2RuX2NpZD0iLTEiIGNkbl9jY2M9IiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjAiIHRvdGFsPSIwIiBkb3dubG9hZF90aW1lX21zPSIxNiIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIwIiBlcnJvcmNvZGU9Ii0yMTQ1Mzg2Mzg1IiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4Mzk5Njk3OTU2IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy81ZjE5NTYxMi0zODRhLTQ4ZWEtODQwOC1iNGVkZTlkYzU2YmI_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-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

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{ACA71243-C09C-4162-8538-AFFF3D82437C}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{ACA71243-C09C-4162-8538-AFFF3D82437C}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{E016445C-3AF6-4B44-98FC-0E00250B7E54}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RTAxNjQ0NUMtM0FGNi00QjQ0LTk4RkMtMEUwMDI1MEI3RTU0fSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntERjJDOTFERS01OUFGLTRDODgtQThEMi0yOEM4OEEzNTJGNzV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-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-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_UDE9MTcxNTExMzc3NCZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1VRnMzY0ElMmJ1emIwbkFoTG04R0gxSWtkaHNvaVlNc3BpckNkSGNqclV3V0dvWG51dHg2SWJ1Z0lqQnl3VXMlMmJvbjdQb3Jya3hlMUVFMGh0TTI2TEZiUGclM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIxMDQuOTEuNzEuMTQyIiBjZG5fY2lkPSIyIiBjZG5fY2NjPSJHQiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjE2MzA3OTIiIHRvdGFsPSIxNjMwNzkyIiBkb3dubG9hZF90aW1lX21zPSIxMTY4Ii8-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUB50A.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{E016445C-3AF6-4B44-98FC-0E00250B7E54}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzEuMzkiIG5leHR2ZXJzaW9uPSIxLjMuMTg1LjI5IiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iNCIgaW5zdGFsbGRhdGV0aW1lPSIxNzE0MTM0OTgwIj48ZXZlbnQgZXZlbnR0eXBlPSIzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4OTE0MjM3MDc4Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RTg3QjVDNDItQTBFNS00OTJFLUE0RkYtOEM5QTc2MUQ1RTAyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ibGltaXRlZCIgcmVxdWVzdGlkPSJ7MTMzRDgzODgtMjk0RC00RDc1LUJGMTctMTJDQ0IyMTdCMTUyfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiIHByb2R1Y3RfdHlwZT0iNDgiIGlzX3dpcD0iMCIgaXNfaW5fbG9ja2Rvd25fbW9kZT0iMCIvPjxvZW0gcHJvZHVjdF9tYW51ZmFjdHVyZXI9IiIgcHJvZHVjdF9uYW1lPSIiLz48ZXhwIGV0YWc9IiZxdW90O0R4T2JqSEdhK25SYTJhdEMzd28rSUVwQzc4K1pZZUFVYmtYcERDMmNqN1U9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjExMC4wLjU0ODEuMTA0IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSI0IiBpbnN0YWxsZGF0ZXRpbWU9IjE3MTQxMzU5MjEiIG9vYmVfaW5zdGFsbF90aW1lPSIxMzM1ODYwODU4MDAwMDAwMDAiIGZpcnN0X2ZyZV9zZWVuX3RpbWU9IjEzMzU4OTgyMjQwNjgzMjIxNiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIzMTExODgiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyMzcwNTYzNzI0Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff7b63388c0,0x7ff7b63388cc,0x7ff7b63388d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x210,0x238,0x23c,0x218,0x240,0x7ff7b63388c0,0x7ff7b63388cc,0x7ff7b63388d8

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RTg3QjVDNDItQTBFNS00OTJFLUE0RkYtOEM5QTc2MUQ1RTAyfSIgdXNlcmlkPSJ7NUE1OTgzN0QtMDUwOC00OEMyLTgxNjItOEM1NzI5QTkwNkM1fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntCQ0Y3QzVDNC1CQjUwLTQ1MDMtQTE1MS1CNEUwNEY1MjQ1NEV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7VlBRb1AxRitmcTE1d1J6aDFrUEw0UE1wV2g4T1JNQjVpenZyT0MvY2hqUT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4NS4yOSIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJJc09uSW50ZXJ2YWxDb21tYW5kc0FsbG93ZWQ9LXRhcmdldF9kZXY7UHJvZHVjdHNUb1JlZ2lzdGVyPSU3QjFGQUI4Q0ZFLTk4NjAtNDE1Qy1BNkNBLUFBN0QxMjAyMTk0MCU3RCIgaW5zdGFsbGFnZT0iNCIgY29ob3J0PSJycmZAMC4xOCI-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNjMyOSIgcGluZ19mcmVzaG5lc3M9IntBNDgzQzcyRC1BRkE3LTRCOTUtOTI2MS0xNjg0MjMzOTJERkJ9Ii8-PC9hcHA-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-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjAiIHJkPSI2MzI5IiBwaW5nX2ZyZXNobmVzcz0ie0JFRjA0QjE3LUUxMjAtNDZDMy04MzQ2LTUwM0YyMDQ0NTU1MH0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

Network

Country Destination Domain Proto
US 8.8.8.8:53 create.roblox.com udp
DE 18.155.153.85:443 create.roblox.com tcp
US 8.8.8.8:53 o293668.ingest.sentry.io udp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
US 8.8.8.8:53 85.153.155.18.in-addr.arpa udp
US 8.8.8.8:53 134.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 56.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 232.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
US 8.8.8.8:53 locale.roblox.com udp
DE 128.116.44.4:443 locale.roblox.com tcp
US 8.8.8.8:53 users.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
US 8.8.8.8:53 webblox.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 52.222.191.4:443 webblox.roblox.com tcp
DE 52.222.191.4:443 webblox.roblox.com tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
DE 128.116.44.4:443 users.roblox.com udp
US 8.8.8.8:53 ncs.roblox.com udp
DE 128.116.44.4:443 ncs.roblox.com tcp
DE 128.116.44.4:443 ncs.roblox.com tcp
US 8.8.8.8:53 games.roblox.com udp
DE 128.116.44.4:443 games.roblox.com udp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
US 8.8.8.8:53 4.44.116.128.in-addr.arpa udp
US 8.8.8.8:53 233.69.68.104.in-addr.arpa udp
US 8.8.8.8:53 3.44.116.128.in-addr.arpa udp
US 8.8.8.8:53 4.191.222.52.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
US 8.8.8.8:53 tr.rbxcdn.com udp
NL 23.62.61.161:443 www.bing.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 133.190.18.2.in-addr.arpa udp
NL 23.62.61.161:443 www.bing.com tcp
US 8.8.8.8:53 161.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 27.160.77.104.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 clientsettings.roblox.com udp
US 8.8.8.8:53 setup.rbxcdn.com udp
US 2.18.190.72:443 setup.rbxcdn.com tcp
US 2.18.190.72:443 setup.rbxcdn.com tcp
US 8.8.8.8:53 72.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 23.160.77.104.in-addr.arpa udp
N/A 127.0.0.1:55798 tcp
US 8.8.8.8:53 client-telemetry.roblox.com udp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 setup.rbxcdn.com udp
DE 52.85.92.17:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:55802 tcp
DE 52.85.92.17:443 setup.rbxcdn.com tcp
DE 52.85.92.17:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:55805 tcp
N/A 127.0.0.1:55808 tcp
US 8.8.8.8:53 17.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 42.56.20.217.in-addr.arpa udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
DE 52.222.191.12:443 css.rbxcdn.com tcp
DE 52.222.191.12:443 css.rbxcdn.com tcp
DE 52.222.191.12:443 css.rbxcdn.com tcp
DE 52.222.191.12:443 css.rbxcdn.com tcp
DE 52.222.191.12:443 css.rbxcdn.com tcp
DE 52.222.191.12:443 css.rbxcdn.com tcp
DE 52.85.92.94:443 static.rbxcdn.com tcp
DE 52.85.92.94:443 static.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 23.102.129.60:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 12.191.222.52.in-addr.arpa udp
US 8.8.8.8:53 94.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 22.191.222.52.in-addr.arpa udp
US 8.8.8.8:53 60.129.102.23.in-addr.arpa udp
US 8.8.8.8:53 roblox.com udp
US 128.116.32.4:443 roblox.com tcp
DE 52.222.191.12:443 css.rbxcdn.com tcp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
DE 18.155.153.43:443 images.rbxcdn.com tcp
DE 18.155.153.43:443 images.rbxcdn.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 2.18.190.83:443 apis.rbxcdn.com tcp
DE 128.116.44.4:443 metrics.roblox.com udp
US 8.8.8.8:53 170.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 4.32.116.128.in-addr.arpa udp
US 8.8.8.8:53 43.153.155.18.in-addr.arpa udp
US 8.8.8.8:53 83.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 msedge.f.tlu.dl.delivery.mp.microsoft.com udp
GB 104.77.160.11:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 11.160.77.104.in-addr.arpa udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 assetgame.roblox.com udp
DE 128.116.44.4:443 assetgame.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com udp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com udp
US 8.8.8.8:53 webblox.roblox.com udp
DE 52.222.191.129:443 webblox.roblox.com tcp
US 8.8.8.8:53 129.191.222.52.in-addr.arpa udp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
US 8.8.8.8:53 premiumfeatures.roblox.com udp
DE 128.116.44.4:443 premiumfeatures.roblox.com udp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 2.18.190.133:443 t6.rbxcdn.com tcp
DE 52.85.92.52:443 t7.rbxcdn.com tcp
DE 52.85.92.92:443 t4.rbxcdn.com tcp
US 8.8.8.8:53 52.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 92.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:63676 tcp
N/A 127.0.0.1:63685 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
N/A 127.0.0.1:63688 tcp
N/A 127.0.0.1:63692 tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
DE 52.85.92.57:443 static.rbxcdn.com tcp
DE 52.85.92.57:443 static.rbxcdn.com tcp
DE 52.222.191.42:443 css.rbxcdn.com tcp
DE 52.222.191.42:443 css.rbxcdn.com tcp
DE 52.222.191.42:443 css.rbxcdn.com tcp
DE 52.222.191.42:443 css.rbxcdn.com tcp
DE 52.222.191.42:443 css.rbxcdn.com tcp
DE 52.222.191.42:443 css.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 18.155.153.95:443 images.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
DE 52.222.191.22:443 js.rbxcdn.com tcp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
DE 52.222.191.42:443 css.rbxcdn.com tcp
FR 128.116.122.4:443 roblox.com tcp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
DE 128.116.44.4:443 metrics.roblox.com udp
DE 128.116.44.4:443 metrics.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
FR 128.116.122.4:443 roblox.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com udp
US 2.18.190.83:443 apis.rbxcdn.com tcp
DE 128.116.44.4:443 metrics.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 2.18.190.83:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 57.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 42.191.222.52.in-addr.arpa udp
US 8.8.8.8:53 95.153.155.18.in-addr.arpa udp
DE 128.116.44.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 4.122.116.128.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:53 users.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.4:443 users.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:64123 tcp
N/A 127.0.0.1:64325 tcp
US 8.8.8.8:53 develop.roblox.com udp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
US 8.8.8.8:53 assetgame.roblox.com udp
DE 128.116.44.4:443 assetgame.roblox.com tcp
US 8.8.8.8:53 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
US 8.8.8.8:53 assetdelivery.roblox.com udp
N/A 127.0.0.1:49179 tcp
N/A 127.0.0.1:49181 tcp
N/A 127.0.0.1:49183 tcp
N/A 127.0.0.1:49196 tcp
N/A 127.0.0.1:49199 tcp
N/A 127.0.0.1:49313 tcp
N/A 127.0.0.1:49355 tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 104.77.160.16:443 tr.rbxcdn.com tcp
GB 104.77.160.16:443 tr.rbxcdn.com tcp
GB 104.77.160.16:443 tr.rbxcdn.com tcp
GB 104.77.160.16:443 tr.rbxcdn.com tcp
GB 104.77.160.16:443 tr.rbxcdn.com tcp
GB 104.77.160.16:443 tr.rbxcdn.com tcp
GB 104.77.160.16:443 tr.rbxcdn.com tcp
GB 104.77.160.16:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 c2.rbxcdn.com udp
DE 52.85.92.87:443 c2.rbxcdn.com tcp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 8.8.8.8:53 t4.rbxcdn.com udp
DE 52.85.92.45:443 t7.rbxcdn.com tcp
DE 52.85.92.15:443 t4.rbxcdn.com tcp
DE 52.85.92.98:443 t6.rbxcdn.com tcp
N/A 127.0.0.1:49363 tcp
US 8.8.8.8:53 16.160.77.104.in-addr.arpa udp
US 8.8.8.8:53 45.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 87.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 15.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 98.92.85.52.in-addr.arpa udp
N/A 127.0.0.1:49373 tcp
N/A 127.0.0.1:49391 tcp
N/A 127.0.0.1:49396 tcp
N/A 127.0.0.1:49403 tcp
N/A 127.0.0.1:49445 tcp
N/A 127.0.0.1:49447 tcp
N/A 127.0.0.1:49449 tcp
N/A 127.0.0.1:49453 tcp
N/A 127.0.0.1:49631 tcp
N/A 127.0.0.1:49638 tcp
N/A 127.0.0.1:49640 tcp
N/A 127.0.0.1:49642 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
DE 128.116.44.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:49673 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 gamejoin.roblox.com udp
DE 128.116.44.4:443 gamejoin.roblox.com udp
DE 128.116.44.4:443 gamejoin.roblox.com udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:49694 tcp
N/A 127.0.0.1:49701 tcp
N/A 127.0.0.1:49704 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:49707 tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:49725 tcp
N/A 127.0.0.1:49728 tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
US 8.8.8.8:53 gamejoin.roblox.com udp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:50962 tcp
N/A 127.0.0.1:50964 tcp
N/A 127.0.0.1:50966 tcp
N/A 127.0.0.1:50979 tcp
N/A 127.0.0.1:50982 tcp
DE 128.116.44.4:443 gamejoin.roblox.com tcp
US 8.8.8.8:53 avatar.roblox.com udp
US 8.8.8.8:53 tr.rbxcdn.com udp
DE 128.116.5.33:60446 udp
DE 128.116.44.4:443 avatar.roblox.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
DE 52.85.92.15:443 t4.rbxcdn.com tcp
DE 52.85.92.98:443 t6.rbxcdn.com tcp
DE 52.85.92.45:443 t7.rbxcdn.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 33.5.116.128.in-addr.arpa udp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
N/A 127.0.0.1:50988 tcp
DE 52.85.92.87:443 c2.rbxcdn.com tcp
US 8.8.8.8:53 c1.rbxcdn.com udp
DE 54.230.206.88:443 c1.rbxcdn.com tcp
US 8.8.8.8:53 c6.rbxcdn.com udp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 54.230.206.88:443 c1.rbxcdn.com tcp
US 8.8.8.8:53 c5.rbxcdn.com udp
DE 52.85.92.87:443 c2.rbxcdn.com tcp
DE 54.230.206.10:443 c6.rbxcdn.com tcp
US 8.8.8.8:53 c7.rbxcdn.com udp
US 8.8.8.8:53 c3.rbxcdn.com udp
DE 54.230.206.16:443 c5.rbxcdn.com tcp
DE 54.230.206.83:443 c7.rbxcdn.com tcp
US 205.234.175.102:443 c3.rbxcdn.com tcp
N/A 127.0.0.1:51027 tcp
N/A 127.0.0.1:51150 tcp
N/A 127.0.0.1:51153 tcp
N/A 127.0.0.1:51173 tcp
N/A 127.0.0.1:51220 tcp
N/A 127.0.0.1:51222 tcp
N/A 127.0.0.1:51224 tcp
N/A 127.0.0.1:51226 tcp
N/A 127.0.0.1:51228 tcp
N/A 127.0.0.1:51230 tcp
N/A 127.0.0.1:51409 tcp
N/A 127.0.0.1:51411 tcp
N/A 127.0.0.1:51413 tcp
N/A 127.0.0.1:51420 tcp
N/A 127.0.0.1:51422 tcp
N/A 127.0.0.1:51444 tcp
N/A 127.0.0.1:51453 tcp
N/A 127.0.0.1:51464 tcp
N/A 127.0.0.1:51470 tcp
N/A 127.0.0.1:51478 tcp
N/A 127.0.0.1:51491 tcp
N/A 127.0.0.1:51493 tcp
US 8.8.8.8:53 88.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 10.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 16.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 102.175.234.205.in-addr.arpa udp
US 8.8.8.8:53 83.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 chat.roblox.com udp
DE 128.116.44.4:443 chat.roblox.com tcp
US 8.8.8.8:53 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com tcp
N/A 127.0.0.1:51522 tcp
N/A 127.0.0.1:51525 tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 8.8.8.8:53 t2.rbxcdn.com udp
DE 52.85.92.98:443 t6.rbxcdn.com tcp
US 8.8.8.8:53 c0.rbxcdn.com udp
DE 54.230.206.21:443 t2.rbxcdn.com tcp
DE 52.85.92.93:443 c0.rbxcdn.com tcp
DE 52.85.92.93:443 c0.rbxcdn.com tcp
DE 52.85.92.93:443 c0.rbxcdn.com tcp
DE 52.85.92.93:443 c0.rbxcdn.com tcp
DE 52.85.92.93:443 c0.rbxcdn.com tcp
DE 54.230.206.83:443 c7.rbxcdn.com tcp
US 8.8.8.8:53 c4.rbxcdn.com udp
DE 52.85.92.72:443 c4.rbxcdn.com tcp
DE 54.230.206.16:443 c5.rbxcdn.com tcp
N/A 127.0.0.1:51536 tcp
N/A 127.0.0.1:51538 tcp
DE 54.230.206.10:443 c6.rbxcdn.com tcp
DE 52.85.92.72:443 c4.rbxcdn.com tcp
US 8.8.8.8:53 72.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 93.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 21.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
DE 128.116.44.4:443 itemconfiguration.roblox.com tcp
DE 54.230.206.16:443 c5.rbxcdn.com tcp
DE 52.85.92.72:443 c4.rbxcdn.com tcp
US 205.234.175.102:443 c3.rbxcdn.com tcp
US 8.8.8.8:53 t0.rbxcdn.com udp
US 8.8.8.8:53 t3.rbxcdn.com udp
DE 18.155.145.96:443 t0.rbxcdn.com tcp
DE 18.155.145.96:443 t0.rbxcdn.com tcp
US 8.8.8.8:53 t1.rbxcdn.com udp
US 8.8.8.8:53 t5.rbxcdn.com udp
DE 52.85.92.50:443 t1.rbxcdn.com tcp
DE 52.85.92.50:443 t1.rbxcdn.com tcp
DE 52.85.92.60:443 t3.rbxcdn.com tcp
DE 54.230.206.21:443 t2.rbxcdn.com tcp
DE 18.154.167.22:443 t5.rbxcdn.com tcp
DE 52.85.92.45:443 t7.rbxcdn.com tcp
DE 18.155.145.96:443 t0.rbxcdn.com tcp
DE 52.85.92.45:443 t7.rbxcdn.com tcp
N/A 127.0.0.1:51662 tcp
DE 52.85.92.45:443 t7.rbxcdn.com tcp
DE 52.85.92.98:443 t6.rbxcdn.com tcp
US 8.8.8.8:53 96.145.155.18.in-addr.arpa udp
US 8.8.8.8:53 50.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 60.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 22.167.154.18.in-addr.arpa udp
DE 52.85.92.15:443 t4.rbxcdn.com tcp
DE 52.85.92.15:443 t4.rbxcdn.com tcp
DE 52.85.92.15:443 t4.rbxcdn.com tcp
DE 52.85.92.50:443 t1.rbxcdn.com tcp
DE 52.85.92.50:443 t1.rbxcdn.com tcp
DE 18.154.167.22:443 t5.rbxcdn.com tcp
DE 52.85.92.50:443 t1.rbxcdn.com tcp
DE 52.85.92.98:443 t6.rbxcdn.com tcp
DE 54.230.206.21:443 t2.rbxcdn.com tcp
DE 18.154.167.22:443 t5.rbxcdn.com tcp
DE 52.85.92.98:443 t6.rbxcdn.com tcp
DE 18.154.167.22:443 t5.rbxcdn.com tcp
DE 54.230.206.21:443 t2.rbxcdn.com tcp
DE 18.154.167.22:443 t5.rbxcdn.com tcp
DE 128.116.44.4:443 itemconfiguration.roblox.com tcp
US 8.8.8.8:53 inventory.roblox.com udp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:51903 tcp
N/A 127.0.0.1:52303 tcp
N/A 127.0.0.1:52315 tcp
N/A 127.0.0.1:52317 tcp
N/A 127.0.0.1:52319 tcp
N/A 127.0.0.1:52345 tcp
N/A 127.0.0.1:53540 tcp
N/A 127.0.0.1:53542 tcp
N/A 127.0.0.1:53544 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:53612 tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:53615 tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:53627 tcp
N/A 127.0.0.1:53630 tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:53635 tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:53639 tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
DE 128.116.44.4:443 inventory.roblox.com tcp
US 8.8.8.8:53 games.roblox.com udp
DE 128.116.44.4:443 games.roblox.com tcp
US 8.8.8.8:53 voice.roblox.com udp
DE 128.116.44.4:443 voice.roblox.com tcp
N/A 127.0.0.1:53644 tcp
N/A 127.0.0.1:53647 tcp
US 8.8.8.8:53 friends.roblox.com udp
DE 128.116.44.4:443 friends.roblox.com tcp
N/A 127.0.0.1:53650 tcp
N/A 127.0.0.1:53652 tcp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 badges.roblox.com udp
DE 128.116.44.4:443 badges.roblox.com tcp
DE 128.116.44.4:443 badges.roblox.com tcp
US 8.8.8.8:53 locale.roblox.com udp
US 8.8.8.8:53 gameinternationalization.roblox.com udp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
DE 128.116.44.4:443 gameinternationalization.roblox.com tcp
N/A 127.0.0.1:53656 tcp
N/A 127.0.0.1:53658 tcp
N/A 127.0.0.1:53660 tcp
N/A 127.0.0.1:53662 tcp
N/A 127.0.0.1:53664 tcp
N/A 127.0.0.1:53666 tcp
US 8.8.8.8:53 avatar.roblox.com udp
DE 128.116.44.4:443 avatar.roblox.com tcp
N/A 127.0.0.1:53674 tcp
US 8.8.8.8:53 24.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
IE 20.166.2.191:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 191.2.166.20.in-addr.arpa udp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
GB 104.77.160.11:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
N/A 127.0.0.1:54209 tcp
US 8.8.8.8:53 users.roblox.com udp
DE 128.116.44.4:443 users.roblox.com tcp
N/A 127.0.0.1:54212 tcp
US 8.8.8.8:53 groups.roblox.com udp
DE 128.116.44.4:443 groups.roblox.com tcp
N/A 127.0.0.1:54216 tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
GB 104.91.71.141:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:54219 tcp
N/A 127.0.0.1:54221 tcp
N/A 127.0.0.1:54223 tcp
N/A 127.0.0.1:54225 tcp
US 8.8.8.8:53 141.71.91.104.in-addr.arpa udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 20.7.47.135:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 135.47.7.20.in-addr.arpa udp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
GB 104.91.71.142:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 142.71.91.104.in-addr.arpa udp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:54417 tcp
US 8.8.8.8:53 assetgame.roblox.com udp
DE 128.116.44.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:54420 tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:54450 tcp
US 8.8.8.8:53 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
DE 52.85.92.108:443 t6.rbxcdn.com tcp
DE 52.85.92.52:443 t7.rbxcdn.com tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 develop.roblox.com udp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
DE 128.116.44.4:443 develop.roblox.com tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
US 8.8.8.8:53 108.92.85.52.in-addr.arpa udp
N/A 127.0.0.1:54460 tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
DE 128.116.44.4:443 thumbnails.roblox.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
GB 104.77.160.27:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 t4.rbxcdn.com udp
DE 52.85.92.118:443 t4.rbxcdn.com tcp
N/A 127.0.0.1:55419 tcp
N/A 127.0.0.1:55429 tcp
N/A 127.0.0.1:55514 tcp
N/A 127.0.0.1:55563 tcp
N/A 127.0.0.1:55788 tcp
N/A 127.0.0.1:55790 tcp
N/A 127.0.0.1:55792 tcp
N/A 127.0.0.1:55794 tcp
N/A 127.0.0.1:55796 tcp
N/A 127.0.0.1:55928 tcp
N/A 127.0.0.1:56141 tcp
US 8.8.8.8:53 118.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 t2.rbxcdn.com udp
DE 54.230.206.9:443 t2.rbxcdn.com tcp
N/A 127.0.0.1:56145 tcp
US 8.8.8.8:53 9.206.230.54.in-addr.arpa udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 20.7.47.135:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 25.242.123.52.in-addr.arpa udp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:56324 tcp
DE 128.116.44.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:56513 tcp
N/A 127.0.0.1:61495 tcp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
N/A 127.0.0.1:61564 tcp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 f53207a5ca2ef5c7e976cbb3cb26d870
SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

\??\pipe\LOCAL\crashpad_2468_YYHCRALWNBOZPIYF

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6ceb05115d2037452b92610938415254
SHA1 b835172d0af5e2f0908dc4fd8620b9acab1219c6
SHA256 1a892a78fc002ed1798ff42a1a808728ab4bdf279a0527f5d99e2c2058a5db1b
SHA512 3e5f6840f282031a53dc2c1b3fa4afda0ceac89da272d67f0e065e09df372ad726006c93ba8ef19fd4258cefd07a0fa687d255185517fcdec1732b829759a0ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 13518ef25e422b245fb3a46229839e69
SHA1 e09603894249a93d1e3dd31ca00f17ef9aaf3bf4
SHA256 edc2824d72d2649754cd02b01fc7c8b314e614d95c958732dc9a3c799953b68a
SHA512 24aae90b8b2a7b72912a40551f5a982c6fe122776f3b91e9c6425a24541c544cc90f7ded9b531b7ea6703016a0e457ac6d5f6d300d45056fb8be7bb4837562bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8852f5389962e58f61b39b7ee27cc218
SHA1 f20e4722829fe3be24d66f779590c22188a88dfa
SHA256 c108795ea9ea9743b4862f63fc16c046bd77c560effcea26b575615fc8e37fa2
SHA512 784f45d94692a31b76aeac4694bfde2ae865d1b2d0e9ce3b3b3755124c3833f3172a980b62fd21e1cad8c9023ed94766a92f876ade4bdf9762d959c8a0f1f94a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1f17906f7a70c573396843d5fe356554
SHA1 27be2915738bcbd0848c4fcf4e0e1d5af1b2a275
SHA256 ee7314913345e703c06f3ed9a63bec2f235bdb1a36ae56ae2f2aac57a83908bb
SHA512 d5b54c1c2d304d56f2dd754bbea6522331444c2be0ba63b5314f9130dcf74cf0c0c38d2df42ef00b6a1e32b54f960612c639e68ba40ee2a5b4d000417b0759bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5795c8.TMP

MD5 09e95c41f01f73665c72451fdcdbab5b
SHA1 ffcd92dc8de5993e4a838f6c5cd808e7a621c6fd
SHA256 1e9ba5d3e9328951137516712dd50a50d6f003f9e9bbb5308c4a6b217a6838b6
SHA512 612944ec1d97ac6184c4afe395ac02c7c91fed4c46daa273319631c624d3a58b54d5917f49d99fb0160912a8bb240b2e1f54ade341bbfcf7f6cfc1fa4064690f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 908f501c0d28d4537ae53e93be412c37
SHA1 365b98a33829779a6ba6726166a4d5e0f44579c3
SHA256 6157ecd1c2037dcee0f7567c8cef899deb153be52e47ec7149e401d8615cd8a2
SHA512 7fa9746e148c5b8b1ccd89e6140562e0d2f11bd5c4a23806afd9168db23007df1673eda10c46882bfb7d1c6197bd9bc3bf2f255f860e3414da04a3bc41d721e1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d68f62a2ecb8ba69e043536f38dd699c
SHA1 10e113e13ec7b9118f907b2b81cafe3237ff9bfa
SHA256 3d6a2a5e077cf04360085ac71b79c6582b91d85d544ef56b08a51103eb27c7ea
SHA512 a882fc637eeebdc97ebe546ad5eeb0032009bda116048be6d14bd0fdaed2f81f26f310cf04dd3392af3bed4a125078ad04bb1dd1a7fdf6ffa40261492e3a68e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 57dbf7a9d00d5e0f0f0eaec142e31b01
SHA1 2a1c03c22fd991345ae66eee4b75c2399a4024ee
SHA256 0558911d955327a084e041d525e4a1f605baeee845dc59104fcb3f34beb3f324
SHA512 f2ebb456536988db656dfe774bfd30521c79aca523bbe60f3dcb5752d25ad68499af400748575bbc51c7fd9617b6c07a94b8b810c7851b5305f9c4107d403ce0

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

MD5 911c020a364b10fe1de664c01de4534c
SHA1 8731aee51722d2e1604864eb8f03abe3e6d35441
SHA256 cb84418aa6ff71e927125f05cd74b10cef07b40fe19a17f9ba5c3bd57f2d9591
SHA512 7e2c2259dde1fcb1a10a3864b1e24f892fb28d1c0a9a8b1b32d6b512d9f49b031cf6119f55dad008f0b2a5dc87ae606ee0c2918fdc44fc307d56bc933537db7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 04afccc1feb610094ec5b603c0794ceb
SHA1 27d68789805f201f38b50563f0009cb39322096e
SHA256 8c8ee2a8764bfe4e3d9c6a45ddd0a6edf44da8992411aae41ac035bd39883fe5
SHA512 3ca4e7d2ab51015f3190137f1a0f8e7fe5fd816a9fdf05e8de59c3cabca122523aa870e41b9e02fe0bff5db2579bda6ed4c376d6d92efca6146fe8bcdb66fb17

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fa.dll

MD5 cbe3454843ce2f36201460e316af1404
SHA1 0883394c28cb60be8276cb690496318fcabea424
SHA256 c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59
SHA512 f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_it.dll

MD5 497ca0a8950ae5c8c31c46eb91819f58
SHA1 01e7e61c04de64d2df73322c22208a87d6331fc8
SHA256 abe2360a585b6671ec3a69d14077b43ae8f9e92b6077b80a147dfe36792bb1b7
SHA512 070398af980f193ff90b4afaecb3822534ef3171eca7228bce395af11ca38364bc47cab7df1e71187ef291f90978bdc37a8611d2992b1800cd1de6aa7fda09d9

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_is.dll

MD5 5664c7a059ceb096d4cdaae6e2b96b8f
SHA1 bf0095cd7470bf4d7c9566ba0fd3b75c8b9e57ec
SHA256 a3a2947064267d17474c168d3189b0d372e36e53bf0efb9c228d314fc802d98e
SHA512 015dcb17b297a0aaad41c7b0b2199187e435855fd3977d16402be774622cc4f6b55d04ba9159a89e26e350c5602928c76dd9386be3974437b41888a0cfdddfa8

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_hu.dll

MD5 f4976c580ba37fc9079693ebf5234fea
SHA1 7326d2aa8f6109084728323d44a7fb975fc1ed3f
SHA256 b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791
SHA512 e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_hr.dll

MD5 0b475965c311203bf3a592be2f5d5e00
SHA1 b5ff1957c0903a93737666dee0920b1043ddaf70
SHA256 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0
SHA512 bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_id.dll

MD5 03d4c35b188204f62fc1c46320e80802
SHA1 07efb737c8b072f71b3892b807df8c895b20868c
SHA256 192585d7f4a8a0cd95e338863c14233cdd8150f9f6f7dd8a405da0670110ee95
SHA512 7e67ea953ea58ff43e049ce519ae077eec631325604896479526627d688f2fa3bfc855a55ac23a76b1c9ef8cd75274265b8238423b95a2437be7250db0db31b1

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_gl.dll

MD5 84a1cea9a31be831155aa1e12518e446
SHA1 670f4edd4dc8df97af8925f56241375757afb3da
SHA256 e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57
SHA512 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_hi.dll

MD5 34cbaeb5ec7984362a3dabe5c14a08ec
SHA1 d88ec7ac1997b7355e81226444ec4740b69670d7
SHA256 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9
SHA512 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_gu.dll

MD5 f9646357cf6ce93d7ba9cfb3fa362928
SHA1 a072cc350ea8ea6d8a01af335691057132b04025
SHA256 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150
SHA512 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fr-CA.dll

MD5 b534e068001e8729faf212ad3c0da16c
SHA1 999fa33c5ea856d305cc359c18ea8e994a83f7a9
SHA256 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511
SHA512 e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_gd.dll

MD5 c90f33303c5bd706776e90c12aefabee
SHA1 1965550fe34b68ea37a24c8708eef1a0d561fb11
SHA256 e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c
SHA512 b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_ga.dll

MD5 3b8a5301c4cf21b439953c97bd3c441c
SHA1 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a
SHA256 abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0
SHA512 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fi.dll

MD5 d45f2d476ed78fa3e30f16e11c1c61ea
SHA1 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e
SHA256 acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2
SHA512 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fr.dll

MD5 64c47a66830992f0bdfd05036a290498
SHA1 88b1b8faa511ee9f4a0e944a0289db48a8680640
SHA256 a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961
SHA512 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_fil.dll

MD5 7c66526dc65de144f3444556c3dba7b8
SHA1 6721a1f45ac779e82eecc9a584bcf4bcee365940
SHA256 e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d
SHA512 dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EU626E.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 e8c26832ef1514425274911b9705baa1
SHA1 5c31947af4d20a76c58db5d289c8a877643b3a55
SHA256 e959cf8b52acbc3a766213c9129a333453fe5ab0ffa483344e9d2577a567da33
SHA512 b9af27c8953c845995266192150c9dfbe7ad0d0ab58a01f7a9e898a238d0af871df119afc8a78f03a9098c686ab86e2fbb417288dfbee088aed24019cd2cc6d4

memory/2524-680-0x0000000000E60000-0x0000000000E95000-memory.dmp

memory/2524-681-0x0000000073400000-0x0000000073610000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d47f272ca63086f648792e504b7a171a
SHA1 4ca69aee9f5832ab461184f8341ffa8935579828
SHA256 09951595f65c00d3ef51d0769706178a1828df591af908f7c9d309443237c810
SHA512 dd89354bdfc7588f500633eb842011c93577dc148ece865296bf2cb5423f403aa4d604f44fdd1a0705330e0bdb50a6eaee213fb4b6f4f174ccfdfcf58c0cb643

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d18781e2ab27eaccebdbc0eabb44c5f6
SHA1 c5046846fcae60e6b7871af735482501e775612f
SHA256 a07becd59ede6aa09965154bd2b70b8563fd1765c19599234704682f9b29071c
SHA512 2465b54f90ad71c9c8a1cc3c794f7b1bcb6d81e35a9aac877b517325aeff5b0dab13490f8bbb583905cfef5a46bbbee46874f80f9f6dd827086e9b6cdec87cb7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 a79977ade374a7cb2b0c523a16d298b9
SHA1 4c6e4c996b676c542c030773a5e1fd8373f16c22
SHA256 3200e95c6c49cbd900ba1fcc131d174dbba5d9740b8bd89590a368fdd190ca3e
SHA512 e6b1e98b850ac848ef9da67978995d0c859cdb9442f2f0440d34a584393fd655189095964bb07e9f25c1ecc0478cb6e482152812616da38ad471646fd6afda2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 8adb35257977af9c83ec424616de9a01
SHA1 bc2b0f93895b081bb58aa6a873d8357dd683b392
SHA256 5e53ea6453da517a15374a9864f231084387e9dfbfb711990c05ed1def7ed66d
SHA512 dd70ae52f7199bc1c75d21159cc0ac91dce0feb529d115840a720479ab3dd0372742245d47fc9d196789574f617631f12b76a2032647cd5d84cc356a28d14472

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 43ab494173b560efde207bf1c73aa3a2
SHA1 62ab7aaa854c9c09871dc4ab6f19267f9060c762
SHA256 f153ab0ca50f0bac5f103717fbe0791bf1216da1cf9c8ba8e9104f20bde40bfc
SHA512 3d434eacb6d384181450e22e12f06ef25aaa586aa3ef598b77f070977b94caa5053571ed953c88024b4a07444f77e4d1ad19d1ed78b255807521b068be1ace31

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fa5b421fca4336bb88cdf08a534a5611
SHA1 c90af5ebe729e96f767f4d3303a1877de41a7f20
SHA256 9fcdcc4615aa225a785bb6516a8e38c4830954e4e410f3974929c170d404059c
SHA512 ef92f90c17e2559804de14800bd0c54067636aa40a8c17a540bb06c0915578b884424f02942e1b7caed77d5be0bd075bbb8fd823f242ede08a92fd493291914d

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\124.0.2478.67\MicrosoftEdge_X64_124.0.2478.67.exe

MD5 dabc3160a804b9fadd89ceb0fcecf388
SHA1 b52f15e866a18637683bdf0ea4eaa326b787396f
SHA256 53eb39a92ee0d2eb94f6d33c015097bddd9cfe5c4129d3ac9a9facbfb5087bfe
SHA512 74fc0f21d7cf99e07c079224e2af8a4a51bff98a97bc471cfedfbd3a28d3ee681fbd63fa7239948c3c0bf4f9af56dc582dd128f8c08b54cb73389e85f949f431

C:\Program Files\MsEdgeCrashpad\settings.dat

MD5 3500d14e0b0db5ff81b56cf17a0b7e2c
SHA1 a61085058ccef35fb0732b2b5681e3c8b14cf0d8
SHA256 068edd204ea6ab143d78467301cb4b9f4646788f795a7689ad1b5ea639b93a32
SHA512 1915b399a8e9ac448d134545ea80989f85598e48c63cbd00b88e64fb873c3000a40c82e47d7bad195cbc4fed3a09a1b65035f658b2bd254a6c1bea246ddf38e7

memory/2524-976-0x0000000073400000-0x0000000073610000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2b9471dfa937dbbdef65d56b35246f86
SHA1 ec3d2dfbac54752d15359f149b565f267f435cc7
SHA256 6cebb9218d908d7709b002eb92ab41fdcee4ddd68d4d992c609ccbc3d5a72cc9
SHA512 f9538c9895097fb7cb82f946773dfd6aa5d3585cfde7da47d3e880e76b076e90d4b267ec1ce41fe98b9e0bb87c3c630820dd6ad5a4f3170049d448097f2bf065

C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Installer\setup.exe

MD5 c31297188ec9fbaa60449f769339963e
SHA1 8502d9e0cef18137529f0a46ad6e69a1577e6cae
SHA256 2e2eff110475dd3dfd732ab514e4692032e67b2d228d0081634a87f45cde5ff9
SHA512 9525e3e08b953fe36270c7b4868959e9bded055c5577e5ca94d79606b671e6660d180f763b54a276bf356e82d7073901c373e0b40cfca924cc4b38384c20e22a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fa5c5576c93a4dae9264a76e062384c5
SHA1 0491428e50bb3ff1569e415362ece5a09fc087d4
SHA256 44425c146c511f0bfd79aeb93ce8fec287d9937d10490d482a3129b7ba188207
SHA512 e057e98ae8350239bade1d3e14beb32275e332868ff37b01cf9241749895f5b95960caf511329fdc6fdb6876a164e38d79a0ebf4303ce19bd0def1676ecc5143

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 572da45848dc2fcfb797a320bac35221
SHA1 a0a075d25f6edeb485e8a91ccf90266824432c08
SHA256 7c07180cf70c698e52be2c5eca652115bc9f32e4e0de134daf81bb3450b427d7
SHA512 ec53aa59c327e5377aa1d4ccdc086078f38447e4ccd3505c86a0ff57c8242183d246f1446c7bbeebffa49ef0dab1daa5dd8bc795748fc4d8c7ecc92459d045d4

memory/2524-1047-0x0000000000E60000-0x0000000000E95000-memory.dmp

memory/632-1052-0x00007FF9180E0000-0x00007FF9184E2000-memory.dmp

memory/632-1053-0x00007FF917870000-0x00007FF917DBC000-memory.dmp

memory/632-1054-0x00007FF648950000-0x00007FF649950000-memory.dmp

memory/632-1055-0x00007FF9180E0000-0x00007FF9184E2000-memory.dmp

memory/1880-1147-0x00007FF939890000-0x00007FF939891000-memory.dmp

memory/1880-1148-0x00007FF9385B0000-0x00007FF9385B1000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 f6e349b60e8ce08be98785804e93b342
SHA1 54d6c61c86c8f2bd943f00c75ff11f1f3522dd97
SHA256 cddf05ff14354b95c1c2d41fd41146f0a3e15ef874f90255950d6e92ae333b8b
SHA512 bfb4842dee9982bc528ebf695abc274b23160f2017339d1fea0fada6c3b039c08f3e281c5a2eaa45d6f6ad6e574c5d9b02a2a506233e85396012862445fe66e3

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 177dafeeb72762254e3e42b3a0d5f145
SHA1 fb7259b2506cc0731838826bf830f4ad53cb366e
SHA256 45b8e519d5a7116e042d157084386b8de341f19695d7fa0791ed2982f8f5eb8e
SHA512 233e947d18d92d2b022527751315c810ddd9a71d95c5b99c983c41ded70ab271cb005807c5e848dc0a86cf8ddfb11037fb7198c63b979f85bb412745436d0a1f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe599aa0.TMP

MD5 9467b3aa9dbc85aa0a48fb79d83ba190
SHA1 5b85dee65d01cddeb3901a922813d8753ea35917
SHA256 9413e631edba81ca069bf9fa89da8f0ef4457c8fc36b6a85b01c1eba44e0bc7d
SHA512 1a857c9fcdaf4fbf260a17264a73cabc8f5ef033eb039bea5a53ada1f0e1b5e9a2f77c89c5b8acd42b0d81ca86d8be017309337a2d6f7405ed7834b654301dde

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 a4a87f1d64c5e7bd93de5e93299f20ea
SHA1 55e42131d73e13afa86209b27fd9aba1fe9d6533
SHA256 1c52ae2f18ddef75feb9dcdeb31245b40a59d9d02da2fc5c9a5cc17537702c91
SHA512 8db6920342b0f7b5944a9d9ffc6142b78f8f0ee75a098341ef51916b8d5196053a2aff6c6342787c676d205c50c5fb48c1bb34ab687151bca289aea579fc6f7a

memory/224-1088-0x00007FF938AB0000-0x00007FF938AB1000-memory.dmp

memory/1696-1166-0x00007FF938AB0000-0x00007FF938AB1000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 45fa29a9ee86f226481433acfd732429
SHA1 bb552f08154a1926f10cd4687c4a5708b2624fc5
SHA256 17307717bcd26e08dcc7c05715890990c2127692fd4bf5949869d7d4d9199463
SHA512 7b0ce3fbc57ffe4a3d9c8c8d03c0df5bfcfc91b61c5da60eaff5748a702a445831481f5c9d5e24ee82aaae2d2875177c74597347f9652f34e163aa89bc61ec9e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 e19d4784d6fd9a31e1eed2a19a336c59
SHA1 74ad3b40688bb1bf9c6de2d83bc97093956d5ab3
SHA256 05d11e6e98a3eaf2ecc4276cdc7b7ef7d1149db36b6f4ba41c64b95396931035
SHA512 843c2b7accb1c0c1eea278b8e6d3d5e800c0fedb8f63f747abef4c5e8affe284d96424888c7849b328e23dcebb1f3cc8a0ad685f0ddb032a4d30dab24abd3a46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2c3f856b31c6f69f677e6249bf61c505
SHA1 206d6a69735bda3550b1d1c60c67166b5a6c5ad2
SHA256 e5d2192fdca434283d1a2b4b22f2df320a91442dfbe4bc10a7d481850c58588e
SHA512 849fd9fc4688ca00bd4d37f78871af92eec6b9070177fa944cb7431ef7a051b2d1a2c3e61934be7f37e1d0e595efa2bc27ad1d080ce029719b7521efd1699c8d

memory/1880-1454-0x0000021302F80000-0x0000021302FB0000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 1c14c6c535e5612305694eef9e5f2692
SHA1 d792b319348bfc6d2d6594cabf104968131f0fa7
SHA256 3170f9c56e019c7722df94f96beb766abaf244b0bcbd202cc97ac59d742bff0e
SHA512 2d197cb77b58ad45785b3c9bb4df756bafb017f1c0456a75d233eab22a36ebdb649ed3ce4b4e103d2fd98224c3b6d784cde75c3066e8da2f446d5551e8cd63ab

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 c3c584145a88d4b1e7f6a512c1ecefb0
SHA1 0e79ed098a711efba038fa2032be1d14a0f846bf
SHA256 7102b87f8942c2eda6501664977d85442f2a8919398f3d2c0258575628d6665e
SHA512 94788d582c89f9eb4bc0c1de7e4220db63e5b7f5d6ef963a1cb529ab1cbefc1acd26b73f8b389d438429ab89739261a1742a66d4d15767870a135854cbf4110b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 f2e450f49d8c5dc65173119d087bade7
SHA1 45139c7bce02df53edadadf7c9f199c354759693
SHA256 092818625b871507f84d412b0c8686c3f2fb6f32b21ada654ac40cf09eacf759
SHA512 600d2c87eae8bb4174d4618949a8739002874546a79578d6f19f4b80d016805aeca2302997ff30dd4097d6075993002b1c6c7104ec4b83d7d083a2ab37157527

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 d8061b3f4e651cd8609b5bb1d2bf2ed2
SHA1 0dfe1d776184b0f197486a92e88d43fe07cc97fb
SHA256 5b1adf008fe4d745bc7c8df768f38eb2a0da5c338037910119f29aed823cbf16
SHA512 56bed753a8c25eef458352d7e4e14778050d8579a80ecf41e88c15c9c19d2dae4f74e8e65b33d9ff9a40fa4ee4945544c1056b628cef3f4ae83069aa36baa67b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 2004612882294561eef8d8f8c61cfde9
SHA1 bd88fcbd0ef19dd11353c8d6ca5b380015c355b5
SHA256 c45234f1de221236f09d4431407a75d0697cc58bc01cbbe9ab01a15c583e6a92
SHA512 8952883cd7c98ed879a5fb92d31e4773dd9cec6c6238910881f1e59183e4fd1dd853c5b85148693d3e9ff3aa2183fdad008b53879ed295c3aa7928fc5aa2df76

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe59dbef.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 60b72b6d9e5183208ad540a9c459edfc
SHA1 8e370e81ade581faaa38b3dbebba1a86e42e59b7
SHA256 cdc464f198c20c4593c245b4d880041aa896b5f0ccefe0e254a550bc863ce370
SHA512 d67c09528d36bf8917a1c14e7551412237ac27af137332a42a64c3925ebc9b153f8a87f08cac41441b408e19962c43360f1fc548e3f24deb4205a189c3e44e19

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe59dbdf.TMP

MD5 731833c92f05af575117299b083ea234
SHA1 3c1247fa31acda3be2c3e94068da7e844c42dede
SHA256 e3d68ee1b4188d2330558d299a8652cc8a1bf49d4441e6d15c2189ba44953d2e
SHA512 95fcd92ceca63e7a9c445aec2b0746b6087d056bea5bbe0f775d7076ecfa473e80474f5260a63441097ae93b49b76d943e65ab75348d347cb95936f0ec2b9426

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59dbdf.TMP

MD5 9e81c15adbd86c4c51efe7225e86c241
SHA1 ba64fbd0ad57a50326f623c8eeb81e1fac43628a
SHA256 8f2221cf2a85e5b23cdcc6a4f7b2d7bc0c52f9b6136766aa2abfa574896fb374
SHA512 951fc493cf510679178c654482ba97dbe98198c83104b477ab00613114ec9fde8b9581a7fbdd799f9745ff6fbd0694aa6a0ba8df3115393469ee72f33c650158

memory/632-1660-0x00000192195C0000-0x00000192197C0000-memory.dmp

memory/632-1658-0x000001922AC10000-0x000001922B050000-memory.dmp

memory/632-1662-0x0000019219800000-0x0000019219801000-memory.dmp

memory/632-1663-0x0000019219800000-0x0000019219801000-memory.dmp

memory/632-1665-0x0000019219810000-0x0000019219811000-memory.dmp

memory/632-1666-0x0000019219800000-0x0000019219801000-memory.dmp

memory/632-1667-0x0000019219810000-0x0000019219811000-memory.dmp

memory/632-1669-0x0000019219810000-0x0000019219811000-memory.dmp

memory/632-1668-0x0000019219810000-0x0000019219811000-memory.dmp

memory/632-1671-0x000001922B0E0000-0x000001922B0E1000-memory.dmp

memory/632-1674-0x000001922B0E0000-0x000001922B0E1000-memory.dmp

memory/632-1673-0x000001922B0E0000-0x000001922B0E1000-memory.dmp

memory/632-1672-0x0000019219810000-0x0000019219811000-memory.dmp

memory/632-1675-0x000001922B0E0000-0x000001922B0E1000-memory.dmp

memory/632-1676-0x000001922B0E0000-0x000001922B0E1000-memory.dmp

memory/632-1677-0x000001922B0E0000-0x000001922B0E1000-memory.dmp

memory/632-1678-0x000001922B0E0000-0x000001922B0E1000-memory.dmp

memory/632-1679-0x000001922B0E0000-0x000001922B0E1000-memory.dmp

memory/632-1682-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1683-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1681-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1684-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1686-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1692-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1691-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1690-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1689-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1688-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1687-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

memory/632-1685-0x000001922B0F0000-0x000001922B0F1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1f1d96b68e3261cf312b541611c5539

MD5 3adb865c801399c412bc73840d3d8241
SHA1 267f8332eb7486bccd7a6730cfb4f5c2152b11c0
SHA256 10fb505b7ce30ce4bf5582248b17dd47f6a39635007bb77dc5d16b963baf9905
SHA512 609793331ce25c6667067b3616791f3ece470500f797343178948e4b7af18f275fdde226f542610d957b397651e12191aed58dbb88bc1c59eff4625e550160a5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7ba70f14c1a71dbfce94c40039576d6e
SHA1 71f26aeedb19a9743521698e57a03b810912f5a4
SHA256 d2a772900c03ba220cee2c6b2075dabc8b200e21bb8372df41b3035f228e292a
SHA512 abd88731911989f093e9e5e925664f3473a0be6a8fec157d2798c1ca066ad4e96144fc7efcaa6e75d132c08dcdac8e0af3476f12513969e0398164fb3d9c0ac5

C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json

MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\718a2cb54ac4b5af0c976bd94763849a

MD5 342b07240c769086897e46525f4369ce
SHA1 c59d211daedfb8b529cd6a720129f95254b636d5
SHA256 2405cb269e35a590435520b4e307c90680ea40da976ab8e47fae3762b8af5479
SHA512 e8c5ca5483d8251dc912de024d359f64457df67fffd0f440ffe2fc473fcf7f496f7e7c1656c8a6cbde9f059579f3fe377961530fe835bf1cfcf4fbea6c1a74c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7ada9a0679dd88187c316afffa890fcd

MD5 741b294982a5930718cd6ec12daf1d94
SHA1 fcd1131b9750cd628abe1dfb9b2833cf54324dfa
SHA256 c3636df410f0c5f15d211bd51648a1e5c2ed789bf2bbe5753691d74ef8501b99
SHA512 665aa0e7223b50c7feca47fba58808f6d731f930108a86c1c260e67e2d878ed1e0df6f3d5a35edf3de874aef55f7d657356a64ae4eca3e06b75a98a70202e318

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c0314366f5f2d1fc86caf19c3d672cc0

MD5 79ce108ec4b518677227502d92cd6b8c
SHA1 a53e28d72a9793bf955c49379a4af3e0edd64e98
SHA256 8291a8b4445985351cf8ce9fe3aca7a86bca810ad00f71a036a63e7511bdc921
SHA512 a0a548fdcfaf1fb91ccf726b01d876c0b866cc8ea2bbe8a930d07cc63fad04a3df3a98d53142cd505719e84a7a1360fa6ae59e1f981ea5da5d8a40d9683155bd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5870b6aedc9d44c9e24c2c83fa0d0432

MD5 6392f14aa408c1046bd501a7c45ab13d
SHA1 74ab7b677a41124e2b48424ed267487520c41b46
SHA256 59bfa5adc22afa19103e59fd9dbc07cdf7dbe89bbe577e765d78234d73ca9260
SHA512 5dcb4375c7bc7dc1aec0b7d80ff009e8bcbfd7ce5c3dfcef11e2d251a3b85983bd182654edd626c8ca2e0ed6f71fc9388fbbfdec0023edf0846c2ed521f6b484

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2ce13b65be783703a5cebfd010fa9707

MD5 51fa942896281b8e0010990bea8d8215
SHA1 1ed89b8817fd2adc94ce6517b1b6bfb7f27f2fdc
SHA256 1148260c6ebcbd35aa8b315753519089a97aaab70fa901f39be7359688829664
SHA512 88454821016735ba2177047792701ac2b4a7c916419bf332f5c924550c2a0d02d050c182c69b47ce07606f46b0e0d02f15246512165aac0510c75124cae2115c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8432475a505b3b243465952d91532f53

MD5 383629fcaac9fb0f2bbded51221d099e
SHA1 b1f1f4637cf01234ffa4368063b67d90653fe8a1
SHA256 52ce81f879fb4051ae5a1520b8ed0f253c6a02e57be35707fb3db65b39731ece
SHA512 43c141700cae57173d10ba61e3f54ac5f76c18f409b6ebcbebe2a1efa19523627416198128c5349fb983218a3de29d8fa0d0cb35c2f5c27d04a644988bd61827

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526f27474ff5eb0a688d39a85d0c599

MD5 ba88734ba90eb05ed6bc44156edf5817
SHA1 2aeb94a144d88aa4c62a9987aff500d46d872a56
SHA256 9a9e3084f81e46cfd18f387d57fcb1b46d5693d1b6889ebb756053fd9943fd11
SHA512 3e9d20d49ee3c3136441aaaee40f98d72b9a62c41ac044a298848d1a73c2f605cfb639abb6a16270800d62aa2b539ed9e9371f1fb1beb30f864118836b5221d8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\66b3942f0831fc98e9ef8f76da2dcee1

MD5 e2008e5b774392ef31c12e6cc343a459
SHA1 739511b10d849742e5527d093c92ba255b72f6a8
SHA256 0d985d5cde8d5aed933a885384123f1eb323b7dc2de5d2fd0dd5fb78c46fa538
SHA512 2542323e0b26f2da4913766ef809da0f0b77dd6e708b7393022c6044648672ae10add50cf2cbce3b239918a52219ca95c8e19634160a4e227ad6fd5ce44e2bc2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f10b6865c21c904e29f52a54a31f37a

MD5 38b25c1089062288a7a9a8876138e465
SHA1 d7dc1955cdabe9a50ef4f6b345c9012e3efeb56c
SHA256 e39aceee4952e730f1a101894520b046ff21156ebc79c0f8e070e87af20fdd29
SHA512 198469bc9aa03de2c29b322cee7714a67b1b421a8fb0b6ade7148f54fb5ea0a37f6afe5e80f052f41815174363ca2b2dc8395534c624f0f87d2f7a0e9d773dd5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ceea000e430b7c9714bd62a61ef5eb0d

MD5 e6bf3b994b7bd85aa47c17406d367d2b
SHA1 b18be2803acd9576aaa72bb19116b09680f0cbd0
SHA256 92638ea5cef2b20242923fd21757df86c8c434ff12243d480250364b8480f2fa
SHA512 3e207bfe1b30c981fb533971769a4051c0c87ffbfcabc012606ec939c5b66f2bf59cefeb85c2b903856d6396584b2c96472965c11d90d6a1ac9f59b29cf3d664

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac

MD5 d97f6e22eba42d95c89cfd439f36c1d4
SHA1 3a439aff0b80708f6510643f70997b897500d2bd
SHA256 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e
SHA512 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d34a1f5416fdc978c6e0c7edc7d67a2

MD5 c76ac26f80988d0fcf03874d625b86af
SHA1 b04a5e95018f8eca571daa4077e66626b9ba0de6
SHA256 3dca66141315cdee30f7604013deab2fcc1dd74af93f9630fb700b7606f531ab
SHA512 23ba1357212eb135ad87fcbb81bf73fcf2e189da34f08ca1cccd40d763a856e9ca8ce5514af395caeefca2b0dd3a6fe3b8d43e060c5baf5139fb357fedb90a59

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6af2d287cbfdd785c20430e5eade76e6

MD5 6f27114708b23f39ab64468b751e59c7
SHA1 8107d7b136d85389949422739fc133cb7bf535b8
SHA256 8a1b708a756ccc13f0a38b44c71f149e89c440a4ca242d591589dca3517db845
SHA512 516454cc1bea3871516331749d6e08d91c72cb04cea400907ed193fb68bcdf4ff2e9f84cb2e65950f5eb69a593aa6cf0e913ecd921506b447f8fb869a4424f98

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1aac6bdbb2642f3f23fbed64d042c3f

MD5 2c65a49f36fbe81aed88d7626a0112e3
SHA1 832fc429cd021f288f5ef9531e7dad6c9c6507fc
SHA256 eb8f138e67962a5c7db64722b78454da2e3c3d656ec8d72c9bec566f10a942de
SHA512 4fe7c7a7e439f6b43bc13af9291994ff913fa65ab1d77f162c97b18ae505b1c46ffb2c9236b7c9010580b095526a58204bf182aa5d476e3d0a006b2ca450d181

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0cbacc9a3c6aa07deb13db83f658936d

MD5 e3690a37568ee9fe7f191a17a47e2146
SHA1 476c939e0ca065001820946509e36ac2842fb1fa
SHA256 b8da756d34febd98745815e7ee643c49dfdf1adeece7fbdeda22487c06472f28
SHA512 c7b777cb3616fbe210b58c1e2395ffb378ffb36c2fed3af8c634e7d39667b9b433386d1a284f936a1d4e10e76c7a678e97216fe801cf95a0fc3fb313fc4514a3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\754379216f793b8b83ce74b0e1694d45

MD5 33613fadfd68d29b9abdf5d0c107bcb7
SHA1 186937368ad26632ebf8fb35e0e69da35a362caf
SHA256 57eb2daa6b2e991777533b5cc3548e8b274be4f13ec05e3d2348358670a7b81e
SHA512 2930c4dbaee031a281682e2ca0a3bda682ae760446a065f418b21f61ca8834b89c84df1a489a2c9b57565ed6843facad8648f472c88c22b944d53f74c82b6bbc

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 eaef4b677b2babd4fb7b29da0f065bf5
SHA1 655dc02137cacabfeebb0705832c3378062b1598
SHA256 c5a33fdff10981930005746e120f5cab8bd1321ea949ea5cd1b2e34a88f7aaf7
SHA512 7ddab6aac206bbd23350667487335e674466d66b3f0c425ec3789a62749bd6073eea1e1f5785ca539a0b7e0bbd8a83605191508d97c8280644088cc7d8161aa3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a047f675d79d75b9a00bb356cdca2847

MD5 f514f9b1afaed54abfdea5c334a02023
SHA1 a73d2dd2a3a86be386d7c2400a8fde5ba866c8de
SHA256 344e3af9bd32d57b31b318c3c53ea0dc511ef77463e431ab39c788051e94561a
SHA512 ae15a2602193826742ddc5468bfa56887b9c98c3413af5ebef29558882be5e264a4c7c0e9ddf4e725d402b276bff1a46dc51e501347cac4039081435c677ae93

C:\Users\Admin\AppData\Local\Temp\Roblox\http\00128013d18182993eb38b8ae2427999

MD5 382616ef7d34c3d608af4db50adbbdb9
SHA1 9ac0c9b2f92607c7c71e78ee648a458e2054370c
SHA256 3baf0849e226d3c53489bf0df25d2941c21e5955c9910091917913d716cfed66
SHA512 beb2f02037a6e3c5fad783be2f6d92fe9c51117bb1a32d2694ae1fadea1875abae95d82007998f1254af82965372284f6f1d8b821f61a4aa42d791cad1277f99

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d21f46a262d8aaa4da9f6cc89f58556

MD5 8e950e640c9cc7089aea727d685bae6b
SHA1 4d7cb24ef5025429f04facc6e0e700334f49bbb0
SHA256 c068495897eb9c493ba12e6adf5ee5a5ced9347387d0e26d4a4627b9c784c4c0
SHA512 ba7be090fe1df0993467d1cbef5d6eb51f426bb039fecdb6b6da7f976394eb6568a5b57f93820e19f83e0a570bee243c69d46487e5435998d19c153ba012c7d4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9dc8b7e692754869e54603687e84187

MD5 7ad352a680571f528742190154e73aa0
SHA1 8a9c4c094bcc22171e045ad6be26dad515203cbf
SHA256 12f8878772e10c6948075ff8617dde5467f02000d0d513eb6d1ccf121e15328b
SHA512 6041e29fb944deabc65193769f2864fc67859840f21edd5c5a98fb8ce521aac28177f716dd222ec85c90e65171513af9de4b1a62c2e4b480c8bf781fc92569a9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e3796e76ce90647100c66d13ea6808d1

MD5 5d07fd3313b76787fb99e190262b3d37
SHA1 9126f383c31dbf3dca6cdb8fd25b9c2cbe8497c1
SHA256 54830d2281dd8e30a41a5538bab9b90389adf19191ddd28495c1e83d8b960f56
SHA512 5a026f548534d144dc4b2428a982f7859dd80c62b68cff5a7fcaf8d38aa70d8448f7aa060bb7aec3a087f3bcf32f3a29794b04ed460dfd16bc313ae51962a36f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb20f3facb23ee30000f1bb324fdfefe

MD5 4df81c60373a100f8a543a4f621d37ad
SHA1 9061bda709486381ffa87ab1b6c0e9ba22d903e6
SHA256 fd709c9a0e21a82468684024616d75348dfead30ec6aa13221048c9d6734c163
SHA512 e6d2f3fb41cf0bc180c44f313d58437ef1d9851491f52723db4ce6919b7732c0752ec8d37048de35baf6dbe56935447f210e27c3bf9daafd858f40979d1df740

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c7cd25665debd5cd216d1edb0b9e0df0

MD5 ae247ab53663426df5f4e412dff7043c
SHA1 021c478ecc07f49752b6bc9299cc895d286d6794
SHA256 1b9d7bab30844c27448919f52bb5625e4c2d8ae177a35ae830ec2a1394233d52
SHA512 92dfbb642e493543e4d335412431a9fc6d07773cc4ceb60a13fe748fa82094f737053d449f07661b43116556aef692fdfa8594ce5ed5845e58f675489dee75f7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9a4f84b23113d388fbb317ac6060737

MD5 9cecc8f05a77358dc4bf858463c23f69
SHA1 61432cf637da04add4bee8f53cb9466dd5f0a3f4
SHA256 a28040f98218f7ad53ef6f32c8d77701ccfe2e10657f9b293225616324e3e070
SHA512 f2b0c1f0b5979d23f093384b0e255403561688e9c05bc20ac0cbf46f09fa989eaa714e342693c18398e5f8511de2b093c45e2d800cd87fc12336b39a3afb23dc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3265fe7177f3627b334db31255712b76

MD5 ace27972ba2541b3be0729e29b528303
SHA1 d43b19d5d07eeab6f9623f1c9bb4c547d1821338
SHA256 7a6973930dfe5ac63b51366f87ee7f578c9cac23410343804912562584a1a50f
SHA512 658eeb88da3a1bf8fb0f0a7ed78c347a4f25969d83a5c6504202b4ab4f94498d4e0e3c934fa8b6305d75e8729afce83abb02ccfba601689c7e71421f265192f9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4eee26b4cb90ca62dc42bf90184b8ffa

MD5 da4e7351b997dbcbc9b378bf2807da4e
SHA1 1d942be852065789c6756a5183ecfe74e49b45d5
SHA256 a198d018314bb90549f990394bf12b497c1f6878dafe362018cfb7b22a74131c
SHA512 07ffb617558fa4c55403044172aede1ecabdfca917e202fce74a7720ce122ecd6ace8ca07da0bae29afbbaf026dfcb7405223fa00006b2b21ac2fee2293eef6c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7b6953b891495be71553859070571054

MD5 504f7989be8fca8b55966b519bb80825
SHA1 803123d1ac1dbcc2c17503493f229b160eca8a4b
SHA256 1b8d45abf86246856f1b98e9654a32ca64ffde296c18b8ba8175c975892e8ba7
SHA512 b05e52aca725097cb0fa8f8e0f1b284a930b29bab55c779be9c53ee76913495f3d51210c5f6d67b6cd633ca16a4776b83203c7efb00ec86fbc4cdcb7cfdb4f52

C:\Users\Admin\AppData\Local\Temp\Roblox\http\54476e66a9fbaa85706f927864b88178

MD5 ee0911edacc9a072654887bcbe92503c
SHA1 ae1e5a4835b1a494b4f38659cc2fefe1b53f34a3
SHA256 6964c8c7bfc40fa27e54f4d0d2db929f7951c37da2b53da2c5f01786a50ae4a3
SHA512 202e6270c3d5ad226f077c1b2433ffe72bf205c8c5efd27455732d037b945866aca2913c32607a42422c10a73d4b998574c4bf1292096b609ff6735de3ea6caf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\495cc3ecb6a4986562889184c6e6019b

MD5 bafa1f0fc394195a95117909085e00eb
SHA1 4a248065e4f081b0bbe90e56789501c808efd5d3
SHA256 9ab637c1922d6bb6bfb35dd8871e882306d61c8c16be8e6ab3f201c367464ec6
SHA512 38c6fa8ac7773676071c4a4c61a1bd95d0f9f1bdef7347519c854934b7ba21787ac343e073b0cd86353e8897e375c30e6750028b43971b445bed22ffc05ef866

C:\Users\Admin\AppData\Local\Temp\Roblox\http\db3726db31ab25e116eb10f974990833

MD5 4e67a24ef89810f62f88d24df9995e42
SHA1 3a49280c328436f8af28dcbe16f10fb385d57606
SHA256 cabc5d6cfa61de41105f4b183cb80d90b8b3059a972209a2774d5962f56b3c2b
SHA512 07829c7b4dd34c6d37ffe2aa954dcfd24f344a5e90ab4a762ca2b7c1ad2dec6f7c1a5c431d8b67177b33ff45abffb327781726831cdc068330a1be69f076639c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b861525b1d252d02a15adac8cedb92f

MD5 594415511c04984ac95bf06831863a23
SHA1 c40143c1e6439461824291d3eb2565e4d7febfa5
SHA256 54db5486c638d02a9a876e7b0faef2a52ed8a7f3474fa950b6b1fa1be902f66c
SHA512 aa19b6a10bb2b7dbf63cbf7f0328143d1e776199a59e5d718e185a896022edaabc051f2dc96c3f34b73f6836ce1ae47d40b44728cd04a0fee2268c63d4224a10

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a3ee384db070a836f944775124efdf26

MD5 6129a7031a30ce61f437114d1ffe1088
SHA1 7acf1e016c7a72761212d1b69fbd3398f5e47b19
SHA256 41bbd813a374ffae226b8ead7df678d92fac5cfccf63d096bb49fa0eef443098
SHA512 2fa9cb6320c00e263800c7c29f1e948c6f875c857aae0c0370fc8025e6cb28432c0598f9d429f7934659346b7173433a38dbafd8c2223cb3553c02fea7364037

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0be75a716b7c73990a992444527c542

MD5 c77d8975f27de1a2f9cc5f6207435b45
SHA1 87e208e17b361af4101b6c3189843bbd35b0708b
SHA256 a403748e121614c005a3e43a72ed61061542c09f25abc7d3f6949abaab23eaac
SHA512 bb9f73acdb0f545016120e6ceb1d6d828e0a91047d870fcdeb0dc175678040ef0b654729300a81b1390b545c14b1b43da2f4d6e3ffda62fc5f6e02f91a4c4302

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a53cf1adf73a4268705313006fe2763d

MD5 60b5ba406426db2f25c9023c5127d113
SHA1 69b13965fac77a0c45a0812dae0610f27274bf9e
SHA256 64eb6f3ca9ff393f966e63b51efe3713405e58c07d151f320e7e2e81c261e75c
SHA512 5bb6fa4f026cdabbed81cc77daa48ec30ec2aff776992f43c60839f16cddb6763d9c17b41081e10b83d60b00312a95c5cbbd9d8162ceaeed09abe126cfb20ad8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b192ccb080f4e0b1fe81ad8d20a44b96

MD5 6db072eb6dbd8d74e6ce3aa9903002a5
SHA1 a774c42050203606f3641d03e9a059b48a33828a
SHA256 641864647a907fe22ed50ddc214f39200f4f62c8cc392b5fe3606a5b94bf4bbe
SHA512 811bf46ba8ed1fb1b020b4a71fc06632bbb9c1176452f6f612155f5306147f971fd765bdc25dc817cc5cb1a523f0cd1e01bec23bcd0165d33d7ebe472703ef03

C:\Users\Admin\AppData\Local\Temp\Roblox\http\26ff072de5a7837a15b1c7dac962d6bb

MD5 46f54b1584d2ae2a9036d0d250631e8f
SHA1 426b16c5e4ef87f9fcce6c0287f16c787ccefa5f
SHA256 ed8ca40659ae55192f7ee984881a309d810618c96196fdb472755108014672ce
SHA512 50e1a30f37ce9c10d2995f3383ed98cb419742e3422eb2d21aa78ded84154f84ee8e883bc8397dadd5137f4f7b3c945688aca272794ac45db18d66350485931f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1714423a717ccf1ab92653c5216f7942

MD5 a13ab709f62b96164860448cb18715a8
SHA1 dca4dcf3ff22b8c7d4a6e89d0a0673d1e9546b65
SHA256 f71e3d16ee49642fff486775536442cb3d30ded8fb29292db48e1024ad5c55b1
SHA512 0452bd52897dca7ef72d7a0e436dab87c779143b4331d6b27708407fb3702a642db8a8d8cc3edadf3d9c43cc2dcff5e25cd7547c5db3b694ec88a30c867d78bf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\59dd0e071775e3dd64085028bb74a4f3

MD5 b54aaaf80b82c880aff035d5bd38c05c
SHA1 e0e0296952908c28f7001f4fbbdfa4e32753774e
SHA256 ccf81eaeafb9dc7f11c2fb49fd9d94b65c33f24543f42026315aba78a816bb3b
SHA512 640b19bfb24c689f93ef15c558905784c470ccad84bbb36739b69c26f32a0095f74a2b8f98e0354ce3aeb78dc81198cc15ef8378d3b0b93354f8ead9e290c4dd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\75b65158744b4825ae253dd50eb9c926

MD5 41a558e6e4eee1413f1252fbe465621e
SHA1 c395a74557588dec36906f7316d5ea823cf782cf
SHA256 a44e9ebadf4e418aaf08b2a6c2b1676e86e5ebc9b8e4acfe126eb56076eeca62
SHA512 7405fd344d6273bfa5891ee87f21b2c6a784a635dc34ab25ac439fc010cd36ff4d0d9ce8e808c9d52f82cd9687a2699da8e29e60896bc388877bf703c26924a3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3d6faa9a137db91687797c80cd697502

MD5 18ff45e8615a4e2929f21f458206edc4
SHA1 5fd2b1cbb08095ee1166292c869ff27e43b44425
SHA256 df923db444b03645e5763d93b9c490b0fb4178a1df0da85c1d9a1aca2bddac37
SHA512 7bdc0d6d26afec67f4084759e675c611afae7c5e27f3d24f38b3ab5b2b869d34a788d0168ae7b6f36c3744dbd190fe1829f38d293a61f11282804a9aabce9966

C:\Users\Admin\AppData\Local\Temp\Roblox\http\01eae8c4c957f8f4a50b8e913ef210c3

MD5 7ea62db988162abc9168054d44f31243
SHA1 f4ebd161a6ee138370b92d8eebd4786e36f4ed25
SHA256 a3ccf13fdb872c76cdf54b22f4d5ed9b272a82749367f975851f9be37ec13ecb
SHA512 02010cb3e016db622ea34ec78b688935971eb586f3fd30c29a145d3eb894f7cbd1b61f46f1ced33533fc12ebea31708fa4924ac5b87cde0dc82052f16e92a2ca

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d283aac4570666e6e4d5bac2bbc9dfe

MD5 a77e37f7b0f3e26f1ca4cd0b68cfcd33
SHA1 bec85b1f1d57688d3a7882e290680259bfe96226
SHA256 9785741aae3e6925fe3a27cb59c69c58fa8d6966885eebdaba62b6df48539efa
SHA512 8475f77ad4fdd81050dc1476d9c1a80829d0b7f249f44a416121591526ed8edc88d66ac0cdc3df9a80ab44dd87ac297e483b6f5bec99e289c630a205009ebfc3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\89b41c31dbe93fa48b08d202a7da1417

MD5 48d53c5efe4539e912984c3b024720aa
SHA1 a523cfe1603e8fbc6fd74833efd2d84f0802c4fb
SHA256 0f25d5b860fe1f72d2b421c3ed2bbf8a335a45e58768814059757fd74adcf953
SHA512 37287cada8a63470415a17537c02359950096c27df554ed100e38b0c7a815d0f91078d0ab38272cf9c9f9530690fc7ecd7bd7d11b0dd1875ec566fafd7e563fa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2e5e47c3d9cba4042580de66bbbd5f4e

MD5 fe945525c84edc1acc1bfac6635b118d
SHA1 dbda737d498c286e30cff75b9efc22411aed7cbc
SHA256 f778f97398d72866437a7ceaf33715a81a2b92273d023a281529f6632f943df0
SHA512 b9092a08c8913c552bc59551f2543d42fecfeaa018f7805f2afc10536761e91b36540a2c7dc5ea8549f331b4cb2a558279a205af325f884d16bc67d7f3f3c5ed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f6b148909109dd85aa003af8a35e3413

MD5 81106a32f8e4dde99f7298af42b8bbbd
SHA1 3aa18ea83559bb0deb3a5ee3585b9c0508f88bb5
SHA256 50cc83a8c8fe9e3148b70028861f510905c5065240cd207fee59ca9768fd70d8
SHA512 ff211d63ab2852aec65f0b976a27263dc165922093ddb26c1fb84435e620c3d582750cd1230df8bda09ce3e054ef5b1280fba07a7e95ae0a1fe8d4f0c58aa7dc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e2472982042e74309bbb1aface51b558

MD5 2bfce4842ac478869b5ea058fc505bc5
SHA1 2656af4cbec255465000f4847c26ec10afc23977
SHA256 cf760b1e3334f82b16b8e80d0a97268184d2f95fee67d167f94d09cb8969e126
SHA512 2901a6be2a2f31f9b57ef215bdffd490d1d1d026c0c446b30adb1a8d06f04f34765a6fd0ce9a03bf4bc1de54e2825f6d71c0c4a371ac378e8c58271c85b82c11

C:\Users\Admin\AppData\Local\Temp\Roblox\http\651bc3fdc4656edf847879ed5b6afe85

MD5 c85bb0e8bbe6d9c81c43074fe709899f
SHA1 6b8432b62ad75332e1df3f665264b21d05508f8d
SHA256 20745852a8c2f8c48be66af5e8a5392577ddc46d7e1b96f1806d62ebe60dc5b3
SHA512 5c98b1863474a26e76d40174f919f85cdd0d2f0b92f2d5277d56536ae7b938cacaf34b1576ed4811d673621aadfb1626d6d5a74672333e76744ed642c05edd09

C:\Users\Admin\AppData\Local\Temp\Roblox\http\19055f7cdd2ece34888f693128d4a4d1

MD5 0d1c25821b17953c8d6248b1dfbbe96a
SHA1 1e88bba6b46e51300312be99013a1b44a305fcfb
SHA256 707786d46f5ab52138fabe96a7ae1cbcfaa5e61b995559295b49a346adf12da0
SHA512 c22b950f1b87e212c6947fbdf432fcb2ad24dee08f1da49e8bcb2cb5353cb704f86ad4d72734ade1275ef771e3c903d7e6e6f10965b6d71575b15979f6af1920

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d3abb290d36a519a6c5dbc8db5117c7

MD5 ebb58794216ceca3af8a25d383720a28
SHA1 50c568e03d99bced27f5133a204acc978be3c4b7
SHA256 6ea95386e171636ba7099f42ea1cdf965283d90faea776ffdbb787bc495f7f81
SHA512 11272eeebc2fca596d07184d006abc4d02a59c9a77694e3cd88b259295853ca943fc429b1476244fa2c7036bc179820339d09f02147b96fe8e1351b6dae7a524

C:\Users\Admin\AppData\Local\Temp\Roblox\http\72cbe120ab8db1dc5b0d1c401d505684

MD5 14c29e8df3f86f8125b57bbb2af40d60
SHA1 8da5d1ff7faa28b64169fb1cf96c5a02d3bbbe97
SHA256 cd696decd30c28f3b049cbe49539b8f623fb7ebd110eadd9906ed8600b76cf3f
SHA512 60fffeaf1b8ca88f84e9c4f148c4f9e81e14b09f1816015e30853f16274210a7134774a143346bbe030b47fb7b8d122f116d0f89171b9828085eb1bd89c55b6c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a910d833f8759368e2955025c4cc9920

MD5 794ef191233d3bbe211e66f64af5684d
SHA1 78c21e33495fde67e2ade4c5f15afe99b195b4a1
SHA256 eba9b671f79b2652c0f155dadc609d49a01518611e4d90bc230d1139e262675f
SHA512 edcc0fbee4978210e39c38759b36301389e2f0a0ce4e480f512457af7e4e3aa158a3b3dc9dc156a4433524968fbdae785d844790b24f4ea79ecd8f8cc353215e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc9aae890e352e50343ae472b2141005

MD5 ed64f6ec40c00588f89c3eecdd10163d
SHA1 cdeb494e6ea1e679c926f89182d152b11f5842bb
SHA256 e4b0186dd72045a0bcf2254fe6c5f8c804ab1d5adf729bb4edcc436258a207cc
SHA512 ba1288ed3f6d3319ce7d37cea15f3f0dbf6b3ada0593e65af9b6cbed2c0c79c33c994d0dfbeab54dc511ab48b12329e80b9bb29135e9eb10f96c536029b1dc2e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3891c37444d7cb78ce9833f5a34b3e33

MD5 5c3a6b8583b7b94de09c5ef23247a40f
SHA1 ae5f55d5b0ddce64f6cb10ba1dcbfdb5bae6de6b
SHA256 5f8c8c200771bdf43e3f3f26f1020f63a052b214b79a685315d373dace181b81
SHA512 21b2db7b4eda260190c37e897774971873174d54cb5686072659e8f3bec2f4ef9d35876728f37be8a65b8d2a1904f13cf3c7d07bbe73da4b51b79579228ab561

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4ca54d10d5f2579654f5b21aeeb5c790

MD5 0dd71a112fda0fc9a44c9dd3576ec84e
SHA1 9c4d8a5ce23a03e3101f0f2edea742b7d452c72d
SHA256 d10f45628288695d95af2690e3a0e29c73c99829e0b8555836cdbf14e9231fd2
SHA512 5464c5d5bb51e5f5141c2486b7de88dfd10c27eb3e028b358d22c9e382ee7ffedd78bb4be1ab018fa242e4208ed733035f9e624d0c850fc55c2ee68fb41acd2c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\11695da29356786c643b6a9c912741af

MD5 b62c6ce947f3a577140e98b1f4d80bac
SHA1 4d1ad9136d250767b683dce4bfbfa621c170384d
SHA256 fb8bca04fa43d4422319d89de0e7ca9fb8a608a08a943c37a3fe924816749ffc
SHA512 bf2b8e580a3960d637c1510c658a29e59cc04d6f1647ba0fa4ab10d28dd9ae63ab070c175ab9e9a5bf50d5a51ab3173b27a44ae48d74879411969f3515bae2ec

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f75ef358025a97a1c84fc111a9cc680a

MD5 007ea50f06963b9ccc7ca726b9ce2d63
SHA1 2852f043f3bf4c9594756763ba405124b7ccb12f
SHA256 134cd9a508e4d07c49237b8eedcfed1866fe654cf6c7ddde798627d579217fcd
SHA512 f243dd33f1c1b71818f7b7dccd5a68a68e556a884eeaeea059d941d750557d050de12f250a88d53006e8ef0eb61bf40cc0fcad4bc8d2c03aad014e8f5c71ac73

C:\Users\Admin\AppData\Local\Temp\Roblox\http\856d17675a6d72e37e34f4fd33f6a512

MD5 a6c88c52554888dfa7d7bb5ddbc5f270
SHA1 c666237b961de1b6f72cc0ac6f2e6d581686d7d0
SHA256 f7c721dbd633754d332cb0547b72e9571f401041436e476f057fbaf195d3bef5
SHA512 b153720f385d599fc31bc1056dfa5d49b9b8e25d566bd27946abef52ae9fbe4ca40fb86c0c5ad47c0dc59ffe96e58e3f2f4448940e3f21dcc63e495a9301cb56

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f58c1dd3d93cb8498e44fa1fdf6de6c3

MD5 a11d047cfee997e5efdbe167302903a2
SHA1 47061837e0c5c3f292335893831b9b4aa9e9dc95
SHA256 4059c012c88e3c1e7ff4e4d5c0cdd0ba0861ddc0e9fafe09b850e1decae2900d
SHA512 344c0ad0e927e112a09498c4213d59327a35682e72605da1bbdb762c1afd15a1b46fe8cb2cd06951c459df4dbfdac72e0a91bc10312b0f2d5569b1826fff2e8b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\00909264c9be94c3866acf864ff95098

MD5 72d2197343d3b23756adc9376b632c53
SHA1 d4df976d34c311f497d101b547509b6bec1a707c
SHA256 012a7620b67e312183e68343df4894590c9d084d83db97d1cd5c410592852de9
SHA512 89f4b4a16181cad272454a6865684b40f2f3b53db5c49e1056e1283227a7225635fa3bce83c11b7321997c7584464137092815064a8c59bf66da472a6b1c4ae0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849

MD5 7342a963fbe8b3a5bce98391f7c91497
SHA1 d937946afb025eb344dac220aa2d8d3494c759af
SHA256 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd
SHA512 fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4236da697af790bd058153e31a25d382

MD5 5e24843180b21359eafd68f292e8e6ac
SHA1 7ebcda1f14a12ef9affaa7fe3d33654a2c247a10
SHA256 1a1e69f786b2b1c22e37c882db4e157f90b955589c7e5c1434d6884a71cc4c54
SHA512 c25d06e555b516f997271f7368f49a12e9120702d0d5a08e494381636602102cebfe90a0ac0970c6e746b081dc97ffe6aa3f4ff66077072dab19000e1afe018a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5fa00ec3731ae9117f079b4799d6cbcd

MD5 61e1573e05b5d1454274acdc99114b2c
SHA1 4d38d0500e5282bd7b5835a1a1e322bf68da443f
SHA256 04457d4e163412caa0f42fd459a0b93d6a299568ce376420c51fc7339b6dabfe
SHA512 c8e0bab0cfe3d191e29d327bf723e2c28546aa4fed5336a473c7ca8f52a56265efcd77ac4f7fd5fecc875e06cc927ebf12ab35a16e0016450df0317c4c9a9ab6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3b3f1b5c8afcd651834250af3aa17d4f

MD5 29aba75e4e0e32d5e111bde6f950d099
SHA1 a1d83af5bc91e99a09dc76e2a8758d7dd3f87b95
SHA256 e0cfddce7495a9d9cdce7845c5912bd24e453318d55612a4548bde58721bd841
SHA512 c0456ff2f70e94f699724eef7f720cd16f8cd2586d8964dc16ffccbd7e465719582942b805110d368110984b2978b2334eab547a40638f15779d9202507b2bac

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6f2f8eef3bb2d049849f2733e6ecb031

MD5 efb15de15901530e52f0bb5822bd4025
SHA1 4c9d9dab5741581d34867d14f6db5f4b679dd1df
SHA256 d43a25fa14f7a67097c8a8ba0b42e746d8a9e4335c68ff51100aa4c427737d19
SHA512 d63da70c4608e52af8f5cb29fb7bf3e9ed7c9d9a17b349c5eaa4c0da4556c0e75f1803586133adf1066bd74fa013d3ccbf308199022946725e61b64cceb35965

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5980c9641eb1d0357e095cddbf13a046

MD5 54ea7560c0a74104b423d9b6d939f034
SHA1 11a0a7b7a422184d6efad322d6ee4cba2e5700ea
SHA256 69250c0c17197c0470ace89b6b8002851f035b9fdd13d764e62091d12bd86c9e
SHA512 ed3cab035c1acd562363c5f31d55875fcd9f2dc98975a70cca9dcf0a387783b9e85e97d5bd1ddffe47387e5c66852b9a8a0aeaa31ca557fa2b3798657932088c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9791591b9248cd54c32da627f23b583f

MD5 b1f1d15e4b5b4b3e6587c9d71a277274
SHA1 9633914d4e04e9fefb329112b00d39a1954bc1bd
SHA256 1f8efb0fb72559a6b14478d2f34d65b523ef326ec2974191ff585e72ae797c50
SHA512 4c3b023d7522bc46c12f124327eabc3dbad87fa299e4e8dac888d1f4c430f983b0aea55e33a2e02978025f7d562d86ef066d91c3548fa502b023887d3c67e16c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\40b60da8968dc05b6111859396c860d9

MD5 edc97112b55dad074bae20d6bcf33e4f
SHA1 9c581b864323c975d36f10ed4dbf619bd1d35c5f
SHA256 f2584bc3df293fccbe301bd8491dd2385a1a43b66ed25ecad1e7a8d04d83d9c3
SHA512 f6e2d9942126379a16d90ee9a92e1ffbb32db13024d694ca95db8fc12c74471eed86d3d232faddfbcde47c1ef27df85259176376a37103072a37e9bf01912637

C:\Users\Admin\AppData\Local\Temp\Roblox\http\374b2c6c69b63ff3a8750fa96de75058

MD5 29105938a972c8fe4687cafd00823295
SHA1 ff9e17642d58eb08dcef5c6e06b835ba9ad6f167
SHA256 8ea5b20288eac220ecfcb95b09d26c70362fc225a871d22f78b0b9565a5cba7e
SHA512 f9cb42506f90065c51462b1d60a5187651cf6abd2fbdcec14121749b2b9e3154330c3c43358de65700208789becbe8a85c60a735afee4322913760c487dea772

C:\Users\Admin\AppData\Local\Temp\Roblox\http\72f4f02d578f1ed1373b71798ff44a02

MD5 9bab3bc9e5ab031d8322abac3a189b48
SHA1 6b1dcccb376fa2ea04f6afa3bd1cccd7d4907011
SHA256 fd155452ad24cff5c4f9aa7e9f6c09549e409f54c2b033bc14ec75986fbcded6
SHA512 a42b6483172df7ee439bc74016fe57781355e3495213f52d18af7f39cc56945c216502a9de0c8107b1de787f4eb20afa822450e601a20cee8dae0502f7e8cff3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1135cbcc74aa168d3992ed8ab748e124

MD5 c9540abbf881ff987a9f4e496528d020
SHA1 b3d22ae2605bfc976fc42128c4509901d927e1b2
SHA256 a22fc25db8252152d1cb7e07d1bf7e5de47e1d00e70b729b49ac9f94e6fdb2da
SHA512 a587ccab901b632ebf9763acd157b66742132b9dfb67ed6239796be507c4f76b0470dabd4c41429d1814317cd2bf852e9d0e798ad685850dd5d37de3b1f9306f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\de9837ce3bfd03c0542b5d09f2816a25

MD5 3cddfa5065e4d7a4313b5a2699410323
SHA1 683135ce5f6ad488250b00f107999d1e5831f5d8
SHA256 2bae931356d7d2f35ebb18cd03acba9172047dbfd9b220b0b8fb9fa93cf6edca
SHA512 3e4151be4938a2757e6e9e4f3f54862bde72534f1e547f09d45596f48876a926fd8cc52125c125df3bc9c461595e6faa39b56ff464524519ece87844d9a391bb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\001bb9eb8e1494affad1a50e43c8c3c9

MD5 355063dec8a3eec2a49edf8945e8ce58
SHA1 797370427188744d7e62a0ad3db74e009ebb49aa
SHA256 a83e7800acb7a11fa111bf7400c1a2762022615737f19acc89bc8dc2d907ee8f
SHA512 b63ba388ffeb3c7f6db99d00cac0c8279774995757ba3f87f21072692792079d1141589c0cf022354b7e06d66d4be9cd51d8293fc0daa53660982e0a21ae029d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\182ee01918a28b544fa99f5ed2990f07

MD5 774082b85c8035a01ac804b7c007dc12
SHA1 864fdfacd9bc667b0e2278b0abf2c20cce815e3c
SHA256 9a0242bf0634e9fb76c58e2b2235f2e8faf5198b50483983b3de5fe7471c5e3a
SHA512 d38bbf5ffb62bde8f31715bf24cffecdc3cf3ee4489d6ff5fe7d3381db06ab6652f8795bb51c7b2192ea29bd6355fb4bdae1194532c307d8865f02dd62d11dfd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX05100F3AD5C04F4EB1FCEE2FAFD64551

MD5 f5696211033f6ebbbc4384739d505d68
SHA1 be68f1a440ef125f2b4763378cc79f42d10d5aab
SHA256 8820d58f00186cc8a0b12ba103efe022d9acd9de1b44b3f057cb01e61885a910
SHA512 3b2e179900e2c69e5d944de49df36018b6207293c45864695520086d48eb4364fee9b707ee993deac34fdd797b2a0a15ba1c24982e614393d41170ac1b30d2d4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\30a3a99467a97f92f7a6501a97f2ef86

MD5 fbd323164b524770b1cd80ec5a32661c
SHA1 e0be0dc70259fa3d82ff269a7a1d7f2b307b6d2a
SHA256 ced1fb97dd64590401268b297bcb5ef14af73f45e9dc2e7fe15d1186c54fa8ad
SHA512 795dd0fe16de0962087be4c7e6999683aa875303422613f99e8874d2e262781b07f4460f89dafa08a3ad6ce8fe17ff9965d81cd62b3d228c59b903f26607a185

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed

MD5 808cb55c51b6fc55fa6cdb17892dc876
SHA1 4487b86a3a42ff05e109800b1827c100390245c0
SHA256 eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d
SHA512 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\70c6985c96eda5892f7844ae12f01007

MD5 f9449e6e3930740e18433f7208861dc3
SHA1 81807fcb63e8037804262c886b5d3e8587fd16d8
SHA256 6cc569e6b8a878c96f8e537ccfed781a03e5a00fcc2bb6de349ac1f1e63e2ace
SHA512 1f010614c7a1882783b965a08d907d9c71e147acc365128e50380864bb582839a41fa05dfa0ba99cc23615b12e15b9018fe4bbd8a170dee1614ece732486e49c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\978c2478dc7043a66abbc1fcad480a63

MD5 aa74f13aa30cd6002a8d179484f83df2
SHA1 c9b83234c9d72099282892a948f790612c376c17
SHA256 b6f2707fce2a4c323b1ea7372f9c42cece1a3e4d6278d40a1f01b7ac5ac9fe1b
SHA512 e0f6f9e4e0e4cd003292a1ba75ec6aadeb5d8ee3b68d5e0267af46749fb7789b9ab3dab6ba1f3efed37de65d035fd4d04dffbd93cae525ffde6277f8a8c2db1d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be698f40d8a545dcaa98f53f7d4dccf0

MD5 c41f6d52e5373d843f9c7731504a908f
SHA1 2dbcf9fec2647ad8754aa32b572a9d1f3b33c7db
SHA256 6d60e5462482191db879dd6c8bbfad4c8958302f7522206652670eec41054c26
SHA512 eec380e769dd93b52760f1f721b006e2a66f068c49ce3081062ccc7cabece6aa9ccf5658d9b6206d3acd9641642327f5fa91ba048d5d502c44b79c4ad8e49aec

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d40d36924d3799e150516368898fb62

MD5 0fbd0f2df1fbe5c786ef68900ed13004
SHA1 0060513d1ca677da93ede81f1f256ced4ecefca9
SHA256 50d059799d24999ffdb97cceca9af52402722a2a02600f8eed0650e2fb502354
SHA512 8ffb88ca666bed68bbae2b7b4a90a8b5c0851c9c41397e95fca22ea3bab42bb2df1e448df9ced134be0a139c458998ce8e47ad4b920f4f818c7b40e8b7913d97

C:\Users\Admin\AppData\Local\Temp\Roblox\http\03c68ca992a675bf0928260feaedbe8e

MD5 44e57acee3cc74ebb464310a10e672b0
SHA1 a1a6b3f75157f137da2fba56988db210f02094bf
SHA256 821c03614094db95bc6cb3a0efc1b1dc941b2516f7115c3af6ba23dbcb04e9ed
SHA512 029ebb41d5ad7134eaab611b551ed4cf3d6f518c22a7c906731f0191c7598def1898fc9f34622dcf8bd2695d36e6d9b476e7d8a18df55b997d844425d5461df0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6cb1981018bc5e8d0ad3be7ea1daa4ff

MD5 cc3a6bd21998b9c6e66fdb0d98dd235a
SHA1 deb7cc6bfb089fa58e80e040fd44d4f8c7880066
SHA256 20f3a7e264f78281fe9c3ae9d40f4acdf36508563da95c5611fa222e6f990d24
SHA512 0b8629456f36da406741ffe85832669c14755163887f3b6df9c4565e5ccbd50e4edf4235bd6e5b643d38355ac99efdec797fd842186d27cd42e3a4193be18128

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0886a3ac76fe10a7b667bcefec4bb362

MD5 505baeb46fbf5b2e30a3d90843227dcf
SHA1 664f3e98f6e7af53788a8c6cb7f80de4430f29ed
SHA256 f52fa427571651fcb4e355c366b4a2b34ded6d2943c3cf96a0948fdf08cbde12
SHA512 378009c75ab1eeeebe9dce7f192ddd309fbd1f97354e38fd5c769f64eb9bdeb7003b4fbe5c35840945c3a086824ed3787f1e66a862dffc1562b7003e10d0a83f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f184a5004549c3ff189ec40a5ad2bca2

MD5 5d5c39b58cbbfa7fc209799c8079b28a
SHA1 707241f86f252ccf4a744f291e4ea4ed9205ce77
SHA256 ea8de38252b1125f5aa2160279a183d477083f4ac9df4757a7d718bcd8e3066b
SHA512 4c99e34aea0fa6e9c0700aec6a49a9328ebc4060b413acb38818fb49faf6e6c6de9639efec714de9a8026babb59dbad5211e25d65dc2a5c6cd611d2a0621498e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbeca67a0665ae2bb164d90ee8160fe1

MD5 a35def95f60bbdf981fc811e40c12a86
SHA1 b120667d4d55bfd90f17037a68f6dcbe0359a67e
SHA256 85121fe7f4586c2cca548ae9ea0ab76df017c0489da86f2d43e1f367402b1ee9
SHA512 a31814e35c5ce5e20332614e267afc78b36d4ec83df4d8d6185c4cba837440a998f2890ab27f110ab006f2b3baa28e9487399e10f32820c52f9ab47b09d9ea9a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0cd0725ce628c802aea646becfd46a5

MD5 b7c03229a5a8d6586e4532281bf1bcf6
SHA1 e2cf4dcb1a5ed9ec90882b05fd92a1cb2d9b7031
SHA256 2f68626defe72fe2f0f653e4f329dc40a4da28ec0b6805b7e372df74503490e4
SHA512 4b33587bd1e348c0c3c90ab22556c1a1634c9c16a7986d5ca92cf409a6bc9a2d4ef6ff29f1c56fbaeea7ea42b9e6bcac980f3a13869c7321dfa94b3d4c68498b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d037793126f8c0f73ffa0ef15b3fbdb2

MD5 eca94f0121a88e999a541f12a9f19ed8
SHA1 ca4842f8b5b7ce6b010b14ac7615a37f4e8eccc0
SHA256 25f69dc787882fdd0c3806bcf4127f2cb8759fed38f3d35b964f2dd3ae91551f
SHA512 e7ee1e03cecea48add2ccd2cb74f205063c43bedd49d1135ea45da5e9bc138bce689de92f25dfb67b10cdccd2ee0f5ba3386dcc568c7fd1d2a526b1de7e22c1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ebfbf1d5a524626307a4be8a205afbf7

MD5 008bd9e6bf85e71c74d6334e70b21c70
SHA1 e3e77fb6fa38026435c2a4274e75ba4f0640eee1
SHA256 b36c294031fceede537d76bc737a1aeeaeb7f34c4b13f96c4864767c386fe918
SHA512 2b430b5ea89a88401d77663fd89f408af8dd5efdfe953f4b38aba4f47f7512fdce97cba5f8b89db5984441d9a18fb612a8b66958a674738da8f82cf2ff994d69

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b6e15c3f2f2e506a7da13ddbd4c8b068

MD5 389c96f42d1e2463adb4819d92e9b7ba
SHA1 a6c21d603126c5faab5339e456898080f6c2f7af
SHA256 e40dbf8dd9e9909507f30d7b33a890fa5acdc953de89d2aafe569a6ac0531d57
SHA512 a092a1973141ea3d8105a1a4b7d87d9730843b57360178c5c09a3c1baa4a2e278b84e5229cb8538a66dbf5f46a4034227a3e62944738af921c1a6a6ea98d8bf8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\27d0d0c685dcf98940d3a4bf6563f753

MD5 29ef861777ba73d7eb42731faf81634b
SHA1 e019980ebede3d5f8b427a265a027e0dc1c6117e
SHA256 c3b7f4ec724ab34558b5b3da7851fcb2314a74c06c47741811afbdad699f33f9
SHA512 8d9b14324c676f7665ad203e8b0f55f86f41df63eec297f283115affc9e8405b1083f8c0cb57ccf19df2e251cc3e036430b343da5abf692f272c9a7278c3a51d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\53de67f464e60344c09bf888ae385af1

MD5 0c9f8871ec461e19939af0ca1496c34c
SHA1 ef474c03ae416d943318a6b25a80d6fa1e07e172
SHA256 e7f4918fd3e151e7d85943377c0e5083ffdeed5342d9e64a83c609ad7e6e27e5
SHA512 0458c1361a93f31def41846b012bd976d58d608735b7bc702061bd8b645051c9869e9e8131c66f3b6436176dcd9da73217f025790f83ea0a2a626a0864135a00

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ada6af400b11d1a135a735cf4734e898

MD5 2f69e27d7f38c2f563f8734b1befdcbb
SHA1 5c5648ed2bf745918f0ddde7b349d09e43875241
SHA256 c6e66bda60e250acb4344194180ef4bf661cf3e272292d16207206a576086f2e
SHA512 c749bfe445c2e2b801550462b0aa1f8048c62310d90839466361390fbf35fed16bf07e9c5c906fe03aa4042067e3870edc7d1ad75500efa9dc43d7a35f3dc0a5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc3ad132dacfa9ce4a937445447d42fc

MD5 980a23b69316ac6cfbcd199a10344451
SHA1 faffe45bdb79b96ec59bff318e2880cc8acf83a0
SHA256 627744c6b0baa8472b26f549ebf7534fd1e1406af6a1ac7d642b09e40ec258fb
SHA512 8adc28315328e762f2a7de418a6a7defbfecc884bec60eb466aaf094d025acaf61b789f866453589b2bebfeb4a1914b106a09199e4b33228d373cbc1fb118525

C:\Users\Admin\AppData\Local\Temp\Roblox\http\43f78d28b4b04abc57bd0731090e04cc

MD5 5534709b5eb8e91f578101ee5e04694a
SHA1 dfc4e8b1b2dde730b74a3642ed2d197a57468cc5
SHA256 ecebf0618efdefeb25498afa3976382f1503b9c817f439c910cb39e622f15682
SHA512 b4c784f2d5ffc84d9f6c9253bab30b12110ff9db9dffdbb1ece121c41bd173b192463c60fcaa9d4efe092fff6b922d71a69ffbb3c4b78a03c56375d1d2af96f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8226a965c9af5aae83fb50f4ea75cd32

MD5 5bc05175f24861fa8d756c3a433873b2
SHA1 a815675f3770f1aee3643dd4334d400caf85f6e4
SHA256 7d2319995cff21eab461034f01d894c9fc64231ebc9aa4af363ffaab1634777f
SHA512 7688314fc935e3080bb9a315378343d7955a5e168a6f67662d771f59a694b5fb9b99a9955282c1b2dce09e5feaf5fb0da6d96341a4c60b6e3ffe9a05a26bcf43

C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e68e7507c9a3f6a728687a53b6e629

MD5 1d4696897c95b702690492b15fc4efcc
SHA1 20df6eb1dad22c8ed4c18e93eea58bce9b0ba5db
SHA256 09e5d656a9749a8861515f7d185654d351fd73ff3d038a6a05d07e051d2e0c74
SHA512 9c492d8ddb357ece518adeffa66f1490680758a3e2a2e45100877e6a3390e2bcfe0d0698a188c03046bd90bfb43b7e5fe9d22a1fd298e58c37697214551fb520

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5fb2f45401b75c496b0c37939473ce5d

MD5 94af67c473454083886cec7785952d1e
SHA1 82b7a6066d0c3c6eb5fe3c26caf771ae5035b636
SHA256 d4183d6bf2f3ae55b3c7168d5514a355307957e6868e47b42d6ffd679e277439
SHA512 189da23924cb3517cbf87b55959d64e7233c2a205124787363a1d8b87967f3a16c8031eb3e2afcbc886c67f17430f36f50a238d9bbf163a00b55b9c369901804

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5abafd9ff326849eaefb551e7350d5b

MD5 f2af62e217d803cd1f95cef14239fb26
SHA1 18eee29b523bdd92dba5b8e6c088feb7cdc65926
SHA256 c6d2cf97f693b073c84f7dc698f831fad3aa03d241b783ed251ad3f1a54d05c4
SHA512 2c21deb9c15802500067d769bae6899fa415798d44236c20660a5b5725559315d5586b7f7b6cf86bf575ca5b5f00fd97a4654b6febb853ed4488b7da7136a9e7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ab7c55df5f407e0cd30ec88a0f64c0f5

MD5 94ea0587c67c2508a3e3dcae6140909b
SHA1 51b67880d15a8c8264036b61434fddcb71d839b2
SHA256 6b2f9fe29e17e1b9258640c961b15ee9d408097e01329acbd39feca78cb3f1b9
SHA512 2994140d6d24a0e3e39dde1cef20313d99640d63583ca3801c25bf51a6d930c8b32e7c63b2b85953575a8313b9e8b966bc42591f0fbba7c51a66eb54f9815c93

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8e6b29b515cb2a94fedfc768edba9f91

MD5 bae5bfba203adab510534d88c0ec3bf0
SHA1 3850cd2d5056c35f1b32013e7f07ea720dc61a36
SHA256 85718b5eb2c27d6246bf22090b6c93cce669a603e2de2a0204f998bd0ec16e80
SHA512 c70d0dad2fe7b55cfb61e542d6372f2def4738c2d2229981cbf60d15749e0fcc5d123a71c9c9cd7f195cfc0c979c45e3d1272d34169b21492b6cf1f7b1f070cd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\253c2021e3d223aab532c9914bc2486f

MD5 1abfb03204d207a27ac2c005a233a118
SHA1 21574dd466e88679ebca53e6e6e3207ae9105c38
SHA256 a666e886ac6834d854c4713f287744874b4d2ebc4690a34f4f005e7a5d72806f
SHA512 be5af67c16cb52eb73f7ae0e1215410904a4f888229cee1c2348a1e3f6959faf5d99a883d6293e07e52781e54ce5850ee4bf72ba23f8c56d66dd80ea7ceaa616

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b7f79d5563deb36faed5a0ddb89ed7c

MD5 90235fb071ea7cefe9d46959de74a0c0
SHA1 7c96d8900c7e2372a16810d8183c7d036fbe1f2a
SHA256 7a08049b4d5c86cf2367883aa8dcd86e2ab2a4ad15da293d62d67d188b8908e5
SHA512 c71d7152aac4e4127e0b5719fe65ffc21aa7da97cc89087c5aacb49b7f0f25c4bb4ab431fb886a8b3b41ccb004762e36aeadeb7582dd16d4315eb4888c378acc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8a6afe004058df8c2c93fe7730419fc4

MD5 767d1d050f84f0c2ae08428d01279f42
SHA1 e27dc3c27b6ea8f5572fc86f5651288dff591829
SHA256 956a63d8bcdae2ab3d0acdfbdee4fec16194f5a6ab83e21977054ef6e2bfb902
SHA512 138fef3836255740bcedf6fa57a8963e58a8b89bc9b2e0d90b8c2869d4459c827646ce09da4063bd6742aacc818ee5e4f8e9d110b1944666c2f138a25ee7c74e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\990629caefdf3f2d7bc959264b81d433

MD5 1e9c00b3559f4838b1d0e48b4b505d2a
SHA1 01ff2de0939fb49fb6fc51958b01a787af0c5b63
SHA256 2f9fb2ba916b26b4d7891727cf6d66289bb5d2264cdac6a08e386d95671a9eea
SHA512 f210e570869fee73075d91dd16f9fcad22a2e41a979c971d2a6add91773c9f9387972459aea3135c2653eee92be8659587069bdc080509d36e17720811c77e20

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7cd29b5482f8f7f6a1fe575870be9c01
SHA1 68ef7dc67077dadef06c382374d52400f6573a4e
SHA256 6ccbe834d19ff9de7b9266129b41484a63be9fa58ec3390e905b61350d5dff0e
SHA512 b7c1c4561f4c76de5760fcc916a11a8ba6cbeec2bdcf6db43c28d97e75e63bd92bd627eea9deb0de61f0b16cbf3f29f21b2339f66761cf31cc36f26183d233cf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\82759c0b4aadea64e10588433cdb015a

MD5 f8b169bc71b92f3a1da9db6f8f5f7af6
SHA1 f3f47a97eb66b18237901aea5adfaa5934e253f3
SHA256 6e3d0a4c47724ea9922c7957458cff61a4acae75ddaf0ffba34e81ad6094a904
SHA512 1bad9a9e49e6f063e8eee6324ef197e0f66ec9b464953107b7eda2b5a912f80191ff1fa65502aa20b6ebd8cd47c9f39e0d28f8c8369caa5989fd1892758b0da6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7028a620955cf89c5963b96e3853d56b

MD5 fb5be4c71f61c6c35a81624acbab8536
SHA1 7f0fbffd1a77d3d7811811db946152f55c1b8d1a
SHA256 66a9f6e155348a8909c758fc0c1421bbcc0ce4ce87109a2c80a6a06da7e73149
SHA512 6c811676396f117268e7ce876ce1a4d7f6657ebb554cf946ec3902bd2af0150e103376515298865a959b133bd84f63e04a5ca2972b116b51ed983b00211d9c89

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4b33904502208474fe8db975dde463c2

MD5 37259c25fa870b294111d0eb7ea90a15
SHA1 ad450cdc8167a47b076af0bb30adb35bc9d0cc17
SHA256 a1ae2c2c0a8937e449b3792218b0b68eeb6540e0d5748b17af2903dabdae0192
SHA512 ee8285724666a5c8665c502bba1eb2e41a32fc921eba732831b83b1649da8d40f7c342806055bb7fc5a7d611488ad764f66be44d969feefc38baf7bdfdadd869

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5ad07209dc8f4d247d59d842969f513d

MD5 da47f84d0c7a1619f11795f4b4c48e35
SHA1 6d15c72b599509d221cab6d652d26fc569ab6714
SHA256 ba8b345e1c896c2b20107296fdeabe5297409d797d666b71861896bf69773a99
SHA512 755f3b24c36b749469d100b11789fed59a21b020868ec887709f9628ca43446b59ebfab8c466a6763dbcf3ef35df34b9c2267acf96fd20d0b06411bb4c79c6a5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\63d7abb4c507a541ce8ad142a5d0dc0c

MD5 191eccefa2359922b34e19f395af8da4
SHA1 a75144fa2bc0dd85253a6bf22c523deffce66f33
SHA256 42e13bacb7feceb386ce3d51d1ac301163bcfa581af8ed9d88eeb3b4d5f92a14
SHA512 c47044ecc9fabaec445b3e14d9875aa64fae6c6132ea3d62c382139c5e5ffe74e0dc9fc52f243018bd8b8472eb05e5d9d139ddb1d806339bbe32e0dcfbda371f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6040d243f4ab8514ec2d8b7945edd49f

MD5 6bed41dd4fe9f6f51c8d4a8ca8364335
SHA1 1cf02aa77036ec5132aa843727eb195c62771fdb
SHA256 fb91c1837a8dc0be87615a969330ff1759b841df29ebf7f30f547405c5f5062d
SHA512 8859e29252fc2b244a777de28b10571ac79b961d7f205ee66dd547386a9bd3ca2c033bd0fe278bb1dd45499bd414eb42eea631aae32dd37b2783696bf7926617

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b77b65c183155924d462d7dd5a2d19ba

MD5 a3f73742c043fffa1031b3d6fc6f6507
SHA1 5a8183529767d1cfb84a2098fda024e74e75e5fd
SHA256 c90b4343e85e98288471dc1f9ffd87d67ea565d9f9d217c0772babaacbedba0a
SHA512 4b5d7c496d1b63d1d2dfc7c1b02461c79d42b823da16c0443c362c7df79c4e339a8de6e48d8da9cd2c568b3b005ec464e241e0eeb88f71d5139dbfc721422ec8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a37f84537126d484607d1a1b050d8059

MD5 a579a54abae37e988709aedce5de0ea6
SHA1 90e44095ad5e5f71bda29b9ae29631c28027a724
SHA256 c172a7965096ba2fbc75377eee557cda2eaeaaff11f148621640e2b19cf7fcdd
SHA512 d1586cd2d3b77a03920d66e8bc0775b1b72637a9c4b8e4dd8344d5383bb91a89a45f30affe232c1110570f0de26e77ba985ce8299f2fdd970542975fc0c386ed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ea052f280ec2b34c02fe8bd5f5fa420b

MD5 6f6e11f7655c8a1bb7737ee180dbad1c
SHA1 d9052fa1d6da963781130ec6f6f1c27c3f2d3d76
SHA256 cec8bfaaa00a99a6fa3f8c54a07c157fb13d7493ed3346a205f84ab51da11aca
SHA512 e5692067f368c2b48818b144abd0ec20b946908352e181896c5732b52d078396647328d88c222ca58b46a65e8fb54fa2f9d29f2312539333f1e050e0e7619561

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d252749c493839768b508b0213086515

MD5 1153ed6d0cdc8f97774112e624189186
SHA1 60de97b200468b2199928045e5da9e6c5b0af18c
SHA256 a7b8c27a03d933867ae17fe915cc8361a2bb83f2b650480c698518b8c64b032c
SHA512 80c3f2e5c2e1888b4bc50d5f468d864c5eea11182c7ae419cca47433b911c210e887526c4d36a044974d1a5d46845e6858bf400d584bad5c9f548bf463c26725

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7d47f33e80d4df6db5c2df3167bcec5b

MD5 5ab59961f00668fa2b6bea31bab29112
SHA1 f66905a891bbf0bb6d9b1845982884e9b724a768
SHA256 b08f047cc2b45010fd7ac657e6e181f39af2193e3bada51d11940ce67be0ffb1
SHA512 c7cbd0e34c768eb7b2edf98983a93d18440cd7b7c2d7d06fc99eb638e7197c8936330926d0b4f79728b1206dc939eeac8f1a29d1b14d5796a243b1c1be59d7c1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aecfd827995adfe5c7a03ebe776d1f47

MD5 64cd5a53a0dc337cb978b26fe1167b04
SHA1 262a3aa44b06ebc395fbe565e687ff9b0e842aae
SHA256 a5cd5d0fc1be39fbc6da24cc882f942d6ea82766068385c7b8cbc7cbb967adbc
SHA512 127c9fa960620b3268991049f7d609ae563e5d43c44991f59376478ed49210652b8c1b5acd6b5efbd984974d4ea024907a5edf2271e60513bcc203485503b8fe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\03e96aad1fd37e77ba53bf23f9a02ffb

MD5 db177913fb4bd03b4faba11a68499a5e
SHA1 58d4962087ce4d8f5b247c70ac4b1a62fc04e638
SHA256 4b09ab03c182903d64b34cc1bc5ecca02c7ae423c0b7ef36e08dceea80a07350
SHA512 b86726e10e6a1620e51568ac2665a1e73baf89893a8f4f358f9e1ebfc7b5bb21fdf6f31ff7f4699c123dcd5ee2f4c9db51cbc2d3297d78b55768aa046cc9fc8e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c9e6cdeba5ee5d0532aff3dc7bd3ad3

MD5 7e58f4d772391684d2ad23b43c1489b9
SHA1 7d455c903408f0ec3fec45ceafc1ae68c517bb94
SHA256 40f7d75d2a27bad9ab62481e9418f1ed0749a6528ecee7ae43fcf2124abe2f77
SHA512 af56a7e4cc8876d1aeaeb17b8904a95ce6c03be070a6477261d78ef6c5a5d331f6bdc48ebfee6138f8d3b785fb978c2a721ff749017bac133c2596fefec30947

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9d69baad0e3db3b0a5ceb0b61a5dba84

MD5 db4be961063486b65717ff5cc7863cb7
SHA1 21154d26705a15a647c2c954d2e64b5ea392272f
SHA256 c36b006c0934b4ec79311adcced52d8c9e54b5e390b519b1880016b9a393de74
SHA512 7836c2854f6708d15f5712bb7526eb930d1dcd21ab9cc38913f1adaebd77ff72050570dcbab9c36ac3a61af3bebab3d12ae863176952df5f3e7db3c66d3a3ec2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\804bbd5c61d348fe51a4725e0c64d251

MD5 ef11c439220ac4b9732e870efd42596a
SHA1 61111e06b59652bd0191f13f0275933dc99f148a
SHA256 26d4e99e698bd69375a338af6686f3b92f90baa279babf12dce2bbc1af7a891b
SHA512 e6322c7a2ad7dd15ecd445566f29eec85de784f2724ee9e08a79706c59c61e0cdb463035836757874ec188dfecfcd67f3da9f867a28cec2032e9996fbce039bb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\65801cb7264b6c4d278037bbc700407b

MD5 ae670219166539bcf61fe2f787f14464
SHA1 b0563386cd87dbb8977329b0eed5b00eed792042
SHA256 c6c5af9b4280a1fc6df26fa58443bf3ad5921540fc14cc5a9667c8f8fcaff207
SHA512 1c9b2880908422ca36132ce7b7b6ab263d4bf25e4110ae9fe4e8f72fdf07e4a327fdaa0a192692095f2ac399982925a9a3dcc291aaa6b91a8cfe570e51070d5c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1bd0b313b884f44ee8315a9ca7666b0

MD5 bd4a062f547b5ce527b54987c658881c
SHA1 c4941f08a0d3299600ba8df8cef52a68508458ab
SHA256 4f425728e4ec6df9b03a54ba7ab141a8d0190ef89fde6e854241c946714f1847
SHA512 fd4f21e5eb1fbbdba9b0b77605f43f244dd4c8f4e8763389220eba207578b0c349002bb6a34752f2813d8bf474e6c9ac0f0b2b483da4d84e7e032f415869f597

C:\Users\Admin\AppData\Local\Temp\Roblox\http\979020a6a55d12bae83a5284637269d7

MD5 2be70afa5b8bf66380f478350be3ca8a
SHA1 eb5b9a02d0d44265b49f279b69aba372b1b0c03a
SHA256 9e06c9b13595e2ac761ae8f67ecd20240d98c0d4b0fec6fe44d2fd201ced6b93
SHA512 77adc6900b60cb2da21328140a5b52acf426b0ecd5f4a0ced47c52a6f61e9c5312ad125f44a5f9d3e3a16bbc0f81993bca5b796950a22024a99c6556794c88f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d888883c772c2e4a33d0b57bcf3aad2c

MD5 ee128b929cac2cb8660959386552644f
SHA1 9223b8c3fbf556d9ce88571a9104e031afc255fd
SHA256 149a3c33c0d9d83389b3de6e02c1db28112a9f81c54c342b5e1dd930750b87a7
SHA512 4a9a4467f5b8f992ec430840bfb3348f0ea62caaf5fd947b52d82be9f576100f0b1349fd202486464cfd73cecd8413bab5c3eaa8b5935790f36ab4f76b9f8d17

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2cb0502e4728bd0c80ec6a286d23f640

MD5 50f17155f38d3bacb6798088b5970597
SHA1 85c336d46120ca2c74f2c2b6d1210218ff8e8282
SHA256 8d3f3cc56ab9aa5ff6a4317d93200e67d0261b670ded5f3aa46dc0727fc64f7d
SHA512 5774cfd32cb0868ccf6e8e5a9ebca62bcc9cdfd5ddd29aa45abe35149e2a19fcab339810b5865be7488b8db7e8f8d5888a5cc6773054bba700f6965e93d31ae7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\33fc14c0696a0074820b79f5b06f0304

MD5 a203e1e80d9f221a7cf63749114dbdfb
SHA1 63d4da7bd62ee01a225ca0b3e20aa358885fdfa8
SHA256 37e919ed3b51ca509d2819d4837f57e9781057b107376af76b4bf7db9137ff4c
SHA512 902e0208a089d1e537405e4845c1e794c604575cfc0c4c35c50d5d298d0268ba46fd733f6a22236af8156a29c9bbc67fd547c3331fd68b46b7066870db75d696

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc2da89d303545f56d70f7b01c0485e8

MD5 75bc74964f01186af2142d19aeed1c7d
SHA1 608a8bd53765731b89546587f04068d880776067
SHA256 098d4154427c20e5624dd81753cce95a4af5ee1a0db6aa5dad9324e11fdfec43
SHA512 1ce31cac717a22d7509c7babab7fa8a44e4da97c0856ffc4a5f6199b9c76646889d2013f0627a1861af24a2dd63236364af7fa11e15921416607e57ae51ab46f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5ddc155c69e4830c16a14250014d1795

MD5 0ebe79f064e7ebde996ed3203a501622
SHA1 c3bab4298733b7992f477c1300e67441ac161cb9
SHA256 9935e8cda17242432b4e3c20be2cde35709b386201bd0e945840c85fe704b2d9
SHA512 6417e666512477672bd80609c91036b08aa1029a01432630c07217b39f3dafafebd7fe42b20bbf12bd793faf920973db39da50be1b03ac9f4ca7ec1fd0eb89cc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\25e6f2e2071c1297444147bd65ecfd3e

MD5 5ed7ee02eaa588458d200f8acf0e84b1
SHA1 92566a7dbe29411f2d2de8c3de6809b01919f295
SHA256 a91616d83d49f95278131c08544857ba3d68274ae20992071804a0dd7088a9e5
SHA512 656ab6cea37c32bbd258d7b80ebf72b33a41defff93e3884e90b4d0d7c581ddd92c663d57a3b32d578be757cec29bebfd06d99af07601db6069e712682494cd8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\89449ed9bde68b012c33dabbd5fd72a1

MD5 554447dc88bc89cea05f5ff80ddcccbb
SHA1 f33aedb08881debc8918c1629a21798f1e56e406
SHA256 d7304507d68761a5eb41015f6630c462648478d4a0c5cbc0bee5df03e4bff231
SHA512 81015284ea9aa71d6640e501b2d9ddf9c05499e2b948519b060fc7bb7dc2f607e59591efd7fb333fc0f99c665d0e994b5ef74a627ee00f5de3c1b0d5f9be5a36

C:\Users\Admin\AppData\Local\Temp\Roblox\http\25d6547d26602b0ffd4efd61d703bbba

MD5 72c07a03e3274cda2b35f1694d2f2cec
SHA1 f7068945185dff621b99f3c2071baf26dc591145
SHA256 f191e60a2592634e7b7ba9c694dc8182889fcd66e04c1c4c8ad8e5d1d8f2e21b
SHA512 bfa173888e1fc43047b05bdf8d793c7eb4ee8972f99affd8a15c560efaa5ce9993214ea525c18e3c090ffce8b2a9fba08936c8d29afbf15e7aa0762a682f1bff

C:\Users\Admin\AppData\Local\Temp\Roblox\http\44c5142d261ff8ddea48b817ba4d6da7

MD5 341ca4a42265cd4f885cd5b44840da9c
SHA1 cfd11f8c683f2ff3569ac4b982d553e2977929ac
SHA256 6f792b416aab00d66570371fa3b41a834492ca159afef89ec3965899d633e414
SHA512 f953ffe4e3764189f318579eab92773fd486d0dae5616d3cbbd9e210bdd2efb2060179a665487d9b18fa894ea21aeb2a0ad2501157e2ab0d29ab02d9ddb02c38

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b690ec7ccc78bc7b512083ea5b8f2610

MD5 59cdbb8888c54c3119e4cf094571ef78
SHA1 529c178cbf7fd7f60702a3b338d0d0ee3da85776
SHA256 33f61564ea0c830a66ff7e6709a935191364549b0d62528aa62d5762c744c354
SHA512 96b73a28e141ea263145774e6dd63552c21d023f640384ee6cc4cca5a869f1c9407d1d9a919f7316959f6e21276449da3786365f45b7b399037008118588aa26

C:\Users\Admin\AppData\Local\Temp\Roblox\http\da809dd9fe44b9d83509d61ecf879d53

MD5 88a9f63c76d5b1eabf37742555788a04
SHA1 c27cb4902307e6aa43451113d6372e4b1f6a757c
SHA256 38890a6ea0542a25c83cd14a1048ef720f25c60e06bef35df607209d13453a1d
SHA512 15c4e0df83f9bc2290059751948c663cb33540130c3033c31ab770e992f211a365bb688b63ea0c9075e8aa001dae6a93f144c55f1780fac1fffb0ed59a7592b8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f14a36928afa9717b75a6ea0680a4a26

MD5 1db1802155f879559a62249ed30e1969
SHA1 937e30b0915bd22182499e95ac83fe32ae0f7d5d
SHA256 f5ccb52a9cd5158f76c306cecc2dc3fbd12a0594d8d3bb5fe0f06b89fb84f0a0
SHA512 4d1ce04732bc79177fcd4f357e7009b67ae12f029514f6b281f84bea38bdc992dc647fde00c7a98e35727645eec78259dde854640eac28e41e1559355f864fa5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a02f3e78efc9ce46f03d2366b9fdb4b6

MD5 65789d36bed8f975e24b1c60165f4066
SHA1 27b17996f39a717de230d6347947bd63d3465aa2
SHA256 a68431e7ad25864abe326de3c1043c77571bde3ca5863e1f82a293befa2273da
SHA512 f5a3c3362d45d16916693e474c02739b330596ee293d9049bdf014005472501093da33931ba26b98432238e8819a263a726ab36000568b5a0bdcc70fba9eb07b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c0b56746502d688296e7708318493619

MD5 1ee3d702762fe1a09abf150c14d20094
SHA1 d2bdf08e180f3b5e7a80c4e1b6e47eaea40fe2c3
SHA256 5237bffc510a12e9990e0427c32cb27affbfb5e52c6f8e4d69dcd99dc20e0033
SHA512 33d3b1d206956eda445518216422376fc822fa838ade1ef1fbce68729968f7762aacbf1117c822ca7ce3f082abd1e98792f2474d6f4b7ad1fca0513364b91700

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bb44d8ab0bb6ba5d32e1e92e57780764

MD5 3797ce114a1ad3657f8e39645b205efb
SHA1 81abb82a47e98142588569eb8e50c36bec0c21ef
SHA256 463175750005a9c2f81116d305a754d6791e57339a7f17cbf9798a568afcd4be
SHA512 125e7e106e696255e1ae079de39faa515c6776555a7eab2054e3ed55efeee62dd058dfbe976bf6c7e4f1b11bb28e8ac982abcc9bd7a5c81886e7c8d4e2ca375b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\72267a660e13be41aac7a1751a569c73

MD5 bf1f82283ac59a0e31e89ee8a811e779
SHA1 10e263f9f80a3906407f28bc8f26e1b4057ce1be
SHA256 1af562895b32a7cad69024736e1a3ca247963c604ec6bd0996624acfb5abcd39
SHA512 cbcc5ff28502a43964fa7d21bf437a953e6e4272a458c72500783b15840a639254c1b548b876e9a9dbdf252a3c18f7c091ee03a5228b6fdc41aa9b18afb7a0ff

C:\Users\Admin\AppData\Local\Temp\Roblox\http\efc84fe2b5f4086c4dda2da7c363170d

MD5 b68c4ae07727f4d3ab3cb09e4a6ef55f
SHA1 158d7fae9e82cbb69e5244399bd6eaad049e979d
SHA256 8f3144904fd7ef179a72a2ca5fafae832346a64ee5b34abc937cc3a9ec4087e4
SHA512 825b9792191252ed57eb60b9b6f8fdde30c19a84b74211c385ba717ff8150c6090ba756e5801c512e8b5a335ec207f20fd78f3c0551b8c58c4bb9a1517a68782

C:\Users\Admin\AppData\Local\Temp\Roblox\http\765171cc37c1f0e439c32adfecb912c5

MD5 01c36dd97b5c557e5d488d16b9d9d556
SHA1 9e270e67295731fca966358f2f3cce25adae082d
SHA256 d2b004d134cbd38fadfb51fa923af1a2f99f65b9cedfaed644e116d91a0e9290
SHA512 fe9131380b068b7fc06d4e7413a91825daa3a5208af1abb66be51cd44e30942d6e185c411b8b3d2fae77293f6e1391a100d21c3f3c3d3cdf892ac7de0d0f7b42

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e7034cfe0945f9c65ebe3dd7f6e771c4

MD5 e0654cbfe8bff6eed582d3cdc889fd24
SHA1 e9e563fff96b22f3d5d988e57223a0bdaf814912
SHA256 066237655c4190526a54ae87089c05555c131025e5269f5cac04a045c3c9b6d6
SHA512 f649d907a37d4bb47a76ff519b8e3fa727c84c2f6a2f50e7c58140a7ad4bb14b4c09a4a384faebd1b7bc19fd86000c673d10f16f60e80841bedc344fcbe40197

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cb8a45c1430998ec1304e4c79176816a

MD5 933b1f5dc544d9868d257d80e517c112
SHA1 a8d55f9cd5f79ef7f6fa1ffb229d8bcfb30ce348
SHA256 51a66f59fb6018efd308234879746581b50566d967cf1fbf63fd3fb6917f1295
SHA512 6e03ebecd629ec937171a7a2d11a88c83c0267c0f153b86194683fc967f0e1c827e6393a39af735813a1cb3fe2297cd6582d2f7578355e797a5152dd92d6e600

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e2504bf31b5aa0ab48a8ae5f1dc5f1e

MD5 6abaefefcacaf36071c43e9dc51f1bda
SHA1 a562a7fc46cec9c90e86fa570267864ef2249a20
SHA256 55941590b6aff4d570b3531c493c14c46eb687ed9e4de19200de1681987f75ae
SHA512 5fc4b6db68c03630673789ec5f5d017709e5a9011f25575c0e428f4a21c30e1f6664faa9e4ed456ae79c7ea0fc45db30b8d45ad9b4e2e94f49b27c50237872c3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8fbe2ad68bce1f4933b291c365e04e75

MD5 d6a9f27b18ba6c1cd064cfee32420a8a
SHA1 3eb4fe70132f76c96bf7f951070f437ba176fc40
SHA256 612baaa3a5eeebe00562f3ecd4490073f3313811613ead2948c1626128191506
SHA512 1126e9b53315742eedcb4e28bec6330c03cbeff2d311c9bca1e8280720ded31b6ad7f4f4b6899aaf23656ec46b19fc2ea6566226c1fbb1ded1c3790832d9fc1a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX740B436860564AE1B6D0071B29BDDBA3

MD5 5bff0b6da657e8e4ed652a4a5faf57f6
SHA1 ad49b5a7c4734d26061b0eea4496fc41949bc5b2
SHA256 c80ae50ae40768b21e62b593515865bd729b4c0712a006cbaf374a66f14f956f
SHA512 146a0ca1c20471f2921f1c911692223b77c4f528f2de47da9df54c1620242230998b86be05b436a725e64665a008cfc21715e114fb0fd1b9e0786288ad20ff24

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a1d7a8fb35b007494a82bd5304ba1e9

MD5 2414d644ab2dc0d3c58d8546b4cd7ea0
SHA1 77a854549c69f719657f5d404ae9391c705d88f6
SHA256 28be75fd24c5225fe212cbece08722d92c4d2816e5c3a0051294826a5fe79458
SHA512 02bc18971dd372438e6f93b0db0e29a2b647b7e1acc5e8d8321f73857b746c5523e7c720ddadb96363664fd5652c30d5e396f7128813dfc0c30fe7ea4086a229

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d8b0fd3715ff57ba968ae5740d39a12

MD5 a3366bed53be5f4fed574fc819a07072
SHA1 a79b59561cf06c8a209fb701567a67376d83924d
SHA256 ec5c1697be4eba9851b9a413c13e1a94f9846f6dba1d8d0fa33e1ca7292e8030
SHA512 f8424133bac79bbf7547bf7076cbaf0bd0767f220778275c36878bb982bb69bfe64aede42d67c9db009047e66bcf5eb9604205f6b0aa9a801f6827e2034399fa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b80d47fd48f8d137ca2aca87e1d00059

MD5 7dae317d3e65c483f462a48cee3002cd
SHA1 330c91065d277740b721b723ffae4e5511e8da2c
SHA256 ad244e68f3ae289677897bd171703b8ab65bb03b17621b3c8f61594b906f8b78
SHA512 966a981204a7979932981d8870704fbe3d4afc2a0306cf149117eeb30a54debf852c8ef04fda90fb2d1d1261daec60db390a4c9b9fa77740d14171335384ecc9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0fce80600a43748c6cbc0ac23f6cfa2

MD5 3bf49259291542dfee0f89d587c177f1
SHA1 22328c74fce75f7918f6c4b3ca5ad9e1921db437
SHA256 971101824fc41a26f9b1386d72750a69298f4725f266edb3c93b21f9600d2916
SHA512 20366e5775f42da8e313d67ace54bed3b2a010a84d9b3422276a8b544186345683c00663ce4f541c9890f906344ca3400015bef988d4ffa7dd4bf1c38161e271

C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e8a63e8fa08c8135be1c5384c3e0a2

MD5 1221a85cb03fd45c001ef47af9935e7e
SHA1 f209b998e8972ecf158f58270244b831d107ace1
SHA256 e7c79bc6240600fc94d67a9c0e9c1f563a3f30698d7cae3d19b1735865835d4e
SHA512 2e6846a2ea3bcf0892703f3f2024a0acdf277251c55ad9c65e61fb5a8780c67ec707d42818b3d98103504dda9984c109ec0f8e393fc063f734bbc7bce168ad90

C:\Users\Admin\AppData\Local\Temp\Roblox\http\175af5595dfe9780b5b7b10ecb943336

MD5 0c9078c249c45630688d2af7e0574c25
SHA1 8fae18c0c69cf3a58abddcc9a55fba6d81aca2b2
SHA256 b0e7f0945d5de86014379ede1d9a9528a8c944534ab33e58c7b3be1b5706500e
SHA512 24e0cfdac58bc3714541bd39f6992bf0a4bd4c47e492edc40b72d045b4f06573d582d9f4e50e0c23f964ec678d857752caeec6a65ef89b70e2ecbefe749b21f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcbcf8ab7914469e06c8fa6ee80f2201

MD5 958ad6c1423022b1905d452d8772d16b
SHA1 a1c5aef3f0d7550f8a9ac31ac1e295696477c02f
SHA256 8965deb3f4a35faba9f087defdbc2fb071e006f283ee7e6b1ce250c6ec12a49f
SHA512 5185a342c83ca7770ecb1103d95d061cc17c80526f755ebfac53305947b09765515221ba65b43a98eff3860e47bfc7a15f51e67d0636de7596a6859ff20804e5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1daaef2a5ce0ea927443fd099437bb55

MD5 e4a239995837749223ed2039a40a3a21
SHA1 b1cc97f9ffc3a367dd3a55a1a3342d59cb610403
SHA256 36ef28d0243f78f746ddc7abb74563980829c81dcfb91abcdaf6459bc7d374af
SHA512 ad81fe4cbaed589da0a3b97c20e7e5fc0deabf5910b1c41dc7d6e6e8b8f22486f71c9577886689739bdb87e34b330ce43cb60fb2e3c1305d77984ec78cc0879b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\32c38bb4f4a560d621ab93aeb6ca5d7a

MD5 f7b60787135cc235066319d2412e77e0
SHA1 ff9e626cfeeb124bc95d830d20e13b15c6427c77
SHA256 e815d7145b898343e81a796bee29e8a71a678c9c3475a7b1107cdbefeefb6152
SHA512 bb21ace97ed300299a276844630c2b30aa0aab87a3a8684391bbe37a0ce7761c82011035f741cc1f596136043f1871d16b0238249d3b943b2c08fdaab8c0d762

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5b794cd8b1447c984ba301aa73a6625d

MD5 2740a9a1a4020c08f3ae9fce5509416d
SHA1 371eb56fa91013a45a38486d5d77ccc12ad03990
SHA256 239bce8cdaa04b7e91497dc8fad14e5af36ebf244712d7a04e37c2be5a0e0a38
SHA512 fbbad878010bb317d5ddc6de48c87d838db393fc52c564555883d07e62b77cd37a3584414566977fbaef792ce0d2a00cf851ce871e880d1cda34357d2fd4682a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2

MD5 59e7e73fef4a9df2680ff8fe1722014f
SHA1 2b9d42140ad6207b1e3f5cf8d66b345109cb1098
SHA256 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57
SHA512 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc27c501541df155b6fb12496e5bac70

MD5 f635924f866829484247044f991b14ec
SHA1 39c6f43e94e4b0d0ce9c30da5b78aab7fa5086f5
SHA256 30b18b2546442b630f0fb8c6a7c26419a9a73988e8e1a118dae5b7241e98074b
SHA512 ca145397fe454c2623651c9ccaf86fd15212fe83d758fab2f8de35e4ea00f8eb8f58aeecb2fc95a4ceda07c9bfa960ccc29b1a56c2bb317c94297c24a366be68

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706

MD5 a0c28b8252eda35f15ff0931e1817ac9
SHA1 3fa429b9d0b8926907abc63b81a301bad2442eef
SHA256 ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d
SHA512 e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\706b550a2be783fb6e220ca8181485e5

MD5 be4a508de308b15bf9c711a769ed61a9
SHA1 2b980f20a1466d2f1508bfaf8dc2a2558450c1d9
SHA256 0ac514138710cda19cc114cafa8a3fce046654dda1cce0915f525c6f5ed0b812
SHA512 dc71cf06e2466f17b843b96fdbec856b3b67df95105895597e73fad455340d4237f1b7cf91ac2906efb9efeac89515deb79a045859a0651420edecabfef8cf8c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7948b73360f27446739cb67376a2d7bf

MD5 6c261f23c63795849eba5b1ef6f17cf3
SHA1 464f91ce49db8b5546722bd62c4f59aae33dfc20
SHA256 e4274c467ca592398736e990eaa97a937f209768239400cd90ea59f9e58a27fa
SHA512 ab6f671b1939df79ee60a873148a1763c06fa880e2f17a23c9e09c5401120873167905e49be3abaf546b9fee33096b76a5573a473b72de3806c38a128ab91ab9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd

MD5 74efd118f986358ad4cde9a57e61dc32
SHA1 0cfe0335bb35298456edc9ed791e019b70266c31
SHA256 b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5
SHA512 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a

MD5 81927a5a1612202db2ce511c62ced773
SHA1 4414e92b078a515ca699a82cc3bc64a1e264e4bb
SHA256 a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e
SHA512 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783

MD5 22b25a819c414b6c626e5306888142d6
SHA1 e7d68968d0848af0e5203409227a1980dfeb4a0f
SHA256 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea
SHA512 bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77b3cd784a40d8349719b23b5c0e414b

MD5 05c43f778ddcf81fb06a2fdfb4f7624b
SHA1 616dade772feb66bb1b8dee218c7a5a39d43de06
SHA256 f4a00d60cb52477dfdb2eb264470e5daffd44139c118b73c80e8fdef16f9dd45
SHA512 a2443c678bc019dcc50fd7a49d5c19dfa0c45a7c43fffa24ca225f0f24b6839865288b2fe843bb233752fe59c712c54bff8d9b5c4e8ef5ff4ad8ef20b053feed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\09f04b99b82b262e105a232e97395311

MD5 e3a0c050904f457b02b36bfebb1c0b6e
SHA1 a611605082957d8eb5dcb83939e1b6bd3d870bf7
SHA256 02c51e5a41d473f8e0befe8e5fb49073f0dec0ca88ee83e0e6a3c0ba3e18d399
SHA512 f2b6b3a7c193a951feaa1d5abeaf52316773d7895284e806f7267708672f6a7baf37191a244d2c044c785fe967d416353ab83517b28932b9e521172b89e22275

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcece68795e396ad03d6e2608d740126

MD5 0ba72ed050100e6779ea0f1c713ac441
SHA1 ff585cbb4b671bd3a04f3bdb2512a896ff07883b
SHA256 0949d1f525ea9da560f02a0447eb12a33ac6db673e89754b8f3d230e24ccfd06
SHA512 22c09e80f4af164d94ef40999572d2ce35bfb1dfacbd1762b380c9685889d515ed9aa064db4f8ab6746c8a26ea4ecffef9337014293905abb2f0cece7344b851

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c36700f9b5f405f69b210d702f6087c

MD5 94b44243d9e420ff19ff04f4e434b83f
SHA1 04687ed0f779c6873da97da0f16f042b2b459b69
SHA256 f76c45b8c4831588b971b25431b7b85f529a7214f99103ed82b4c2e97d9919e8
SHA512 b7778206ef730254f469214ace61b13f7031d0c4c751b2988decee93dd5a6c8336c40974af74b0aca6d42874d54e23dfcdfc743f5d633610aab2f05e948bea6e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d132016b6bd0b89da2690c24749f6ff7

MD5 2e2350147bec3587e3bc14b7a1e32c2a
SHA1 c275f45e728f71d24ac6d8b496865c218f972b41
SHA256 7ddec5794d779b1ad88ffec41f00c793f21046d18c930328d662a3c2d1c27d84
SHA512 670d3893ab1503dea9437b61b2b1488238d84d3703f94b74b5c20bb7bd26eaa0479e6d3d91319219bae1c1c357c6807101c5960ee2f29ff48475c0e6d9ac3adc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\848d350916ab0af9758cff8167a2aea2

MD5 0042d3425d57e55a4e8c899aa911012b
SHA1 f260334951b11b4ace9af45974e365ecbc6cb9cf
SHA256 f312918dae9b5ebf3028f14575ac8bdb78e7f152061fc59d0885ab7acb3e9581
SHA512 cbab405431b5a95ae3c9d3816b4a1c4d4a07cdc4dfcf64d0977ec80533a6029329db101ac36361114288fa18c769c85a3f238b13f63d2e1e83ef4ef64ae45521

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0af1ae578b1c58a0e785712d31028c1e

MD5 4ffc139d6996c3eba2d40053423d07fa
SHA1 6da7d02805c626596d055c20cf084aafed9b9768
SHA256 0445b87f48bfd12bf0dae91d8dd7c20ee924212b4cc8be782c0a54193546f43c
SHA512 5af3417cdb0d099add05b22090b5aea9ba39069c4704d000aa323b859e47ea67328f616ab03b7b878ef8cce0d528ac0ff5c0f8fe305175b952e840368e0d4a81

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b39eb4053e10b7ff21430e80432eed8

MD5 be1dacdbf4fea39b16e7c11e286b7205
SHA1 28ae9237170d6fa225c54e7a36e35549d191d450
SHA256 3a6d14f833f7da8ddf3139d42e41b2b83d1ea0d4570db39d9c10dd98e33da800
SHA512 72cef9e399c0652a340cb12dd239cc0dfa14a2c832fa63f76dc442308ee9f91b41ddff62fb70331895716b61fdccd332f75c0ba2003f818900e3e6f260303176

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526d6628fea4b1243fbb953bdf85ac9

MD5 3964c0c8b23c560175f4b299e1a9605e
SHA1 6c155c8a5ece5d5d7340ee4ff0fcb730e4d2b0fe
SHA256 20dc4a3272ebc6ff5edf0494d9e6e2d06c690bb079a36bd04e074818f16a2dbf
SHA512 c6f53903aa3a14f3187bcec1afba4b5b07c10ebef6dd10a710f400996f2214703d29d58abff6e7e0025ea91a78ed2f799f69c542bea006dace570464acf90d64

C:\Users\Admin\AppData\Local\Temp\Roblox\http\571e70bdfa73e0cdaa28fdbd2ca19ddd

MD5 bd289aae66f24d373fe9d4388f8ba9b2
SHA1 4d248d4f9aeffef2fdd953bffbacf81ff3ac8554
SHA256 78561a946c48755de0fce9695d30ab82d9e5dfce2eeb0ef6a0824282bc88a0d0
SHA512 50666175b0955dbdf933302016675f035df38deeef6b4a0e8d0cf40b6e3d2c3e4a089a5b78d75015e0048b2e7f91d81b69857004d55436437d3fa0754d1ef8a0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be241f3cbd5449b0c30c651c4834e3da

MD5 2866f1aa81a7f9c354d34be6a58aa88e
SHA1 c470d8ad431f9876d7966796a503c15440a35345
SHA256 38baca61b0de1abef8c3a97557b6e246fbf9091d1193e3732f6011508e5f0a27
SHA512 1af43841070856ee4c509080c286285ef4850d9dd8507381a5045ed748ffdd09fc32843c0d18aaac70621a8ec88064f0a3b74036cbdfe91be207594f55b24ef3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\73b0a5d180fa4202c3e9365c3d577fd4

MD5 2c2e29b04e1f7144017730d5b5ed8b87
SHA1 8a36310825cfb7d8ea6fd487afa46dde29147199
SHA256 6026fca2672513a7a42dc67687850d630434b2260621f77ef5b2634486048d5a
SHA512 bbd5097d544d3bea8b5e97f3262a4f7765b13d5c742c9df8fd07e6a56e7c021a41de575dc1c24749631eb1003db0b9548c634eba7d6d2701fe4035f0a5880615

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e385854d0ae9ba50e28a7a5629fa28be

MD5 0c889bbbf77ec231120674d4843ee0b4
SHA1 fd29658b2fa416059cb30a6729030b6a6b125e92
SHA256 5006fa1587ba1da5b7696daea22929c490049bc0f10661d9c79322b0a647efc6
SHA512 504d43f9104b8c56ba12ae9533ad3554858ebfb4f5b4b8b1692ba339deed831a66f5441a1e4706015cc59f4de4729c0128fe7da2c8c3d095b2993e92eec378f6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be58ec8ab04ff195247b1536cdfb3d44

MD5 d1d2f476fd075d55fa0e77b3c507cb0d
SHA1 5976cdae821737161f6debcba500a2842f988f8c
SHA256 650bcfb9e1c7855d2b72865695c2f4d4212ccedb53584f089c26e2087cc65d41
SHA512 958c07812ae7e89143874ce4effb112eed3bec3436fc0b71ee70de38298130d08d89f6bce42d2b0696839f67be260791d121e81f46a4935f3985e241aec7b0df

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e665da7061b12f952145852fc21ef7ec

MD5 4cfd979bf14b07dfed01ef9a3b1279a7
SHA1 2e7aad8b8909d3117bb151bf4d34b608e3ab9c56
SHA256 589b00b0a2fbada62af8b7daa8755ce68420a009bf6ce7a53e0865fcf262f94f
SHA512 79a25e0af653d6ecb5fd1908c3652c6fc8ad3d0cf1e00510801bb369728dcbe3c5e1e66f73d058c511320badca3c8ea82f2baaa5e0682f304235b68f622685cf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d5ee01099db60480061c57d9831c261

MD5 839f812fb19680ae8e62c2ebe0355e4d
SHA1 a256751297a9f82a082bc4d5ef08d5d9d89a2c17
SHA256 b414e1186136cb1f46c6cdc69dc5b637ac5de6a390d67cf25907907c61b364a4
SHA512 f2209d8bbb8f7ce1e6b675cdd2da3a10bb450d50b4f73a596fc0639f201999f32d3c1a2418e0b92c918c0a667a5750ef122e4331361e0022b66a2fc5e489e5ed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\90d821a0b7efe2541659a0ff6b31b88b

MD5 6f0ea4b31f2f55764db79b43833bf83d
SHA1 2522c29622377d611419babb3eba2e8cb13fe0e6
SHA256 08f380d19a3cf8307b098cdb5e9992ed1d29e5d15226340758a1af3cb4300c64
SHA512 6a5437574ce2db6feac98928a22c7002ce526501335ac00444190febe302dcab5f18ba33a5ae00bcd83f469b5f1cd356474c8cfd31d9992d186fdd0846db5641

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9cfb35c8f272d46d504f99d9c00054a

MD5 5a67e8e85c0ad7280e9f1ca86f138b77
SHA1 b9fc6b3311df7710e1251114946b93a72dd5d5d0
SHA256 09e7111ea12f1236be9b1da699f8c93eb68127d0a98f2ceebfc5c2d7b25f0ed2
SHA512 ac5e400ce21e5e2503a11642cf401ab5ad4e625a01ac87f1711a02a415fc924556d0d3e50386d17e29ec20bb99b5d3a2d0496dc2ac1fc1381b29774b826cd9ad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\697aeac1e8e025f05cf4b76086fb70df

MD5 749deb1ff197b5082e2b07aa55a33d31
SHA1 08b4d7441ffa13b8dc3610d74a56d8eb11d8acb0
SHA256 e593f31edc529b51f9b253994d8aa93d8ab0bc8faf433e737b0a09e80cf2784a
SHA512 eff256220d72675ba4b23344191b963f7acdce9743af8be81020e2a74662d2f3f1b2735e686806b73198463c550b2d18921840271d515dca0b2d4ce226954d0d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf8e7398be5b1007fef514afffffa6c

MD5 864c04942289c1dee2c1aa18ea77f1c0
SHA1 1be7f1b6c2f1472adb9b34fb6f7a51d3d1ba161d
SHA256 9855931b8e0500c6753d77200447963d1981fa7f7b4fb34067bfedbdec0db442
SHA512 6f3934ea3ca2317756e45bcf065abae6cf34ab7c24e1847023ecee8e404294420f5cc978af2afcea986bf160eda88c020fa1b799f5ad75a5e3991e7268192dbe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d27efcc314894472628caf798daafe01

MD5 bdec8723e953241ac3edc46458a6ed7e
SHA1 783605b1587b096807a81e32c488be272e0ad581
SHA256 c31b000a001faa6e08026a24043899ee4941371ce464146a9c78befc2a796e4d
SHA512 221cf258c9c88c857e34fda1da4290c67c3a34459f86b828ab968f5e57b2be53eb4f7aaced83151576fb843a7f1166c267de0efb116740ab2ac2b37ca0cd4d93

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9d72083ee0b41e11170f5a9845c3060

MD5 92e9669fc7c748554c057eccb11a97e0
SHA1 d3fd8c1e136a2ebed238d95bfbfbf3ce61a385b7
SHA256 b29195912662d71be85e0db741dec5ef005d744d3aa0913dad8ad1e51c3aeff2
SHA512 cdc3a1b4c596fd3c9621e53887a9d503205a0d5f8663e1ee3366129ddbfa83f2b15bedef155eda2949f24d1df615ead664114310e3d3dd03f9fb2d95df2e29b2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d4f8d4ffe8696350702fd146346140ac

MD5 084a09f4a178b2533a56610f28f252d4
SHA1 70c343a804ea4674a214d5ca8e24bce33cf662f5
SHA256 91b1a39172d8f6f0c98a2a3aaf8c137b29dcc4ed4c1bb4a3bd449dc16fb45e97
SHA512 fd8205ea2edc70743247666bf8ff414ef6038f6ec03bfc7590dc037024ca66eface1f3cc559511919058754a5dfc2224ca04368ed31df8aa942a7d9022b93e5f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5105c207d9317b50c40470887ccfd3aa

MD5 481555658adb9b672941de82171b343c
SHA1 7937e7bac46ac99e1897c00285fd23059828dc12
SHA256 5069797f8a4b926fcc5bcdb668c1f67ece5d5e8f05d6f19a260c55c9a67f289b
SHA512 aa9aae6ac82a3e320ce9c1b83883263d547a82369d8f31d3db0ce6d6bc5cd07ef96157ebf234d6e31b40b32e276c233f7c2c0856394a70d183bd64e03720737d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6443205f8638cd85aaa1caed016b8ac4

MD5 20db412bf509b564fa765bbc0b917fbd
SHA1 938513617f173454649543b7c014ecc762ba5b5a
SHA256 8b7281d0d0576ed2b73ab842080238d7e006e1524ed48f423f61a86cecf3ad40
SHA512 f6c54fb0478c2df40776125a920621a1789d02239a78cdd3de8eb83a27a00464b2aaf8714776897a4b3ae5488da664befa604ec836fe12010a046d48eaa519a1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa3db4232d83f97f5e078c526e25a6e2

MD5 3e1ba08877dd32fe4178a730b0ea5e19
SHA1 c020afb22c7cde0c77a9d1d6be18ac8f1e62973a
SHA256 1a6447007e90d27fc71fa7bedef2219bda30eebc33447c2929e4488315e19641
SHA512 bad57ec1a48f686fbc5842a291c95f01db413600828b198b55615857bb1e50e4b3b6031d5896c8d7b9d6753c290c0253ddb83482f89c7fc348b8b80194a07286

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8aad44a486e1e94cb992a6a0e230f735

MD5 451b527070f0cfb1431ff5052642059b
SHA1 6021d49e6b87b9ae8fa64c3cfd0180d625c7d761
SHA256 b9391062d160f5bd861cf7e5ecda919954e84a87eeb3b000bf9b93c068057c9c
SHA512 3ec22e77061670685a576d96cc3897473d11c45c24e581688da54d8700b186d3583ffc23cc2c3395fd93af36afc45083058a2bad9cffb1362be8bf4edb20cef5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\afa231f024ffddec5f9d2963d20c450b

MD5 64c05df26d12845b64880218a48e1b3f
SHA1 6ae26e09d6c23ea9ba5ad92d3d40790948b36141
SHA256 e41beb094c8bcc0d8825e031ec9ca5b13e45b94f3c93601c31c10955cfdd8da8
SHA512 d6925cf4d6eeb5275a7c008723410edfe1dd24b9097656e8573f749864f8fc7c61dac61b05230de13a7b9b7b866528c04adca85ad83e8e2831c43b46a70d4c27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\74f7241d43fd3efbef367cddf2de0712

MD5 1e996f012273818bd88129d26108d8f9
SHA1 c193db2eca6d190e929375e617f45790cae442bb
SHA256 c7c8ee23804c70ae96b1399c2f6730543f10f7678f5e3ee36fcbce97245aa8c8
SHA512 40ea7f36824cb96dace8ff41b1e92a03e0f7e61cac33a3a81c81cba12714812504554eaa0f4344d30061ce1d89f231ab21cab164a008e1f68d18ccfcf5525173

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77fad0fb4662c6b81630ee443153aceb

MD5 183fe999017d5e5654364c0d8fd895b8
SHA1 64cbdd4bfac3c60803acfb2871a9fc8da27d318c
SHA256 3622ef17da158e25761124720a642153fb6eee615b54da286e731ca2920216ed
SHA512 d5026e42d343185e14360a292c6d13131dbdf081ba44960598e12652d99d999b4f5c70c5c02335596d18302b1cf64128a8bd06273237a48e2cc4eb0267d12307

C:\Users\Admin\AppData\Local\Temp\Roblox\http\251c7269a8dc64cf406e8c2d5f5cc688

MD5 7e7342c1c2e3602906a1fd64acde7735
SHA1 357de58a6c39a0fe4d7e4c13c16d8c1d25f9e649
SHA256 24a5a23ded1de17bc3170afbe5eb7debbb47f0ed7b2a4b5303bc899e927a99e9
SHA512 c6313b65687a5ce03772ff6f1edf761aa91f07a29f8b61db7edebf1beb5c548fbc53aba721ede32d4c4bbdd31361dc724c676d41c06278904291579d25d93202

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2da892c80dea8811c616fe5e0e6c010e

MD5 0dbe0b49a06c4093d004ec7d44303fd5
SHA1 2bac861a6075854f8dc8db470558936c36201aee
SHA256 b136004ec10d66b813386e21fc6c5f86d37071e01e8a82437676902eb3e63e8a
SHA512 1d306115aa97102b5d68552b591f5faeade373ff3a718d9f39dbeade32892e47fd921cd78e5dd71e91072476e5ad933ff9659ee5ea1d07133b55745f00c22828

C:\Users\Admin\AppData\Local\Temp\Roblox\http\993f844b48dbb84a0eece0b1d1aad326

MD5 c05764b76e6db0114c1d6200b56a3588
SHA1 5f96252b5a83e5c0810e4ba604dfc433ee449639
SHA256 427939d6cefb89facb6e71e082e42ed184f0883db715e0bd8ca832a316150430
SHA512 4c6c06afb99e99d6a7466ba40146b7fd02f83de16e5c89acbe64179860547f42dad0562b2a281706cfc6acdc5558e8fba5647874ff15d2778f3f6d8c1cd983a7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\83eeeca932186715a9107df83747a179

MD5 e7ee77fadd485e9a35a1bfb4be99691c
SHA1 bf1aacc9fe769fd1dd111a1009473db1dcac7399
SHA256 d98e995f0160e551443de0eba015bf29192aea408469c2fc2d9c93a5c1c82cd9
SHA512 3ae849a12cabc409e435da98308db2ec0b86f8fa8624a23632ab0ea836a0aed001853eef600bb99f67f8f907dbb641c9c6bc37bbf959dd12c1bf2ad9c8147460

C:\Users\Admin\AppData\Local\Temp\Roblox\http\28c39719e7218d9c2d686d4daccb1b72

MD5 25a0b3d9ce5e6e1cc4cc7f4cdb328273
SHA1 4d2dddbe9502a5373e6ea99771bb1de6e828b95e
SHA256 013275e837c61c631932167d47d5d9b838ba8b9863915d39f06d8ba4914df147
SHA512 20df5153edab7085594382f80b5d7c6afa5f2a84741efb46961e36331c94369a7c7302c9799676e18aab171cf398dae8f314395c22238de6f8450726c4c992c7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\584bbf8c27b2f156742be22b280cc8d6

MD5 7c0764a501b7f8f1eab14fa7f9337a4f
SHA1 2e17a9b6d5bd740c4dc91af9311e4a6e77bd55ce
SHA256 dc0524c0d7f9f637466570c86adad7021f9316e42e69745bf8d27081a98f09d2
SHA512 dba17c07bc4310c556ef62f157dfd3a0ea1a617ffbbc4324f9a046bf47be9a2bd500921bf02bb79d9ac2df1aeca3745ee1cbd7f33bbdb80fe67e1adaa0bd82bc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c677a51b0924e108a9b1485dbdf883da

MD5 e1e4307ebd3e7f8280c75be0ccd3b5bd
SHA1 3f2a56ac3ee57082ebcf4a1ca21001821286e77e
SHA256 10dcbda8315ffe2e7215b8d61dbd26b0553b438fe94b1bdf005758b1b96d9f94
SHA512 7f3ef600e2ecca826fc163d9092bfc10fcca9a9e6206ef29fe5d61902e3e9625bb2bcc07a58ab480ad19354bd0a1c56dd9f13c4e62aed22d87da146252144ef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b39250833fce2d9f0655b124db089d4e

MD5 639a9c5f588be3e48a6bf5601215f027
SHA1 1ab7c1d3d5df21a05324853fb235b848945c351f
SHA256 4fd48841bac69eaaeaa9c936347395f5eab6fd4f5549d65cf6fc541884a4b2d7
SHA512 c3aced88385dbd9b10841f72c422b17cabeca80ad11af01222f8901b950be3b42467851d5ef61fa3a1d92f7977724926f765b8bc594655e93e116d04223497dc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8ead55fcc97d21deacf012df5c33fdff

MD5 16e22cfdc829405af27279c364ba2f8e
SHA1 0c75b97959d7df1586db85cd1166f99c65603c68
SHA256 aa2f6c8bba8aec6b84f7ef8a7d8c30022097b784236806e63da1f0417124a3d7
SHA512 d1f6695e255f5b7ad498ce177a16591757d5570a4ea45d396f3fa159f5658bddcb7d524c102efdd982fd9ccfa557d984280c27e57484b8f61be512ce994d7964

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f1c2eede7a115f0fd9ddcfae03372516

MD5 08ba91e62331009631f755289dcf7324
SHA1 03786d766cac0b39437b98cb61e65c25d16325bd
SHA256 c50ad1d35d0b3e81ef6780da13361923d7525a39db5c9cbc6c5344a0bf5e1380
SHA512 3fe207322d4249f92893d0eb7a93f455374849ca583dd0fd00c79790ab7bc7f0699fe16de332b767689e0a104fb272992ddc37e002b6962cdb6c66a63618e3d5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c288ffb1fe759d2618c218fa0d2bee8

MD5 c914fc7a80c8ebee4ddd7216cb8e63e3
SHA1 2e4bbbe23167be5f26e5f3e9f1e1b2409b38e7ef
SHA256 c718cff1df66ac36549451bc6de0535c3f2f9e74b4fcdcea38af9eeecc42a674
SHA512 7564812cd051e0970b3d06aa1bb839c8fae5d1e95e23615eea42d2f12b6284d06f2936cedd947e9d4d33c4656fec00494121d58cd38ddaf1ce2ad8be8685d0fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc70073e6562a1a0cb99b092be4629f8

MD5 acc9db15cdf0932e73bfd20b9857b80e
SHA1 cb6455b641cdaa693de88e9b0d1f422744faa35e
SHA256 f0e15f7608b3829d33eb8e057f31f21e931d9d2ab4814891b11ecf47494c141c
SHA512 7ca5152691d595acc0f0398e26f82c4cf491bea98f2c81e7a972af8fe763ef5926a716ea44112c2fa257ba0109b8848f8611f071b88902901bdee1d32a315913

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc86756c9d8f409a887054cf26a854b3

MD5 70461ebd3bf0f7a0beafcba1d52417ab
SHA1 53dd7894e76f0fe7c02f378d7c67107ed4a03d45
SHA256 e3ef21dd9efd05fd1260691d6dd47f76155bd0b5ef1ccb62ef1e588dca161fd7
SHA512 ccc18b368873c76fb25c97009bfd17e4456d488b16da511e61fe1dee031cce48bb25d507d7fb1237345bdc2191085bd384ce45ca98a5864d10b65b28650e553e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\477a618fe08d138e560e0c8eab9f3583

MD5 4f9c826223fb8d7fb603bac0b294a706
SHA1 44a185bf8edbfee521dc92ae012e6ed18cfae3a0
SHA256 e12f126277c8b35c48dc15cb2f37850ff5ab0816e5982eaeceb571c99bd17502
SHA512 ecf987dc0d416a7fb1779289a0bd9ba55625abff41491ec3731fd77950e91d5b454b17573be388766b20fc630ee3f125d37feda44e068d2ed0cd2a87be021fda

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6d1b0fd2905f7655bf0108dd4e655991

MD5 efe7165d72ce56eef26da49dbefa586c
SHA1 b2441c50e501f7121277d205876ec6a5811c4e67
SHA256 4e12e3ed0da10924a1dbc49e464b0b07c017970c839f1c1cb4ecf5a8019d3ae5
SHA512 195b3d7954627b571226a4d5293b19dd0b7b565d4b295b494361ed81f3d9e1c193533dd0e53b2ededa326278294694286669095147d769c5de343aa611ab0238

C:\Users\Admin\AppData\Local\Temp\Roblox\http\388a60aa5e51ff44455d359825078031

MD5 eb62ee1626b44f54b2c444a487ef84fa
SHA1 d3d918dae048e4ee9c9626608693d69c4c4ae55c
SHA256 bf2f079ca21684f382d094af52836d83862c93800e8e054c2f6bc0838c442d86
SHA512 68022f2ac538c51acc24065480cd23670efff68d56a4b5dec2c28316726ab82c81b48fbfe76c44f32dc32b0af75fe3e203aeb40610f34e2e5d75bc684f712381

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e4317e6c6a87bdf6f00c6c80866345fc

MD5 fa00f598036aff7c2e4728ff840efdd6
SHA1 7873ee7205e2817fc8fdcb3afdc275aab494ea91
SHA256 18fecafdfbf34c5b261f4acbd607c439e35177802c8002a0d88221258108abb8
SHA512 f72faa02c263ed200f7a296ed86ef5da614911c1cd212aedd12923ba551aabc44b33cbced8dac80aae67dc09988d53ee191755afe3d51383ce885750bb00a944

C:\Users\Admin\AppData\Local\Temp\Roblox\http\23f316746f014ce443f0b0adb0d9d90d

MD5 4843f2fc4404a016a8a7b7f5c352f877
SHA1 1446153b0498dd65dbb53b417d5ce5db49f0dec5
SHA256 46ec4647b950351b091ab0bb34d1964bf24b0eb58760175def7a4a1d7a4e09b2
SHA512 8d5198bd48be46a6aec5cb5d9eb6e75828f88742f12102a1f5091f9c8b51167fd6db13981fb875b032795b9407fa64cf3aa54224a64008262084dbfd3d98dc27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\252921e7f19d826cf6778747e86132fd

MD5 e06fafb3ee051c215c7118dcb4a75354
SHA1 c72b3e0f2bb1139344053256bcc3ac48f590174c
SHA256 ea771a4652058a4110a95a6fa24c847e7a50cdfdd711f57e02f9c7caedda7908
SHA512 83008fcb8a91bb42f76568773c98e5dcf6658b0d7972d595eb7059b5a598faf80fcc8492351e9e98a6d3a9ddfc17fca742f07ffe4af644d99c087062ed7b14b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd52b35df5f543d23b7f35ae9e845be

MD5 2de5aeee01688c41f23b2ddc07c0b442
SHA1 68bd21cd4284ff390c1f4f5f4b61c9ff3b8f2268
SHA256 3ceb6af768ce708d114195ea3521c71370ee69172d4d0cdaeb1efff406571d73
SHA512 ce845ebebe20efbfb1a0565e69cea69e3a4f3e71289ec68379565052a2e8a3e5ac873b52e74ea26f2afae7ff64c789c348b4b9d4426ac0c0d6547d9f12290090

C:\Users\Admin\AppData\Local\Temp\Roblox\http\16f7441682caf62a1789b9d3e75ec170

MD5 cb94125a0b01b9335f3c3c9a9c6cd60f
SHA1 85ae6cca4c661270b389c00299bf7f5d81fc3943
SHA256 afd92a2c0ea64515200f7dd1c6237f18b6d1bd2065296939697d34a3d4e1b0d4
SHA512 649155baa2d26fc6afd0496d11f37d9dcb588726806eec89be58faa54fcf3b90d1becf114c4e2f3964c98e93399b87bf5bb87709a7bd9a3540c7ddb56e2da555

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5ba3b6fc7c95f933bacb9db38c93e80

MD5 0de2eda8831ddddda130102597e758bc
SHA1 0fa49f0691a4ae61e422a22b07fd4e5def0ae5b2
SHA256 2d60885d3492996ffe223ec6dfddb240eba00a9e03ac0506d3489edc4822e1ee
SHA512 f466e1ea3867fae7618b76a2895cccabb0f646f54bf8c4cb6cf6a5c2eaf4b8e31eb4f8b42971ee53c929241d9f40af6a684647cc09395cfd709774503f274b75

C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c582bbf5493f077bd8f59567067f24

MD5 ed3f4356a5aa9295ec58f77ab387582f
SHA1 99f94109e03097ddf835c06292ecb6142c93fdea
SHA256 60e6db5121cddd5bc13b1019c85b5d962599e2548c347ee3c7d944cb20ff01b7
SHA512 cc7869759564fe9d5e1580be978727c4b0da340c052db74f677bf7cc24d93da0b837d01ae0199c6404e02b49d08fe47a2fec7165cfad841f1b6fbb1d7e8d7fc4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f40c00885cbd0588eebf8bd59a345579

MD5 9c0241f7306bbf3cd085509dd7840c99
SHA1 21c2a9c916d0e537c5662db2acb565615ef79962
SHA256 e2afaf1d969e104e2ffc22494e2f7e2ec4a0bda49b9de0dcb3bbaa3da9bc8655
SHA512 afdf2c9a29559645e08604b15f023475e8610f41f650f3527a4c2199fc4bda9c291bb24e2f337e00cfac6a5347fae125d8055f0af6eaca38b92ec408343cb9b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4130cf898fa8b448f1568bfb61305e94

MD5 86df60a0980b57864a2e2d68f857e0d8
SHA1 60c24af81c8406f05ee1721b374ab8a466d878a2
SHA256 ccdedffa29231d609157ccf22019e03a721e9ca248eabf12be511b76f795c247
SHA512 c025bcd3d21ec036712ad8e40afa7da973db770bf5b9b019c73ca8b99202c8e37999e6daaeab3f1c2190f84434a5e4657a8593e8a59066e0feaf38fcd8bc41e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ecc495a0b2b0470e25d688a9077fd977

MD5 741a45f09ceaf9cba7f0ee5b8aac236a
SHA1 aa6b59bba687981191db42af8a8b17dc0fc9150a
SHA256 92ee9b175404bf4aa4e346ebe4948ae5c0ee7edf5693778a5e6a4a1bed508eac
SHA512 97cb36fc2281753eb7a42f762c8ad5cdef7c14665214a71f33518f88cff24ec5e91267f834a6ea5ab0206457c7e9c730dcfb4f7a2ec527e3ce48877e2f34be6d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3ca8206460663e9e944ccfb414623b40

MD5 816be237e27ddb79f9fe0c46efa0119c
SHA1 fe0af06e1155ba784ed6ce8b97849eb3fffb5f9c
SHA256 ec6063b82a1adc4187ee0e01f413d4b5ed10277605f741295658acd3f0ceabcc
SHA512 5ca3c5bca3f5559a500de1262c133a972e776dba7192e6cade152245c0e1118fac41c48a79dd0f15c78ef177294867f041bccd3eece6a388eadcc32da8efaf00

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0407c8d6df198f6864381d3e595ae971

MD5 703dee4351832fd18ef5b85c6e1bf992
SHA1 bdea9dbbdae401cd68814d9815a17bab6f3870c2
SHA256 8fb57fee0d1c996a828a3147fdd9a38e8d1624163dad101e4bc1d44894bc3d68
SHA512 d43b5dc41be38f5fbe30a51c1abcbbc5c606c9d911dd164b5106fe2bcf0310ae8b641299c5491bbd5ba66433d87ebd17dc8a487d88d56d0ee8e81309533ef0b7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\852240b4203e72d7bfa66fcea2e589eb

MD5 547ffe689cd0af21ec616bd935f78b14
SHA1 36e70f429bea53fc2c8dd76eaad82f7bf9f3742c
SHA256 abf9ebe04321f9b8926304bc16041965dd79405783b7d3ea56d5fc802863bd9c
SHA512 3683baf37d3da8ac536ae4d2d852acfb49039b3c9d4ab42d972c23e2df6dbfd178a552ef023f48c43c6887161313d516914d26b7cca0c022e2741875d62e38d2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\06bf3774b39be975c53ba2193da7f90d

MD5 29abb94b78b9a73db28b7ba825833346
SHA1 fd6da6bc273d4a44067d8c2b625980ab8cc52aca
SHA256 d929c9d2ba98883044b81894da3e921de179d5915e1f92ca9d4df9cc89f1424f
SHA512 d5069ac2996929a5d1622f65ab450bd152130978b049f672b1a9f28cadcf724e317024bd95a11109e0ae488834ab184f5e4b10f6a21ba3329cf056a0b7139613

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8550d05ebb82e2c3691bc35b7c166899

MD5 f3e7b2683bee3c3628f500d157a7184c
SHA1 17aa34cf9e45a2a10cc370ef0047d6ec844053dd
SHA256 66d177f97d367d8181feedc6db9f92f71dbabf58cef1355439559005be6a24ac
SHA512 48994f038f0cca5a1ad783d05490ccc209ac4ff2a9fc3b508d5225348d2202f9760ac6c0334d12f74ab8227eab5a412370459ab328f44177729f8fb6b8911088

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1489d1b06ae2d917aae075e6fa9b8f7

MD5 5420558b929446bbd89f3d35e72b5836
SHA1 da46e5c797831b47c4d62fb9321c420c6b0ba50c
SHA256 12d1d581ac394291754c5b042baec0904c2f3b3be6a17e0a8761b32b6e53d507
SHA512 e125c8d668b2c73d583c528f6d35bf8a1c9558c594cb3aee98e25eda051f621a6924626d845f200442da65034dd77aa4a51dd1668c07b26611909f76cf9174b4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1cb6044427da36923148711b8796b750

MD5 ccdd89dadb2a17edd97a48f05de218ab
SHA1 c8829afdfda3e414304f09f588a9e00cd43de4d0
SHA256 8ebad66a66dec464ea8f6a70c240e6fac36d2155ef5460b2f1cc80451e9949ec
SHA512 79976e6623479c42c3b9babb2bbec208a8f13b580dc19419df33639e3922ab973e740fcf33c94841e833ef3ca8209b5b149d2ba5c064f08e3b6a526a651432f9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec9a7853aa53bb67f2099830ce97922a

MD5 0ab1d8c6659dc5952cb81416c8d9a85a
SHA1 16d889c645dd70901f87cc86f6db8a632b8518a0
SHA256 1ebc2f03253024917e0b562d101603c2f9e04aa70a05accc5e63eed9976ea0b4
SHA512 657a549264297c42e4783cdfc76baff2dab9b5b9c1f991b3aa8b16f2b8f87ccdb0c1a56edc23713ea7f34ffcc4cfc95b7fbba8d5fa06ea443610f06a00433f36

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6e62dea9b6f892b37a40251f84c9e0e3

MD5 f48177bf38c02c3a2cb322b77d627f23
SHA1 e207f206d2f707e7feddc32c02883bb71015d23d
SHA256 4a8a4eb5baa01e72889b67caa16b69a4c2e8a07aa12f84ade87376f344b2fbd9
SHA512 bb3c4ba048199ddd3cf5d554a90c279d7b868871f1a0eea4ce27c641556fb3e483cf839e3f9a27a092021783a25d604c952fb1ea34528d722db9930fe48e38a8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7209cd4fd5e4a48a4cabe7e3498368ec

MD5 643d56f3cc2d206fc1eeafd601a0e287
SHA1 0e55be4bc02d884a40a586b44d5728f9e8fefa6e
SHA256 637c7f57eea4b46821e968a691bc2181ac0ed00252691845fefd947a4c594f66
SHA512 10cb34ff5d98467c3de396ef4993a11c7db2545329ea473eb3ffe387f2663cfda6d21d31299f87aa3f298d2bfdb88d705b9236e9f71c48c22970713c2c3f75e6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6c536340229d1bb052a390124806163e

MD5 8dda220de3bfd073f993acca9cce3f19
SHA1 c78e343e500f592bfc59de89dcf8548cd6fa1f71
SHA256 21710259e1dbf800de1bd2dd8e19f33cf70dcf6ad306f7738a23300e40d385e3
SHA512 d21115712737f5d51c7fc887a14bb7b9dda4b9db295ecf429623a20eee02b2868956e6d66907997f100395625c42464218c36e750224e02fe0245c0292fc9e1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7df53404f56c9f1787b277ba9d17049b

MD5 ecaba5cf9469daab7c05847af2da45d7
SHA1 78d9c8d289db9815482249769dea663f4999cac2
SHA256 23946e247fe3bb06503a06be2b8e154d724a8c2e86fa4f441fc09ba1e5781121
SHA512 4204260b2efe3b4c95584394b30ad7957b154229828f0ac90a04e5167c7eb78f254777fad0d4fce9c5675fccc390dfccae2ecbd8d17e0e73bb0a6933605df7d1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38b0d496d6e95d4a4e1f049ecb71b4d1

MD5 60dc54bc02627b188fbc37f3c81899b3
SHA1 7065242d6e88ff9ed0e0cb891a9a6f6db2be5334
SHA256 35fd7f2804d4edd74c14cb7bb1534edc993ab7ce9e2d64be997b12ffa8ee5b16
SHA512 2b43c5d1f2ee4621055d94f3e04cbfed24371eea9a7c719f8392a993464e7d05635f59bf230e294c60de5656f421f4661bd5b1b8f286c4c15e79bf9c57d686c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1f571bce12b3689efa5586c78436d68a

MD5 aa1cb968768ba580f7e7d559906a49de
SHA1 1a6a0906ac3c68f859790103094a617e0439d77b
SHA256 b9e49fcb7d0be8aac8bf1d990f2277363077dbd34af7f5109a14bea85b9fd35b
SHA512 a72d7246405dea401b6e97963ea624772f65a7b20eacf2c358fdb73d7e5c2afac79b5cd39cd548ea8c43f14b5f03cc38deee8a495e9c7a1f264c1ca7de4f2411

C:\Users\Admin\AppData\Local\Temp\Roblox\http\92ca8d0a36e9ce06a1c3537675677ffb

MD5 ae7d26697baf4e3c0a4f7e4fd800f89b
SHA1 4f2472e39c964861701d80139cdc33bb967b2c34
SHA256 58c1370bf264ecee15638ab670a0af85f8bc3b974670875c757751fd116f4833
SHA512 e93451a30c74751ebd6996efb038016e28370de37bfbfe2fafd1f3c3817f2e720bc3b7d96e1c0e346f08e3c581d13f77a535c30c07a487f2c4a13b4da9970a0f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\05e6fbe7faeaf27e476e2247265bd7e2

MD5 774331951556eabf4930f06518bfe5f8
SHA1 79a7b332357aa2b18cf400033bfeeb5db7614627
SHA256 c4239a4d05bd3e427245f920cd4eba313e0af75c819f89553c7b6758da9b4d57
SHA512 bf67dd1c1d57779578524ee404de1648d9a4d8ed7f524fd49643ec49c3165b9321d64bda2216cfb8617c32cb500eacc2966263dc03841af51ee37facb2b1724e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b597c88ce139f36dee5c4afd7d80a2c1

MD5 f195c3e8ddb6711a2feaad4aec69b8b0
SHA1 20b1011f280842fe6aaa58117a05f57cc17b6c69
SHA256 9c263d2a5db10ebc2d543bbd0c125bcc5da6c2245ed133fe0abb1b308f343a71
SHA512 52ed2e19a2b991880336b6b1694016f4c8e5a5e92a9dc989ab317f7f743f38dddaeba8fb5764826bfd9aa145028a1b3f9fa34a02f39c1e5162aef7ad282b0632

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6105c4318cc0c25a63a6c9b8db84bc28

MD5 6badf7314b5d440a6ec8dea899d7872e
SHA1 003170f75f86922af2aa5bc4b2c3c41f5f14106d
SHA256 c13071122b4ff111c8ee877e0d8bde8f34ab3569df48fa81f6f4f1b0b0ba855a
SHA512 5fd8098470eb97e06e62f6d8753d3dbef34d8db6b3ff463cdc964e61e765ab844168170a64c837fa5d60c029a79ac0fe7cc661b9bae07acbaa2400120037aa13

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b00de5dcbb5ba1d0d58ba82e9c2f97bc

MD5 9a3aa49a6c57739a171e507a3b0a90ff
SHA1 f3c154299bec91f215954c1df2b03f68fa08efa3
SHA256 6d61517c2a006e117a5d5032dc1be0f993f275b6d0c8a0fbef25bda8cfc12691
SHA512 0a02917b5eefba73d3420852a5c66719bae97bc3c8f9adfb2dcad89dee9caf5852f660a3e787d84e9b86e3793ae0605b2db10c0a1463e0f09a733b614d2f4c1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7deb7c677f433c0b6c649020e88fe58a

MD5 d76037dbae4ae81158187aeced5816b1
SHA1 7858adc6bdb9f9b03fcb28746d7a0d08c297d058
SHA256 8113ac3b2c1f9a16f7c5a9be473b64abfa8c9689afcbcc30750aeb3077e3e27b
SHA512 e9e1b515c621e760968098b8e0a16e00cf1fc17b74065efd2f8793add04d5e506205df5d65be1db885fb958b9c5879ca728528963b4048bfe073d4249c0dc6eb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a116d80baa851750ec02ad98f6a28052

MD5 db41d22b9f9f4a43ff8916ff8d513da0
SHA1 00dee570785465bff97ec8a96ebfad3d21f1d248
SHA256 31e6f7d03515207ae87b2f9e9594fc94db77038fcc28ee3990689c6590b7547c
SHA512 df4e09d0f24ec1cf13ffa1a062f9d28a5d36d99b606f27f7ab757f82e4202e51ff4e033b6554b763e6f97c73bbe77b9d133b4b842469b96056654cc2f202124c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a479665357e877c36a8bc4ebab8ac84

MD5 f5366499a754da1e3317be61d63cc243
SHA1 8689a3cc6a2e1af5dbd2b6c23b488283362bab0a
SHA256 14873e016597bf69824fb29a219f6d81befb11b19fe2e505544115b33f030e6e
SHA512 6920f31ed14ef4621559e67c75a69ecdb7832aac639c40febd98dcf9b7c02402510e983b84cd309bdcd7b0438b394cd6b1d11bd4c32c58488d24a5d38db930c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\234369d070cc483f7122fd415837b73a

MD5 51d45f80859fca2ea5720897d7f1612a
SHA1 2a7d736969502784b96328f4fd1fc7697a099273
SHA256 5bf07b195c3902c69653ca0294f2bdbf9124df501af426b14d6bcdbb87d70745
SHA512 059455bc829431130377e4c8cee87ed3652b712eb46afa6f666d9e4aff7401b59068da840b91f4914d0752880cb2ed8c64a90e79e37f45b4b90996e44f2932b5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\68119f28ce3eca78171a6a8c8822e1bd

MD5 35e84ac53c5b6ac5714c5589d7d79153
SHA1 cedd01f0263fc9e5718b8e77b3467c14a35a1b53
SHA256 47da60997e22feaa88bff58bd2db6320534331990a14e2b64b6d665df77b931c
SHA512 7cbdf8f0eaee0c4e00e3813d1e558cc5aa305d6e9861255d721bfb655cddbf08c70fe61f686e79154f1c36e7a4b5c29f2ecf2776fee9eb0b7ac1da8c87e75dff

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1faae132446d428db1590bc4096fdb01

MD5 9a00f402a241fef46fad239d3f7ba367
SHA1 8c3840f9e8b546c82bc037f4cb5422a5e31ca165
SHA256 6d16dafe92055e9bf11ddd1923115432bd9f4ab42bf8e4f71c1a68e6ace09bf4
SHA512 2194b14c9002a22af34f276f7ebb819eaf0172828307679664277b17a4f2c9e8263ae32c53f041366550163923c6c66c9e2d9b235867af79bca8b70067c22926

C:\Users\Admin\AppData\Local\Temp\Roblox\http\611ae1f182f1efa9069d4419267a1e12

MD5 8fbb3393fc863f96063bd3736a1d709a
SHA1 4b59268f2f91dae3631c3fa08d9c81c83143b485
SHA256 e00cec3c4518e07deacf21d9d11f3e21cc822dd010ec0fe762e8087926a5c7b8
SHA512 5e0838ca72e43f511e4f537a26c4aebe52fa18e4290ae43ae1c559ad0c89fb91370b805d6f5f6ae410e97247765ed9f1b85f5b30e9f701243ad067eb3ac801be

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f46a00cf7794d187e97da28e14ee9933

MD5 29e30bd74d25a983d3763208077bdd7e
SHA1 33e39d8cba37db8e899f237ac9e4a83a3538658a
SHA256 1da80d1f4dbe143cbe20060c7cb9de541436a33552dd288a281a4b87d33e7585
SHA512 3da0425404e8d170e60e48038056e84f94cd112db3980ba440a4c63a48ae1984e172ac957db07736ebe16e2a549d2dd79252b6610d01772915d67e1ef7673a26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d023b7981d056910a0dce4fc99213248
SHA1 fbdc929b46891fcb5d920ccc3e2e5a71ad58f3ba
SHA256 93d52e11b59a7a8e62f9173e844c0cfcdd3e26e460c637d8dc11a1ed8c902c68
SHA512 99a7d71563e488b5d9338eaa6fd6269f4382b9b32c43b19eb02b51dc6430d5207c39483784b0898e596c050e3afc22fdc5f358cd0e95260b20dfc26c138a8d96

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c81813ea34dbe699086525727806025a

MD5 c3ba004f016dde238b673a3e7c51fc13
SHA1 9cda786a9b57c7872fc2eb0f3f9749217ec7f5f6
SHA256 d16601df861191bf29e6aebd1f1092da237da518de09ed310cf9dc0be3ef5012
SHA512 81f3192ccb8ee44b71edbbd79fe310472c0d648ed7de9ca8487531ac2dd2bfe984c947ef34f4bb59128fd8efef17784eacf09a9266f6ab3f24fe747ac961e947

C:\Users\Admin\AppData\Local\Temp\{6D98E0BC-DA82-40A7-AB23-4A89F72DE1A3}-BGAUpdate.exe

MD5 3f208f4e0dacb8661d7659d2a030f36e
SHA1 07fe69fd12637b63f6ae44e60fdf80e5e3e933ff
SHA256 d3c12e642d4b032e2592c2ba6e0ed703a7e43fb424b7c3ab5b2e51b53d1d433b
SHA512 6c8fce43d04dd7e7f5c8bf275ba01e24a76531e89cc02f4b2f23ab2086f7cf70f485c4240c5ea41bf61cb7ceee471df7e7bdc1b17dfdd54c22e4b02ff4e14740

C:\Users\Admin\AppData\Local\Temp\{B716FA4D-8008-44FD-A366-AA0718D10FAD}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

MD5 b18c705b3c68cc49d9bf3649abc75c24
SHA1 6dc8963dea0f3185368790dee2a346301b4fa24c
SHA256 c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa
SHA512 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{28EEACA8-9A64-4850-BAC5-1D16786BB5EE}\EDGEMITMP_6CC10.tmp\SETUP.EX_

MD5 5070a34dbada1aaa375cc572b5fc7d0c
SHA1 e74b7ef714755870976abe3d2b4a7db0b9cc21e5
SHA256 03e7a32e1f10fced6a07dfa4e6cfd92510d4bf6929d423798e4fb5ca91fe6c20
SHA512 fed3fcbb64a59070b0efd677ca2edc982d28e37cdf7283f2777af8aca7d3760a7eefb8d01b3c2bf4b4ec3708a74c3412f0dede91e31dca1b6f8a4e4edc673aa7

C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\OTADataCache.json

MD5 11a17ccab96a24de7ffcaef84e378fcc
SHA1 73f18d2438e46d1006506ae6edd754e17ea25106
SHA256 05858b9864ab11fee682bb6e6028b56d6328dca077041f58f2989f24ae14d9c1
SHA512 e3d6fee7cfb04e5b03c0782b5f647032fe948ce2a85e225b0cdecd8f2729e6ef055caf171e0cdaef50179f3e90d01a1589af44a61415889f5b4cb18db6f6b348

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-30 20:22

Reported

2024-04-30 20:52

Platform

win11-20240419-en

Max time kernel

1680s

Max time network

1684s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

Signatures

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4304 wrote to memory of 1192 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 1192 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2980 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4304 wrote to memory of 2344 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff858d33cb8,0x7ff858d33cc8,0x7ff858d33cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1964 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3832 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5484 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4452 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,3845277233882879637,14277559484475008302,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3664 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.4.4:53 google.com udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 22cececc69be16a1c696b62b4e66f90e
SHA1 b20b7f87f8bc64c1008b06a6528fc9c9da449c2f
SHA256 d940b85bc83f69e8370a801951eb6b8bb97efbb3aa427664105db76e44707258
SHA512 2b2e548f2c8f84d321ef2afdf31128065c3593b884ca8111b05800960b5378b99c7efa6165d02fba4c11e6e4b49b14e419d89f76d55ef574f4ac2b7d6ecb3d48

\??\pipe\LOCAL\crashpad_4304_TTQLUFIFZNJHZNAZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 5a85ad170d758e61ae5648c9402be224
SHA1 e6dfce354b5e9719bc4b28a24bb8241fc433e16f
SHA256 af0da8b5ad8127ae0ef7773bc9c4b145ed3fe7fbef4c48278649e1e3aa5ce617
SHA512 641414d91c993f74b6b71654522359d606c7f94ac0fcca6478d1bc33c30f4a9fdb9ce6f8e281c79a2f9b9670fda8a4ccdd80e7d64347c1f66d8c9ef024bcb09b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ebf043702719f9c7a15815ae7008c87f
SHA1 2d6cde126d64b44b80a70fefa3d3974fca0a27cb
SHA256 f13f3ad7c7d9d1f9d77c0c785262e8000cd2979dbbb6030c7a7688b860154bff
SHA512 34361a7863254d08513a102fb055d185ec8dc9b168bd8b8e1bbacb023cd1cc748422275cc76b32620c136469c87f94770f58760ec7d3ee3d2801aaef907f36f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 9ee75dcd8d1f238e92bb9265e8423ac1
SHA1 71be94c300bace9e5f6ba00e79134db92951473d
SHA256 749d9344604b873050a3cc879e3df63cacabc7c09c5e13f5db787e6b2ad69400
SHA512 f9e45331f3174f3b2e36cfd1ecccd6a2730dcccd7b96ff17a1a49009c50e5d9b16bc2fe62d415acbea13cae62909dd111e8dfae94ececa30524cb2b1b0b33b55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8fb433e4436408892253f48ff3182946
SHA1 624899e33c777f30fb075dd2bfd4872ef842bbcd
SHA256 09cfdef66863a7eb4a059360eb99b929633d0e9a2cb28a0916e9e7e869fc32f9
SHA512 e724d4c52037770bd7679fddafd55810f70ad02dcbcb731cb52e69b5870ecf8462d87fcfef3a050216dcf43acd7a467042d436cacdb0228c2d378ab4d4b7bb3c