Malware Analysis Report

2025-01-18 22:19

Sample ID 240501-mxbg3sdb8t
Target https://create.roblox.com/landing
Tags
adware discovery evasion persistence stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://create.roblox.com/landing was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion persistence stealer trojan

Downloads MZ/PE file

Modifies Installed Components in the registry

Sets file execution options in registry

Registers COM server for autorun

Loads dropped DLL

Executes dropped EXE

Adds Run key to start application

Checks installed software on the system

Checks whether UAC is enabled

Installs/modifies Browser Helper Object

Drops desktop.ini file(s)

Drops file in System32 directory

Checks system information in the registry

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

System policy modification

Suspicious use of AdjustPrivilegeToken

Enumerates system info in registry

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Checks processor information in registry

Suspicious use of FindShellTrayWindow

Suspicious behavior: GetForegroundWindowSpam

Suspicious behavior: AddClipboardFormatListener

Modifies Internet Explorer settings

Modifies data under HKEY_USERS

Suspicious use of SetWindowsHookEx

Modifies registry class

NTFS ADS

Suspicious use of SendNotifyMessage

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-01 10:50

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-01 10:50

Reported

2024-05-01 11:35

Platform

win10v2004-20240226-en

Max time kernel

2657s

Max time network

2642s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

Signatures

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\ServiceState\WinHttpAutoProxySvc\Data\cachev3.dat C:\Windows\system32\svchost.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\ce-24-ec-47-22-9c C:\Windows\system32\svchost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\ce-24-ec-47-22-9c\WpadDecisionReason = "1" C:\Windows\system32\svchost.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\ce-24-ec-47-22-9c\WpadDecisionTime = a0b6db80ba9bda01 C:\Windows\system32\svchost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\ce-24-ec-47-22-9c\WpadDecision = "0" C:\Windows\system32\svchost.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Windows\system32\svchost.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\svchost.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4224 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4560 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3420 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5916 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=4800 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5468 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=3952 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3420 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc

Network

Country Destination Domain Proto
GB 142.250.187.234:443 tcp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
GB 18.244.155.13:443 create.roblox.com tcp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 13.107.6.158:443 business.bing.com tcp
GB 172.165.61.93:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
BE 2.21.17.194:443 www.microsoft.com tcp
GB 23.73.139.27:443 bzib.nelreports.net tcp
US 8.8.8.8:53 159.113.53.23.in-addr.arpa udp
US 8.8.8.8:53 13.155.244.18.in-addr.arpa udp
US 8.8.8.8:53 158.6.107.13.in-addr.arpa udp
US 8.8.8.8:53 93.61.165.172.in-addr.arpa udp
US 8.8.8.8:53 27.139.73.23.in-addr.arpa udp
US 8.8.8.8:53 232.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 194.17.21.2.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 locale.roblox.com udp
US 8.8.8.8:53 locale.roblox.com udp
US 8.8.8.8:53 users.roblox.com udp
US 8.8.8.8:53 users.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 o293668.ingest.sentry.io udp
US 8.8.8.8:53 o293668.ingest.sentry.io udp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 8.8.8.8:53 4.44.116.128.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 3.44.116.128.in-addr.arpa udp
US 8.8.8.8:53 233.69.68.104.in-addr.arpa udp
DE 128.116.44.4:443 users.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 games.roblox.com udp
US 8.8.8.8:53 games.roblox.com udp
US 8.8.8.8:53 webblox.roblox.com udp
US 8.8.8.8:53 webblox.roblox.com udp
GB 99.84.9.116:443 webblox.roblox.com tcp
GB 99.84.9.116:443 webblox.roblox.com tcp
GB 99.84.9.116:443 webblox.roblox.com tcp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
US 8.8.8.8:53 116.9.84.99.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 nw-umwatson.events.data.microsoft.com udp
US 20.42.73.29:443 nw-umwatson.events.data.microsoft.com tcp
US 8.8.8.8:53 29.73.42.20.in-addr.arpa udp
DE 128.116.44.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 clientsettings.roblox.com udp
US 8.8.8.8:53 clientsettings.roblox.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
US 8.8.8.8:53 thumbnails.roblox.com udp
NL 23.62.61.139:443 www.bing.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 139.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 17.139.73.23.in-addr.arpa udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 13.107.253.64:443 tcp
NL 23.62.61.139:443 www.bing.com udp
US 8.8.8.8:53 134.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 14.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
GB 18.244.155.13:443 create.roblox.com tcp
NL 23.62.61.193:443 www.bing.com tcp
US 8.8.8.8:53 193.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
BE 2.21.17.194:80 www.microsoft.com tcp
US 8.8.8.8:53 74.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 9.228.82.20.in-addr.arpa udp
US 8.8.8.8:53 156.33.209.4.in-addr.arpa udp
US 8.8.8.8:53 21.114.53.23.in-addr.arpa udp
US 8.8.8.8:53 241.154.82.20.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 166.17.21.2.in-addr.arpa udp
US 8.8.8.8:53 119.110.54.20.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 65.139.73.23.in-addr.arpa udp
US 8.8.8.8:53 139.190.18.2.in-addr.arpa udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-01 10:50

Reported

2024-05-01 11:35

Platform

win11-20240426-en

Max time kernel

2698s

Max time network

2700s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

Signatures

Downloads MZ/PE file

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU2C9C.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU2C9C.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9B5A9DFB-CF61-4F7B-9C14-3ED351D6432D}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU2C9C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B5CCE694-E819-468B-8612-39C481BA8925}\BGAUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\PdfPreview\\PdfPreviewHandler.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO\\ie_to_edge_bho_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=B5D6C9688972483BB9068247E609E929" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B5CCE694-E819-468B-8612-39C481BA8925}\BGAUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU2C9C.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU2C9C.tmp\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxPresence-50d7e209-c2fcb3b0\RoduxPresence\Reducer\Presence\byUserId.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\DeveloperFramework\Dark\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\WidgetIcons\Light\Standard\AnimationEditor.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\ContactList\Components\FriendList\FriendListItem.story.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaApp\graphic\noconnection.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-2fca3173-0.4.2\LuauPolyfill\String\trimEnd.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\NetworkingGames-47864141-05d37b25\NetworkingGames\networkRequests\createGetExperiencesProductInfo.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\PlayerContextualMenu\UserProfiles.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\CanvasGroup.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Navigation\Light\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\notification_helper.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\AvatarEditorPrompts\Thunks\SignalCreateOutfitPermissionDenied.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\NetworkingShareLinks-386ea8af-15eccb0a\NetworkingShareLinks\networkingShareLinkTypes.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\FocusBehaviors\FocusBehaviors\composeFocusBehaviors.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxContacts-234c3345-0.8.4\RoduxContacts\Reducers\Contacts\deviceContactToRobloxContact.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\String\String\charCodeAt.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\FriendsLanding\UIBlox.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdate.dll C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\webview2_integration.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\AssetManager\Light\Large\AudioFolder.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Settings\Components\SettingsFullScreenTitleBar.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\WidgetIcons\Dark\Standard\Assistant.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Thunks\launchPremiumUpsell.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\UnitTestHelpers\testWithStyledComponent.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\FriendsLanding\AppHeaderBar.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\DraggerTools\Dark\Large\Scale.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\TypeParameter.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Components\Memory\ServerMemory.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\TopBar\Components\Presentation\GamepadMenu\MenuNavigationToggleDialog.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Cryo\Cryo\Dictionary\init.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\TenFootUiGlobalNav\Localization.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\StudioToolbox\AssetConfig\offsale.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Debugger\Light\Standard\StepInto.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\TenFootUiEngagementScreen\Localization.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\CoreScripts\.robloxrc C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InspectAndBuy\Reducers\Overlay.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestMatcherUtils-edcba0e9-3.5.0\JestMatcherUtils\Replaceable.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\tutils-aa9a0351-0.1.2\tutils\print.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\xboxLT.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\VoiceChat\SpeakerDark\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\OtpLogin\Dev\JestGlobals.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\EmotesMenu\Components\EmotesWheel.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends-948a3386-02a3ea83\RoduxFriends\Reducers\Friends\recommendations\bySource.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\elevation_service.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\designer\images\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\qt_translations\qtdeclarative_zh_CN.qm C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\SocialLibraries\SocialLibraries\Components\AlertView\AlertViewCheckbox.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Rodux\Rodux\createReducer.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxNetworking\Rodux.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\EdgeWebView.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Emotes\Editor\Small\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\VoiceChat\MicDark\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\mock\mock\fmtArgs.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\NetworkingFriends\NetworkingFriends\networkRequests\createAcceptFriendRequestWithToken.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\DiffSequences-edcba0e9-3.5.0\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\roblox_networking-chat\networking-chat\networkRequests\createSetConversationUniverse.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "59" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "92" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "45" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "97" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "39" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "60" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "117" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "36" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "110" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "31" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "37" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "15" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "79" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "9" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "100" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "57" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "72" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "101" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "3" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "77" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "95" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "53" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "85" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "5" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "33" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "22" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ = "IApp" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED}\LOCALSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\runas\ProgrammaticAccessOnly C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeMHT\Application\ApplicationCompany = "Microsoft Corporation" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassSvc\ = "Microsoft Edge Update Legacy On Demand" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ = "IAppCommandWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\NumMethods\ = "6" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ = "IGoogleUpdateCore" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\ProgID\ = "MicrosoftEdgeUpdate.PolicyStatusMachineFallback.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods\ = "11" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\CLSID\ = "{77857D02-7A25-4B67-9266-3E122A8F39E4}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ = "IGoogleUpdateCore" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\ = "IProcessLauncher" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ = "IAppVersionWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods\ = "11" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\ProgID\ = "MicrosoftEdgeUpdate.ProcessLauncher.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.PolicyStatusMachine" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebSvc\CurVer\ = "MicrosoftEdgeUpdate.Update3WebSvc.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ = "IPolicyStatus4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\EnablePreviewHandler = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ = "IGoogleUpdate3WebSecurity" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\Programmable\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\ = "Microsoft Edge Update Broker Class Factory" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine.1.0\CLSID\ = "{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.shtml\OpenWithProgids\MSEdgeHTM C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassSvc\CurVer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ = "IAppBundle" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\VERSIONINDEPENDENTPROGID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 419179.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1060 wrote to memory of 4108 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 4108 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 3036 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2352 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2352 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1060 wrote to memory of 2492 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffde20d3cb8,0x7ffde20d3cc8,0x7ffde20d3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1900 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5624 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5252 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5928 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6088 /prefetch:8

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6468 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MERBQzU5NjktNDI0Ny00QjJDLTk2MzktMDkyQkE2MkUwNDkwfSIgdXNlcmlkPSJ7MEQxMDkwRkQtNTdGQS00MzUxLUE5RjEtNkFDQTY0Mzc2NTYyfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntBMjYxREE3Ri05QTJFLTRDRDMtODE3NC04RDg5RDZBNEFCMDR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjU1NDA3MDY5MTQiIGluc3RhbGxfdGltZV9tcz0iNTY5Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{0DAC5969-4247-4B2C-9639-092BA62E0490}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MERBQzU5NjktNDI0Ny00QjJDLTk2MzktMDkyQkE2MkUwNDkwfSIgdXNlcmlkPSJ7MEQxMDkwRkQtNTdGQS00MzUxLUE5RjEtNkFDQTY0Mzc2NTYyfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins3NDRFN0ZCQi1CM0ZCLTRDNTctOTMwQy1GQUZENkZEQ0JEQTV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjU1NDQ2NDY5NjEiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5828 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{A00CA1A9-3A62-43D5-A89A-9C57C5C04FD8}\EDGEMITMP_26B24.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7320e88c0,0x7ff7320e88cc,0x7ff7320e88d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MERBQzU5NjktNDI0Ny00QjJDLTk2MzktMDkyQkE2MkUwNDkwfSIgdXNlcmlkPSJ7MEQxMDkwRkQtNTdGQS00MzUxLUE5RjEtNkFDQTY0Mzc2NTYyfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1MjcwRUM2OC00QkUzLTRCQzItOEQ0NC1DNkQ5N0RGNTA0OTZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjQuMC4yNDc4LjY3IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1NTUyMzc5NzM4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=3420.3940.10624337256727948709

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x17c,0x180,0x184,0x104,0x18c,0x7ffdca35ceb8,0x7ffdca35cec4,0x7ffdca35ced0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1784,i,11692787274587220498,12464143030462037749,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2032,i,11692787274587220498,12464143030462037749,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2244,i,11692787274587220498,12464143030462037749,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3512,i,11692787274587220498,12464143030462037749,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4080,i,11692787274587220498,12464143030462037749,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3592,i,11692787274587220498,12464143030462037749,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004E8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3660 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714560862551+avatar+browsertrackerid:1714560679301001+robloxLocale:en-US+gameLocale:en-US+channel:+browser:edge+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:15350820071+universeId:5294748261

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9B5A9DFB-CF61-4F7B-9C14-3ED351D6432D}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{9B5A9DFB-CF61-4F7B-9C14-3ED351D6432D}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{E6099C5B-A2EC-4313-B24A-8467ED4FA30D}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RTYwOTlDNUItQTJFQy00MzEzLUIyNEEtODQ2N0VENEZBMzBEfSIgdXNlcmlkPSJ7MEQxMDkwRkQtNTdGQS00MzUxLUE5RjEtNkFDQTY0Mzc2NTYyfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins0QjFFOThBMy0zNkJCLTRDMTYtQkNDNy1DNzlCNUJERDA1RkJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4NS4yOSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9Ijg5ODM5MTE1ODciIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iODk4NDA0MjE3NiIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjE0IiBldmVudHJlc3VsdD0iMCIgZXJyb3Jjb2RlPSItMjE0NzAyMzgzOCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iOTA0OTQ0MTgyNyIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgZG93bmxvYWRlcj0iZG8iIHVybD0iaHR0cDovL21zZWRnZS5iLnRsdS5kbC5kZWxpdmVyeS5tcC5taWNyb3NvZnQuY29tL2ZpbGVzdHJlYW1pbmdzZXJ2aWNlL2ZpbGVzLzcyZWQ4MDg3LWVlOTgtNDI5Yy05MzMwLWNhM2MxOTNkNDFhZj9QMT0xNzE1MTY1ODYyJmFtcDtQMj00MDQmYW1wO1AzPTImYW1wO1A0PVR3ZG5LQWM3SGJRYiUyZjdEbllaQVNSMFRtcURlVzdtRzU5WUZqUmF6ZXhvUjZ1eDVoQSUyYmIwSmduQmVwTVdlMnoydHlMUCUyYndGQ2VQOHd4enI4a2RTZiUyZlElM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIwIiB0b3RhbD0iMCIgZG93bmxvYWRfdGltZV9tcz0iMiIvPjxldmVudCBldmVudHR5cGU9IjE0IiBldmVudHJlc3VsdD0iMCIgZXJyb3Jjb2RlPSItMjE0NTM4NjM4NSIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iOTA0OTQ1MjA5NyIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgZG93bmxvYWRlcj0iYml0cyIgdXJsPSJodHRwOi8vbXNlZGdlLmIudGx1LmRsLmRlbGl2ZXJ5Lm1wLm1pY3Jvc29mdC5jb20vZmlsZXN0cmVhbWluZ3NlcnZpY2UvZmlsZXMvNzJlZDgwODctZWU5OC00MjljLTkzMzAtY2EzYzE5M2Q0MWFmP1AxPTE3MTUxNjU4NjImYW1wO1AyPTQwNCZhbXA7UDM9MiZhbXA7UDQ9VHdkbktBYzdIYlFiJTJmN0RuWVpBU1IwVG1xRGVXN21HNTlZRmpSYXpleG9SNnV4NWhBJTJiYjBKZ25CZXBNV2UyejJ0eUxQJTJid0ZDZVA4d3h6cjhrZFNmJTJmUSUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IiIgY2RuX2NpZD0iLTEiIGNkbl9jY2M9IiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjAiIHRvdGFsPSItMSIgZG93bmxvYWRfdGltZV9tcz0iNjMiLz48ZXZlbnQgZXZlbnR0eXBlPSIxNCIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iOTA0OTQ2MTg5MyIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgZG93bmxvYWRlcj0id2luaHR0cCIgdXJsPSJodHRwOi8vbXNlZGdlLmIudGx1LmRsLmRlbGl2ZXJ5Lm1wLm1pY3Jvc29mdC5jb20vZmlsZXN0cmVhbWluZ3NlcnZpY2UvZmlsZXMvNzJlZDgwODctZWU5OC00MjljLTkzMzAtY2EzYzE5M2Q0MWFmP1AxPTE3MTUxNjU4NjImYW1wO1AyPTQwNCZhbXA7UDM9MiZhbXA7UDQ9VHdkbktBYzdIYlFiJTJmN0RuWVpBU1IwVG1xRGVXN21HNTlZRmpSYXpleG9SNnV4NWhBJTJiYjBKZ25CZXBNV2UyejJ0eUxQJTJid0ZDZVA4d3h6cjhrZFNmJTJmUSUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IjE5OS4yMzIuMjEwLjE3MiIgY2RuX2NpZD0iMyIgY2RuX2NjYz0iR0IiIGNkbl9tc2VkZ2VfcmVmPSJSZWYgQTogNjBDQTg1NDcyNzc0NDY1MzgxRUQ3NTc1NTU0RUFCMzkgUmVmIEI6IExPTjA0RURHRTA5MTAgUmVmIEM6IDIwMjQtMDQtMDFUMTc6NTM6MjBaIiBjZG5fYXp1cmVfcmVmX29yaWdpbl9zaGllbGQ9IlJlZiBBOiBDQzQzRTY5QUM5MTI0QjNEOUMwNzc0MUE4OUZGQjRDQiBSZWYgQjogQU1TMjMxMDIxMDE0MDA1IFJlZiBDOiAyMDI0LTA0LTAxVDE3OjUzOjIwWiIgY2RuX2NhY2hlPSJISVQsIEhJVCIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIxNjMwNzkyIiB0b3RhbD0iMTYzMDc5MiIgZG93bmxvYWRfdGltZV9tcz0iNTc1Ii8-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Temp\EU2C9C.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU2C9C.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{E6099C5B-A2EC-4313-B24A-8467ED4FA30D}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B5CCE694-E819-468B-8612-39C481BA8925}\BGAUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B5CCE694-E819-468B-8612-39C481BA8925}\BGAUpdate.exe" --edgeupdate-client --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QThFQkQzMjItRTNGMi00QURELTk2MzktMzdDN0RCQ0NCNjU0fSIgdXNlcmlkPSJ7MEQxMDkwRkQtNTdGQS00MzUxLUE5RjEtNkFDQTY0Mzc2NTYyfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntGMDM2ODI1OC1BNEZGLTRBMzktQjkwNS04M0IyOTRDNkY0NUV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-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_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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTI2NTQ5NDY2ODgiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSIxMzA5IiBkb3dubG9hZF90aW1lX21zPSI4NDY5IiBkb3dubG9hZGVkPSIxODA0NDQ0OCIgdG90YWw9IjE4MDQ0NDQ4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSIzMTI0Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1864,15344703165579874711,5582541578443155284,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff781eb88c0,0x7ff781eb88cc,0x7ff781eb88d8

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff781eb88c0,0x7ff781eb88cc,0x7ff781eb88d8

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NkVBOUM2OEYtMTNGNS00MTlCLTg5NTctMEU2OEQ5NzA1NUQwfSIgdXNlcmlkPSJ7MEQxMDkwRkQtNTdGQS00MzUxLUE5RjEtNkFDQTY0Mzc2NTYyfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins4QzI3MTJGQy04MTU3LTQwODUtOTcxRS1EMENEQzM4OTlDNjF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtEeE9iakhHYStuUmEyYXRDM3dvK0lFcEM3OCtaWWVBVWJrWHBEQzJjajdVPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTg1LjI5IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9IklzT25JbnRlcnZhbENvbW1hbmRzQWxsb3dlZD0tdGFyZ2V0X2RldjtQcm9kdWN0c1RvUmVnaXN0ZXI9JTdCMUZBQjhDRkUtOTg2MC00MTVDLUE2Q0EtQUE3RDEyMDIxOTQwJTdEIiBpbnN0YWxsYWdlPSIwIiBjb2hvcnQ9InJyZkAwLjM4Ij48dXBkYXRlY2hlY2svPjxwaW5nIHJkPSI2MzMwIiBwaW5nX2ZyZXNobmVzcz0ie0QyMzEwOEYwLTU3NTQtNDdBQy05MkI4LUUwOEFERDMzRUJENX0iLz48L2FwcD48YXBwIGFwcGlkPSJ7NTZFQjE4RjgtQjAwOC00Q0JELUI2RDItOEM5N0ZFN0U5MDYyfSIgdmVyc2lvbj0iOTAuMC44MTguNjYiIG5leHR2ZXJzaW9uPSIxMjQuMC4yNDc4LjY3IiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGlzX3Bpbm5lZF9zeXN0ZW09InRydWUiIGxhc3RfbGF1bmNoX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1OTAzNDIxOTk0MTA1MTAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDEyOTc3NTc3IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDEzNjk3MzY4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDU5NDc0Mzc5IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDc5MjI0Mjk5IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxNjI1NDkyNDE0MyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9Ijk4NyIgZG93bmxvYWRlZD0iMTcyNzIzNzY4IiB0b3RhbD0iMTcyNzIzNzY4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMiIgaW5zdGFsbF90aW1lX21zPSIzMTc1NDgiLz48cGluZyBhY3RpdmU9IjEiIGFkPSI2MzMwIiByZD0iNjMzMCIgcGluZ19mcmVzaG5lc3M9InsyNzI0MUMxOC0wRUQ2LTQxRDQtQTVGQi05MTNCRTRBRUI2RjB9Ii8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNC4wLjI0NzguNjciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgY29ob3J0PSJycmZAMC4wOSIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF9jb3VudD0iMSIgbGFzdF9sYXVuY2hfdGltZT0iMTMzNTkwMzQzOTYyMDM5MzAwIj48dXBkYXRlY2hlY2svPjxwaW5nIGFjdGl2ZT0iMCIgcmQ9IjYzMzAiIHBpbmdfZnJlc2huZXNzPSJ7MzU3NzJFMUEtMTI5OS00RUZGLTk5OEQtRUJCRThGNTZFMjY0fSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

Network

Country Destination Domain Proto
US 8.8.8.8:53 create.roblox.com udp
US 8.8.8.8:53 create.roblox.com udp
GB 18.244.155.63:443 create.roblox.com tcp
GB 18.244.155.63:443 create.roblox.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 107.39.156.108.in-addr.arpa udp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com udp
US 8.8.8.8:53 233.69.68.104.in-addr.arpa udp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
DE 128.116.44.4:443 clientsettings.roblox.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
DE 128.116.44.4:443 clientsettings.roblox.com udp
GB 99.84.9.116:443 webblox.roblox.com tcp
GB 99.84.9.116:443 webblox.roblox.com tcp
GB 99.84.9.116:443 webblox.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
N/A 224.0.0.251:5353 udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 13.224.245.39:443 setup.rbxcdn.com tcp
GB 13.224.245.39:443 setup.rbxcdn.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:49982 tcp
N/A 127.0.0.1:49984 tcp
N/A 127.0.0.1:49988 tcp
GB 13.224.245.39:443 setup.rbxcdn.com tcp
GB 13.224.245.39:443 setup.rbxcdn.com tcp
GB 13.224.245.39:443 setup.rbxcdn.com tcp
GB 216.137.44.23:443 css.rbxcdn.com tcp
GB 216.137.44.23:443 css.rbxcdn.com tcp
GB 216.137.44.23:443 css.rbxcdn.com tcp
GB 216.137.44.23:443 css.rbxcdn.com tcp
GB 216.137.44.23:443 css.rbxcdn.com tcp
GB 216.137.44.23:443 css.rbxcdn.com tcp
US 2.18.190.139:443 static.rbxcdn.com tcp
US 2.18.190.139:443 static.rbxcdn.com tcp
GB 18.245.253.103:443 js.rbxcdn.com tcp
GB 18.245.253.103:443 js.rbxcdn.com tcp
GB 18.245.253.103:443 js.rbxcdn.com tcp
GB 18.245.253.103:443 js.rbxcdn.com tcp
GB 18.245.253.103:443 js.rbxcdn.com tcp
GB 18.245.253.103:443 js.rbxcdn.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 2.18.190.139:443 static.rbxcdn.com tcp
GB 216.137.44.23:443 css.rbxcdn.com tcp
GB 216.137.44.124:443 images.rbxcdn.com tcp
GB 216.137.44.124:443 images.rbxcdn.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
GB 216.137.44.124:443 images.rbxcdn.com tcp
DE 128.116.44.4:443 clientsettings.roblox.com udp
US 2.18.190.83:443 apis.rbxcdn.com tcp
US 2.18.190.83:443 apis.rbxcdn.com tcp
DE 128.116.44.4:443 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com udp
DE 128.116.44.4:443 clientsettings.roblox.com udp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
DE 128.116.44.4:443 clientsettings.roblox.com udp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 clientsettings.roblox.com udp
DE 128.116.44.3:443 realtime-signalr.roblox.com tcp
DE 128.116.44.4:443 clientsettings.roblox.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
GB 108.138.217.19:443 t4.rbxcdn.com tcp
GB 18.154.84.72:443 t7.rbxcdn.com tcp
GB 108.138.217.19:443 t4.rbxcdn.com tcp
GB 18.154.84.72:443 t7.rbxcdn.com tcp
US 8.8.8.8:53 72.84.154.18.in-addr.arpa udp
US 8.8.8.8:53 19.217.138.108.in-addr.arpa udp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
GB 23.73.139.9:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
US 216.239.34.36:443 region1.google-analytics.com udp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 chat.roblox.com udp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:51066 tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 chat.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 chat.roblox.com tcp
N/A 127.0.0.1:51075 tcp
N/A 127.0.0.1:51084 tcp
N/A 127.0.0.1:51087 tcp
N/A 127.0.0.1:51091 tcp
N/A 127.0.0.1:51095 tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
GB 216.137.44.28:443 css.rbxcdn.com tcp
GB 216.137.44.28:443 css.rbxcdn.com tcp
GB 216.137.44.28:443 css.rbxcdn.com tcp
GB 216.137.44.28:443 css.rbxcdn.com tcp
GB 216.137.44.28:443 css.rbxcdn.com tcp
GB 216.137.44.28:443 css.rbxcdn.com tcp
GB 108.138.217.124:443 static.rbxcdn.com tcp
GB 108.138.217.124:443 static.rbxcdn.com tcp
GB 216.137.44.124:443 images.rbxcdn.com tcp
GB 18.245.253.65:443 js.rbxcdn.com tcp
GB 18.245.253.65:443 js.rbxcdn.com tcp
GB 18.245.253.65:443 js.rbxcdn.com tcp
GB 18.245.253.65:443 js.rbxcdn.com tcp
GB 18.245.253.65:443 js.rbxcdn.com tcp
GB 18.245.253.65:443 js.rbxcdn.com tcp
GB 18.245.253.65:443 js.rbxcdn.com tcp
US 8.8.8.8:53 124.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 65.253.245.18.in-addr.arpa udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
GB 216.137.44.28:443 css.rbxcdn.com tcp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 128.116.101.4:443 roblox.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
DE 128.116.44.4:443 metrics.roblox.com udp
DE 128.116.44.4:443 metrics.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 2.18.190.82:443 apis.rbxcdn.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com udp
DE 128.116.44.4:443 metrics.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:443 dns.google udp
DE 128.116.44.4:443 auth.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com udp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:51566 tcp
N/A 127.0.0.1:51569 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
N/A 127.0.0.1:51759 tcp
N/A 127.0.0.1:51761 tcp
N/A 127.0.0.1:51763 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:51769 tcp
N/A 127.0.0.1:53000 tcp
N/A 127.0.0.1:53002 tcp
N/A 127.0.0.1:53004 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
GB 18.154.84.19:443 t7.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
N/A 127.0.0.1:53017 tcp
N/A 127.0.0.1:53020 tcp
N/A 127.0.0.1:53134 tcp
GB 18.245.253.76:443 c2.rbxcdn.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
N/A 127.0.0.1:53174 tcp
N/A 127.0.0.1:53176 tcp
N/A 127.0.0.1:53187 tcp
N/A 127.0.0.1:53252 tcp
N/A 127.0.0.1:53254 tcp
N/A 127.0.0.1:53256 tcp
N/A 127.0.0.1:53258 tcp
N/A 127.0.0.1:53260 tcp
N/A 127.0.0.1:53262 tcp
N/A 127.0.0.1:53266 tcp
N/A 127.0.0.1:53380 tcp
N/A 127.0.0.1:53446 tcp
N/A 127.0.0.1:53448 tcp
N/A 127.0.0.1:53450 tcp
N/A 127.0.0.1:53458 tcp
DE 128.116.44.4:443 auth.roblox.com udp
N/A 127.0.0.1:53491 tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:53498 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
N/A 127.0.0.1:53501 tcp
N/A 127.0.0.1:53504 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.3:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
N/A 127.0.0.1:53522 tcp
N/A 127.0.0.1:53527 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
N/A 127.0.0.1:54755 tcp
N/A 127.0.0.1:54768 tcp
N/A 127.0.0.1:54770 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 18.154.84.19:443 t7.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t2.rbxcdn.com tcp
N/A 127.0.0.1:54775 tcp
N/A 127.0.0.1:54787 tcp
N/A 127.0.0.1:54790 tcp
N/A 127.0.0.1:54829 tcp
DE 128.116.5.33:54126 udp
DE 128.116.44.4:443 auth.roblox.com tcp
N/A 127.0.0.1:55032 tcp
N/A 127.0.0.1:55211 tcp
N/A 127.0.0.1:55214 tcp
N/A 127.0.0.1:55216 tcp
N/A 127.0.0.1:55221 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
N/A 127.0.0.1:55227 tcp
N/A 127.0.0.1:55230 tcp
N/A 127.0.0.1:55233 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
US 205.234.175.102:443 c0.rbxcdn.com tcp
GB 18.245.253.76:443 c2.rbxcdn.com tcp
GB 143.204.176.43:443 c3.rbxcdn.com tcp
GB 108.138.233.44:443 t6.rbxcdn.com tcp
N/A 127.0.0.1:55247 tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
US 8.8.8.8:53 t5.rbxcdn.com udp
N/A 127.0.0.1:55264 tcp
N/A 127.0.0.1:55271 tcp
N/A 127.0.0.1:55273 tcp
N/A 127.0.0.1:55275 tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
GB 143.204.194.74:443 t1.rbxcdn.com tcp
US 2.18.190.136:443 t5.rbxcdn.com tcp
GB 143.204.194.74:443 t1.rbxcdn.com tcp
GB 143.204.194.74:443 t1.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
GB 99.86.114.52:443 t2.rbxcdn.com tcp
GB 99.86.114.52:443 t2.rbxcdn.com tcp
GB 108.138.233.44:443 t6.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
US 8.8.8.8:53 44.233.138.108.in-addr.arpa udp
US 8.8.8.8:53 133.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 74.194.204.143.in-addr.arpa udp
US 8.8.8.8:53 52.114.86.99.in-addr.arpa udp
GB 108.138.233.44:443 t6.rbxcdn.com tcp
GB 99.86.114.52:443 t2.rbxcdn.com tcp
GB 99.86.114.52:443 t2.rbxcdn.com tcp
US 2.18.190.136:443 t5.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
US 2.18.190.136:443 t5.rbxcdn.com tcp
US 2.18.190.136:443 t5.rbxcdn.com tcp
GB 143.204.194.74:443 t1.rbxcdn.com tcp
US 2.18.190.133:443 t5.rbxcdn.com tcp
GB 18.154.84.19:443 t7.rbxcdn.com tcp
GB 108.138.233.44:443 t6.rbxcdn.com tcp
GB 108.138.233.44:443 t6.rbxcdn.com tcp
GB 99.86.114.52:443 t2.rbxcdn.com tcp
GB 99.86.114.52:443 t2.rbxcdn.com tcp
GB 18.154.84.19:443 t7.rbxcdn.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:55354 tcp
N/A 127.0.0.1:55356 tcp
N/A 127.0.0.1:55358 tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:55401 tcp
N/A 127.0.0.1:55403 tcp
N/A 127.0.0.1:55625 tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
US 2.18.190.136:443 t5.rbxcdn.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:56266 tcp
N/A 127.0.0.1:56299 tcp
N/A 127.0.0.1:56301 tcp
N/A 127.0.0.1:56303 tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:57982 tcp
N/A 127.0.0.1:57993 tcp
N/A 127.0.0.1:58313 tcp
N/A 127.0.0.1:58322 tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:59634 tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:60626 tcp
N/A 127.0.0.1:60631 tcp
N/A 127.0.0.1:60633 tcp
N/A 127.0.0.1:60635 tcp
N/A 127.0.0.1:60637 tcp
N/A 127.0.0.1:60639 tcp
N/A 127.0.0.1:60641 tcp
N/A 127.0.0.1:60643 tcp
N/A 127.0.0.1:60645 tcp
N/A 127.0.0.1:60647 tcp
N/A 127.0.0.1:60649 tcp
N/A 127.0.0.1:60652 tcp
N/A 127.0.0.1:60673 tcp
N/A 127.0.0.1:60676 tcp
N/A 127.0.0.1:60678 tcp
US 2.18.190.134:443 c7.rbxcdn.com tcp
N/A 127.0.0.1:60902 tcp
N/A 127.0.0.1:60915 tcp
IE 20.166.2.191:443 msedge.api.cdp.microsoft.com tcp
US 199.232.210.172:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.3:443 client-telemetry.roblox.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:63293 tcp
N/A 127.0.0.1:63647 tcp
N/A 127.0.0.1:64466 tcp
N/A 127.0.0.1:49238 tcp
N/A 127.0.0.1:49260 tcp
NL 128.116.21.4:443 apis.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
GB 18.245.253.21:443 c2.rbxcdn.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
N/A 127.0.0.1:50733 tcp
N/A 127.0.0.1:50736 tcp
N/A 127.0.0.1:50746 tcp
N/A 127.0.0.1:50750 tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 23.102.129.60:443 msedge.api.cdp.microsoft.com tcp
N/A 127.0.0.1:50755 tcp
N/A 127.0.0.1:50767 tcp
GB 23.73.139.35:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
NL 128.116.21.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 3.21.116.128.in-addr.arpa udp
GB 143.204.176.17:443 c3.rbxcdn.com tcp
NL 128.116.21.4:443 assetgame.roblox.com tcp
NL 128.116.21.4:443 assetgame.roblox.com tcp
GB 108.156.46.103:443 c0.rbxcdn.com tcp
US 2.18.190.136:443 t6.rbxcdn.com tcp
US 8.8.8.8:53 103.46.156.108.in-addr.arpa udp
N/A 127.0.0.1:50779 tcp
N/A 127.0.0.1:50781 tcp
N/A 127.0.0.1:50783 tcp
N/A 127.0.0.1:50785 tcp
N/A 127.0.0.1:50787 tcp
N/A 127.0.0.1:50789 tcp
US 20.7.47.135:443 msedge.api.cdp.microsoft.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
N/A 127.0.0.1:50930 tcp
N/A 127.0.0.1:50935 tcp
N/A 127.0.0.1:50950 tcp
N/A 127.0.0.1:50961 tcp
NL 128.116.21.4:443 apis.roblox.com tcp
N/A 127.0.0.1:51026 tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
GB 108.138.217.102:443 c6.rbxcdn.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
NL 128.116.21.4:443 apis.roblox.com tcp
US 2.18.190.146:443 c5.rbxcdn.com tcp
US 8.8.8.8:53 t3.rbxcdn.com udp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 8.8.8.8:53 t5.rbxcdn.com udp
US 8.8.8.8:53 102.217.138.108.in-addr.arpa udp
US 8.8.8.8:53 146.190.18.2.in-addr.arpa udp
GB 99.86.114.128:443 t2.rbxcdn.com tcp
GB 108.138.233.127:443 t6.rbxcdn.com tcp
US 2.18.190.136:443 t3.rbxcdn.com tcp
US 2.18.190.136:443 t3.rbxcdn.com tcp
GB 13.224.245.106:443 t5.rbxcdn.com tcp
GB 108.138.217.96:443 t4.rbxcdn.com tcp
NL 128.116.21.3:443 ecsv2.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:51051 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
GB 18.245.253.76:443 c2.rbxcdn.com tcp
N/A 127.0.0.1:51062 tcp
N/A 127.0.0.1:51070 tcp
N/A 127.0.0.1:51076 tcp
N/A 127.0.0.1:51100 tcp
N/A 127.0.0.1:51115 tcp
N/A 127.0.0.1:51117 tcp
N/A 127.0.0.1:51119 tcp
N/A 127.0.0.1:51121 tcp
N/A 127.0.0.1:51139 tcp
N/A 127.0.0.1:51145 tcp
N/A 127.0.0.1:51485 tcp
N/A 127.0.0.1:51488 tcp
N/A 127.0.0.1:51498 tcp
N/A 127.0.0.1:51500 tcp
N/A 127.0.0.1:51502 tcp
N/A 127.0.0.1:51504 tcp
N/A 127.0.0.1:51506 tcp
N/A 127.0.0.1:51529 tcp
N/A 127.0.0.1:51531 tcp
N/A 127.0.0.1:51533 tcp
N/A 127.0.0.1:51660 tcp
N/A 127.0.0.1:51664 tcp
N/A 127.0.0.1:51719 tcp
N/A 127.0.0.1:51724 tcp
N/A 127.0.0.1:51745 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:52346 tcp
N/A 127.0.0.1:52348 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:53429 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:53827 tcp
NL 128.116.21.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:56629 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:56680 tcp
N/A 127.0.0.1:56689 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:56698 tcp
N/A 127.0.0.1:56713 tcp
N/A 127.0.0.1:56715 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:57041 tcp
N/A 127.0.0.1:57054 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:57093 tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:59386 tcp
N/A 127.0.0.1:59388 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:59448 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:61329 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:62590 tcp
N/A 127.0.0.1:62592 tcp
N/A 127.0.0.1:62598 tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:62611 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:63835 tcp
N/A 127.0.0.1:65024 tcp
N/A 127.0.0.1:65026 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:49259 tcp
NL 128.116.21.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:49816 tcp
N/A 127.0.0.1:49897 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:51244 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:52448 tcp
NL 128.116.21.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:53702 tcp
N/A 127.0.0.1:54072 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:54583 tcp
NL 128.116.21.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:55105 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:55770 tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
NL 128.116.21.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:55827 tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 0c5042350ee7871ccbfdc856bde96f3f
SHA1 90222f176bc96ec17d1bdad2d31bc994c000900c
SHA256 b8b1cb139d4d19a85adce0152fa3c4f6adfb73a322d7253820e848c6f82afc1b
SHA512 2efdb535fa6a06c4f9702b2129f2dd07c330e37fd10b492f2236007c660c1707773c22005d1e1fa580dbf633dc1a700ada3b7b611ef9accd9555a17a244f61ce

\??\pipe\LOCAL\crashpad_1060_BHDUEXSXAVWMHVKK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 5e027def9b55f3d49cde9fb82beba238
SHA1 64baabd8454c210162cbc3a90d6a2daaf87d856a
SHA256 9816e980b04f1fe7efaa4b9c83ff6a0fdd485ee65a884c001b43a0cad7c39d83
SHA512 a315e1336c5ec70cbb002969e539068ba92f3ec681b6d863db95227fd1808a778fd994e2fb03f28f0e401677aa5f7c66813e315b6b99a5065384c49586f9782e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c53b0fc3bb7a6bd948ffa1669011639e
SHA1 c2c499fdc001ca3cf3d58bf5306cf4443c7bf028
SHA256 60e1f0f9471e75532c4252c8e15377c86603e49e78248357a378e4519e4f9a13
SHA512 1b2542f3ad49b3c8f4c588afc8de8f33dfc3b90c112e0f655300eac81bd2db605d3f32733c333e3459a3e24b2a5f800c38fd9a99f3eb5694a25d451d6f34352a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 979f5648849735afb2f2aef1c835f14c
SHA1 47fdfdeeaebebe995b8b302857e271ba6a9572e8
SHA256 cba920fa7da9f070a5b0defee4f16a97d7e9a33e611fc41696be958e0885d674
SHA512 fba26ceda16f8b6eaf4ab31c8d0ee28fe765fb1717e1fe7a5ed1f02c0e7b73e2e35edc6063e74d1996dd8814de0bae4e3de75823045f43451944ac5001eee060

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 23906675e9e3ef72394586b3400aee95
SHA1 b08a40721a7c68f86176efdbd3d81d78cb87927c
SHA256 8d20f1bcee6400910fe10d4d4958c6426f46f1aada426accf68dcdd93d31cacf
SHA512 ad66f16cdf215d338e4975123f3c15121342dd107f11de9935e083691840492868832924a5b20e97439de1df58ffebd435709ebc87fb89d57ca4859fdb83b060

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 15aaf367bdf70cb761e71fcfca73e723
SHA1 cc17ccbd81a1ac39e49e1945d9425decf1d3e670
SHA256 3bab2da51d2180137583f6d25f5218810d00d865f8ad79eaf19ea3246c203b9b
SHA512 9376bb1f744c671722cf50d87be8ee1cd22e55235fc9662c6bb77869abbe01ced5d80c82f5f06036cfd60d6cc03dc530b21c28cdef64279bf7a8a5fa2f2561f2

C:\Users\Admin\Downloads\Unconfirmed 419179.crdownload

MD5 911c020a364b10fe1de664c01de4534c
SHA1 8731aee51722d2e1604864eb8f03abe3e6d35441
SHA256 cb84418aa6ff71e927125f05cd74b10cef07b40fe19a17f9ba5c3bd57f2d9591
SHA512 7e2c2259dde1fcb1a10a3864b1e24f892fb28d1c0a9a8b1b32d6b512d9f49b031cf6119f55dad008f0b2a5dc87ae606ee0c2918fdc44fc307d56bc933537db7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 139795561236bbd8884b429acac44ff2
SHA1 e462f5f79c513eba56090f4ac79ba3ac265c1d4e
SHA256 b7c038755908cd8768f7a6787137305cbbe8db34261c86f58f595ce8406dfe43
SHA512 97b6e3ddc1e3d7507c0636140a47ddedad699f8a0c6b35e62e7d9455ec8077e1a5b2e21d46674ddb1a5daaaa01e48b6855d1b84346dcd2eea781c12c28add430

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ecd1.TMP

MD5 15bd05127d31f13cd64a0a8e06786efb
SHA1 867fb540bbe1598b798093742f17816fb6e72a28
SHA256 48418efb26d141c7d8ac2801ceb24696772a8ea3a515559c6e6bdf41a5803c86
SHA512 edc7c33e6437cd08e7ae61c6b0502c3a9b17e6983b863d7510b27f1f374d27601c68a9b6b1f5090f69926a2767d2cf01977f3b7843f72a677a7e3ead76f53026

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a31685b9d47feec2ab5080a57b72a47a
SHA1 f796de15de5b3e76081dfc6bdf064f6d0308ed02
SHA256 c6b47ddb73103af04a1eb1c7c693bfaafe2a904866f485b8b7163756fe3ca4d6
SHA512 ac7720bbd902898ba9faf4e785ee24d7ff05c35ed0fab139529352dbd465cf452eed30a0b6ec72d803e97827e640cc687813c2dbe1aab4c6390564de652b0e8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c0dc5d309ab4bc28fff0b6ba21fa88b5
SHA1 ff5faded7e68aede065b6bc8b72a438dd045b7f3
SHA256 f3418b39e8bd23bf55253a2a29bc16bda0952f4d0d33a1dded7999339f9e649c
SHA512 aeebbf666fa365e228f673b205d61194be11e32c1dc5e276dca25c188912cf7220e93f8fbd2a80d67d383785abdd779fe61d503da983e71a073e356937ea1c3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e3ed95a877116732dfd043e1eaeecec7
SHA1 d6ca65d8a6e927e7d2955cc03d0df6ea835f95ae
SHA256 c5ad0547b613289828a57881ef48c6d27679b416a5fa6be51a018f70f00b66e0
SHA512 7ac0bfea4f6937d6215e480a0d6e1a64384b6504e3e2b6bcd2adde0c21be29e2d8e5a5c2da786a52595583eeb8582fd63d76eca59695129286f800d256ffd6f8

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dca96da732a87cd8c832a695ebd6fa02
SHA1 be7319a255cbe4cdc2e9b52839805e0e95f46256
SHA256 3984466aedaea4db787a684e7528453c9da3481491d3a4f713fa3a6d04f1f539
SHA512 c3c21db332da6271effbcb6c257f4f3c0fe091c2f6145d8df966aa573c52e67879b0f380eb3be2f29e983128b4a5c649d946ac943cba8731ca0b0810e7468b56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 801e6accca65f9ffb6d8aae8738a5e1e
SHA1 816dd05afbf5ec86c402cb86e12aa4066044f0d3
SHA256 35207216d68ffa722de1162e7990b032c56e2e1884deae4e281c0a6002c2c307
SHA512 c80b2321e6b14798a347ba0ea972a312688f82f8a42783ef6ffa9ae3305f8afc1439fd75d7553dc1d5fd10899dfdffdb3a337ebdd321309dd4ff585a1a8dfd08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c809457093067d61ff5dcbddaa34afb8
SHA1 0c323e7e5ec376c4a95437967eaba8fd324e020e
SHA256 3c1e0178bfc682568db8b55ed3d099fa882135a10445faddb8ddcdf594c17def
SHA512 17797cbd75450061226741d7269b8f449cb330eca56ed2f084cad947876003bc18cb08547c90eb10e83783e43ce55ea13fea4866fb5186c11ac5003dde3b1dcb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 55865dece77004d8fc1176d8baba896b
SHA1 d3b8744b18d95d20757cd64ba50e8eb504980c03
SHA256 4c45f7320e88b7e58216b9c71b513b558d9ec5b413247bfe530463739df26eb9
SHA512 ba277c7cc9bcf8aeec8fa50db94960888a1190903cdbc4dbfd26a787dbd8823223eefe9c2bc7cf592b92444fba582c1bb9cd8a02c4ea2cbcbff095f2a601cb64

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1740ba9531ed058b572ce2b55d0c8f48
SHA1 731cfb750494bb5893f783c32f3f7f2822630c6d
SHA256 3310fec23dbc4b9adccb4b10fbed484fb822b6d1e6038b45640c11bcd4ca4ebd
SHA512 ad3410eeedff3eac4b3a3f9296471257ae9d67b99a0f73e5ec4c212260ea9bad49304fcc32f701d3f0aeadf87e5c070b8683a2dc432fb8aefa8ae56a6c2f2ee9

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_fi.dll

MD5 d45f2d476ed78fa3e30f16e11c1c61ea
SHA1 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e
SHA256 acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2
SHA512 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_hu.dll

MD5 f4976c580ba37fc9079693ebf5234fea
SHA1 7326d2aa8f6109084728323d44a7fb975fc1ed3f
SHA256 b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791
SHA512 e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_hr.dll

MD5 0b475965c311203bf3a592be2f5d5e00
SHA1 b5ff1957c0903a93737666dee0920b1043ddaf70
SHA256 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0
SHA512 bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_hi.dll

MD5 34cbaeb5ec7984362a3dabe5c14a08ec
SHA1 d88ec7ac1997b7355e81226444ec4740b69670d7
SHA256 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9
SHA512 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_gu.dll

MD5 f9646357cf6ce93d7ba9cfb3fa362928
SHA1 a072cc350ea8ea6d8a01af335691057132b04025
SHA256 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150
SHA512 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_gl.dll

MD5 84a1cea9a31be831155aa1e12518e446
SHA1 670f4edd4dc8df97af8925f56241375757afb3da
SHA256 e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57
SHA512 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_gd.dll

MD5 c90f33303c5bd706776e90c12aefabee
SHA1 1965550fe34b68ea37a24c8708eef1a0d561fb11
SHA256 e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c
SHA512 b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_ga.dll

MD5 3b8a5301c4cf21b439953c97bd3c441c
SHA1 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a
SHA256 abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0
SHA512 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_fr.dll

MD5 64c47a66830992f0bdfd05036a290498
SHA1 88b1b8faa511ee9f4a0e944a0289db48a8680640
SHA256 a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961
SHA512 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_fa.dll

MD5 cbe3454843ce2f36201460e316af1404
SHA1 0883394c28cb60be8276cb690496318fcabea424
SHA256 c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59
SHA512 f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_fr-CA.dll

MD5 b534e068001e8729faf212ad3c0da16c
SHA1 999fa33c5ea856d305cc359c18ea8e994a83f7a9
SHA256 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511
SHA512 e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_fil.dll

MD5 7c66526dc65de144f3444556c3dba7b8
SHA1 6721a1f45ac779e82eecc9a584bcf4bcee365940
SHA256 e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d
SHA512 dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EUC956.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 7fd7b4c8f8463525a171773296bed3c4
SHA1 16c9dfe17e83f454e28038b0ea3292e7b6cf77f9
SHA256 9e2d6184617723792697da24ddd53bf4d6f04bd684a2cffe981245f619d0b941
SHA512 26f2e5ed732fa1343cdcb9b1225c1f3b002e2907ed6c23cbf589b5f8d04bf3b9f6cbea70a21e766f7c378463a9bf263e2beb032a393e85feb95ef9c79d5d13e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 3b120e479c678e8328475019a6f51add
SHA1 deb76cf743030a9f1283d2b85aa5d9c623f28846
SHA256 3f6565eccd7661eb56f90e038e693d03bf976a5307282975cec868cd6e99b569
SHA512 e6694f545f3e5ad8631e3737d8468a97cf1610ec189d1c2e4b1f55d6a16b1e8d2f4712770883060f756fc1b343e5e596da700c2d84779861a586987f4a3108c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8b0cbe6f62c55e5c67f38b542c4fca35
SHA1 122add200e6ac00cbf68e6b758f8feae306f0fee
SHA256 5f9bebee3c8c2aa0415e25ca7c9405ed6d45b47c1519e485b4664afd6e9c9180
SHA512 32acf4bc1bbf914f174da3e33c70ecc7b7a7823883dd28a95f20dd9b9d06cf3aec6cfc564576209a7483e7c735a905785adba8c2286845fa03b11209b1f835dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 13c319a3043c93f56be8f082fe63f4f4
SHA1 9790bc10367588240336aca1695884e7bcfb465a
SHA256 2ff9b97cbad832b500aeebcd0a7e69116e62d9d3b8a36009285403dec9b404a6
SHA512 64d5fbbdcfcd55fc8c6513ad52c92a63f341ef6313b0cd0c6379eac5c3e3dade7482874ac39555379303e87971fd50d574267cf70ff668170ec6fdfb556e5575

memory/2952-943-0x0000000000670000-0x00000000006A5000-memory.dmp

memory/2952-944-0x00000000738C0000-0x0000000073AD0000-memory.dmp

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\124.0.2478.67\MicrosoftEdge_X64_124.0.2478.67.exe

MD5 dabc3160a804b9fadd89ceb0fcecf388
SHA1 b52f15e866a18637683bdf0ea4eaa326b787396f
SHA256 53eb39a92ee0d2eb94f6d33c015097bddd9cfe5c4129d3ac9a9facbfb5087bfe
SHA512 74fc0f21d7cf99e07c079224e2af8a4a51bff98a97bc471cfedfbd3a28d3ee681fbd63fa7239948c3c0bf4f9af56dc582dd128f8c08b54cb73389e85f949f431

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 e4eee401e756587c0fd9b02203b39008
SHA1 8daeca2da8fa0e1ea6e3080078c7b6583ebc0c24
SHA256 f12c5b5a88ce4960a366b3097a4458f55677810b1b260021a8e78a6776280e8b
SHA512 60dcc474abb7b513be7425d4b5a0c1dba7e245a9fba899430d1fc49bb0b101a97f52340ff54a700db85c8203b65d1bc40495d2321fc4d89f75e4ba9d39879d5e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 993d0eb399f9baf5b08f2e3362a07c50
SHA1 865df2c6fa07afcde8f5744a36d85cfc34d6481d
SHA256 7d602225f542fd3d1c7cdf5d773bbd80bf2832039ae83f1779ced187495de977
SHA512 f9d8e43a4591a3f33c26e8b659945d6169157080bbef2573e124e6d97e2ce07ba20915ca9e6228895b4f975f03b15c4acee0288b8a4beabfc9fe22be7f9a52dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 2e093a52ec924d66ffbf02dc49d96202
SHA1 2af8969c79a7c1129a66e618b0f2ddcad161ce93
SHA256 fe8707ecb20ce21a55eb38739d395f1b113a8e1f0ff13568c01db273bbe33167
SHA512 4dfdc8a7a8f387ae07f11b5b4f6ebc9c5ded24fe8cf484dded43d4ee8a00b1328c223a1fc3a2a1cc3abae4be364c3b416364c7e8bbf8cc57e3868a1a4dda7b21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

MD5 61a6cc91a2b11d1b17e9483ecdc598f7
SHA1 6c34c23d83846672fc4e8c6144a326061cb88afe
SHA256 f1db32106b0cdb5beb739325a484ba47ee62bced14f43642415d56b618ab1cd0
SHA512 8882223a6aaea45120c2578e6752de6e64fe05be759d71202d0bcfadd8ee377a9c19edd35f484ad0446c141500209e6b8b6f639072abacf1c044b5cbe531ff46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

MD5 7874fe8384335ee5f5b01ac3240b2503
SHA1 579764dba5e3069f3a99ec5d906230ce0d871d6a
SHA256 4efa2288b8a49bcd80d9e803a4795fc69ca7b583199267bca4efb3e110d019e9
SHA512 922d7b75342b788cce528a444fa7d456c02736f82570c1aabecd6519348d5a426894b149e5d4a7b1c495deafaa2653ebb16e15587cab2f9ecd0715b9e05cea1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

MD5 8f26844e308d87a18ef20c882a412eb3
SHA1 699db4d7eb33cd0bf6d8478c851ec6aae6d8e3cd
SHA256 d01fabeed0567b1a987c6c897befbbe020c0e2371b807aea82e8045a3a22ff1e
SHA512 9bad148dfdc4b0f9e0fba629250bb0cf344396977220d4be705fc143eede0c9bb072a5a2f9d31cf76bc368c9576035cc750f6c9df2ac497a53963988ae731061

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 f1b0cb18b44a4b7baaeeb1dd499e300c
SHA1 dd04b33658f7de25564411b8e5409488bb1de836
SHA256 f4854263fb821cbd36828777b0c7420db5c6a0cfb761297cc26874c6d50ed243
SHA512 be5abd96b8cb101fcbbe06b7b6c5ad9b5193571a7cdc795251e04688a67bca55f2499463594c1aeacbc6b85e4294e81d6641bd8438a8ba1cdcbb1dfcdaad3d0f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

MD5 c58c2dab683c28f789ad0469070d8951
SHA1 9d8fe43abf9c1bd0f587b424ac4f27aa219a59f0
SHA256 3ea87f1951a7733806d83ec09faf70aed184216e5fd5826c5d07ff0719b4c5aa
SHA512 b75a44584d2aebfd55a27a23f373831259a93977dbcd216868d34ce0217f694b8ea6a82cb4fd4650ef13a6510fa87392791f68ba5f78a6b204e0ff037bf64ec1

memory/2952-1126-0x00000000738C0000-0x0000000073AD0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aacc44afc10843b5ab04bbdfa922388d
SHA1 4eb0e0af44ef99233484f76e7c55dddee9e34b80
SHA256 56dec5b3dce2b9a2ba0c38db17c8de1416a5ce3ad65bd54290e5c5073cd4fcc1
SHA512 06e7004431c972534bfe5d403c5e1c416b51d38717309f6419946816f43693b3af96fa78077aeb99ac0da1b2af778c654f4882d334316a6ba9e37b4e89c41ea2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 bae2c61afdffbe371bfb4e1bc18abf61
SHA1 9bfb55ac1a0182abee571df5103337cdbf85b9c9
SHA256 14fa797c812bb14932978867e1ef83135a3e7c04cc91b342fdb6f639669f3920
SHA512 491e37a6d7af939460ef4919af276df2103e516046baeb6de4450bc9123320eb60722a3a4ec3f263440e3ac24f6cd68033a9fc2bcf6c96babfe849e26f2d4c7e

C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Installer\setup.exe

MD5 c31297188ec9fbaa60449f769339963e
SHA1 8502d9e0cef18137529f0a46ad6e69a1577e6cae
SHA256 2e2eff110475dd3dfd732ab514e4692032e67b2d228d0081634a87f45cde5ff9
SHA512 9525e3e08b953fe36270c7b4868959e9bded055c5577e5ca94d79606b671e6660d180f763b54a276bf356e82d7073901c373e0b40cfca924cc4b38384c20e22a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 69a9a41ded0b781921faf2904ec09d49
SHA1 296740b3591063619dc9f32dfb9ffa2d074affb6
SHA256 68c4dd6bdf20f6278e2096162c998d8144a929f2c8bd8b5cd4ee866d67121a81
SHA512 5f1400efd654173eee17c7f6ac793ec62a71c0bf4b5556f303c3c152a4c8850fb04efc8a0012c669c8cfb937ecd3a4130f2830f95342466aed0b64446265055e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 a9d38f7dab5313fd20554ccb8f2032ca
SHA1 6ff7912ef8793cbfc535c3c489f2882cff991ee0
SHA256 a039cd92d02e44e42ab79dffb64e354ab4ad1fcd8be044c9c08ae9c64d575c7a
SHA512 a961857706ead6b567ccd668bb75ce3a2b23e418cb002e06c7ec642a151d7f936050c673e2d01d7d872fbd670bfa574ae150a704abfb44865f93f39a993cec17

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c4656b359ad98dd7c557c6ef47c62dce
SHA1 e49b7d57fdbc98229ade2e1e903425e9a3afc196
SHA256 2c3b111d69ce6c9538eda172e33d36c3e927c292474ade2f1110c751caf1fa30
SHA512 8811624c1e0ccd8b240048886058069a9780b3d96eedce2bdbbe89964757d5faafba8b763df6672c81390250de39875e6b4fe41d923e3e7c07ca1efc40975db4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2f1f58f9d9d5e15f69e7fd78c63cf1e1
SHA1 95f42e140451fe54188f27aaad4fc7c083b6d105
SHA256 1febbe2bb5fdc48af1f911d172a15e3c0053f99d57c519fed61edb6659c41911
SHA512 37eb3cd78aeb9150084c3a72e2575d0f364d8177f36d1d7193ce7d90097295759c36c2671a582f64629a82d63dc52ae6370bd7ba9a13019c77391cc68fbceb7d

memory/2952-1227-0x0000000000670000-0x00000000006A5000-memory.dmp

memory/3420-1233-0x00007FFDCD460000-0x00007FFDCD862000-memory.dmp

memory/3420-1232-0x00007FFDCCF10000-0x00007FFDCD45C000-memory.dmp

memory/3420-1235-0x00007FFDCD460000-0x00007FFDCD862000-memory.dmp

memory/3420-1236-0x00007FF7F2340000-0x00007FF7F3340000-memory.dmp

memory/3356-1267-0x00007FFDEF940000-0x00007FFDEF941000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 c862efdd579d496d1078807e0810969a
SHA1 e2403d3a18b4bd8b7116d993eeb2c2c3632a23af
SHA256 f0e79549b22581bcb0c18acef42c46836f8e59c28706e3667bd0f51b25b0e0a7
SHA512 95de1c588c81409ab1525204b3a3f382063270a394e362154dcb6f1dc263e02c2884fe61dcbeaa3260fe037d145c3b1923fe92342f25292debf8c115bf64cfbf

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 2a68969e9151c465dee3b20161870362
SHA1 2f7a23608a10094e298f961be895969be9314e33
SHA256 0b1000f8f2a569b3918b153c31da98ec68ae8b7ec1f7e12c2b4f642f6b7e5e7b
SHA512 1415f9fcfb2d10b9026f783a3397661306491a21c69e643844036ebeb994c80bf59e4c40fdc2d3a2e23bed78502e93535b18ee67fa7f96fbf825e87d4bdc2da8

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5a035d.TMP

MD5 85effe96fb571f9f656c622e767d1379
SHA1 84708f7f822b770d337e985a1341fcb0e297d8d9
SHA256 f7305b51925773a3365f816089258caf3c7d9f4e84012fb34c7117668429fc99
SHA512 18dbb91c983c4dea71065178a5c18505c8b0c1c39e50da686a650ae0822a0c00f00b4ec133053e75b836580d102e23194b350c14b0b9ec94fefce39d96677c6e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Scripts\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 faa4d4154e9d70033c1522558508a1f5
SHA1 df4ec85fda753513041cb45acfd3a267b3af182a
SHA256 e0681f72a1d5fd6f037d96f33e2a4a879b8d56f4e33175531ee208871485586c
SHA512 7a22db7c3483cb5d5f1ace0cd9875635afda4355f4897a8762651138c1b344f8716bfe385e24e4d36701eef201fc8ef8d9c85342c2bd7ce48e2ca93f02a3ed89

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

memory/4484-1361-0x00007FFDEF940000-0x00007FFDEF941000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 ce10b9e087bc128a948bde2ebb0534cf
SHA1 f30bb92e12f3cd5e2d299afc91c521ff4339410e
SHA256 2eb9a43e81ce060841a7e2194c753c07c8602e21cb77834a01b481cf13ec6138
SHA512 e0ff3f403b21320afc44700d4bade5fad5a38d1677a386048463238441575bd15a49955066fc51aeddb3c10cbf7245e4f2417e4c502ddadef8f687aba4e05979

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 27da7f2bdebd1bb0069356d6e7432a4c
SHA1 570cea20c32773acff8ea3eb5c88d2343f297b4c
SHA256 a780c31c5ac5512a32e6b4f6a73ba810479d5f7efe8a3c2cf98f1324361cc5eb
SHA512 e3ba7654f94832d4647dd328b0c6e9f507e3898d55e5480b5a5871b90444c27806d5beb437fb69500298d6f76b61af24fbccb146cb30dbb3e138fc601be93546

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0c549b1eec8c9e3de1994795a35c415d
SHA1 ba1487c8578e0e824fde441e6b0327bedacfff2f
SHA256 a277193a6a5b81a53e145ad9281bd82fee38c6a56348fd4a46b2b88e74751a11
SHA512 ab3bc56ce714bfc56152f11f4e4b2f1e163169e076a81ad6ebbe9c09ba4b2a5222cb522e2629c618ab8cadc7b77c30cc426a471640ffe4e5b1004bb5bf519a46

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d1d7cd8790407898930912d04b5aa403
SHA1 666776f5aacbd2acccf3b0608a48a07bdc51d26b
SHA256 1f9e9f60818e146c9ec9d20a6856fe87617d2389be2bbeb67b21d90cae59d5bf
SHA512 1c991f3a77e4f7b0d6a2e01f5140e762dc094dee84d23e54f7596a7512081f7973d85e89821f79713a584f83bb31c1d8701e33bf53d4658d43bb4be60ed5d8ea

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 5e5960337a45688ace805623ea7d111d
SHA1 ab34d9950d37e926dde6f11b92e8cc171ab09189
SHA256 73d225a756eb771990c32c0be8c2fd41b3361a73624b297119718cbba7a64794
SHA512 5d2015d695b136bf354e64fa3e3476444972b41a21c6b10e7ad06e6522d11b621d2dba8b94a522d9e278a912ec58cd9171036e4cbd6fa4439b427b1ec80e36f5

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5a5759.TMP

MD5 a6ebf94924802322f4a5c1b9c23dc8d6
SHA1 ccfe02faa98a32deeb6268cf15f88fcb350aa745
SHA256 f8fa494959b6e53a65d99174f21804727373d4f1bcefb182016a2e7145406b6d
SHA512 465e19298561150ce0bf09223fe3ee0543e21637dbea13c11240210c99a816140418e2c64cdaba60fe3936ee145607220c9ae066bb5f985be1140de19210188b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a58b0.TMP

MD5 112d44a335ec08a2c39e11cc50a094f0
SHA1 dd3ebea1b733c8a5868e700504ac761d7b7a5c7c
SHA256 6ca2871554192d2cd0fb8fd9b32782514f3b3196b321789fb4ee874c7308c001
SHA512 2f67c9461841ebcad5b8d469e7db17db77c302cc46eb611e8694ee6b523d30aeab0f2afcae257af894a58ec953861e53a07bc657788b9853bfecebc102e2b1f9

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 a001ff9310c9b43505e29eb84fb4e107
SHA1 f9c080cec35ee14268aa927d8f35726fbc6f5e2e
SHA256 d600270df61998010802a54dd8c5fdb99a911937ed1d978200f35fa6e14f7eb2
SHA512 7280c293c165a14a281c9b6d70c62b52a860162d9e00faadde098ce2b7772bc8e2e13e928f5528a3b19828461c14df14775793586e670e46934d0665bde75b25

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\45c73642-a958-4f9e-99a9-7232cbeecfcc.tmp

MD5 f1e619121dd76eba61061736cdb5581d
SHA1 641698cc4f59589b7a942fb392284264c30424a5
SHA256 5df56edf1d940ce9892512889524d8afdcf52bb97c511b4a5edb82bf1561f3f3
SHA512 fd1a3ebd63ad44799f6873209c9f2c0afde8820d5bda92c081a23c34b339e8ea482d99c18b820d25a525537f76ed4177027cb8b2f4221ae8709bf84ae07e0637

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 3470cd12553c2b37b96adeec7e94ff65
SHA1 49f1969164f228d1b93f23768a553ec46e6774ff
SHA256 b17f022b0e41798051c79966bb62afe5374f747348dda232edac6d1c73622490
SHA512 495fdc2fbc88c5649a7fb7d1ecad7e5d7653330e2dda909624f894771b9cb97473c3c87de954a594da28715051ea38424c1c143d37d3e11e85f5a9eb68d04847

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 58f83ef6eb305e9f7fefb41f6d50cfeb
SHA1 b3ec7bd1bf874d325b96a363a74b3ae7632492a9
SHA256 e89d38988aa8b23ca6b56dc0a48d176aba19d246ba31aea9ae2130ccec935ca7
SHA512 fa2a15afa6ce2d8e0f98835b4f95b160707911f3f5f237944d638a01265ab483a9b1fe30cd98a1cb096c8712174d9a26ec3d869bce39b805d8fbaceebc2dc66d

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 9166e6fdf6ebad1c5db8b1f2e6d13f0e
SHA1 312d869101ff3876341923ad135cd110d245ee64
SHA256 82dc07323f91f7a2136a6737dcdffd7496d8ccbcdfb728439c107328db956927
SHA512 a03bdb2c66f6f23ecd92e15eb5e66f784124dd4c0f7d43193c0bded46aa038bed24009e5b348b84766f21f3dfd6282c8bc6e83a49ebad420289451741a9a0657

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 6d68643e314e58cb5caa5ea0d78c766c
SHA1 713c0c58d33571cd731f22770085936581939b75
SHA256 6aa11727932d2d4ae4c620cb9794df11cb5a8ab63c85fd0f63331dfc6100f0bb
SHA512 460e0578b11c6983bc8c5d7d867870c16545e081d093d6c780677673cd6fedffbe079cd3810b4f8980a4eb9ba9861920c7b5a7c2a803820f9c47edf1108dea03

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 3e4f993e3b42801be1ecdd28529dfcd1
SHA1 64dcc5bd9b95ca9494cee70a4849048bef921938
SHA256 dcb268d9ce1184accc7fdd592adc8583c75df695b920f5e26fd666174cb90d18
SHA512 059d70129b7b0a82eaad1606f09719ac05eea3ca431f786ed705a2f35c70b0d298defd16368a7f7e3315155845b82fc22ba0aef6a7372b6c0ae8db284f93f191

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5adf55.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 e67a93321192ff7a2224cb48a602d1a7
SHA1 943da7d50454625e5495477c93ea3052c17f896b
SHA256 4f790e996136980d82c2b8386cdfc6b33ec38754e09aeef081122b3abdc75629
SHA512 ccf92ad94a0660c869096b897d3e0703a953c6d44664c5c46ac87943457736d3ba674791654906674b36ea2a147807426d8d46cae214a12246debec039b6817b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

memory/3420-1870-0x00000288159B0000-0x0000028815DF0000-memory.dmp

memory/3420-1872-0x0000028804490000-0x0000028804690000-memory.dmp

memory/3420-1874-0x0000028800370000-0x0000028800371000-memory.dmp

memory/3420-1875-0x0000028800370000-0x0000028800371000-memory.dmp

memory/3420-1877-0x0000028800380000-0x0000028800381000-memory.dmp

memory/3420-1878-0x0000028800370000-0x0000028800371000-memory.dmp

memory/3420-1879-0x0000028800380000-0x0000028800381000-memory.dmp

memory/3420-1880-0x0000028800380000-0x0000028800381000-memory.dmp

memory/3420-1881-0x0000028800380000-0x0000028800381000-memory.dmp

memory/3420-1884-0x0000028800380000-0x0000028800381000-memory.dmp

memory/3420-1883-0x0000028815660000-0x0000028815661000-memory.dmp

memory/3420-1886-0x0000028815660000-0x0000028815661000-memory.dmp

memory/3420-1890-0x0000028815660000-0x0000028815661000-memory.dmp

memory/3420-1889-0x0000028815660000-0x0000028815661000-memory.dmp

memory/3420-1888-0x0000028815660000-0x0000028815661000-memory.dmp

memory/3420-1887-0x0000028815660000-0x0000028815661000-memory.dmp

memory/3420-1885-0x0000028815660000-0x0000028815661000-memory.dmp

memory/3420-1891-0x0000028815660000-0x0000028815661000-memory.dmp

memory/3420-1909-0x0000028815680000-0x0000028815681000-memory.dmp

memory/3420-1908-0x0000028815680000-0x0000028815681000-memory.dmp

memory/3420-1907-0x0000028815680000-0x0000028815681000-memory.dmp

memory/3420-1906-0x0000028815680000-0x0000028815681000-memory.dmp

memory/3420-1904-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1903-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1902-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1901-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1900-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1899-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1898-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1897-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1896-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1895-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1894-0x0000028815670000-0x0000028815671000-memory.dmp

memory/3420-1893-0x0000028815670000-0x0000028815671000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1f1d96b68e3261cf312b541611c5539

MD5 3adb865c801399c412bc73840d3d8241
SHA1 267f8332eb7486bccd7a6730cfb4f5c2152b11c0
SHA256 10fb505b7ce30ce4bf5582248b17dd47f6a39635007bb77dc5d16b963baf9905
SHA512 609793331ce25c6667067b3616791f3ece470500f797343178948e4b7af18f275fdde226f542610d957b397651e12191aed58dbb88bc1c59eff4625e550160a5

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 30c7b2bdc35c650d2b65150241646816
SHA1 94d466a5f5159784155b6adcc9555bfdae4710c6
SHA256 0784d39379f0a4f971777844ba07550aff31a3d5e32ce1d1eff6f4c7d49b90b1
SHA512 8d51ef924b6c8f46a7ced69f188f2ea583ef3feb7fd84f51a8af8810c51e5099052e2c1513f15ac6fb83fecbef8c984fb4e124ff524c2b20a437943dc127465d

C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json

MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1db208cd9ea3c654003f410224a6e8e7
SHA1 356f0e2fe97762c8919f2559b58f783ea631d899
SHA256 f9ff346a870adb79b4abc8d24fd9ae0a84d8566e8bff53385404a01ba33297e1
SHA512 936cc175bc7f9f0b3a134b0c2b0ba8ae02a3c3458dc4169ad5b5ece7a005783360adb69bd069b1a36c9c61d37a5e25db15a6cb45e7ac36b61b85893fe201a268

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d34a1f5416fdc978c6e0c7edc7d67a2

MD5 c76ac26f80988d0fcf03874d625b86af
SHA1 b04a5e95018f8eca571daa4077e66626b9ba0de6
SHA256 3dca66141315cdee30f7604013deab2fcc1dd74af93f9630fb700b7606f531ab
SHA512 23ba1357212eb135ad87fcbb81bf73fcf2e189da34f08ca1cccd40d763a856e9ca8ce5514af395caeefca2b0dd3a6fe3b8d43e060c5baf5139fb357fedb90a59

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1aac6bdbb2642f3f23fbed64d042c3f

MD5 2c65a49f36fbe81aed88d7626a0112e3
SHA1 832fc429cd021f288f5ef9531e7dad6c9c6507fc
SHA256 eb8f138e67962a5c7db64722b78454da2e3c3d656ec8d72c9bec566f10a942de
SHA512 4fe7c7a7e439f6b43bc13af9291994ff913fa65ab1d77f162c97b18ae505b1c46ffb2c9236b7c9010580b095526a58204bf182aa5d476e3d0a006b2ca450d181

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0cbacc9a3c6aa07deb13db83f658936d

MD5 e3690a37568ee9fe7f191a17a47e2146
SHA1 476c939e0ca065001820946509e36ac2842fb1fa
SHA256 b8da756d34febd98745815e7ee643c49dfdf1adeece7fbdeda22487c06472f28
SHA512 c7b777cb3616fbe210b58c1e2395ffb378ffb36c2fed3af8c634e7d39667b9b433386d1a284f936a1d4e10e76c7a678e97216fe801cf95a0fc3fb313fc4514a3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f10b6865c21c904e29f52a54a31f37a

MD5 38b25c1089062288a7a9a8876138e465
SHA1 d7dc1955cdabe9a50ef4f6b345c9012e3efeb56c
SHA256 e39aceee4952e730f1a101894520b046ff21156ebc79c0f8e070e87af20fdd29
SHA512 198469bc9aa03de2c29b322cee7714a67b1b421a8fb0b6ade7148f54fb5ea0a37f6afe5e80f052f41815174363ca2b2dc8395534c624f0f87d2f7a0e9d773dd5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ceea000e430b7c9714bd62a61ef5eb0d

MD5 e6bf3b994b7bd85aa47c17406d367d2b
SHA1 b18be2803acd9576aaa72bb19116b09680f0cbd0
SHA256 92638ea5cef2b20242923fd21757df86c8c434ff12243d480250364b8480f2fa
SHA512 3e207bfe1b30c981fb533971769a4051c0c87ffbfcabc012606ec939c5b66f2bf59cefeb85c2b903856d6396584b2c96472965c11d90d6a1ac9f59b29cf3d664

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 7435e0e40e0c368a413e2da84acc4091
SHA1 88ca15c10cfdcc12e112cf8d233d53aa549cc45b
SHA256 d1bbc6f6d5c5b48415ce26f23f387d0e1c18bc4f228e408be84da87461067b1c
SHA512 6bf504cd2a065a5074b5212b72c8243eaba820f08b4d9232a9614ea8430eef2bb576d34b6cbbf782ae58100d27677ac030890c034f18537c9e4af74d96e7dad6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cb8a45c1430998ec1304e4c79176816a

MD5 933b1f5dc544d9868d257d80e517c112
SHA1 a8d55f9cd5f79ef7f6fa1ffb229d8bcfb30ce348
SHA256 51a66f59fb6018efd308234879746581b50566d967cf1fbf63fd3fb6917f1295
SHA512 6e03ebecd629ec937171a7a2d11a88c83c0267c0f153b86194683fc967f0e1c827e6393a39af735813a1cb3fe2297cd6582d2f7578355e797a5152dd92d6e600

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ac0ab8f16fbb1afe5c7b089b5d5698e6

MD5 5bff0b6da657e8e4ed652a4a5faf57f6
SHA1 ad49b5a7c4734d26061b0eea4496fc41949bc5b2
SHA256 c80ae50ae40768b21e62b593515865bd729b4c0712a006cbaf374a66f14f956f
SHA512 146a0ca1c20471f2921f1c911692223b77c4f528f2de47da9df54c1620242230998b86be05b436a725e64665a008cfc21715e114fb0fd1b9e0786288ad20ff24

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8fbe2ad68bce1f4933b291c365e04e75

MD5 d6a9f27b18ba6c1cd064cfee32420a8a
SHA1 3eb4fe70132f76c96bf7f951070f437ba176fc40
SHA256 612baaa3a5eeebe00562f3ecd4490073f3313811613ead2948c1626128191506
SHA512 1126e9b53315742eedcb4e28bec6330c03cbeff2d311c9bca1e8280720ded31b6ad7f4f4b6899aaf23656ec46b19fc2ea6566226c1fbb1ded1c3790832d9fc1a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a1d7a8fb35b007494a82bd5304ba1e9

MD5 2414d644ab2dc0d3c58d8546b4cd7ea0
SHA1 77a854549c69f719657f5d404ae9391c705d88f6
SHA256 28be75fd24c5225fe212cbece08722d92c4d2816e5c3a0051294826a5fe79458
SHA512 02bc18971dd372438e6f93b0db0e29a2b647b7e1acc5e8d8321f73857b746c5523e7c720ddadb96363664fd5652c30d5e396f7128813dfc0c30fe7ea4086a229

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e2504bf31b5aa0ab48a8ae5f1dc5f1e

MD5 6abaefefcacaf36071c43e9dc51f1bda
SHA1 a562a7fc46cec9c90e86fa570267864ef2249a20
SHA256 55941590b6aff4d570b3531c493c14c46eb687ed9e4de19200de1681987f75ae
SHA512 5fc4b6db68c03630673789ec5f5d017709e5a9011f25575c0e428f4a21c30e1f6664faa9e4ed456ae79c7ea0fc45db30b8d45ad9b4e2e94f49b27c50237872c3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b80d47fd48f8d137ca2aca87e1d00059

MD5 7dae317d3e65c483f462a48cee3002cd
SHA1 330c91065d277740b721b723ffae4e5511e8da2c
SHA256 ad244e68f3ae289677897bd171703b8ab65bb03b17621b3c8f61594b906f8b78
SHA512 966a981204a7979932981d8870704fbe3d4afc2a0306cf149117eeb30a54debf852c8ef04fda90fb2d1d1261daec60db390a4c9b9fa77740d14171335384ecc9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e8a63e8fa08c8135be1c5384c3e0a2

MD5 1221a85cb03fd45c001ef47af9935e7e
SHA1 f209b998e8972ecf158f58270244b831d107ace1
SHA256 e7c79bc6240600fc94d67a9c0e9c1f563a3f30698d7cae3d19b1735865835d4e
SHA512 2e6846a2ea3bcf0892703f3f2024a0acdf277251c55ad9c65e61fb5a8780c67ec707d42818b3d98103504dda9984c109ec0f8e393fc063f734bbc7bce168ad90

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0fce80600a43748c6cbc0ac23f6cfa2

MD5 3bf49259291542dfee0f89d587c177f1
SHA1 22328c74fce75f7918f6c4b3ca5ad9e1921db437
SHA256 971101824fc41a26f9b1386d72750a69298f4725f266edb3c93b21f9600d2916
SHA512 20366e5775f42da8e313d67ace54bed3b2a010a84d9b3422276a8b544186345683c00663ce4f541c9890f906344ca3400015bef988d4ffa7dd4bf1c38161e271

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 29fb1e363229e22758ce5c9a86a8608f
SHA1 ba355ade5e80281162f038139ed23558406b4835
SHA256 43572a69048d664614a898b6688e1d0de116b693aca2a3add8fbcbf0e339e5ba
SHA512 6535bf7fd001ba524c6ebd498dd26ea5ce529bab0d696a300d76db9dc41994220082dfdfcd1267ed5a58dbb8d8606ef7d621879ae0b1277f4c254ee7ec559c38

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1daaef2a5ce0ea927443fd099437bb55

MD5 e4a239995837749223ed2039a40a3a21
SHA1 b1cc97f9ffc3a367dd3a55a1a3342d59cb610403
SHA256 36ef28d0243f78f746ddc7abb74563980829c81dcfb91abcdaf6459bc7d374af
SHA512 ad81fe4cbaed589da0a3b97c20e7e5fc0deabf5910b1c41dc7d6e6e8b8f22486f71c9577886689739bdb87e34b330ce43cb60fb2e3c1305d77984ec78cc0879b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcbcf8ab7914469e06c8fa6ee80f2201

MD5 958ad6c1423022b1905d452d8772d16b
SHA1 a1c5aef3f0d7550f8a9ac31ac1e295696477c02f
SHA256 8965deb3f4a35faba9f087defdbc2fb071e006f283ee7e6b1ce250c6ec12a49f
SHA512 5185a342c83ca7770ecb1103d95d061cc17c80526f755ebfac53305947b09765515221ba65b43a98eff3860e47bfc7a15f51e67d0636de7596a6859ff20804e5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\175af5595dfe9780b5b7b10ecb943336

MD5 0c9078c249c45630688d2af7e0574c25
SHA1 8fae18c0c69cf3a58abddcc9a55fba6d81aca2b2
SHA256 b0e7f0945d5de86014379ede1d9a9528a8c944534ab33e58c7b3be1b5706500e
SHA512 24e0cfdac58bc3714541bd39f6992bf0a4bd4c47e492edc40b72d045b4f06573d582d9f4e50e0c23f964ec678d857752caeec6a65ef89b70e2ecbefe749b21f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5b794cd8b1447c984ba301aa73a6625d

MD5 2740a9a1a4020c08f3ae9fce5509416d
SHA1 371eb56fa91013a45a38486d5d77ccc12ad03990
SHA256 239bce8cdaa04b7e91497dc8fad14e5af36ebf244712d7a04e37c2be5a0e0a38
SHA512 fbbad878010bb317d5ddc6de48c87d838db393fc52c564555883d07e62b77cd37a3584414566977fbaef792ce0d2a00cf851ce871e880d1cda34357d2fd4682a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\32c38bb4f4a560d621ab93aeb6ca5d7a

MD5 f7b60787135cc235066319d2412e77e0
SHA1 ff9e626cfeeb124bc95d830d20e13b15c6427c77
SHA256 e815d7145b898343e81a796bee29e8a71a678c9c3475a7b1107cdbefeefb6152
SHA512 bb21ace97ed300299a276844630c2b30aa0aab87a3a8684391bbe37a0ce7761c82011035f741cc1f596136043f1871d16b0238249d3b943b2c08fdaab8c0d762

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d8b0fd3715ff57ba968ae5740d39a12

MD5 a3366bed53be5f4fed574fc819a07072
SHA1 a79b59561cf06c8a209fb701567a67376d83924d
SHA256 ec5c1697be4eba9851b9a413c13e1a94f9846f6dba1d8d0fa33e1ca7292e8030
SHA512 f8424133bac79bbf7547bf7076cbaf0bd0767f220778275c36878bb982bb69bfe64aede42d67c9db009047e66bcf5eb9604205f6b0aa9a801f6827e2034399fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8165fd8432cefc94ebf7c72106dc49ce
SHA1 5da69b90cdbf85c71c403429508e19bcd397f87b
SHA256 ddebd81e05c53307d5734098ebe569149e20c8fd8f45f8684afbe189d5c79d79
SHA512 63b26e5b737d57b19366e83d375033a495958c8ea600063e0655498da8944fcb47d4ed18e7456e189f2c364397c3223e66e998b5d7eda3d40f4ad2b3a75b225d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706

MD5 a0c28b8252eda35f15ff0931e1817ac9
SHA1 3fa429b9d0b8926907abc63b81a301bad2442eef
SHA256 ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d
SHA512 e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2

MD5 59e7e73fef4a9df2680ff8fe1722014f
SHA1 2b9d42140ad6207b1e3f5cf8d66b345109cb1098
SHA256 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57
SHA512 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac

MD5 d97f6e22eba42d95c89cfd439f36c1d4
SHA1 3a439aff0b80708f6510643f70997b897500d2bd
SHA256 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e
SHA512 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc27c501541df155b6fb12496e5bac70

MD5 f635924f866829484247044f991b14ec
SHA1 39c6f43e94e4b0d0ce9c30da5b78aab7fa5086f5
SHA256 30b18b2546442b630f0fb8c6a7c26419a9a73988e8e1a118dae5b7241e98074b
SHA512 ca145397fe454c2623651c9ccaf86fd15212fe83d758fab2f8de35e4ea00f8eb8f58aeecb2fc95a4ceda07c9bfa960ccc29b1a56c2bb317c94297c24a366be68

C:\Users\Admin\AppData\Local\Temp\Roblox\http\706b550a2be783fb6e220ca8181485e5

MD5 be4a508de308b15bf9c711a769ed61a9
SHA1 2b980f20a1466d2f1508bfaf8dc2a2558450c1d9
SHA256 0ac514138710cda19cc114cafa8a3fce046654dda1cce0915f525c6f5ed0b812
SHA512 dc71cf06e2466f17b843b96fdbec856b3b67df95105895597e73fad455340d4237f1b7cf91ac2906efb9efeac89515deb79a045859a0651420edecabfef8cf8c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7948b73360f27446739cb67376a2d7bf

MD5 6c261f23c63795849eba5b1ef6f17cf3
SHA1 464f91ce49db8b5546722bd62c4f59aae33dfc20
SHA256 e4274c467ca592398736e990eaa97a937f209768239400cd90ea59f9e58a27fa
SHA512 ab6f671b1939df79ee60a873148a1763c06fa880e2f17a23c9e09c5401120873167905e49be3abaf546b9fee33096b76a5573a473b72de3806c38a128ab91ab9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a

MD5 81927a5a1612202db2ce511c62ced773
SHA1 4414e92b078a515ca699a82cc3bc64a1e264e4bb
SHA256 a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e
SHA512 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd

MD5 74efd118f986358ad4cde9a57e61dc32
SHA1 0cfe0335bb35298456edc9ed791e019b70266c31
SHA256 b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5
SHA512 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733

C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783

MD5 22b25a819c414b6c626e5306888142d6
SHA1 e7d68968d0848af0e5203409227a1980dfeb4a0f
SHA256 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea
SHA512 bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcece68795e396ad03d6e2608d740126

MD5 0ba72ed050100e6779ea0f1c713ac441
SHA1 ff585cbb4b671bd3a04f3bdb2512a896ff07883b
SHA256 0949d1f525ea9da560f02a0447eb12a33ac6db673e89754b8f3d230e24ccfd06
SHA512 22c09e80f4af164d94ef40999572d2ce35bfb1dfacbd1762b380c9685889d515ed9aa064db4f8ab6746c8a26ea4ecffef9337014293905abb2f0cece7344b851

C:\Users\Admin\AppData\Local\Temp\Roblox\http\09f04b99b82b262e105a232e97395311

MD5 e3a0c050904f457b02b36bfebb1c0b6e
SHA1 a611605082957d8eb5dcb83939e1b6bd3d870bf7
SHA256 02c51e5a41d473f8e0befe8e5fb49073f0dec0ca88ee83e0e6a3c0ba3e18d399
SHA512 f2b6b3a7c193a951feaa1d5abeaf52316773d7895284e806f7267708672f6a7baf37191a244d2c044c785fe967d416353ab83517b28932b9e521172b89e22275

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77b3cd784a40d8349719b23b5c0e414b

MD5 05c43f778ddcf81fb06a2fdfb4f7624b
SHA1 616dade772feb66bb1b8dee218c7a5a39d43de06
SHA256 f4a00d60cb52477dfdb2eb264470e5daffd44139c118b73c80e8fdef16f9dd45
SHA512 a2443c678bc019dcc50fd7a49d5c19dfa0c45a7c43fffa24ca225f0f24b6839865288b2fe843bb233752fe59c712c54bff8d9b5c4e8ef5ff4ad8ef20b053feed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c36700f9b5f405f69b210d702f6087c

MD5 94b44243d9e420ff19ff04f4e434b83f
SHA1 04687ed0f779c6873da97da0f16f042b2b459b69
SHA256 f76c45b8c4831588b971b25431b7b85f529a7214f99103ed82b4c2e97d9919e8
SHA512 b7778206ef730254f469214ace61b13f7031d0c4c751b2988decee93dd5a6c8336c40974af74b0aca6d42874d54e23dfcdfc743f5d633610aab2f05e948bea6e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b39eb4053e10b7ff21430e80432eed8

MD5 be1dacdbf4fea39b16e7c11e286b7205
SHA1 28ae9237170d6fa225c54e7a36e35549d191d450
SHA256 3a6d14f833f7da8ddf3139d42e41b2b83d1ea0d4570db39d9c10dd98e33da800
SHA512 72cef9e399c0652a340cb12dd239cc0dfa14a2c832fa63f76dc442308ee9f91b41ddff62fb70331895716b61fdccd332f75c0ba2003f818900e3e6f260303176

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 44a797ea9faa03749ae84809e07f3315
SHA1 1410b9d05fd05b67448eb83e2cf8cd5c01519c19
SHA256 d0c9eec76be4ccc42b5006b03b5289ff2e2b60bd3e5413171ffb66119d82a204
SHA512 11f0847980ae251f936e96b53574a041b8ee887814475012144c2a6764f46ca87ec7b140727b68f3be1e95b005a6d92011828b8473a1a21e8096dc90c150a3ab

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d132016b6bd0b89da2690c24749f6ff7

MD5 2e2350147bec3587e3bc14b7a1e32c2a
SHA1 c275f45e728f71d24ac6d8b496865c218f972b41
SHA256 7ddec5794d779b1ad88ffec41f00c793f21046d18c930328d662a3c2d1c27d84
SHA512 670d3893ab1503dea9437b61b2b1488238d84d3703f94b74b5c20bb7bd26eaa0479e6d3d91319219bae1c1c357c6807101c5960ee2f29ff48475c0e6d9ac3adc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\848d350916ab0af9758cff8167a2aea2

MD5 0042d3425d57e55a4e8c899aa911012b
SHA1 f260334951b11b4ace9af45974e365ecbc6cb9cf
SHA256 f312918dae9b5ebf3028f14575ac8bdb78e7f152061fc59d0885ab7acb3e9581
SHA512 cbab405431b5a95ae3c9d3816b4a1c4d4a07cdc4dfcf64d0977ec80533a6029329db101ac36361114288fa18c769c85a3f238b13f63d2e1e83ef4ef64ae45521

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e385854d0ae9ba50e28a7a5629fa28be

MD5 0c889bbbf77ec231120674d4843ee0b4
SHA1 fd29658b2fa416059cb30a6729030b6a6b125e92
SHA256 5006fa1587ba1da5b7696daea22929c490049bc0f10661d9c79322b0a647efc6
SHA512 504d43f9104b8c56ba12ae9533ad3554858ebfb4f5b4b8b1692ba339deed831a66f5441a1e4706015cc59f4de4729c0128fe7da2c8c3d095b2993e92eec378f6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526d6628fea4b1243fbb953bdf85ac9

MD5 3964c0c8b23c560175f4b299e1a9605e
SHA1 6c155c8a5ece5d5d7340ee4ff0fcb730e4d2b0fe
SHA256 20dc4a3272ebc6ff5edf0494d9e6e2d06c690bb079a36bd04e074818f16a2dbf
SHA512 c6f53903aa3a14f3187bcec1afba4b5b07c10ebef6dd10a710f400996f2214703d29d58abff6e7e0025ea91a78ed2f799f69c542bea006dace570464acf90d64

C:\Users\Admin\AppData\Local\Temp\Roblox\http\73b0a5d180fa4202c3e9365c3d577fd4

MD5 2c2e29b04e1f7144017730d5b5ed8b87
SHA1 8a36310825cfb7d8ea6fd487afa46dde29147199
SHA256 6026fca2672513a7a42dc67687850d630434b2260621f77ef5b2634486048d5a
SHA512 bbd5097d544d3bea8b5e97f3262a4f7765b13d5c742c9df8fd07e6a56e7c021a41de575dc1c24749631eb1003db0b9548c634eba7d6d2701fe4035f0a5880615

C:\Users\Admin\AppData\Local\Temp\Roblox\http\571e70bdfa73e0cdaa28fdbd2ca19ddd

MD5 bd289aae66f24d373fe9d4388f8ba9b2
SHA1 4d248d4f9aeffef2fdd953bffbacf81ff3ac8554
SHA256 78561a946c48755de0fce9695d30ab82d9e5dfce2eeb0ef6a0824282bc88a0d0
SHA512 50666175b0955dbdf933302016675f035df38deeef6b4a0e8d0cf40b6e3d2c3e4a089a5b78d75015e0048b2e7f91d81b69857004d55436437d3fa0754d1ef8a0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be241f3cbd5449b0c30c651c4834e3da

MD5 2866f1aa81a7f9c354d34be6a58aa88e
SHA1 c470d8ad431f9876d7966796a503c15440a35345
SHA256 38baca61b0de1abef8c3a97557b6e246fbf9091d1193e3732f6011508e5f0a27
SHA512 1af43841070856ee4c509080c286285ef4850d9dd8507381a5045ed748ffdd09fc32843c0d18aaac70621a8ec88064f0a3b74036cbdfe91be207594f55b24ef3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0af1ae578b1c58a0e785712d31028c1e

MD5 4ffc139d6996c3eba2d40053423d07fa
SHA1 6da7d02805c626596d055c20cf084aafed9b9768
SHA256 0445b87f48bfd12bf0dae91d8dd7c20ee924212b4cc8be782c0a54193546f43c
SHA512 5af3417cdb0d099add05b22090b5aea9ba39069c4704d000aa323b859e47ea67328f616ab03b7b878ef8cce0d528ac0ff5c0f8fe305175b952e840368e0d4a81

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e665da7061b12f952145852fc21ef7ec

MD5 4cfd979bf14b07dfed01ef9a3b1279a7
SHA1 2e7aad8b8909d3117bb151bf4d34b608e3ab9c56
SHA256 589b00b0a2fbada62af8b7daa8755ce68420a009bf6ce7a53e0865fcf262f94f
SHA512 79a25e0af653d6ecb5fd1908c3652c6fc8ad3d0cf1e00510801bb369728dcbe3c5e1e66f73d058c511320badca3c8ea82f2baaa5e0682f304235b68f622685cf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be58ec8ab04ff195247b1536cdfb3d44

MD5 d1d2f476fd075d55fa0e77b3c507cb0d
SHA1 5976cdae821737161f6debcba500a2842f988f8c
SHA256 650bcfb9e1c7855d2b72865695c2f4d4212ccedb53584f089c26e2087cc65d41
SHA512 958c07812ae7e89143874ce4effb112eed3bec3436fc0b71ee70de38298130d08d89f6bce42d2b0696839f67be260791d121e81f46a4935f3985e241aec7b0df

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d5ee01099db60480061c57d9831c261

MD5 839f812fb19680ae8e62c2ebe0355e4d
SHA1 a256751297a9f82a082bc4d5ef08d5d9d89a2c17
SHA256 b414e1186136cb1f46c6cdc69dc5b637ac5de6a390d67cf25907907c61b364a4
SHA512 f2209d8bbb8f7ce1e6b675cdd2da3a10bb450d50b4f73a596fc0639f201999f32d3c1a2418e0b92c918c0a667a5750ef122e4331361e0022b66a2fc5e489e5ed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9cfb35c8f272d46d504f99d9c00054a

MD5 5a67e8e85c0ad7280e9f1ca86f138b77
SHA1 b9fc6b3311df7710e1251114946b93a72dd5d5d0
SHA256 09e7111ea12f1236be9b1da699f8c93eb68127d0a98f2ceebfc5c2d7b25f0ed2
SHA512 ac5e400ce21e5e2503a11642cf401ab5ad4e625a01ac87f1711a02a415fc924556d0d3e50386d17e29ec20bb99b5d3a2d0496dc2ac1fc1381b29774b826cd9ad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\90d821a0b7efe2541659a0ff6b31b88b

MD5 6f0ea4b31f2f55764db79b43833bf83d
SHA1 2522c29622377d611419babb3eba2e8cb13fe0e6
SHA256 08f380d19a3cf8307b098cdb5e9992ed1d29e5d15226340758a1af3cb4300c64
SHA512 6a5437574ce2db6feac98928a22c7002ce526501335ac00444190febe302dcab5f18ba33a5ae00bcd83f469b5f1cd356474c8cfd31d9992d186fdd0846db5641

C:\Users\Admin\AppData\Local\Temp\Roblox\http\697aeac1e8e025f05cf4b76086fb70df

MD5 749deb1ff197b5082e2b07aa55a33d31
SHA1 08b4d7441ffa13b8dc3610d74a56d8eb11d8acb0
SHA256 e593f31edc529b51f9b253994d8aa93d8ab0bc8faf433e737b0a09e80cf2784a
SHA512 eff256220d72675ba4b23344191b963f7acdce9743af8be81020e2a74662d2f3f1b2735e686806b73198463c550b2d18921840271d515dca0b2d4ce226954d0d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9d72083ee0b41e11170f5a9845c3060

MD5 92e9669fc7c748554c057eccb11a97e0
SHA1 d3fd8c1e136a2ebed238d95bfbfbf3ce61a385b7
SHA256 b29195912662d71be85e0db741dec5ef005d744d3aa0913dad8ad1e51c3aeff2
SHA512 cdc3a1b4c596fd3c9621e53887a9d503205a0d5f8663e1ee3366129ddbfa83f2b15bedef155eda2949f24d1df615ead664114310e3d3dd03f9fb2d95df2e29b2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d27efcc314894472628caf798daafe01

MD5 bdec8723e953241ac3edc46458a6ed7e
SHA1 783605b1587b096807a81e32c488be272e0ad581
SHA256 c31b000a001faa6e08026a24043899ee4941371ce464146a9c78befc2a796e4d
SHA512 221cf258c9c88c857e34fda1da4290c67c3a34459f86b828ab968f5e57b2be53eb4f7aaced83151576fb843a7f1166c267de0efb116740ab2ac2b37ca0cd4d93

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d4f8d4ffe8696350702fd146346140ac

MD5 084a09f4a178b2533a56610f28f252d4
SHA1 70c343a804ea4674a214d5ca8e24bce33cf662f5
SHA256 91b1a39172d8f6f0c98a2a3aaf8c137b29dcc4ed4c1bb4a3bd449dc16fb45e97
SHA512 fd8205ea2edc70743247666bf8ff414ef6038f6ec03bfc7590dc037024ca66eface1f3cc559511919058754a5dfc2224ca04368ed31df8aa942a7d9022b93e5f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf8e7398be5b1007fef514afffffa6c

MD5 864c04942289c1dee2c1aa18ea77f1c0
SHA1 1be7f1b6c2f1472adb9b34fb6f7a51d3d1ba161d
SHA256 9855931b8e0500c6753d77200447963d1981fa7f7b4fb34067bfedbdec0db442
SHA512 6f3934ea3ca2317756e45bcf065abae6cf34ab7c24e1847023ecee8e404294420f5cc978af2afcea986bf160eda88c020fa1b799f5ad75a5e3991e7268192dbe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5105c207d9317b50c40470887ccfd3aa

MD5 481555658adb9b672941de82171b343c
SHA1 7937e7bac46ac99e1897c00285fd23059828dc12
SHA256 5069797f8a4b926fcc5bcdb668c1f67ece5d5e8f05d6f19a260c55c9a67f289b
SHA512 aa9aae6ac82a3e320ce9c1b83883263d547a82369d8f31d3db0ce6d6bc5cd07ef96157ebf234d6e31b40b32e276c233f7c2c0856394a70d183bd64e03720737d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa3db4232d83f97f5e078c526e25a6e2

MD5 3e1ba08877dd32fe4178a730b0ea5e19
SHA1 c020afb22c7cde0c77a9d1d6be18ac8f1e62973a
SHA256 1a6447007e90d27fc71fa7bedef2219bda30eebc33447c2929e4488315e19641
SHA512 bad57ec1a48f686fbc5842a291c95f01db413600828b198b55615857bb1e50e4b3b6031d5896c8d7b9d6753c290c0253ddb83482f89c7fc348b8b80194a07286

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8aad44a486e1e94cb992a6a0e230f735

MD5 451b527070f0cfb1431ff5052642059b
SHA1 6021d49e6b87b9ae8fa64c3cfd0180d625c7d761
SHA256 b9391062d160f5bd861cf7e5ecda919954e84a87eeb3b000bf9b93c068057c9c
SHA512 3ec22e77061670685a576d96cc3897473d11c45c24e581688da54d8700b186d3583ffc23cc2c3395fd93af36afc45083058a2bad9cffb1362be8bf4edb20cef5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\afa231f024ffddec5f9d2963d20c450b

MD5 64c05df26d12845b64880218a48e1b3f
SHA1 6ae26e09d6c23ea9ba5ad92d3d40790948b36141
SHA256 e41beb094c8bcc0d8825e031ec9ca5b13e45b94f3c93601c31c10955cfdd8da8
SHA512 d6925cf4d6eeb5275a7c008723410edfe1dd24b9097656e8573f749864f8fc7c61dac61b05230de13a7b9b7b866528c04adca85ad83e8e2831c43b46a70d4c27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\74f7241d43fd3efbef367cddf2de0712

MD5 1e996f012273818bd88129d26108d8f9
SHA1 c193db2eca6d190e929375e617f45790cae442bb
SHA256 c7c8ee23804c70ae96b1399c2f6730543f10f7678f5e3ee36fcbce97245aa8c8
SHA512 40ea7f36824cb96dace8ff41b1e92a03e0f7e61cac33a3a81c81cba12714812504554eaa0f4344d30061ce1d89f231ab21cab164a008e1f68d18ccfcf5525173

C:\Users\Admin\AppData\Local\Temp\Roblox\http\251c7269a8dc64cf406e8c2d5f5cc688

MD5 7e7342c1c2e3602906a1fd64acde7735
SHA1 357de58a6c39a0fe4d7e4c13c16d8c1d25f9e649
SHA256 24a5a23ded1de17bc3170afbe5eb7debbb47f0ed7b2a4b5303bc899e927a99e9
SHA512 c6313b65687a5ce03772ff6f1edf761aa91f07a29f8b61db7edebf1beb5c548fbc53aba721ede32d4c4bbdd31361dc724c676d41c06278904291579d25d93202

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6443205f8638cd85aaa1caed016b8ac4

MD5 20db412bf509b564fa765bbc0b917fbd
SHA1 938513617f173454649543b7c014ecc762ba5b5a
SHA256 8b7281d0d0576ed2b73ab842080238d7e006e1524ed48f423f61a86cecf3ad40
SHA512 f6c54fb0478c2df40776125a920621a1789d02239a78cdd3de8eb83a27a00464b2aaf8714776897a4b3ae5488da664befa604ec836fe12010a046d48eaa519a1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77fad0fb4662c6b81630ee443153aceb

MD5 183fe999017d5e5654364c0d8fd895b8
SHA1 64cbdd4bfac3c60803acfb2871a9fc8da27d318c
SHA256 3622ef17da158e25761124720a642153fb6eee615b54da286e731ca2920216ed
SHA512 d5026e42d343185e14360a292c6d13131dbdf081ba44960598e12652d99d999b4f5c70c5c02335596d18302b1cf64128a8bd06273237a48e2cc4eb0267d12307

C:\Users\Admin\AppData\Local\Temp\Roblox\http\993f844b48dbb84a0eece0b1d1aad326

MD5 c05764b76e6db0114c1d6200b56a3588
SHA1 5f96252b5a83e5c0810e4ba604dfc433ee449639
SHA256 427939d6cefb89facb6e71e082e42ed184f0883db715e0bd8ca832a316150430
SHA512 4c6c06afb99e99d6a7466ba40146b7fd02f83de16e5c89acbe64179860547f42dad0562b2a281706cfc6acdc5558e8fba5647874ff15d2778f3f6d8c1cd983a7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\28c39719e7218d9c2d686d4daccb1b72

MD5 25a0b3d9ce5e6e1cc4cc7f4cdb328273
SHA1 4d2dddbe9502a5373e6ea99771bb1de6e828b95e
SHA256 013275e837c61c631932167d47d5d9b838ba8b9863915d39f06d8ba4914df147
SHA512 20df5153edab7085594382f80b5d7c6afa5f2a84741efb46961e36331c94369a7c7302c9799676e18aab171cf398dae8f314395c22238de6f8450726c4c992c7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\83eeeca932186715a9107df83747a179

MD5 e7ee77fadd485e9a35a1bfb4be99691c
SHA1 bf1aacc9fe769fd1dd111a1009473db1dcac7399
SHA256 d98e995f0160e551443de0eba015bf29192aea408469c2fc2d9c93a5c1c82cd9
SHA512 3ae849a12cabc409e435da98308db2ec0b86f8fa8624a23632ab0ea836a0aed001853eef600bb99f67f8f907dbb641c9c6bc37bbf959dd12c1bf2ad9c8147460

C:\Users\Admin\AppData\Local\Temp\Roblox\http\584bbf8c27b2f156742be22b280cc8d6

MD5 7c0764a501b7f8f1eab14fa7f9337a4f
SHA1 2e17a9b6d5bd740c4dc91af9311e4a6e77bd55ce
SHA256 dc0524c0d7f9f637466570c86adad7021f9316e42e69745bf8d27081a98f09d2
SHA512 dba17c07bc4310c556ef62f157dfd3a0ea1a617ffbbc4324f9a046bf47be9a2bd500921bf02bb79d9ac2df1aeca3745ee1cbd7f33bbdb80fe67e1adaa0bd82bc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2da892c80dea8811c616fe5e0e6c010e

MD5 0dbe0b49a06c4093d004ec7d44303fd5
SHA1 2bac861a6075854f8dc8db470558936c36201aee
SHA256 b136004ec10d66b813386e21fc6c5f86d37071e01e8a82437676902eb3e63e8a
SHA512 1d306115aa97102b5d68552b591f5faeade373ff3a718d9f39dbeade32892e47fd921cd78e5dd71e91072476e5ad933ff9659ee5ea1d07133b55745f00c22828

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4130cf898fa8b448f1568bfb61305e94

MD5 86df60a0980b57864a2e2d68f857e0d8
SHA1 60c24af81c8406f05ee1721b374ab8a466d878a2
SHA256 ccdedffa29231d609157ccf22019e03a721e9ca248eabf12be511b76f795c247
SHA512 c025bcd3d21ec036712ad8e40afa7da973db770bf5b9b019c73ca8b99202c8e37999e6daaeab3f1c2190f84434a5e4657a8593e8a59066e0feaf38fcd8bc41e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ecc495a0b2b0470e25d688a9077fd977

MD5 741a45f09ceaf9cba7f0ee5b8aac236a
SHA1 aa6b59bba687981191db42af8a8b17dc0fc9150a
SHA256 92ee9b175404bf4aa4e346ebe4948ae5c0ee7edf5693778a5e6a4a1bed508eac
SHA512 97cb36fc2281753eb7a42f762c8ad5cdef7c14665214a71f33518f88cff24ec5e91267f834a6ea5ab0206457c7e9c730dcfb4f7a2ec527e3ce48877e2f34be6d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\477a618fe08d138e560e0c8eab9f3583

MD5 4f9c826223fb8d7fb603bac0b294a706
SHA1 44a185bf8edbfee521dc92ae012e6ed18cfae3a0
SHA256 e12f126277c8b35c48dc15cb2f37850ff5ab0816e5982eaeceb571c99bd17502
SHA512 ecf987dc0d416a7fb1779289a0bd9ba55625abff41491ec3731fd77950e91d5b454b17573be388766b20fc630ee3f125d37feda44e068d2ed0cd2a87be021fda

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5ba3b6fc7c95f933bacb9db38c93e80

MD5 0de2eda8831ddddda130102597e758bc
SHA1 0fa49f0691a4ae61e422a22b07fd4e5def0ae5b2
SHA256 2d60885d3492996ffe223ec6dfddb240eba00a9e03ac0506d3489edc4822e1ee
SHA512 f466e1ea3867fae7618b76a2895cccabb0f646f54bf8c4cb6cf6a5c2eaf4b8e31eb4f8b42971ee53c929241d9f40af6a684647cc09395cfd709774503f274b75

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc70073e6562a1a0cb99b092be4629f8

MD5 acc9db15cdf0932e73bfd20b9857b80e
SHA1 cb6455b641cdaa693de88e9b0d1f422744faa35e
SHA256 f0e15f7608b3829d33eb8e057f31f21e931d9d2ab4814891b11ecf47494c141c
SHA512 7ca5152691d595acc0f0398e26f82c4cf491bea98f2c81e7a972af8fe763ef5926a716ea44112c2fa257ba0109b8848f8611f071b88902901bdee1d32a315913

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f1c2eede7a115f0fd9ddcfae03372516

MD5 08ba91e62331009631f755289dcf7324
SHA1 03786d766cac0b39437b98cb61e65c25d16325bd
SHA256 c50ad1d35d0b3e81ef6780da13361923d7525a39db5c9cbc6c5344a0bf5e1380
SHA512 3fe207322d4249f92893d0eb7a93f455374849ca583dd0fd00c79790ab7bc7f0699fe16de332b767689e0a104fb272992ddc37e002b6962cdb6c66a63618e3d5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8ead55fcc97d21deacf012df5c33fdff

MD5 16e22cfdc829405af27279c364ba2f8e
SHA1 0c75b97959d7df1586db85cd1166f99c65603c68
SHA256 aa2f6c8bba8aec6b84f7ef8a7d8c30022097b784236806e63da1f0417124a3d7
SHA512 d1f6695e255f5b7ad498ce177a16591757d5570a4ea45d396f3fa159f5658bddcb7d524c102efdd982fd9ccfa557d984280c27e57484b8f61be512ce994d7964

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c677a51b0924e108a9b1485dbdf883da

MD5 e1e4307ebd3e7f8280c75be0ccd3b5bd
SHA1 3f2a56ac3ee57082ebcf4a1ca21001821286e77e
SHA256 10dcbda8315ffe2e7215b8d61dbd26b0553b438fe94b1bdf005758b1b96d9f94
SHA512 7f3ef600e2ecca826fc163d9092bfc10fcca9a9e6206ef29fe5d61902e3e9625bb2bcc07a58ab480ad19354bd0a1c56dd9f13c4e62aed22d87da146252144ef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b39250833fce2d9f0655b124db089d4e

MD5 639a9c5f588be3e48a6bf5601215f027
SHA1 1ab7c1d3d5df21a05324853fb235b848945c351f
SHA256 4fd48841bac69eaaeaa9c936347395f5eab6fd4f5549d65cf6fc541884a4b2d7
SHA512 c3aced88385dbd9b10841f72c422b17cabeca80ad11af01222f8901b950be3b42467851d5ef61fa3a1d92f7977724926f765b8bc594655e93e116d04223497dc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\388a60aa5e51ff44455d359825078031

MD5 eb62ee1626b44f54b2c444a487ef84fa
SHA1 d3d918dae048e4ee9c9626608693d69c4c4ae55c
SHA256 bf2f079ca21684f382d094af52836d83862c93800e8e054c2f6bc0838c442d86
SHA512 68022f2ac538c51acc24065480cd23670efff68d56a4b5dec2c28316726ab82c81b48fbfe76c44f32dc32b0af75fe3e203aeb40610f34e2e5d75bc684f712381

C:\Users\Admin\AppData\Local\Temp\Roblox\http\252921e7f19d826cf6778747e86132fd

MD5 e06fafb3ee051c215c7118dcb4a75354
SHA1 c72b3e0f2bb1139344053256bcc3ac48f590174c
SHA256 ea771a4652058a4110a95a6fa24c847e7a50cdfdd711f57e02f9c7caedda7908
SHA512 83008fcb8a91bb42f76568773c98e5dcf6658b0d7972d595eb7059b5a598faf80fcc8492351e9e98a6d3a9ddfc17fca742f07ffe4af644d99c087062ed7b14b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6d1b0fd2905f7655bf0108dd4e655991

MD5 efe7165d72ce56eef26da49dbefa586c
SHA1 b2441c50e501f7121277d205876ec6a5811c4e67
SHA256 4e12e3ed0da10924a1dbc49e464b0b07c017970c839f1c1cb4ecf5a8019d3ae5
SHA512 195b3d7954627b571226a4d5293b19dd0b7b565d4b295b494361ed81f3d9e1c193533dd0e53b2ededa326278294694286669095147d769c5de343aa611ab0238

C:\Users\Admin\AppData\Local\Temp\Roblox\http\23f316746f014ce443f0b0adb0d9d90d

MD5 4843f2fc4404a016a8a7b7f5c352f877
SHA1 1446153b0498dd65dbb53b417d5ce5db49f0dec5
SHA256 46ec4647b950351b091ab0bb34d1964bf24b0eb58760175def7a4a1d7a4e09b2
SHA512 8d5198bd48be46a6aec5cb5d9eb6e75828f88742f12102a1f5091f9c8b51167fd6db13981fb875b032795b9407fa64cf3aa54224a64008262084dbfd3d98dc27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd52b35df5f543d23b7f35ae9e845be

MD5 2de5aeee01688c41f23b2ddc07c0b442
SHA1 68bd21cd4284ff390c1f4f5f4b61c9ff3b8f2268
SHA256 3ceb6af768ce708d114195ea3521c71370ee69172d4d0cdaeb1efff406571d73
SHA512 ce845ebebe20efbfb1a0565e69cea69e3a4f3e71289ec68379565052a2e8a3e5ac873b52e74ea26f2afae7ff64c789c348b4b9d4426ac0c0d6547d9f12290090

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc86756c9d8f409a887054cf26a854b3

MD5 70461ebd3bf0f7a0beafcba1d52417ab
SHA1 53dd7894e76f0fe7c02f378d7c67107ed4a03d45
SHA256 e3ef21dd9efd05fd1260691d6dd47f76155bd0b5ef1ccb62ef1e588dca161fd7
SHA512 ccc18b368873c76fb25c97009bfd17e4456d488b16da511e61fe1dee031cce48bb25d507d7fb1237345bdc2191085bd384ce45ca98a5864d10b65b28650e553e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\16f7441682caf62a1789b9d3e75ec170

MD5 cb94125a0b01b9335f3c3c9a9c6cd60f
SHA1 85ae6cca4c661270b389c00299bf7f5d81fc3943
SHA256 afd92a2c0ea64515200f7dd1c6237f18b6d1bd2065296939697d34a3d4e1b0d4
SHA512 649155baa2d26fc6afd0496d11f37d9dcb588726806eec89be58faa54fcf3b90d1becf114c4e2f3964c98e93399b87bf5bb87709a7bd9a3540c7ddb56e2da555

C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c582bbf5493f077bd8f59567067f24

MD5 ed3f4356a5aa9295ec58f77ab387582f
SHA1 99f94109e03097ddf835c06292ecb6142c93fdea
SHA256 60e6db5121cddd5bc13b1019c85b5d962599e2548c347ee3c7d944cb20ff01b7
SHA512 cc7869759564fe9d5e1580be978727c4b0da340c052db74f677bf7cc24d93da0b837d01ae0199c6404e02b49d08fe47a2fec7165cfad841f1b6fbb1d7e8d7fc4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f40c00885cbd0588eebf8bd59a345579

MD5 9c0241f7306bbf3cd085509dd7840c99
SHA1 21c2a9c916d0e537c5662db2acb565615ef79962
SHA256 e2afaf1d969e104e2ffc22494e2f7e2ec4a0bda49b9de0dcb3bbaa3da9bc8655
SHA512 afdf2c9a29559645e08604b15f023475e8610f41f650f3527a4c2199fc4bda9c291bb24e2f337e00cfac6a5347fae125d8055f0af6eaca38b92ec408343cb9b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c288ffb1fe759d2618c218fa0d2bee8

MD5 c914fc7a80c8ebee4ddd7216cb8e63e3
SHA1 2e4bbbe23167be5f26e5f3e9f1e1b2409b38e7ef
SHA256 c718cff1df66ac36549451bc6de0535c3f2f9e74b4fcdcea38af9eeecc42a674
SHA512 7564812cd051e0970b3d06aa1bb839c8fae5d1e95e23615eea42d2f12b6284d06f2936cedd947e9d4d33c4656fec00494121d58cd38ddaf1ce2ad8be8685d0fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e4317e6c6a87bdf6f00c6c80866345fc

MD5 fa00f598036aff7c2e4728ff840efdd6
SHA1 7873ee7205e2817fc8fdcb3afdc275aab494ea91
SHA256 18fecafdfbf34c5b261f4acbd607c439e35177802c8002a0d88221258108abb8
SHA512 f72faa02c263ed200f7a296ed86ef5da614911c1cd212aedd12923ba551aabc44b33cbced8dac80aae67dc09988d53ee191755afe3d51383ce885750bb00a944

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3ca8206460663e9e944ccfb414623b40

MD5 816be237e27ddb79f9fe0c46efa0119c
SHA1 fe0af06e1155ba784ed6ce8b97849eb3fffb5f9c
SHA256 ec6063b82a1adc4187ee0e01f413d4b5ed10277605f741295658acd3f0ceabcc
SHA512 5ca3c5bca3f5559a500de1262c133a972e776dba7192e6cade152245c0e1118fac41c48a79dd0f15c78ef177294867f041bccd3eece6a388eadcc32da8efaf00

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0407c8d6df198f6864381d3e595ae971

MD5 703dee4351832fd18ef5b85c6e1bf992
SHA1 bdea9dbbdae401cd68814d9815a17bab6f3870c2
SHA256 8fb57fee0d1c996a828a3147fdd9a38e8d1624163dad101e4bc1d44894bc3d68
SHA512 d43b5dc41be38f5fbe30a51c1abcbbc5c606c9d911dd164b5106fe2bcf0310ae8b641299c5491bbd5ba66433d87ebd17dc8a487d88d56d0ee8e81309533ef0b7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\852240b4203e72d7bfa66fcea2e589eb

MD5 547ffe689cd0af21ec616bd935f78b14
SHA1 36e70f429bea53fc2c8dd76eaad82f7bf9f3742c
SHA256 abf9ebe04321f9b8926304bc16041965dd79405783b7d3ea56d5fc802863bd9c
SHA512 3683baf37d3da8ac536ae4d2d852acfb49039b3c9d4ab42d972c23e2df6dbfd178a552ef023f48c43c6887161313d516914d26b7cca0c022e2741875d62e38d2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1489d1b06ae2d917aae075e6fa9b8f7

MD5 5420558b929446bbd89f3d35e72b5836
SHA1 da46e5c797831b47c4d62fb9321c420c6b0ba50c
SHA256 12d1d581ac394291754c5b042baec0904c2f3b3be6a17e0a8761b32b6e53d507
SHA512 e125c8d668b2c73d583c528f6d35bf8a1c9558c594cb3aee98e25eda051f621a6924626d845f200442da65034dd77aa4a51dd1668c07b26611909f76cf9174b4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\06bf3774b39be975c53ba2193da7f90d

MD5 29abb94b78b9a73db28b7ba825833346
SHA1 fd6da6bc273d4a44067d8c2b625980ab8cc52aca
SHA256 d929c9d2ba98883044b81894da3e921de179d5915e1f92ca9d4df9cc89f1424f
SHA512 d5069ac2996929a5d1622f65ab450bd152130978b049f672b1a9f28cadcf724e317024bd95a11109e0ae488834ab184f5e4b10f6a21ba3329cf056a0b7139613

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b597c88ce139f36dee5c4afd7d80a2c1

MD5 f195c3e8ddb6711a2feaad4aec69b8b0
SHA1 20b1011f280842fe6aaa58117a05f57cc17b6c69
SHA256 9c263d2a5db10ebc2d543bbd0c125bcc5da6c2245ed133fe0abb1b308f343a71
SHA512 52ed2e19a2b991880336b6b1694016f4c8e5a5e92a9dc989ab317f7f743f38dddaeba8fb5764826bfd9aa145028a1b3f9fa34a02f39c1e5162aef7ad282b0632

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1cb6044427da36923148711b8796b750

MD5 ccdd89dadb2a17edd97a48f05de218ab
SHA1 c8829afdfda3e414304f09f588a9e00cd43de4d0
SHA256 8ebad66a66dec464ea8f6a70c240e6fac36d2155ef5460b2f1cc80451e9949ec
SHA512 79976e6623479c42c3b9babb2bbec208a8f13b580dc19419df33639e3922ab973e740fcf33c94841e833ef3ca8209b5b149d2ba5c064f08e3b6a526a651432f9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6c536340229d1bb052a390124806163e

MD5 8dda220de3bfd073f993acca9cce3f19
SHA1 c78e343e500f592bfc59de89dcf8548cd6fa1f71
SHA256 21710259e1dbf800de1bd2dd8e19f33cf70dcf6ad306f7738a23300e40d385e3
SHA512 d21115712737f5d51c7fc887a14bb7b9dda4b9db295ecf429623a20eee02b2868956e6d66907997f100395625c42464218c36e750224e02fe0245c0292fc9e1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec9a7853aa53bb67f2099830ce97922a

MD5 0ab1d8c6659dc5952cb81416c8d9a85a
SHA1 16d889c645dd70901f87cc86f6db8a632b8518a0
SHA256 1ebc2f03253024917e0b562d101603c2f9e04aa70a05accc5e63eed9976ea0b4
SHA512 657a549264297c42e4783cdfc76baff2dab9b5b9c1f991b3aa8b16f2b8f87ccdb0c1a56edc23713ea7f34ffcc4cfc95b7fbba8d5fa06ea443610f06a00433f36

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8550d05ebb82e2c3691bc35b7c166899

MD5 f3e7b2683bee3c3628f500d157a7184c
SHA1 17aa34cf9e45a2a10cc370ef0047d6ec844053dd
SHA256 66d177f97d367d8181feedc6db9f92f71dbabf58cef1355439559005be6a24ac
SHA512 48994f038f0cca5a1ad783d05490ccc209ac4ff2a9fc3b508d5225348d2202f9760ac6c0334d12f74ab8227eab5a412370459ab328f44177729f8fb6b8911088

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6e62dea9b6f892b37a40251f84c9e0e3

MD5 f48177bf38c02c3a2cb322b77d627f23
SHA1 e207f206d2f707e7feddc32c02883bb71015d23d
SHA256 4a8a4eb5baa01e72889b67caa16b69a4c2e8a07aa12f84ade87376f344b2fbd9
SHA512 bb3c4ba048199ddd3cf5d554a90c279d7b868871f1a0eea4ce27c641556fb3e483cf839e3f9a27a092021783a25d604c952fb1ea34528d722db9930fe48e38a8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\05e6fbe7faeaf27e476e2247265bd7e2

MD5 774331951556eabf4930f06518bfe5f8
SHA1 79a7b332357aa2b18cf400033bfeeb5db7614627
SHA256 c4239a4d05bd3e427245f920cd4eba313e0af75c819f89553c7b6758da9b4d57
SHA512 bf67dd1c1d57779578524ee404de1648d9a4d8ed7f524fd49643ec49c3165b9321d64bda2216cfb8617c32cb500eacc2966263dc03841af51ee37facb2b1724e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7209cd4fd5e4a48a4cabe7e3498368ec

MD5 643d56f3cc2d206fc1eeafd601a0e287
SHA1 0e55be4bc02d884a40a586b44d5728f9e8fefa6e
SHA256 637c7f57eea4b46821e968a691bc2181ac0ed00252691845fefd947a4c594f66
SHA512 10cb34ff5d98467c3de396ef4993a11c7db2545329ea473eb3ffe387f2663cfda6d21d31299f87aa3f298d2bfdb88d705b9236e9f71c48c22970713c2c3f75e6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38b0d496d6e95d4a4e1f049ecb71b4d1

MD5 60dc54bc02627b188fbc37f3c81899b3
SHA1 7065242d6e88ff9ed0e0cb891a9a6f6db2be5334
SHA256 35fd7f2804d4edd74c14cb7bb1534edc993ab7ce9e2d64be997b12ffa8ee5b16
SHA512 2b43c5d1f2ee4621055d94f3e04cbfed24371eea9a7c719f8392a993464e7d05635f59bf230e294c60de5656f421f4661bd5b1b8f286c4c15e79bf9c57d686c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\92ca8d0a36e9ce06a1c3537675677ffb

MD5 ae7d26697baf4e3c0a4f7e4fd800f89b
SHA1 4f2472e39c964861701d80139cdc33bb967b2c34
SHA256 58c1370bf264ecee15638ab670a0af85f8bc3b974670875c757751fd116f4833
SHA512 e93451a30c74751ebd6996efb038016e28370de37bfbfe2fafd1f3c3817f2e720bc3b7d96e1c0e346f08e3c581d13f77a535c30c07a487f2c4a13b4da9970a0f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7df53404f56c9f1787b277ba9d17049b

MD5 ecaba5cf9469daab7c05847af2da45d7
SHA1 78d9c8d289db9815482249769dea663f4999cac2
SHA256 23946e247fe3bb06503a06be2b8e154d724a8c2e86fa4f441fc09ba1e5781121
SHA512 4204260b2efe3b4c95584394b30ad7957b154229828f0ac90a04e5167c7eb78f254777fad0d4fce9c5675fccc390dfccae2ecbd8d17e0e73bb0a6933605df7d1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1f571bce12b3689efa5586c78436d68a

MD5 aa1cb968768ba580f7e7d559906a49de
SHA1 1a6a0906ac3c68f859790103094a617e0439d77b
SHA256 b9e49fcb7d0be8aac8bf1d990f2277363077dbd34af7f5109a14bea85b9fd35b
SHA512 a72d7246405dea401b6e97963ea624772f65a7b20eacf2c358fdb73d7e5c2afac79b5cd39cd548ea8c43f14b5f03cc38deee8a495e9c7a1f264c1ca7de4f2411

C:\Users\Admin\AppData\Local\Temp\Roblox\http\68119f28ce3eca78171a6a8c8822e1bd

MD5 35e84ac53c5b6ac5714c5589d7d79153
SHA1 cedd01f0263fc9e5718b8e77b3467c14a35a1b53
SHA256 47da60997e22feaa88bff58bd2db6320534331990a14e2b64b6d665df77b931c
SHA512 7cbdf8f0eaee0c4e00e3813d1e558cc5aa305d6e9861255d721bfb655cddbf08c70fe61f686e79154f1c36e7a4b5c29f2ecf2776fee9eb0b7ac1da8c87e75dff

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b00de5dcbb5ba1d0d58ba82e9c2f97bc

MD5 9a3aa49a6c57739a171e507a3b0a90ff
SHA1 f3c154299bec91f215954c1df2b03f68fa08efa3
SHA256 6d61517c2a006e117a5d5032dc1be0f993f275b6d0c8a0fbef25bda8cfc12691
SHA512 0a02917b5eefba73d3420852a5c66719bae97bc3c8f9adfb2dcad89dee9caf5852f660a3e787d84e9b86e3793ae0605b2db10c0a1463e0f09a733b614d2f4c1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7deb7c677f433c0b6c649020e88fe58a

MD5 d76037dbae4ae81158187aeced5816b1
SHA1 7858adc6bdb9f9b03fcb28746d7a0d08c297d058
SHA256 8113ac3b2c1f9a16f7c5a9be473b64abfa8c9689afcbcc30750aeb3077e3e27b
SHA512 e9e1b515c621e760968098b8e0a16e00cf1fc17b74065efd2f8793add04d5e506205df5d65be1db885fb958b9c5879ca728528963b4048bfe073d4249c0dc6eb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a479665357e877c36a8bc4ebab8ac84

MD5 f5366499a754da1e3317be61d63cc243
SHA1 8689a3cc6a2e1af5dbd2b6c23b488283362bab0a
SHA256 14873e016597bf69824fb29a219f6d81befb11b19fe2e505544115b33f030e6e
SHA512 6920f31ed14ef4621559e67c75a69ecdb7832aac639c40febd98dcf9b7c02402510e983b84cd309bdcd7b0438b394cd6b1d11bd4c32c58488d24a5d38db930c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6105c4318cc0c25a63a6c9b8db84bc28

MD5 6badf7314b5d440a6ec8dea899d7872e
SHA1 003170f75f86922af2aa5bc4b2c3c41f5f14106d
SHA256 c13071122b4ff111c8ee877e0d8bde8f34ab3569df48fa81f6f4f1b0b0ba855a
SHA512 5fd8098470eb97e06e62f6d8753d3dbef34d8db6b3ff463cdc964e61e765ab844168170a64c837fa5d60c029a79ac0fe7cc661b9bae07acbaa2400120037aa13

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a116d80baa851750ec02ad98f6a28052

MD5 db41d22b9f9f4a43ff8916ff8d513da0
SHA1 00dee570785465bff97ec8a96ebfad3d21f1d248
SHA256 31e6f7d03515207ae87b2f9e9594fc94db77038fcc28ee3990689c6590b7547c
SHA512 df4e09d0f24ec1cf13ffa1a062f9d28a5d36d99b606f27f7ab757f82e4202e51ff4e033b6554b763e6f97c73bbe77b9d133b4b842469b96056654cc2f202124c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\234369d070cc483f7122fd415837b73a

MD5 51d45f80859fca2ea5720897d7f1612a
SHA1 2a7d736969502784b96328f4fd1fc7697a099273
SHA256 5bf07b195c3902c69653ca0294f2bdbf9124df501af426b14d6bcdbb87d70745
SHA512 059455bc829431130377e4c8cee87ed3652b712eb46afa6f666d9e4aff7401b59068da840b91f4914d0752880cb2ed8c64a90e79e37f45b4b90996e44f2932b5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed

MD5 808cb55c51b6fc55fa6cdb17892dc876
SHA1 4487b86a3a42ff05e109800b1827c100390245c0
SHA256 eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d
SHA512 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 18b212f2566b35c0e3196c473380b12a
SHA1 0ce259ae8b3d5c058e12322a105245d34c8f8ac3
SHA256 677db90f378abf7ecbe0cac9ffbb072fb1f01ba172dcc7ddc0996ceeec7134df
SHA512 a1cf335fb37c90f2371fb83b3bde7eeb88b5dc4d46609024bc5400418a015154141e54bf554212501d3fbf1b8b7935b49c75da854ff413042703e94c37ed2618

C:\Users\Admin\AppData\Local\Temp\Roblox\http\41264952abd3c8ac032cd24c6231a1d1

MD5 51321fbe54bfb29828bc708d23457753
SHA1 d6d9fc4b43418624532956dacbe8c08bbc47ca89
SHA256 96274575ad50b7c1e83fef8d0b5121da1295f3007b54f141b815c91d6b81da5f
SHA512 06a8e9eeb15728eb54511c7b25445a3e9ba89eef2435cab4a079a00e7e9f93f72a6646a9510c456aa9a32e6c4a1e93dfd06da42d6d7c2009748292ed275a828b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a42bc9c5238f0822e1029a99290fd823

MD5 84b483ff88f6bf94ff7a863ee5dcad89
SHA1 337896be3e52a3396298abe593e69f1a5b405ebc
SHA256 aaec8e09bff9b39e388fe40583bcbc52ef86605dfabf54507ae3d4d902822c42
SHA512 cc7d6bbd9b806b52e6feab6294fe3ec108bf80e058a82fe4d8f20b897b83c8004e918db4b3e792c7051455e41d4dc324155fb6685cb59f6dac16ddbf0b9c5807

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849

MD5 7342a963fbe8b3a5bce98391f7c91497
SHA1 d937946afb025eb344dac220aa2d8d3494c759af
SHA256 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd
SHA512 fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38dd5bd0f390efe4ab5e5015056ab9b1

MD5 650252936c062e6a1997bbd690a566ac
SHA1 519167c5ff3017cb0ff6ef709cab7a1a953dc482
SHA256 4b3600e900840d6eb912b854565f606b50d8251b09760d98a04d7b2b2fce86d2
SHA512 4eb0606f3be517c915cd98d0ccd9e8dec2ba837eee78105b908ae3d3c8e75a09795ebaa8be2b46f4e608c3f7b6803bc26d1443fd98c84d9e51536b725326b54d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9b664943add3e8f78c518cdad416680c
SHA1 b70c05efb7b82408704518852ca905289dd6a049
SHA256 eddf61d6d258e43e30ecd9a442b6a7d777cd82c11b938f1053947784c98b2221
SHA512 37b9b74743beac8d40ec4cc297022435736892cb2bb3c12e0938fdf19a77aa2c29c840b50dc7c93989b77ceccd39693c31caffb5f6e7cda66276218fada0fa44

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 44cb29d3b2dcf2a50880d11d396a9d63
SHA1 550d77c9a17941b2d9e4ce970009b396f1b504c4
SHA256 49483aa04198cf1b0945d1956ea35508a78b91a34ddb604ed29a9e53d68f2872
SHA512 ccc0f7d5798205266cc3bbeb0e764f7c24b6ce04250463defec8659105ba70f76ad16cf355063128df0aa8b006a413f9d3892da29e95d73bfde5762ae60311db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 2c5339567349377cd65f4b173b78b528
SHA1 c1bc8d5b9b7bb2a5655767b8928d6a78248837eb
SHA256 61b9e74b834e4ec61af0df088209332b7974f9f83cc1cd36e010a32e7825e6c2
SHA512 291bbc2bbedb9b702cb39cdb6458780b42d954f35179bccfbc37c80a61a1de5d534ca36d99215de3880541d3cb9e6a168f52d3dcd9bc47df2fc8cfdda3e2c0db

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c0342dd61c584dabd6da5f9f89cc0e45
SHA1 62bbb144ba7ee492541cac2a2ec3d5f6f4b9564b
SHA256 401c13bf8086e9423e67e06fe5cf0f93f79a9896ab115c6870f1077db49f4c06
SHA512 970a28da144723e47d12017fa88d8acdd6df88c8dafc81bd7ab8ddab70b4242364f8bebc6459061abe7f6fa26600fce5e6d5f3c0957821f072f65cd1fb8f82a9

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 91a53a84ee305a93551006b240ca2879
SHA1 c3ee5fa24ff4610e1417678374bacc16f2868dd8
SHA256 533edae636d40a5302cb9cab17d3ea56ee9d7ab88d028397c5f254b60c748a46
SHA512 4df4f8c17eec159f419c5c7eaff6f94fa864313fc5d8b39aec07286630c16ec7e3d19fb5005660a562615a36689dfac915df42ef83caa0ac1c3e40f2f3f3dd27

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 99179571313d90a1cbe1aaaf61ee4a5c
SHA1 fc48a03656fc90a543bada64ab87de79f1b4c3d5
SHA256 0d57d676b4619f7f5abe36a8e1f738f4c7038154f5ac91a9ddf8882e2555303d
SHA512 60e6241f7612b5d190cd931574f58f8c25f9035c23273707f70fca5b0edce3e89dfef3c71ba5cdd936b062b19a349580cce02805a080eaeb12280eb81b04ce6c

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 7ddc5b3dbfed7c6c4bc3aed4e4b86189
SHA1 0c9037475b0c8cfd446dc275737ebadf330fab37
SHA256 679ff5e617ee4eefa4a174303706911d0079924dc41258c484745abe727e92e7
SHA512 5503994b452c802ddb65ab18e4a145c7bd3c0b290d81462159207d52c4021e52ca03ec9beb59fa595bf1062de2193af774e6f56111ef46ef7b35e507a57417fc

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 26def399a13a9f8003ff939c6dcf36aa
SHA1 9114e2f192acdf76c2421d447e6adaef86dcaff2
SHA256 c3f148593938788a57f46b3a871cff1d15b021c805063403e56aed4759f3883e
SHA512 0a09c79c03a2182553e18b85ef277974eddaff37512619391c682f744b2bd149e4a1df08693f9811547eadcac938fb8f6e272ddac73c6e9429839cd0fb6223e8

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 678769726b15245a94beb57bae55a1fb
SHA1 957d8b32ee1be595f6db911064f259311ef777d0
SHA256 9f6c8f3396d6b0a608c25c9e21e01b4a964803f558e04a7234b183d79617ac30
SHA512 e184c8b144dcdde7eeb9c2ef709363537e14c6d3ed7b1e7daf405f3777cb9d056ae4d677b0b39a47f919dd9fdae3722262e496cda537df2400c7595d17498271

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 af8dd1acb980c7fdfabbfb4b8f8d3ccf
SHA1 4773f5bd61716b756071ce8ae91288300753bd48
SHA256 0f01c1b2ff2b8975553099c144ce9b119fe7fc6e5856a84c95a23915fb297e15
SHA512 2f15d02b27d50a5f454ce1f0e5bc288bca14ff7fa929f5ba8ef50761a0c87b3e0dcae0fb76a483279befebca4ea520cce4ffb87c0b13c8e271f2839663223842

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 e93c6fe59a73e0fd26aac50a73b373a8
SHA1 e33fbe41b723872d29c11da0f2a940565768c8b3
SHA256 c85597d5e98ae764ad83b0dcf784bdc10a52c4d62fbd9120eb721c610c1bfcad
SHA512 80035ac6e67d3c0e1ff20458ca80b7d4631bc3a4a246d7e3414ecd263727b8fde57557a915f2896c768622ca97f980f66d878cdc918b03d9edb77a8cf05c6e80

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 d1c02f42d51219a86607481244baef78
SHA1 a12bc1bce0203f30b30de25285d7bdb745ac1d1c
SHA256 41ab7e8e1a03f538a70cc69902f7c253684f2be81dc4ea879efb97ed7ee923bb
SHA512 0c83089a96d559688ee1a5d1a1da462becb77aef641d378f10b88e2e9652b274c940125aed78e3b52ed5a2fed48d77373218d4e753c88f0c6513c402984e7e53

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 852b98531364266d6b923ab579a30642
SHA1 1f0aff87ca2c99364fb1922d9ca5bcf9d9503401
SHA256 1eb6100c13ca2af3ca2c4c11650b46eb3f2edd69199d1ccb442318e9b2bdf057
SHA512 44b876ab704a3a980b4ce717729d91acc21798947a2df1e62662f4b2ff71af38def37b1309e7ba6775cf450ab28e95ecdf48ce09f08db6f202c2a9c326d3f28a

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 17a64c86447b7e7becdaaf8658c64b73
SHA1 8018e06cfafa584998ef89dcad484b48ead95e42
SHA256 3f32e986aee1a5c82bdee4d1a0497a7647700cb579b8938e9a3a30cf98cc945c
SHA512 837716a5fe3c31e02230eaec2f16fcee4d86c17e771aaf1a99fe3008c081e9a6456e0dde8f1810b2a6fdf7fd905847853cae914cbd42e07954f734095567af36

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 0699d769457bc3110aaa7c37f01ce12a
SHA1 5b9d9c98028f2c9df98f13ed9e4f2096805c48ae
SHA256 5c791d71a3549eea42476df05f9e85f14e5bb657023d58438e2ddddb93eb963d
SHA512 c84901615bc64f5df7c8577a19df3039dadee88fa2e1099e663f26d95cdb092690dbaeefe0aea1184750f391dc4ed9e2877c0a3f372276df1fc4ca4caabc871c

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 d90020563814db19d347e3235021c3c5
SHA1 ed2a18382ca05e526e3888885984559a422fef85
SHA256 f976c5009719bd7bd73a9b5c1406ee3e8f837f9de537facac33c797c291b0b12
SHA512 609035283e68a1998623a473cc915f608c8dca71f0c52c88ff09c3eee057e8e3b63cf68b2a7fecd5721ea848bccb2637628df6a6379e4a8603783181b45c6f7a

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 a02bde244186e4b6dee17118c6cff980
SHA1 025910fe598b1a35e0f44ca2b56cecb063aa6e29
SHA256 a85f806b1f2a41b77947f7048968fb2c1a4372ca58d2b53e2f7a94e8a15337f5
SHA512 a5ce39d44ec71bf29432bd8ceee53eb90f4ed2f9857402ed81d52016d569974f63698aa1bf823c8dda5d2ae2c6f07bf299f2c8f65076ff586b301f4f9088745e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fedac173c4ad92134df48f7d20dec6a5

MD5 98bb879e421cd921c979fb3a864e1ab0
SHA1 3002976b1a73eadd09679d06e68d5c0c4958bcef
SHA256 68b80b222292bce70549fead420f81ba76749251495901ed8e1e8ded0c83bf89
SHA512 e92d89838e1a293834ed4546340aee50adcaeecebc480043348722e0a36a34a8e82ba7cd827cab0dd0729d5f295f390b862dacd629cd4f4d011ad4acbe0588f6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcb227ef820b9cc6d620a91b909f9f20

MD5 a04b239e4aec49c472c11b84c2f96bb9
SHA1 e91cbd3b5352960e8bc3128fa4d3ab20fa487e84
SHA256 b5583d90f05ebb28930ae08e161fa042ea5ac39596592f692c9461465f274d27
SHA512 f62f3c0e3cd04105800ef9ab5c8f747faa26ce28dfeab32360a028919bbe91b00999613dccefdb915884dc11173674b31e80f9b5f196902368458044b43a1989

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fa22481e33f3751986722c92ffd18806

MD5 3e931198207b965313788c74434e220c
SHA1 f95bc21956895771dba2a7a94d80ed257cd36463
SHA256 1621c2cc5f64a7a84862682f430cb8e3fdd3fd0bf8bd8737348a17bf7431bbab
SHA512 578d79eba3d8601fdabc0f6e992c8fec6724a7d01c3442f54da4b1d578184460a6d6f4464ff80a5bfb2cabb8007101069d87c703f4bf03179cf71d9613546aac

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f979fc7ba1db929de3d3c022a34fd21f

MD5 76d415562f88fd4b66fb34724bad28b5
SHA1 a900f0c2d7fb75f8442f9365026b50dfb81588a2
SHA256 2d047c434f22721446523a3ac4d43a213563ecd3db36f7602cddea8e226e15f5
SHA512 619870954db438442414b94bed5a3ac9feed2c1cfb713f65a495e5e2c318e939b95e9aaf03219153148c818e874862f16dcb9828477c4aadfa4108f175f759c7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f5b47bb9b26c7bb0e80ae6555830c714

MD5 cfa8b1dc516c1b05d0a4fc8d35ff7705
SHA1 9cc69c70d778bb57e2b085fbbbe9f3a706799599
SHA256 89fd49684a4381d96c8f1fee627194c90b064223212596928e51f1e80d6d9def
SHA512 dfc30dfba603f32922c14ed70fed1471eb8ef503114ffc9aa8a028f809a93dc9b82b133054831079628dfc51ebb0a990c6934252880536d778eacaa9801e6104

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f060c9d491feda6b268b9e3a5b68d2ca

MD5 6c8630bb4d38fdd05d7e7991f5c01dab
SHA1 e554435e813d734c715113c9e4c30826c8194e6e
SHA256 033a94457b407edcefa01de447a4510582768a975eff216023ab6c43810607ca
SHA512 f2e50d1374397e4ea26f19e76cd8ab808eabefb8869f1e6e2e49b33497833f2fe5a4eb86e528881f5b77747831d63204e01e889514329943965a9ee8e249946d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e317b71dda94bd913a7b72eee88e69ab

MD5 4b4044ef6e928222fca4048d02d2bfe5
SHA1 b404ec9e0ef374d3e707241a5ed3b28276c8ac61
SHA256 0b198530efd5cc54e7c46347bb774ed1af4666fb9312a51120f87ddb0afe6d68
SHA512 669890fbe0850e4e10190c21ec98c4619ca17df8bdb10a66fb667775a24a636116355064000dbe961f6c227c69f0e33904bf9ba0c05ad26835d0fc45f7f2c021

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0549707594205a0d92d209bba184340

MD5 ab77fb654c8fe772351a457a565669bf
SHA1 29d55a6c3b4ab25d77fcaa87fdab5941e7f6a419
SHA256 ff1289ae2f514ddff140b7a6235278496c9764e39494ede2a711985bf1398985
SHA512 e987557a75db78edf5418210da0dffaf9d3ec3d1baa54489acf0d84c59d13abc31b2b60ac12cc0878edc16aace5cecc230e8ecf323fe915cdb99fb11495c1973

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dd1855fcda5094f9bf3a078edf2dadf5

MD5 1a41023cf3f006985f73d67b439e7c40
SHA1 05c45eb00dc223f59eedb8b64b777961dfd96f80
SHA256 1d75adce37b809ca61d161be62f8800194d235f69c69dc6c85958abc984872d2
SHA512 553af3f785506fee63bca6dd75e53c0105bf1688f86b316dbd5031bacf1404e3d943b6d0945bc338eaf230b67b5187d7c9c320a1df39e67c67193679b94552ef

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d9acad94f6365e8308d73157eb776d64

MD5 103c6404db0b4021590fc12bebab2f69
SHA1 b5a17839e0307cee59ad10158f61c77de973a9dd
SHA256 3afb22c5dea7dba4db05b3d1f2fff5fa820296cfb05790c87ba8b65104720150
SHA512 816b362cf15ae2ea1a32fa1e838358ee2957832a76bf80fe106f644a0267ff154e44b92a9c3d5c4e32c6389cfcefb2d9582a4c8ae9fde448e58c81ad5ea8ed1d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ca69e8e4fc12f768f5339538f2558c23

MD5 3a78bd353ea34ab5f755cf21877f4d3c
SHA1 ba32cfabda1ec08eb97801f287dd496bf5a1a3b7
SHA256 b6e697cb7f30cae7c8d1a0312a6c29ef6d279a372eba3166769de0337e3edcf9
SHA512 1dbb167c4873da30a7345fae155d1cbee73e5f6d0741fe6180eba52e9e7f95b03daf69a7bc88d7fae5c524199e9e88b67b81cef888726fcb1f7256b1955ba0f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c8bc80d9a61c95e5a654b61175e69e0c

MD5 8fef083075e36d2ba9785aa857259efc
SHA1 4295e1ffe016f33718f928c78d5f81a3ec4a6e2c
SHA256 72d528a0294f292657a3372bd15de819fe778c9b8206d040b71a580b8632a827
SHA512 fc276f5034d8d74c6c975d365232934024bb5061c1be2262d8211bf5950ef66ab894c68565a747755a311abf8224c593f12eb45255fb1f30b8135f0cb65a1c4e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c81813ea34dbe699086525727806025a

MD5 243454eb93fcbf8758bcca801561102f
SHA1 95f1790f3f638252ee37a40446b6e407db854d18
SHA256 70c10ff2bf7d1371f68475c221065495e12d210dacdadae55b23bb1a38bc8b04
SHA512 5ca4ec1932dadc0022229ac8bb36385b6ad5d86facc66f84c74040133dd593f061debfefe14d656d409eb9e6b58ba2003d597e5dde28d19978530b38f20dded5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c72116ef1203a5cc7cbbc5ecc9dae11d

MD5 86a9c42a708bc02c4af040708b01eeeb
SHA1 3b500b1b62fc7242c522b1dc8126576f41f260b2
SHA256 e729daa597a45b4515b97a14687ce54653224b430f6620adfc82cd2d5245e6d1
SHA512 32323f68e031f4623fbaf08878f5e52240e6dba83406914c5a305c85e1dcb91bfad662cd7b89d7e976dd42c64ca0226b4d15b3cdcdd2aa6f2dd7a106f63409d7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bfd6ddae3bcbee67da4d5cf21e7f8218

MD5 588086b84e0991c01bca6738ae60e206
SHA1 b968b9efabffd1dfb877c45d6a664c2b1380cf02
SHA256 cd516b213fef01c7ea10e6a080c709ff89df5741481656df5f08a42b6a4efb85
SHA512 36aeed7ea27c006763ec9522a37f205ed81d26f081f747983ffae5030f5e11e318b76721a3bb988bee529ddbd828337be6920ced86bb4fbaeb3ba127e3e3abff

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be4cf88455b1c04e0557aadacb279d84

MD5 4e7f8114dfcd73b364d1edd52dcbb8f1
SHA1 9731b70d1f44ae136b7dbfc14904593dfbc59155
SHA256 74f3449c633f8012ca37b51c87e68965921223e41aab1de3b52f521cd89ef95a
SHA512 6e21c6eef40ea7de678be262b041e579659aac886806ededde878d9e567a68f3282eee08dc3bcd725678224400bdf882fb7bdd91e75801d7dcc95132f752a597

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2ff8c2c907132e67fe31ca48760bd58

MD5 15cbf951afd64ceeef7807f975700dd1
SHA1 1a0d641f6df40c1dd44e6c1f31987aca161565df
SHA256 7acae91a04c774a2dfedf8870b09c395a68187a5e6033b88981191d3da7462e3
SHA512 7a129880ee02d4b6468df19a37e54408e64104cc07732203667d06112e7bb9cccbd62990f969d8f1d55a9edd0fe362759125468e126c449be518c348203aa304

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ac5c32cbc7e35c3bfdd0a28dd28b51cc

MD5 858ee9a81383e864a18f027771803235
SHA1 2cfd969ed3a507bc82914fb0e43a30194b94925e
SHA256 1747ef1641c5186d89ad55357d79e116b063e5a2e2f1b103c7d65b4e2ec36dbf
SHA512 3a17337a02b8fe62bb27dd55f75f6ab93fa063b666975e20ef9db6f207ec77463a882ca6a8acd4f96c874bf3a8bc495bd4ac795e50127da343e6a240077dc98e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a62344e7bcba9dd87c14e28f1d27bd8c

MD5 36f625943af9ac11593cdbd60afbed94
SHA1 c6d74a4f32c0674835d8a18d29f5a1d1805c4484
SHA256 53d2a72e3f028ff7c0f690c9a054487410941d4364ad6ad49f98c44e95bacb1c
SHA512 19416d4c278581a98bfd3a6f9940368aa1c9bd17b5e20eb605004f14dd52bfc552c781f8379f25b07261f374f07d91f71061b84bc7a8c51f3f946418c22b7f38

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a0b5220fc9af701b387ceb9504817fe5

MD5 7f4c4db5b71cf143d1ed46e3bf646aba
SHA1 9473107ece086aae130394346d740a373c306e90
SHA256 5236a02a1de77106366e505c84a16300bb2a60d7cd49559b4acaacaf8866621f
SHA512 0d09da72cd2676b002d1f272a5c0f5348d0db5166bcf20ae39df61836b18c1a2f5ef2f1759d2fbf3dbf52dc2dead12535defd75d8d82af51529617377b46c9fe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ed64bed7a2f21e78a901e58f0c116ea

MD5 35fd29d97b9467990a38ca5163d04fe0
SHA1 d4c8aa10a7809a758c1f7f3b51c9d50b8f9418f5
SHA256 fd466171051c5174f5144a2b0a684d7b4cab92fd22454b8f5aba06a99ee3eef4
SHA512 c9716d912051ae184a215ad0a5f8f3dbb8c926d0756dc4bc147ce49f5f54d9c35d16ef60b1f579294c99e2af033cbc84ce338f3f83434b9e2efc0ec5a36bc124

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ecde444997db035139609ec2d483028

MD5 206091453ae1937f3b19e5c56fd16925
SHA1 7852346a4538e5fc6446244885fe45dacd69911c
SHA256 1a21d162f53b0457be1aaf9a84667658dc290ac6109cc4e36f0aec285149c93a
SHA512 7b83babb4229064ba6263496a4726a5288c30203222ad3d958fbb88d7371625a43c5a60da89875248e945a04ec2aaf72bc2b1d4dc800ea91286efa77d11a94e2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9d27976c15602b11891dbbf2d4d7f6ba

MD5 d278b45d838306fe05ef1ade9f73531b
SHA1 57d9bc58f7f224198b21c2334bd7caf56d714a5c
SHA256 3512269f951d09ea9c44c235e719918301d1466e3326a56978c3eec7233e81b5
SHA512 ebb9956414d31849d2f0120c66a59bf2958c42876a297a605b9b50d9594f35cab8ed0d69b9c11faf409843a38364a6ed71202eee52f35d9080c2ed99c8e0d9fe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9c62dd7a4881bb27c38f74bf9d04ebf4

MD5 aea01b0c5166d89d0793490c8fe7f076
SHA1 cfd2d1bac16f83982e0e1d6aad497cab7799820f
SHA256 5953a2b967fce134be81dce6559639c89ba808a69822ccd72387a364b1b5ca18
SHA512 9add8866580ff4103309e408321462f1dc37a8cb8d6c1c840d670d88eb1a885240e7e15be16a0255ddd563a45f602830ce0c7cdf4dd006a372e873805d18a77b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\985f88e3501f757576a660256d088a92

MD5 ce190c591eb977283ca63c30068b8272
SHA1 aece7fbc558cfd513a62fe9cc4c12f22b45a4c95
SHA256 3ad7f42d15ffd97a53c8d325dbe412abe0c5472dfb71dda3e25c816ac411067d
SHA512 bf272124ded93280080fcd29b4d6e0e3a51e68bbe687f53c0b5314a6046508913c89da160ec0c9c5e04bec294741e19c2d7f5dfb3606aef79763cc29f6c5052d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\977933f21e0d0116e941f97e698371b1

MD5 950c8aebf071e5f267f829d0f7efbab8
SHA1 ac3af136c1886638830be96aff75e2e230f2b5d9
SHA256 ff10063e6f56f3a84b2333bf2125a7dfc36e472ab3fc4b926c28c94ea4bd8ca9
SHA512 0154ff366455f51698c2b09bb2ad98152984d89adf149db4847357cc91ebcf0786dcfcb7645d716ae675a58355074bc2f3fbb7163785910ed71f609c1542ff45

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9616de78ce2e92da8d2572477bc1c185

MD5 42b5d66948d7fc8c997ac5d7b07e8841
SHA1 a8dae559db913cf7054afd3ad68aaaa81f77eb2b
SHA256 2fd8869e08ff09002fda8b40e98f409f9a20f7828ad2be2769dee14dbf618afc
SHA512 56a1dddb94e16671be4684c4a6d901a79ba143bd1812902b869ddf23f5802838900c3187d489c85d128997a6c14067b94e065f9592e9d46f36a625b4d3feb9f1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\93f8cc03f751e64dea82cc893a30817b

MD5 483e8e9de4f598666064e7bf88359b92
SHA1 22274cf01d19a1240b65f8653e4cac8319e2b8c9
SHA256 ded57edf71f069e0f4b138cdc0d473e235b3405d95d22e193278222f073fe646
SHA512 9b0e87dc56af69a0d9b06e5b8ab235aa0f109e2bbc88e7bb1ac2a4e3c219a2fa2d95510b54935bc52f880ceb6b9f1240827859f6bf8c96864b055035b4f66507

C:\Users\Admin\AppData\Local\Temp\Roblox\http\926724854934ff5e4193e882d7470770

MD5 4cb0033ee0fbdab5ea0dbe4e5404c2d4
SHA1 03de68d95326b68ccf26003d8aca45eb62fd2d47
SHA256 3013fb09755663713fccf3b59765d3dbd65c81e532dd089253355af403056020
SHA512 695cdcfa977f0f5008c7247b5f68430a1e1c35bef6d36c9452441620eebe46c0494a8ce3b23786d9945e0014c660b5fcfd6a8bd1556d04469c9165c5e4b9a1c0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9118536fd8d9edf3f85cd30c5b911b29

MD5 9786ec414459dead2f21b254236c207b
SHA1 f2f9251fcbe04f8914e8a9dc439cf9fe499924c3
SHA256 06765bafa7a2bc8cec0d2d0ec2f17df187bd924c4e37f0b1291283c7ef477fa6
SHA512 a65b9c4edd30324f8dc85f1cd7ff09d87ef2edd6bb10d72757903412fc5dc21430b433f7eea1114d2cc804c2f66476635d1a336208a8a8273b4ae668976a6888

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8c46f9c0dba15457b7c8b7f50c4447a5

MD5 3ffa472424f22b06c7ce527e49e1d235
SHA1 30bc08ee5a760d05a48124311be9262fd6cd767a
SHA256 b519d96828f15bbca041423d21808877a3dae7ff31cf62d57ffd00168884494b
SHA512 e8c03f0caf7efdbcb5315f864f9ba2f192e6e57143996198f78d3eaa07cc73b16c71f087c36a7b39c8ac1c91dda8d9a4ebef78e9d7313cff5f7635f0110fa8e0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\88ed905db2d2d34ffd7e8e48b6f3923e

MD5 2764d7ad95b1f46459530a71b98cf688
SHA1 4925cb3d0c7262f8e04cdc5a52df7f69c3146697
SHA256 4ac6c5d246c7cb0e50f6916939e08afe830d802fe002ea5024261ab9b4931e73
SHA512 b14846a3a1969d5b88a0ac5548471b9b930dcf94e64dea1348a2d5cc98b6728d9e3a3c826cab61e0a37fee7b953a41a8e5cc44ec62a726fb50f5850696bd42fe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\876eee64d5b26ac515d1d622b25d2084

MD5 c349f2f62aa70e20c7247054c2f086f4
SHA1 4528b41bb9a79a993f8507b1e6f4e00c6af9692f
SHA256 9853a86d454fce1c85038ea462887a69b4f2b801d13244bdd8c86d1e15d36fa9
SHA512 53a6c5c6f436f9e8a79626336d9183c6976272684fe2b9dc552abb0b98a37c697b86c03c9a0de55bb1cd2a2c95ae702072b267bc794d11126c96245514d29a3b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\811fe622f7deddfbd8287e0eae8823e4

MD5 ee2f6fcdccf99814b25da06a68d7a1e2
SHA1 f547255d6e706b6bbca75b2aa5d4dcdaa1e28e4d
SHA256 1362574c8716719ad7234252c9e6eb1b90c4791f9885000eb2bcb844a7fc6890
SHA512 0a62b9fd578471c59fa4075ee76df0298d5b8c89a4e15591c09066233cc1b79b54e2718c46e3b45e32326e2a44bdd550d571f0a5d661502611b0d49f9ac1ab67

C:\Users\Admin\AppData\Local\Temp\Roblox\http\801a91b6ccda82089a1f0dfd15cb0290

MD5 97a4316873619448e0e245240fd90f65
SHA1 e8e6de0d2bd8c53f6d95fa8411fffb10fab7121b
SHA256 c157e1124ca0e7d5501a7b26a04a62177e333fc337a04c931a5463d7d30d8288
SHA512 36b5f1459ef57d66f7e0c5fd63252aa93774003e7bc71f878b3ad95ea37fc7e17ecfc94225feb79450b750cdda5316fc6e84e8b7cf1191fedd610aa1d08ec06c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7dc12a896cd6e6c0ad283cdc85280341

MD5 2f4e76a30fb7106a08b3f6f2f2a06695
SHA1 d6c4cc68c81ae0453b7ed95fd7305cf7304fe3d4
SHA256 cd2f8e7b3c28b56c1a9689d5111dad65d95cfac56ee88806c3fdba9ea41edf3d
SHA512 de4d0fba70843cb3ae8ac276570dbe429e788b553bcac5a5b056d014f9ced2eae8acaca2f7e58638d0cf8835662fbe58a5c8c0691260ccf24b37653e646f9588

C:\Users\Admin\AppData\Local\Temp\Roblox\http\60cec14f2d18a7c69b7ec90081a6f20a

MD5 a02894072994038135ad022290f73086
SHA1 33b01c0a2b85f83abf032863e07fba02ce75bd98
SHA256 22cf6f5deb5c5e8901f94da01c42a47f6997401d0c80ee1328fdff92c4c493fa
SHA512 94e762497db6f0dc342d5b7ae96b7b906b78e5ef909523d74d009c51a6596e1c2caa1406cd1f5824cb95f33dfd37d5032c1026fa96db7d382e109b763478da8d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\605380952ff58b34de032b4b2ceca9c0

MD5 9e5acb7d340579842afe7893d1a405cc
SHA1 d5505c686142747de099c871789804766e7eb28e
SHA256 eb7f692d6f9f5cfb7c98487cf2e6f1c58926e22cde64394ea0db0b8d7eedc81a
SHA512 e07132584711a9f8d62874990dd03cae12f21e243bc538658b344244c5da731a0dda505e8e029101148cbe19178cf2c19c9f73e07297defde94e191ea6df7ee7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5fe7ad361bce635837b2c80f45fc30db

MD5 65063e5c0fedafc1aa57eb4468628dd1
SHA1 19f61ce8cbd2f90a4196f85251735e27d63ecb51
SHA256 16d2f299c50ac04b4a6e5808d8278e478cd0f5220569c1023747778ac39a6909
SHA512 155c1dd2adef42af35c60f4fd57da6fab09c555691297addf24d960e49d7952e7217fa3f781ed9a80bd73e201a4b4a698f0d885ddacfd323e46130b167475815

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5897ba047be56c25565d264f7cc1fff3

MD5 7666d67325fb0c53c0cf0e7be7fc806c
SHA1 8a2b2589f17b89ca5e2b89d6b47d8071a89eb470
SHA256 a17e9dc285a1dd049e63b4dfcec074879720b0ec01b6f310cfb7d1b59e949c55
SHA512 78250b80de5aca04e24185fb7e0db5d99b588b980df8fd841484be8d58856e375b88b3faf822dc2be93f755a5b7df836c0eef25fed1d4844a20576febf775ba9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\569d4580f4fddf61a677b0f4072c9aa5

MD5 3986e5b42c10d9587a9e9e962eda8a9d
SHA1 9ffc43b9063d1a741966d6f4c18b1d5d5febab30
SHA256 78077662d44d53232163017a443888c10c8ac9605e51b4a3f67fb3e1ef0def04
SHA512 a144b066034f1b3cda5646763e7758d22057e8d1c505b1ecba64f87d99f4d403bd82189899c2665cf4cd2d076d8e409ddc9af6f4683e601ed449295a7d788037

C:\Users\Admin\AppData\Local\Temp\Roblox\http\507593cb1e738e938c9f3cab26ef62bb

MD5 ba027fb6ef35615daaa394b0adcc3afa
SHA1 076c24cd0674f78cf15f87178f2b4a9eaf83a32b
SHA256 0dc33f943f89aa25377dae496c22308f5370c3f05aa4da324002eb6b40b72464
SHA512 b2eb699338d82357f5772bef752aa77fa27213a959c242a2372e5c274086a04e7f62d3128cd98440a350ad577f0d8a1f036d9af0b3603654319dba179f8632b7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\50731702198805e4e883f1ae894b75d2

MD5 929d18ae9782b7f92a050fc5b98ae150
SHA1 ede7ee2452e7689c6dfe44e2b1327c4f6dbb85e7
SHA256 61b3e87d8d8589d8211e66bf8af2dd4bb97b94e8ba74013bc60a10401e36c7ee
SHA512 a260a9da42a2591f3fd156a589c0bd29e268ed468ade53157528bbeb6501ae2c3fac7fa4d00bd63a047be69179c7e2dba2e82a6c2f8c7379c7a4db13b2524b99

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4d7f3b21d1cbb95cf3ff3f10c3a80b49

MD5 f912cd84d821f3809ccba1a8a3e19036
SHA1 432c3a92293043c5acf6686b050456a7516d7bd6
SHA256 130514b168dcf504e7cfa88b5fd22e6a887eda25b15d0ca22ab15a9e20a6c7fc
SHA512 385068949f1db4f33db607f7ad603323f86e0ff9ec11940268f392423c3edd7550a3fea352133e26d5a7cb814b59d67b02cf1e8502206a76dae8fd3b0ea341d9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4cf655cc72094ad524b3d2636a9aa91a

MD5 92fb0bffa0a1fcbd542a0ac87206f7cb
SHA1 b6b177fa4de604b5159641293565fd215b438c7a
SHA256 59143d3dbd107a79a387a3420e0d6c7dfd788b154b63b44f3e82cc297df95f18
SHA512 e80846e954633ea3a149a5a5402c3e3cfff141705aa5fe3ce488f8336f3ef22a7bbac77284bf456e3b44d1f9baad5f7f8cfe9ad97da618786d42a13bce895d6c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\49731304e4e3c17ac538d25277dfc478

MD5 371aef6c50d0ffd887d02e79c879d063
SHA1 f0a9689a7bc674422e983e852846d99ea51bd407
SHA256 ccc6c369730f9ca516c80394720eb45fd99edff94af2cb8f5fdf01bb5bb85d26
SHA512 125f6468181da2867cbd28f53fc1c4896c502c6c1bab67fd7ce60fa16e0f2b2140c5d112202dfe034317d6e0d861a5cfa7ed63fbd5bdf75bdfc117b5045d1f6f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\465ce41f6c8bbf96018968557f687bf7

MD5 344b95a3925e8ff16d17a49791c81587
SHA1 4b317f25703bdfb38a6604b0d5b24128a3bf1993
SHA256 a8e01de6dd4914b2f58eee7a5bdc1cc2bda12b944300c35d5318ee120bd09305
SHA512 0bd2b259cf405cfd8d8860925166c361b7900be25469649644a89a9b8270e5610b6f92cfce8f0e3117553d53c6e44fd8be0b3e8971d438460e8538cc1d693ce7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e72e6a845030a80ae6c35abd976a93f

MD5 c000b41d2911fbfe0bcbc465af3e2641
SHA1 e5fb48c7d8e4d440ff6911c360edeb7ece373836
SHA256 0b870ca6034d0b43ab373535cd0f6d086a5aacb72521aa96715c8a6abb042d50
SHA512 3013633bc4a07310e5e9bfdc2b4b377352cf39481cca4c906031f990eb4c29290384c7b47ec5fa2fe15a8907d84b46296c5ad722fe0e1266f4f025edac9561a0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3cf3eedbda3476340b9545d4113cecb5

MD5 c57ef9add5b12129b91f80711497b130
SHA1 bfdc0a567a30947f4214348989b043ce073df3ae
SHA256 06744aaffb4f352217436108b42ec02c24d789441b82e731d6d93ac55e15cdfa
SHA512 8471198da1d6acbd27f781faa2fd295b79923cda609e6865169edf98b99b1537720cdb661c9770566176e30ee10449d0060732578c44a98cfac81b1ae13942b9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3b4b0b228d31436c705974f1aab6a23e

MD5 650edcf73176fac19f0432b3473ada38
SHA1 1c4f40761ae2fbf66c46db342151dd66f9e07135
SHA256 ae551bfbc27c190cdde818427f1326d9b0117f548836b7bb3e9ab8fa5d0cd95e
SHA512 c8cd6a550f9b0e839de82e607f3ce2b8e7ed465ce2f3c4369367ebae25df74d7f99a5b9a58a2b692b4bb2c1f9849872599871ea5b8808f280b830a0b385adfa6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\39de42154a9cce1a661c81f63a716702

MD5 9c684fb43967787b59d568ef77e488cc
SHA1 d65caf4c0699cb03417f7dcf852f49afc9f11de1
SHA256 e2d728f94dd0b6e0470e482b8c722ab51678b23ad9a59c70b8d41f6172043df6
SHA512 a394f515ea6fe291e1dfc100e5c8b8db5c650d4e7d106b3a85acc7e16ad47beb17ceacac7aacde3b80b3f3e79de7c06a722ee239113e3c0c4255fdb09a5facdb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\386d36bf840e7a19ec99777ef4e86eff

MD5 33116dc7f9d25c102ec1d91019ae2dae
SHA1 49c93f4fca6ca77b4fb85e8cee7b4d23794e727e
SHA256 feaffb3852a0bc7fe5b991327e8d71b587fe7321ba149d367e00072d08a7c5ab
SHA512 19ec73e8d87d511abc47684f8bb1a3ae46a2d15bf7e8d4f235f1b76ebb25ba4a2535e24cd304cc3049eb2ea44720028501d4cd4ae822d21dcdb74b3f0c564a51

C:\Users\Admin\AppData\Local\Temp\Roblox\http\367c561f6455ab94d4ca8f9f6bf2dfbd

MD5 ca025b2e18d46d359db9506f0b72ec8f
SHA1 9e8e38b3e09156084d5c807c5af7b1f0bb9ea6b1
SHA256 39dbfec26bc99a28a8ff5ae5f413f5349d247d2036310fc54b3483bb73213a65
SHA512 89641549135efef3f539fb3db14d3f5c1bd68bb945bde18dea36c48096b7071974a6aff159a5c32ff0aa18ab449773de35705ea478d333bf79e721942ec3c69d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2c7c74ea84d6ae5f61d6b2ae59756977

MD5 0ce81358af069300f99e55b82aec48f3
SHA1 2e0150186a7fb844478a2fd0fd98c0f9a2c83557
SHA256 293eade44ef0ff0f815873b731a97821a02a4720d3262653df4568c8853188a2
SHA512 cf74158d3e55a06e75a8c1585e4ee84e0e2f626b728a8def3f227e44a08dd64f02a88de697419c90550f597c6bbd967e2c677c5992fb8592acf0edb3220cbb41

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2634a3341105a863acdb09562be2b0d7

MD5 a07c068af397dd9401e59bec3cec6bdb
SHA1 abdfff758fa9ec6beb98e1d1c9e6033d0bc1fc1f
SHA256 5e2343cf99264aeaaf113f6984648c6296c2c83c215869148c1e57cde54711b4
SHA512 0115f87f57dff65e393e65aaf9bdb1239da106aa9791184655fef6990b27b3be87ecf88337398918ce0232c47391405661e977ed1a35e76f9b8b8f1c33526e42

C:\Users\Admin\AppData\Local\Temp\Roblox\http\23d0b120b565a61394ee5c56499316c9

MD5 56680b3d43438630cccf9363170aecb3
SHA1 402483059b84f0a4b0f84b6807452941806b652f
SHA256 1b5109d112fa1a10a41a7faa1d74c53fc05743126d27757ae8c8fdde318efd6f
SHA512 d09a115a36c0b7a867464e4451ac2e5f0632579ca6fe84ac15acad04eb3677c26b17fc4dc95a51e5774f0a4fd25711fb7e744974619d37d458dc2a0185ec1be1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\239cc757815dd2b79cd26fa4ce80f977

MD5 9f82a3af651a9e5b2383bca4f2aa86e4
SHA1 60bc9ed0e80945c51f2f7e71c1032575fec9369c
SHA256 b1f46c7affaca612b4096db93ee274a1f9d90e4e4dda63e30e928ac4d7a57851
SHA512 86903307c6caa8609578182a01463d9314ea33a3945501b298759552cd0b39717473a8586b8a6cd0a9244b27f623c9a223d523fe10c7343c4a1d1d415df2d45f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\213a2ebeadcf5e30e59f67ba882d72e2

MD5 168fedbaa180a49130415d97e8e7da85
SHA1 b7cc1bb1d50dc7e907a1460c04b7451bffd3a37f
SHA256 b64f09d15b2182eef13f72628e7eaa5c79cf79a6f760ae151426efe4fc721c3a
SHA512 11d4d662ab2a685e05da5d99bb895a5feb3e9afd145912ef1fe4b4686e70d71474ac32c8152647cc550ba78e7a885978fddc12708d29bbc15b540e5e29ff76f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\18f39f6a6bf8fae683672cbac160f466

MD5 d096784954155ee1ba8e8e626094a1af
SHA1 ad51922b16e1a96125c8a0db7ecc7b3bcf9af53e
SHA256 5a86bb2fba5ad822935fdd2f510a31e115c21d4561fc86ce0c040d5b9adb745d
SHA512 c6896c274223f3dadbb0babbdf05fd4e83f470a77b3d701ac9c6e52cf57e3a4e5e1f0cffff8fccf8c5f7291c58e0271f1739cd612b370726f5097804f962438b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\17ce141f3a55c10376159f9a07cfb04c

MD5 d97fea1a998d6dbbdc4b46e4f86489cc
SHA1 f73c98d84baeb461720ddf9a5899d2038c2f3c3c
SHA256 b038a7ad5e3f582af5b72b650534b7b97ba40ac5a6991f23220352db4c2e8d71
SHA512 52894d96f82a5e3a6aaeec33f4675c0d77db226da181dc26e6b5e7350b5136b86ab18e7c949ed9b070eb1e96277461db080514ee237fd0a4b3afc9821232b24b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\100568b58a928710ad7186ae76c6086d

MD5 a8dfc28046239e36824ec230f5a73dec
SHA1 7fff4bc26ddf49169f688d979d86296457185947
SHA256 d04d2ce289b738d0a85bc27bfd6e0904177e5037098b78171bd159d24e291cbb
SHA512 5b2c30dad0f8a0a49097e5061781dda9becd6fefea11e28da20ddb189c667549d2620365e2e79fcec66ca3003ffbd701c452b68742f630ffb6457dbe2487cde6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\07791848cc603e383e28008beb42e89c

MD5 80e01326b164a63e35dfb7566ee51fe3
SHA1 4c0a5f3eee86c60089622eb3b2d632e965d9bfda
SHA256 982660427b83e800923b3c3404cc36a0fc7ce55937e4b57e608afbaa8a1649d0
SHA512 c67cc8540d93ab429e3c306f8c91871686c5ed4c83ac9e73597189baa12141d91e89cee5c84aaf3c6355c79450ae44f4014b5a9e8c59a0c8c75ddfddde58c685

C:\Users\Admin\AppData\Local\Temp\Roblox\http\05c771e22b00ee59181f5f202dc7d451

MD5 d15cbd9e3fb5a7216c8f75c898af12ce
SHA1 d16863b80459d01befe4674186fee881167b6782
SHA256 34c9b095fc8bb86887a90b94a1c9e10652094038961c5bfe4bd2c1a390298ded
SHA512 979533bb17d740100917526f7d7f4f5a2cc29351ad9d750758cfa927b473be7df05a465717d03fed2d0f75a67b9f196a0945f77cc52c13db8255f519498587a9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\04597c7198e265b4587f918f96394020

MD5 e221d1f7e43594575a3a6fe3fdd3480e
SHA1 3860f2ea92e94e898fa1e8c5e23f9db8b58ba4a4
SHA256 513c72c5ce3b31f45a1b365f0d0932e3cbaee0996eb5a53652756513921ae80d
SHA512 9832b420a974342b640c83cabd85d257911bf304d7daf24305672975e917dc74e43b019f4edb0b5f4957f05ba99668f6710b9cd168f0a4a86b9d4ed73407cb63

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 09c951d07474fb4d35d911120653c0cd
SHA1 1e9159aed3ec641aeb5af2cb3692343c51bf4e7a
SHA256 401eb15d1f4b3bbf46ecf3a6eeedc444f5d260e46ebb7520b649228e9ca38ac9
SHA512 491cfb06f2c1edb12d287ee74f6a9c4c8f486110e41987bfa02c733e3cc07d63dd0b14f5e76a434cc39e11de1f3a4cdd0f5c227c199d616332282da8f48a7bdb

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 fb8741bac55de9bf21bec52529ff12fc
SHA1 4774322160cb6a427193eab5245572bff3427079
SHA256 8bf98a741dfa44544e5e1d5cf798f4fab6278e6b5a593d2c0c3c23a4af992c6b
SHA512 c4ee0969d8248395236ee65c1ce8b8468429a5e669eee1120d67113868b7b69e561ce6b56b5ae6823a49e0d9ba26714d7121f262008ac53db3dc309e29a8363e

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 a9f384a2a0a5192dd547908ad7fcf375
SHA1 c5667cd54dcb73c84a510fadb5cd1d4e403bb076
SHA256 2c6ffb0a27eaecac3b4cb8544530b7732e18ca1885b2992e2f6f5334f2a42708
SHA512 0778764ea31cab545b4f1379e09acb7cc51085dfb9d6d397ff3b51a04e00fc1d7df497bce553a8aa1e5b0fe0520e590485b34e3dfb6358572de7151276992872

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a69cb57746105c17e5ffc24141320a40

MD5 e304b20b9ad1596ed700b3a772eda6e0
SHA1 06cce004b98cfe26eebe94fa5c2970d04c4fa910
SHA256 379a98d1e9bbf2f6b14592f062fd2a105b2890fe3b471d148600f94f83f3f06a
SHA512 c575d3b3bffeacc1cb797491c44a4cefb739cc4aca18d0cfe6a1487503a633cd4fc9b6141cb8eb9831e48211804d54c29107a73524789c4ab3803e9b7afea65e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d271fad040160659fb991dc5a001f149

MD5 1942c4ffcf7fa7fdd0672d63c5c69a9f
SHA1 f4fba1c5f32e23b7d9d8c67cb4ceed4262a6d9f7
SHA256 c9947d640ec9ac21c6f3e4cd4929fb9da6bd4e373abbd4ccae223258be1f596f
SHA512 e86d66e18cb109e443c42457ad67b0f1e00bc16c721de0108bcf224649c5c62a1ec888fd52cd552707fc801b7532ab8f973319d31a3cf221f186e36efb3a4c36

C:\Users\Admin\AppData\Local\Temp\{AF85884E-C89D-4A43-B86B-0055536F2B3F}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

MD5 b18c705b3c68cc49d9bf3649abc75c24
SHA1 6dc8963dea0f3185368790dee2a346301b4fa24c
SHA256 c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa
SHA512 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c85900c01686a0a5752cb3b3b753374f
SHA1 55f421d64100407e202925959bbbcea70e29a9bf
SHA256 bfaced38f3cf1e156cdeaf2870ea82f0429e84a0d86973ae65e68b553eb0f9f8
SHA512 226c51aa1165e4c5cb5dbf82c43f3ab2d14a5cf15ce6b73eae4b52ef0c0e870b4149a04fde81930d4530c1509b38cf437987592f1572955a60da3ea9e65e99b1

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c7f6780bf92f89394c66f0be056b50dd
SHA1 85c7e311ce03c36a8013fbc8b60e6690fea421f7
SHA256 66b814a0981e02fe47cc890fe7c73aac07fb84f3bf8cdb183488922c1aacde8b
SHA512 c47d90273f82f550f520145042c87f654f7565e936b506d07c2d3d5f664f49042acf07d926dac4eb8dabaedeb0d87a3da685e8ee69793e3520af3aaa04e7292d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 f26dd458f141782ec6b1bcc1b9f99089
SHA1 36b3107c7e76ab1f6d406e1c9c3573568f1c4a39
SHA256 1ce7180960f36fd0db16bafcc7006c2b937eddaf0153efaecccab2841693690d
SHA512 1a4b4edd4fccc73a7a23215c9e91aa4904324736c14a57f0fcf6d53102ec90674c75c2c18efdae4ce586a8c2a08eab7e8f234b1c41344d3318b666bc1fef3509

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 68cf6f0bc7a3574404216b1aa490463c
SHA1 e9f99daed0aeb8452ef7e80319c90bb86011e227
SHA256 40de83ad5d2deed44d88d3cc4059b66a9b1a236d6b842b4e6140f4c67ba3bacb
SHA512 911f752e49cdd7a4f024dbefca9e493a1afefef23c6d0097ccadf8c804a4ad07b1a57a6e5a770cc6408efcd4c09ff5b1e03b426ffc9a37c88e3cc286bdccedec

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 d41cbdc0df9cab1c6f0a3c82bc6d71d2
SHA1 c4a5c0f4d33f2a3e73ee0aa73454735c43a9815f
SHA256 5260fb2f851d0936d1100d033a982ca211948c38b60be4d5ddc26ad70f33edaa
SHA512 4d95151e4befb8b231fdf347de87afd7fe41f1a615c1c5bcf55023ea5e398ed8f8c242792738ac483a53dde42810383aa7067ebb58248205817f898cfef0578d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 911deabc145bd2febf9f1a061d72dba0
SHA1 604d7b42b94ea7ea46fead8dd8145f13e8dcffd9
SHA256 701bdcc117f26973fdf0adbde31704d2311048f327d2173f9757a31b087018ef
SHA512 7947574730e8589f1a7edf30a8c4585824b374833aab0cc1a9f4f327308dcc42be311614f635f239b0ca1b822c29a7ec7529b9be79cf490328a71829509b361c

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 f8d419d7805e2e1fe6ae0a025e574344
SHA1 9cef18e4bb81b3225630a624ee14514286352063
SHA256 054ff20f8efde600c8d3cf46faef1eea98878ec72b7aeb481ba6b28b423cf451
SHA512 98bd0cad9a105af2693dc2f3d5b864ef676bd5d88d7b9508d0547d944baeeb7cfa46c342e7381a2a6b15c38e7cdf1e05cf65b51eb10e5049ac43a9e9407cd5e6

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 57d4368e51da06ccdb6d423aa5a99692
SHA1 bd67b48e8ee867ad132ab4d3859a98ce31d789c5
SHA256 362e8728c70d94e65127d3d8f9c1b0224c46b794734a09565070e756343fa9fc
SHA512 6f9216364977ff1e907a0ff473518d700d0ff6915aa013e92a021c9edb960b12c92faa731595978ab7a37e18d8d4c36d2cc6b61c508c1d7adda9aac2b6a78a40

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 6b1b0b8dd449457111304616f0a56c82
SHA1 2cf6fbf24e6fc9014ece33e816d9fd90a3ccc2e1
SHA256 1c90a75021030cc5a8da110ecf07096d6dc702bf21559c9372fa838b459e2209
SHA512 7bf5ed71f2fbb4656c2b35020b4114b8e716521a4a7c95a18b98668dc5d3e663e1199007ed5203b6b86b9eb663cf486bf9f0544f11f2e675e9283cbd66488f95

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 2495da764239b3b18203e7f27e725443
SHA1 8d75fd9f3a2dc863a1b7017064968050fc6f2eda
SHA256 6f78097d00c0bb235620d34b479bff8c36874f41d702d42f10334f3ac05b481c
SHA512 d2d317ee2e034a853329e0ad0082327a20291beb4fcea045c9052d4ba9b4922c32b9839bb2dd26df4756926ddf5dc534d449b947e0fc547d022055684efaf7ea

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 ee99f8a268388b71d17e69b1b8ed679b
SHA1 0c1d25f81de14384ac9a11bea74407d6ffb2a5ff
SHA256 25a91f24b2a1505c870aff08598d29d83cd94281b7d9276d980d33fd4f9355ce
SHA512 94959e8aad7db78b577a0943df18e7fb7f49336f0e89ad0846a45c57afa421676cb1e0c545eab3eed1d7d22cb5d9fd517aa72a6c0c7137e24eb2c6afa799db56

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 eca74a5287ec514b8ce68feac34cdc96
SHA1 286601acceb24e7685985fc7e46695bace89fef1
SHA256 8e0c2c683da47e38ee29c59ca538bd3bbb52f7c0bca67832e753dc2e1ba97a7d
SHA512 eba295d2fdbb2b0f929327ec251c80255ea048a7a9343825aca1cac968227f7e175e8f95c2e9d6e93b27f4d1c4ac9eb6248b094225b9f67f39dab6fae84d80b0

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 f7d48f5b04ba4a291bac138926eaff4c
SHA1 3d6cdc39f3cbcd93553839061308a6284f6273f5
SHA256 6ce631b0c88fcec317786c00ca2e8223c3c5eaa4368a08ebdf2bdd528ae48d4f
SHA512 d335ecfdb3488aa320b058fbb7adf84d5b178620d5caede1366ce6817da7345acb6601ceb1e18460fa3ff4c282acdb28c09a62da3aa4a762b825a9a1eaea9cf4

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 55a3bb6aa225b642e3ee213c8f145c0a
SHA1 11871fa8ece42a5c9c6994b7489f8db68c78cedb
SHA256 007efc41b6814e89aa4654e38fe7c00c96aa4d1df103827744e2545b6d5f6221
SHA512 5280f8049bb4752c9b0b9e0632d3d5ac927af303c4f9dbeca0f59ae26ad2ed04eb8b30c55a9e0ca1eb1a1ff92b967c24f2922b695db930033bf22304c5450926

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 1b573e6bfa5f4ad2b69b5bcbcbea4aef
SHA1 9ca895ac0ee391831fa46c8031cd84f5c90e92d3
SHA256 9f8abd9ef54d4de41cae913b2fccca3a59627d9dc8b6a435b00b59daa835a30d
SHA512 861f357c000b46ec175c0b16d9fed7fbcdc2947c9b10b20aa939e75ce0649ea1cb0a159a3f4bd27d11c3bb0c683c64937aad266a6903e87945a3792904f8f027

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 68a50566aa9d51d9ce95b0b9456ace01
SHA1 c4fbac0945459df54c44f40a2062441f89b33af9
SHA256 90ea1e230f29ec5bcb16a6e470a63fc8908aa337d46f3af1f36bc944ac72b80a
SHA512 ea72989414226766676227b235c052e7bf68316c6bd280d15c8098bf1bf92f638a15bfe8b05ab131773cdbb0ee289273b433d36d3c0bcd34b921d099dd499d6d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 dbf8544b14d9b3c7589ad46e9e8d5671
SHA1 e130aad80214c14c6e512d00630c17b0576b2587
SHA256 a4c3ed488ddc20d2973e6dcbde9ae83a7ad5337cefd5660a017985cd31306243
SHA512 4d588950072310337aa2a628d6ea0cd0a6f93e24668fb81d5d76fd7bb0b35a578941e5eea275428f0e3c43f8fa3ec22a8ccff747eee7cdecf5eb5798b147ffef

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 81b7c1efd8e3c49e4021ad4695c87834
SHA1 7362bd0ffc92f3f2120e6ca9921c69dbb771923f
SHA256 19592fbc9747662e2d637a94a5625dadabff97c959555059918b2c079e98dd23
SHA512 84dca3ac7c72d7827b987085eea03032eb80445fd965025e211f385b641f954d83e75cec207d91aec2e45f881aed3419a3080f3bc6e2f30b98691e66fe1a9b46

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 bbc81dd69054ed0d1c864ae1aa0aa57d
SHA1 8c697285d30ef4e975c1fd44b0928b9cb02f8ee0
SHA256 f0a46d003420671021bea5b62949b645ef78bd605a2a5ba0a2d8f35f97de477b
SHA512 aa993284330f4d6d4819117770eb0aae1c0b8d6e6c9a49f1e50d0d8bca67875d568524a1cf2c34b0e296f95edd4a7ce65c9a868b3f0aab87ca1a50091dae1e8a

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 adb5e6db2ee86c6d312cc1ed408c1e6d
SHA1 b6a28cec5f41555c8376fe80afbf28923fbdc46a
SHA256 74b27d526a38878334de81c493aa6f6eec06a245429f551012d39642ad919ecc
SHA512 7e80d1f0f295f145a200b98afa2d11c7499acd400ce77357aa3e081840fb05274bd296fd1a8a8785cc63fc5424e9eeab3b3d90e36676b5c7e9187dd56894b435

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c737fa009a4e31c20cb676b973d6adae
SHA1 714fe23cd126081d2eb5582a393f350a6ef5025d
SHA256 9ca07b1d70cef63bf23706c3ddebafaca0c86d39bde62a4aaf25cc2c8b311ba4
SHA512 c9f28de089d76b8a5b08e539eb25b210e6e101d5f3734d91217f5b4890d3d1a793a3b5ebca4d374cfc9d1206cc362e3f6c29a31c0e2f55b9c41525ee41178418

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 98605d565d5801296be16487281276b6
SHA1 cfe82881b38832d9b64b349c416a861c5ba09013
SHA256 7c648bd12fcdc9122c741874cbaeec81ff0db03349e7dffcb369dbc51cbab008
SHA512 f6f8fc3175836b9603d7fd6cba96f78da4bd597e68eaacdffbf9de839d397b67f4ac3628f642fe94de28a745c1360622c525a28cd22a31e7bd9729616f84b8b0

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 95d9631a6d45af09e3d2ec681c8da865
SHA1 46a1b87f56c797100a5416f17cc39d8d4ac57af6
SHA256 a62ef541d29d5b4c957fbff92fbd8879ad107c93f535b2f4f6a7a8d56cbddb58
SHA512 28e4ac0603feaf6f378308e3228555caecabc34b7355a2b0e6060d4d4ff17df2734853b9a897236abbd6bf7b11d0d658b00ed3848dd4488774b4a513ae5d4d06

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 87f05e90ebd3aacd36d12db0341c6e7f
SHA1 c25ec6f52c1a2b517b75c1da637effbeef42a2fb
SHA256 270c42b627ee37feaa09d60baf16dfb2a96e7b192ecaf05702fa0823b504fe57
SHA512 76cf46ac8eba53dd49a9d87b46bb2edbf74c5b2d3347ae7c358e9510243e907b350f42e3d05628cf7a3a231f1763908d540c91b7c192845afeb198e9458aa9c1

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 302d04fcd6346ce447fdd46107ea731c
SHA1 f1df9eac079b65a919b68d2245c6e3c1c1aa826d
SHA256 9d627891974841f031a7995dd2c980cdda7480d4fd334f5479b7050fa145293a
SHA512 0478f167dfe4d904ce0ae26c8e85a0b08c602a6d234cce76b166019cfd7803d916ad8e64787fbc402b8fd39a8ce2d1da2c75dbf914ac96a811155da71b71bc13

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 9da3f2f1c03637b5481e761df4f55187
SHA1 cbcb1f4e7460e4399cec7ee3765a6f78397f7ff0
SHA256 3886e8f49ff201b1404487ed2c620daf101f971ac41733006626c4b3b66a94e1
SHA512 789d488a0e2539bd53cb6bef2fc1c9c5af9c4f6fab8d5e6c321034d4340a783dcb4297884275c00fc692323fc87f96759abf3236624dfa01946e6ee841270bfd

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 820a5b1ffb62b41b502bb71ff0d5e7dd
SHA1 6d3b849e8c5609c0554f41e8b9ab97804583736f
SHA256 f2ed4503771b1c87b49de0aa54c3627004d88be6d052121f665c11ab550ab555
SHA512 3e4fc625b47f3eed971d53ceafce79d43622debfa43f3c2515d35f72cc168b94ed97953115bb46cec9021c24a803518b1d924e425300b951f211cdf4a803f11b

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 f3abf61294810a1540b5946c18ebdce4
SHA1 3f241d5977fe389514cb40204103f0da11f886a6
SHA256 d726ef67eb36089c761a5d37501e4a3044e236ab4e5a6a230f0d0cf179da980a
SHA512 1e0a77640ebb21c8b4258f10c2e70e2c4aadf2d3bedcf53c48ce19d5c139632910a72c4ea7770d61e04ab98488b194c2783398e4a225e1de2507e94ced75c51d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 75a9df404357a92a637fb082725b9559
SHA1 5fa731f4c7e10e5760702fb6ea9e6445cc435446
SHA256 58386274c59c7e7d4341ffa8dcc4455a3ece918c280eff5c00030ec6b1715db9
SHA512 410575c10179476b7bde16bbbeddbd43da703de3038976f9c54a514645a421a85704aeee45ffb848d7173b31c9468ded5cbc32b87f6d211b0b2d4703027c4997

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 422f896e7d0ab6809a70999f15864b2d
SHA1 1497450e7166cb801326c5c2cfa83b5643b1ab1c
SHA256 283241a34358e9dbcf88210b644d7d13cde1f071c497dc0ac4415cacc011da41
SHA512 7f4b7f1939f74ce43f872d2c64d32cfe6603774a1807da9f5054506ffa0471e9835c95dd6ddfc3cc3ca5ad62657a33833a744fdf165c140a79fe981cefef7ab4

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 75ae2c0e4de619d744950586f0035d6f
SHA1 c5a210c6d42af4fbbb377bd103a2c11fda3c4870
SHA256 7d40e2f27c4dfff483d013f1825a56dece7b52949f069545cdefa486987656ee
SHA512 2bab16afe96dd71940194efaa868e7f142302bd635cb8f6d1512efd6f01fc109387ffbcca46e637c2b4282948002b77e93d7963f8ca3c88aa6af499ce3bc8929

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 0d2d3872c35bf4a16a344586311f7928
SHA1 6e6567c83e10efa4ddb3a283e3411d1d2554e769
SHA256 8ef3456c90781dfeba67e7ce26b9bf617b1716fe4174af9eb6d5b1f713c1cb0a
SHA512 4ed78efa44c8e38711e5650417702e378ec248b7d4e629b085bcbb6c06ac07b7a5bcfc26168bc8d9d86f17e02935c9890468f5d22a7ec8941f7a5f8030819fa9

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 a06bef24acd227f5417e1cd44b1f0da6
SHA1 765a5c61710af5e1acfb9fba84dd5cd627365f4d
SHA256 4ab9f70cf0418dcbb28d5b6b82e3206a5f0f6d9291d5223fdd61b6078ddcb16f
SHA512 af900043c5af47b339954f3da23e89b42dda3cf68b22dda37474de1422301e495e11727874f7a09375f06a8e3999adcad37e12a01c448682ccfa243c51f200c6

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c0ee3a53617badb4045b9cbecfdd5961
SHA1 bbc08963bd8e66c2be900410016efc3e3e71fbc4
SHA256 34870cac78ee11a2a5854349c968a27e92f216f7ba408f1e174c710743a4b6fa
SHA512 895931fccda39ce82eeee59448c2c963356959d826cb1409370f7ab2de4372ded4b72ebc0fd93efea16d00b5d756e2563ee4301f9a7b41d899da504504c57910

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 395dbedbf10c7821ef8ddb0e0e5f89ab
SHA1 656ad1037a4c8be917ad90d56a731f9f812e8c5a
SHA256 259e624a4fe03b84ff411f5b16d9d9d8ed76dc5de2beb8b712ad7bdae9fdd305
SHA512 2153335852ca008c7f330d1cfa3ef0e542e0df43b4d4d9ed288a9dde9a09907d167426793931f0b49ff2cb820c4a074178f7272f4bc72a82cb2b0508e2147458

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 2402ef92f8166d5a1c628a9a3e0ebfe5
SHA1 4ff036d6c29444de035d8ee57a9f59fa2b9741da
SHA256 d5bbc2ff4ed33635b75f8abdf81853c97e55cf66fa82eb3031b592ebba2a2eb1
SHA512 2a9ea3b7028323b3975268ec01cfad82df1595598ee83bc1c4dfc554acb52c765b5a9ef0fa0311fcac663e25f7acb3632a0e4e7aba67c0991e994460d2dfa12f

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c3b52c4160fb2ae0854a8366a61b43f5
SHA1 c260af38996c7216d2e2431bd1457f78ce5ae208
SHA256 c1d81a4ef6cc2fda4dfa113736b3198bf5db2b6c3edb3b8e92238078f3db5a54
SHA512 55ecdcfa429655062d618c1357aa620c0c553a715e6ace7758a605da9961fa39cdfcfc2346bf4907ac3bf787ed2cb069b6d71d932d4c80543372da4da3635bd4

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 26023e782d940de9d9f380c7657f9dde
SHA1 9a1ee23af8bf5067e78e2b3bcf2dbb2b90d1c7e7
SHA256 919380272c3e766b8b556b33bac9ae2f487bbc7415fbce4c54424122d094a611
SHA512 a18cb2f1c523bea51cfffa34e4c31222259454d8f5e44262fb4b95dc3bbb4c84ef6df5e4967101fe92e136bba6d47508503c20811e7979807af196028c70ae5d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 0934e8d9afc4de694396f3bfc7ffccdb
SHA1 80a8c6d51e4adf860cf3931d602f4ccd96ceb1e3
SHA256 a7afe221d1668a7ccdfc3dc2bdefb797c3ca22dc12f15507bfb990d10cce78f5
SHA512 32c5e3a20ed509f236068b4d976e11eff40cd06822a4302b87ded4561811c5c56ae4983938ca6f0f11a7bdfcc7845de0f3543650f45420320b5711a9fc975d28

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 f925177c0c3c1f19c16c649442aeae50
SHA1 274d1d7a29e072f1c74e21ba2e602e6cafb63b84
SHA256 b27d04d9197a5d6c418a73c3743b78150577142bced803d34bdf4167158233b6
SHA512 54ea57faeec991aa27d4dc870d111c7f7940bbda9c5398d45dfc01f07e45f401965abe2acdec995872e2e43d060a711dc104e0141fec35b25e20ef45f5a1867c

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 60785baa7d60d6415835266d2cbb5667
SHA1 4bdee5e051c380b745e403e4beb8f660b8ae8222
SHA256 bd4c3305673b2551ba3c3bdcb1b978a3e346dab16624c69e1ec3e86c4111e586
SHA512 e55deb6e60cd4d3a0fca08efc7423c860b58b1f22c15edebfebf3990884a6f63a562d5f63f245f56cacf6d74a67a262363c464ee75082db5186262659c2c1471

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c4014f3ce9b7d88f39b1434524b274b6
SHA1 7acd9cc3c8c0ef33692b629402bf16950607b054
SHA256 1b549d35c4c4c08b0339fdb29d21371ad808626321d4d6b5eb7d8df858a336d9
SHA512 5e3ec8202a9e4ea0abc950faa1c8695cd1fd7fac82811ab0739bbbde6b04819d2a981a4c42c67f1594ad288eb6bbd11c861cb3ead9361c60f608ccf27ad8ccc2

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 2398121bd00f9808725281c20b37784f
SHA1 678ff0ee2c7e52195bd36385bbe9a1352b86aa6a
SHA256 dfb5095d98fbd95da4225649bbfff1fc6cd94b285542a938a545e72628cfebd7
SHA512 b0e07c77f112945e74102708615378757c8c2439adc3b653f3e968604261deab197088251090ecc7a6532ee47eada173c3b6eae6d7627407334efaf51c163b90

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 d9744f3e9da1a507b64e7c8200d11e23
SHA1 9f2b7783d3f417d59edb156924ec2fbb82ea031d
SHA256 19221c7787bab75398136a40d10517072025bdb6325dafee590d6e4689874f34
SHA512 449deed08f7e5650fd383a41fc3db43f90012e4b324ef905826200f1ad6352de021b27a1c271958368af70dfdf99fc2ba616ddd452616df62f6ab1ea3dcc3bf4

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 953412dfaf6c771d887b5c7c05b7f7cb
SHA1 a0c63a509954501a72b441e6e232c688c0f7766d
SHA256 f25da83ab23c5a4d2acacaa93a8832194ba0855a06a4dec67757296950235ad6
SHA512 2795811376ff3b1f31061ab50eef05c43b258e824ce6b6fd2f1b972e2faa6bb814a9ca25996a0a7072d6ecebeeb529c342638c9a8623043d61d4bffdb9c721fc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\017b3de9988fc8ea01060584b5f2a667

MD5 bbe6aa228c8bd95d2ec10d79846a300f
SHA1 ba968f45579d8af9c71eaa29977ed80f162a2763
SHA256 c75936f186e2d9ccdb6eb3367ce3641aa48a0adc478e53314663c75dca60645f
SHA512 15fb0e5ad32f3bbf47d22d10a1a80bc8acd7be90338c8d32a4534322ec5c2c7c6dd80580873bcd0d4c84fd808651e06b92f9584ec7d00deef66d401d7465211f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\835a4e41510dca9a9f30e88a72640028

MD5 d01189483db104aa8b544b992c84fb82
SHA1 ded03c045f93b1c58ad9cc975dbaecf8cc8dd221
SHA256 05a34aa67c59328df0be7e154b904adc6e014e6ccc2dfe41739415e29bce68e9
SHA512 e7ddc906f2db06b68ed174a2f90f8de632d1fb634e5d356e2442c2b8aa11e5ded8bd4c960193ab1eeed40a75c246b69f1d97c81b6225a3c8340b4cff20895d98

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 3ad69d0d7e974b1c904c850255f8f8dd
SHA1 6b09c517857cbf44b49797268c992703f8235a85
SHA256 a71f815cbbdc04d60d4268fc477573dcec27920887dcdae40d88c61d104aa21d
SHA512 659f72f5686c757a733c5f43840affc2c9fa29cd2a748cb7c0b6a2c9dee00037d5198cdcc1924356f63497d455b4b0a643a08fe936627fcd22b2aa9b1e4f473e

C:\Users\Admin\AppData\Local\Temp\{3662E6DE-4F10-4B3B-9ADD-8C0DF757A057}-BGAUpdate.exe

MD5 3f208f4e0dacb8661d7659d2a030f36e
SHA1 07fe69fd12637b63f6ae44e60fdf80e5e3e933ff
SHA256 d3c12e642d4b032e2592c2ba6e0ed703a7e43fb424b7c3ab5b2e51b53d1d433b
SHA512 6c8fce43d04dd7e7f5c8bf275ba01e24a76531e89cc02f4b2f23ab2086f7cf70f485c4240c5ea41bf61cb7ceee471df7e7bdc1b17dfdd54c22e4b02ff4e14740

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 a2335fa920c9c25e5bc27507256b4801
SHA1 c0fd089f414ec3d12e751e47f634cd4a71267424
SHA256 f2589549bd569a12df9bebb1ffbfb1d371374e50225c5b2cdebf7e4945f8e8eb
SHA512 a4237b6487a87d078b6025ea11fab7b95b85ecbb5559ab99d163bab3870bce1e4e08756ef7b0827aacbaf53262efd02ec709f870be36516eb5b13a65bd5ba1aa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b65cf8041fff760bf44e88074829ca78

MD5 13b78203ecf425ebd415c22cfd9dd5e7
SHA1 4a3be1970d9ff0266409686c5973b6dad3edf9f1
SHA256 a0c4028cba90e248ab7a446fa9530d492a157ba06e3301c38391efa96d932c80
SHA512 9005e4373ca8e776c01d0fe826e55323a6542f534028b1dc9977798df9a73f349a98b4b52d2658bbe73592b9728295b7e59f87ac5ee97bb30f434d2148a2723b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c6a71e7ebee12ad7e88e765f90c13254

MD5 a11cdcb6f2d5bcf5ee9d400fa0e37462
SHA1 6633f46089b8936970770ade3b533ddf8fcc2f50
SHA256 00abc6a4d115d2068edfe89379f70014804253227006d085edee03320eae9976
SHA512 4dad239e30ce8a4b777b2cf9f326eb5166930b39f396761bccf23e6b32df1d670ce779179d7cd0a3a61b56b9e6200e0f5593b9a564572827b8d33c169e2a2f47

C:\Users\Admin\AppData\Local\Temp\Roblox\http\82a93330ef6fa233bcac702f588e403a

MD5 3b96c14c2c48dc0d70cf7b71998e7be2
SHA1 1b12fc646a55754f347d8aa300cf3cdeb013cc3f
SHA256 f4cf4f2110a54ccf1c7a9dfdd9a99f533793eeb4b0585cb4cd6f811550ca1717
SHA512 6c70ed773630bf51a8d983dd6030d718d88b0d531b22aaf11f21abc597c3b4cc6431b14c7f9562e3f4eda4c2b04c0cedc3fdaf250cea7132d1f261d9a071e52a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dda2476ba9af66b2f9a790a72addd9d0

MD5 6c7034e33bb41a165e98abe92c6fce9e
SHA1 241f27967adb18bb86ba1b8a6b803b6e8fbde9c0
SHA256 db45704804de0d9a4a61dc645c7b6a88ad0c8c06f3c3a2bc759b8cbd6fe76875
SHA512 109cc7ff679fc4ea85581fc8c51f73af2dc293157d449fb90646ee806cd77edb2f7f3d559e25f0a42ee6881f9336e8a668e059fdb13a7b6434306bac19b9a9f8

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4A05E9D4-73CF-40E3-B1A1-6C4BA52C6AD1}\EDGEMITMP_4333A.tmp\SETUP.EX_

MD5 5070a34dbada1aaa375cc572b5fc7d0c
SHA1 e74b7ef714755870976abe3d2b4a7db0b9cc21e5
SHA256 03e7a32e1f10fced6a07dfa4e6cfd92510d4bf6929d423798e4fb5ca91fe6c20
SHA512 fed3fcbb64a59070b0efd677ca2edc982d28e37cdf7283f2777af8aca7d3760a7eefb8d01b3c2bf4b4ec3708a74c3412f0dede91e31dca1b6f8a4e4edc673aa7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1d98d49c9d1a1bb37a0da8d756a2598e
SHA1 6fdc948527952166722a8ecf61ea8897c3142527
SHA256 7f0152617ed1614ee950212537e7a1ba9296475e25fcee08b1892fd510c46c5c
SHA512 07f5e750e2176ec553c6c80b7f4b553ad036c4964f7a65a1fafd1837683247dd147bfc6d735849dfc9e6a27255ac90dbce25e5f6a07ac1021a7e3351d665f7a9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\beab1834598e58730485640b77c17b1b

MD5 843e706142f29fd0472484ad922ba8e3
SHA1 4683ee13cea7430df750e962d81bbda9c19e9650
SHA256 80dc8d74e090cad380f9649e9a0fe461b3487ce8871897b3f054a91acd399d24
SHA512 41d7a62565f24612754fa4be32db91f825ad46c3d155563ec5df20ddc160e4f8f40921e392c2be33e91b8e8978a8ec685b3270f0a38fe1ca904ad51744b27d24

C:\Users\Admin\AppData\Local\Temp\Roblox\http\905efaa32750606a34c5b88341583a7c

MD5 365e7eb9294804199b5f0f3dfde3848d
SHA1 bf8f15fad918022a30b509308ba557c4b7175bc3
SHA256 faefe527c4f7927704d261afe31e714d1193c54e93ed6e1cd9bc3cf2380fae28
SHA512 ce07b7389d33ee8a173807549a4b88b6df80cdf1a21544965f8955b0a62cea58e970f6c6a9910770fabdf349cdea4124c3c627fd9c8f23d84ae4b3b8c1750334

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc25741a2b3fb8bb321263407a6dd478

MD5 d5fb889c44bc31778ff78ac578b1c14d
SHA1 f829fa8f243bbd667934345d8f6e5f6e259440fc
SHA256 996f7c5b39ec9559d35357fe3cfab93b3f7ff24a699de2f5b855c8b587b61b8a
SHA512 e64e7e98c3d0bb5158d77dd761f4a5e47b4b28ae6187973ad4f0877825b1409c3bfbfd0bd6c4f3906be51dea4db42ecf4787222afcd257152b80731c778c8200

C:\Users\Admin\AppData\Local\Temp\Roblox\http\75c12c219f98e5c18b40950b5f9943a1

MD5 40b82ccb07db37c42670a85c4f7a049e
SHA1 529ef95b5245fe6cba5cbb44696d54a54eb0e5d3
SHA256 91acd7ea23ddf96cd4954dce218f69cab100b87d493d49417492282c6c9f0603
SHA512 cfe183de3bcb98c2602b7ea5398f8f99ba0ac529144df45974681e568382f6f31650fdfa4077a152ae0e87f22500f12c3a067817e761c3ece1b2ad57eede3004

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f57ad04647f264ee0690618195f18054

MD5 fd816107fb17e56cc43e2eb228126a3c
SHA1 4d6088af96f0ae08c7a65b15605cfe6109bb6196
SHA256 08138e91dcc2d1ccebef7bbbb2baee76c22eff8f97b0657d32c0b800fea9c928
SHA512 e9a247487a7e47eb5077ad5d1ca3d87d3c251d436a4d148649705da0951fd7fb22d4b742d944b2b9ec9f15fa994af6c78fa2be446f7b865800713fae9fedf561

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c851a4963d47d7e88838a2f3fedec464

MD5 518a6cb30163335e55272813b2faf86c
SHA1 2af9f607905199ffcc1507a3d369f181b14e111e
SHA256 bbdcafb0429463829646af2ddfaa9965de22f63f830309649f6c7a63183d7e93
SHA512 4b7117f2c3693a4c1ca517f0eeed3e6eeb95b01b850265653221aa9f6bcfd9d4340f7702be4bebf1ad5bdbe75d0721878b3748436231bdbf00e4221565b2fac9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4cfb0829bd83ec221e3cd3ecd4a112b7

MD5 b721a40421227dc7d81e243f36647ffa
SHA1 d13000b57383bf3dbd76c1818461f148d7d86e3b
SHA256 d427a918afe1435e989c8bd702f6ca0be3d09b3fa56c4017ddaa79edf5e17149
SHA512 730b846331e3390b79d4a651b4c22459c52e62457f714f04ecdd208bba97240601dca2c3cef9dec475b9b815ca035f746ddb3abe6d401f9ea9038ecae0ae8c4e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3a13b410d6cc06aa1cc75f8e74d8af77

MD5 61ef260dcae1c28d16728cc40e6bc03d
SHA1 d644ed2b9e9d9d852f99ae890a213a228acc859d
SHA256 7871989d13167f176163cdba50640a7393f5a262ce8fda556198113e08b80446
SHA512 3f220db6f2897cad7ea49393fee800a14418789d8dadb250b3109769df6be5810ae11f1c9d2c98b8d414a6e6a6ddbfd58a8dc1da84ee81ee7f2b4dd44f48682e

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 196a6a74f04b36a37811c9ac9eb936f9
SHA1 db074610c8f8e5b8603b042a8a64bfeb2e2f8857
SHA256 3fcb71f1b4cfae3808f698bd322a30ad71ccc08676ebbbc9f89ae01733c706b2
SHA512 7dc59b37e5d74d9f1f14b0b0056684699b286666fc61a48e415c2fc05d7d130087f9a8120e68a3d267ffb4f55e1da472675c40d03ec5c1fd67bb59a3916a4501

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 556ba1fec1eb444deba9cc629e944665
SHA1 bde77bc3e8cc495f77b1893c1ec5adc243d44e41
SHA256 a27b8e6865716bdb35f0c63766198f72f6f78d643a55a40db5b9f0c29f5cfe3b
SHA512 26f7fdd4384c91c46879710bd79c3d0e63788e2ab8b3e181c718aa63da102332f39d5e8f09b685eb9611d238254d838c06d5ab94b1868cf65c0bd05fb7974030

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 955d64eff81f260f770264b4615aef14
SHA1 81567137975e96190256ad7fdbfa161f67d00550
SHA256 1c10a45a41e797889d7730c4e2fd864f2ad824053c44f6689a3ac65d4bb96834
SHA512 12a09a6724c494d597eb94ba57a0b79aa41f2d2e4e29ce6b396bdfbffcb4c79dcb87bc75249feca1e654f17b72334909e84a3e0743326de45935b3d191124072

C:\Users\Admin\AppData\Local\Temp\Roblox\http\53d827d30453e92ea03c8733cb48667c

MD5 4f71f7ffd1dc0116765e4ceb151dbeb5
SHA1 cdc000e904f4e8e328bd331505859b134452604d
SHA256 23e891ef17a7401cf66dbec2c2a4019f757924a3458f07e6b7528d2bc2cf31fc
SHA512 5508759aaef296ff216adeb694152f83a3efea094bacda9272981b23a493fa8181087ff18c4c9a52a582fb9096473a141e20a10346eea7d9f9102321ce6a81e4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2de8b71e249ec9f3feb3c539d524775e

MD5 ecc99546f44d43ef9424f6702feb89a2
SHA1 684dece3795b7358a6c0527c9d51f409774ff92b
SHA256 3077bcd2dc4a532bad40d1a6e0899f601f5025949b73b45ee144c49b274b3537
SHA512 15ec33f07eb1dbb385c27a72d9f6e8c6b778c34c686e2249ba24d6ce184a51c560a8ff8c4cec10a9a7e1c376b4f93e35701c24063023142b4a01b9fa4f0ca044

C:\Users\Admin\AppData\Local\Temp\Roblox\http\533538cb75ae179b5dbf48664d88acba

MD5 2b66460a81c1b1fd1d9d7396550a6ea5
SHA1 13beaaf0f830eba0e111a2412576c7fed16d52c3
SHA256 a4f911d98ba26762ee2a7b2a62a1f1395bc5486c0149b120cd9e77f011fe5b9b
SHA512 d7a2a4e43110b5a9c1b5f71095d3f0973a5cc3d59b9390d3322a47b25c4c92d2aa5e39d4920b5a8e6769610f29e430486c9b3ae4ff050b3b5357b4b8633897e3

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 fc32064613c678f6f7831b088768f38a
SHA1 4b06a780f452e699095925de9580f75b7f7895a0
SHA256 bc8010a84992f58957af09be528b4785a906fe3eef6fb86ff5de07c5c3ef8f8d
SHA512 7e1890fe2bda08c8d66b7528ef7a4f8eb196f8dfe83c3115a9310678c34f73025422310e83d78d77064236aad1aa18b0a605d62ee93c123b9482f79a18da8fd9

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 6af2e931e6679ce4f3af4f979a8d5734
SHA1 007fa74f88ad4bf0ed135be55ab052020d3b5231
SHA256 06fb100e3fa184fe6fb88484c114b2e7ceb6daf1d76755249fdc62f460df3d63
SHA512 43d2a3fc6d5f39e7cd89cc6165a8cde1b219c5560b7a88f1de0e68cfc7366cb5cdff87c34ba47a06ab2c8b5735b8d7140dae7a6b80baaf60518b3ab9b0e3aab1

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 30e7f18d6aef85053275315179787d68
SHA1 593e59a1aaa71f26227c580491d7201580fda9a8
SHA256 7a6cbe1ebea1a2750068f8ecdb08e0f92818c16fb7ed295dbb0e2d66625f9d8e
SHA512 1acd8ca91816763ba208a4e7ac942e056085c6ae9dadbbd596cd971e3bb8c72891eb761471552c1112ae971bd6d923a2aefdee0d37e3b4ba0939729aadd926da

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 1594beb44a849a78260d194e4dff5ea5
SHA1 3303174f42f431fb5c55eb6898b02931fed5e04e
SHA256 0a1edd72bd31ef7033e2cd4d6e59ea2822fdc3d72c5709669da104578efbb8d4
SHA512 b3774496da466efa751432d1adf0ddb827d1a4d1f426fa058be203bd6ad35464dfcfb51bef7924fa19119ee1015cb17d6d040bd07dec9d57110a5421a99cccc4

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 5e0b55b14dbbb59d022b5d19b5d9ef64
SHA1 835d29fc6d98261df2c2500bd0ab9a7920a58346
SHA256 ae16c287b320a5b34da41cf9178951d9cddbbdcd7888506b2fcd91ce89aad252
SHA512 05d9bece579bdce8d0877aa24c0a0deccb10a4112007da140858068aaed64362689792b0d576fd81a80817e325f31a7db5cb27c97d53ea162f71938c9d156a43

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0.rbxl.lock

MD5 46e5b183320a647c54a24277246ec086
SHA1 e4db5c4373baff58ec2e22007ad36e1ca29332bc
SHA256 12fde27195bd23945d8f272b906f97bcc8ae52434778a9f9a393b5788072e32d
SHA512 46992b9d6471ed10067610434da5ba29a22408b9fb5e7dffb68e4f53c24b7dff6d0c9db87adfe78c7bdee022314b65d9c33d78fa0c0d5671e877787321233572

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_fUOstd.rbxl

MD5 8313385801ae70c8ff962dbfbbcbf79a
SHA1 9fe955788f1251aa40f00e29e6ebcacb6d9d64cc
SHA256 77e8f4ce25491d6b0bf5159b54d4d70af68584462a34685565a7b1ea39c605bd
SHA512 59df63c219e5a6ef6ec9c94873accda70357eb90ae40d2504d0f98bf5e2ada7bc21447e931855774543cf3d2534f90bc30d123b4040fdfb80e4db0b6bd3efb93

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 711e559fe4ae68bad892cd09b9212401
SHA1 0b738f5795e26bec72defc25a455f8da8fed2409
SHA256 daaa0d9c8bf47c4be4ad04f289423e774dd0ebb14e3339309c21d82d128ed98a
SHA512 6251a282c5edcf2d9691bb8a215a4596513ff4d2c3554273b19720de56b8f635090d1a2ea169fb2de9714264fb39b4d6c0c1642271599e9e8aca65a090faa6cd

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 1a5ccdd223be3a688fdd75a7b2a98927
SHA1 f26ab2806b2dc03635b497c2aecfb926ce0ac6a4
SHA256 f9e2ef89433e6791f08b06a852e3963d6633daebef04bd2cef5cdc23f4cd74e1
SHA512 b81e944e24e1333d3e078c753b477238bd1bbbe9d4163804cd2622f78bf299ff27d18cfaef8bddce1f166b9fed72cf07b60804f6a14b78708a4adc53c1af4b81

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 58891dff8e479aff8d31d61f4124b633
SHA1 dc43cfab240154941eb8ab36d94c0068bbddd362
SHA256 96053f3df4e79dd0fd52c3a4f64349cd6994d1c7531f404c27aa5b2d189f7f6e
SHA512 3e2965957ca1cb5d9730a8c3ffba68dccc6a4b1019bdada4badd521b6fadbe975bc79bb8fab17be0ea95a9d6aa26fa7473dfb4f8daec66c25e0eee0bc27e8b26

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 8c71f7dfc615ab286b679c4ba8435a54
SHA1 2952537efc4343c17b7721943db11913092f6177
SHA256 858684b8fd003e71594acda25ced3f1500110f1025aa362ebd7a4fe18809eb41
SHA512 eef1c84618773758f86bb14d1d294b095ec4c0fa891eeb67a8510a791cc1fef8f5ade787b3423dea29f179d000ad0d058cd254bd17f5127112b3c15b4a86b070

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 b068471f31019d55c082a6e9d53c4114
SHA1 acaef885c418991ede97a2c46f2fa54041059f71
SHA256 e84f534657548042fff330a294687733d6ee07a45c5657b4bdd3640d9cb920f3
SHA512 73ddc25a4797346ed9697197e594fb21e2e1b8c833c45dfec3ab77cc2a220222352b645329afe05380184bd2fa9fbc7117a126fe995fbe3a8dde33bd7b5f73be

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 00a2996a19e2a3d1249b04b7fd32786f
SHA1 cd1e180a264249a95c2e2f5bdd75e061152f45cd
SHA256 1a712897a8cf582af1a7c562f9cd44ab7beb3a07633c34a7ac42555e7026e021
SHA512 693faeb87b98a5ef1e17abfa1a944f0bdb847b48cf78dcb6f2e4910e5c1bd88453e7b8876297b5563df0a08b3ff468ffba40e8b31cfcd4c9a485fbc6e440fce8

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 4b18383502e38c534801872289cd010b
SHA1 f0b087d31a1e25efde91b032b9703037518ca05f
SHA256 f0ea74af3f988c806cde9332c3fdfe222f8c8dac846b9197e14791a275dda4cf
SHA512 7be67b66d96c8cd2ecb20d0fae99dac3004adcdcac68b196110fc5073b701a2bbd0d7b45ae5bd69aa5b2144744ff278d012b94b051afb975540ba8e77522bb13

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 4ee98073eb465347bd68c87294fa53d7
SHA1 817e0973fafbaadf4bbf090e9b280708bcee850e
SHA256 577f7b8dc9da66b3d018e0679998a6b2cbc03732cc67dd1476c70c79605064c3
SHA512 85584b81025bf73f06adaa345567a2c73bbe84f54d0c4511782a2e203054eefabd3ddfe10dcaad0af8fed6823f0e75a439d271d07de14b1844cf8e6bc1734d23

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 ce30444620023396e62887ab2adc73cd
SHA1 59cc697c6f10d1020ff90210794fcb4a0b123476
SHA256 98a697900e022b40cd1439c058aec4b8eed5b053fb0dd14c4c84403a209e8206
SHA512 dd88044020edf61f3e96ba495ffb4165b8fa7ac7c0ca14149913f32f4379d388c68dd7d109e54ec12f87190ff5a1ff27b11deb7fe67f2bf468aa45744cf750be

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 6256f3c6592fb518312c9857bbffaaea
SHA1 ab143c764d90570ffb0e34eca92c0f707956dce2
SHA256 ab5246c275e5ee830effebfd471e2403b19b14a135b2ef098e6c45614d68ab97
SHA512 682bd80d8372d87dd5faf86b779f97d2cc2e7c3ba7a1f01c1e4e37183f10665c0b0a936f81878bc489d6e8f7f3c2a8e4de5241c16d5f7e53ed0814b4e8d1abe1

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 8d684ffb65a8b5e3b02f169070777893
SHA1 0474b31f3bd99f888860efa3ec5a22a231a961c1
SHA256 0dbad0164f5ffaf547eaa1962787f4c5ce36ed6aac0a373cff6f6175d0c9c29c
SHA512 7343ff00a826081fc3c014e1bc0f010947a003ab2a69a86145c07fe79b98a7204af7883bc7276ae78b3339ce6255347df30ae73cb9d045d5c86149f0342aac67

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 05cbd544c94b8198b587f2e91f5dc51f
SHA1 56474a116c394d89d51cb094623089b100a17d2d
SHA256 69e5c96f80008400e8f74cc91a907b2b530e542703371182f796bd87ad92cbc5
SHA512 065bdd9eb394587482e47271ab8b6220dc2d09f5ecd110eac5d2dd984350779051ce1ff4e56037781b9452ea7452f5e4f80344ba889dca36c940c86e2a875b56

C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\OTADataCache.json

MD5 11a17ccab96a24de7ffcaef84e378fcc
SHA1 73f18d2438e46d1006506ae6edd754e17ea25106
SHA256 05858b9864ab11fee682bb6e6028b56d6328dca077041f58f2989f24ae14d9c1
SHA512 e3d6fee7cfb04e5b03c0782b5f647032fe948ce2a85e225b0cdecd8f2729e6ef055caf171e0cdaef50179f3e90d01a1589af44a61415889f5b4cb18db6f6b348

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 5e91fd7e5c6872a7d0ea40b383976ed4
SHA1 00333d23cb6cb124a5137150e924e939d9169171
SHA256 f383e70991c9b392fb4a0a31f4735e0e14895a7692836319b7bc05d35e537f57
SHA512 8492c3cd571972915bbf8794f43d81de4bea52d935881057a9917c6ed57f8964e049f73bf99a27c96a47b0c0194b5cfa782af57ce3c9a8c680c31733d8df4116

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 7c0767050c0562a1eaaf33fe37a0c8cc
SHA1 73636217195f469cacf92623e786be81f645efba
SHA256 68db5b685e0c29061f7bbc5035233d8ca1d33eaa22a5c2db0da8bc5568517f39
SHA512 96421a205cf1a32a038082851f9cb9a0eed6ffef0410d530755a418f46a874e09158aae427b472f0ebedeb4e3b73feb339151759e62b880e2729e70bb523d57a

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 1237c11bf5fd8ff1a13974044aac08f1
SHA1 09798e91fb456dc4b081a27ae5c90dc6c510ae8f
SHA256 bf278bb8fd4b720f4d7b00a592eab1190a2a47cc6810f835a0e4eea5922ebf64
SHA512 9d88a613a15f47f975cf53735c024e76d7f9131956ea043dcefa1a7b1bcb80627020d67d780dbbd3766d3e7afcd79fc8a9a73e2e239e3976686012ab64424584

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 ce682b00fe3c8fc8576b18413b07fac1
SHA1 5b20cbbf1e6f0f3b15dc064ccefc92773ba8a06d
SHA256 c040fe42ff4ee71a2c881fdd1877a2da491de082687b7fefbb102dddf17ab2c7
SHA512 858559a628f99dd32b1c2cac1c38ed5e85adfb01d73d1294da1f486ee2a480c6f4dde11c8a5e5c881eff9b97a4fdf69b48e7a965b758e6f3ffe50e7533501e1d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 a7ccadfac2cdcb0dbebe22e9b087ae7d
SHA1 baedb9c47e81efc37935309dc729866cf082ee7a
SHA256 c4106515e7acb5f8ead7fbf5332a32fe60b7d7005b9fdd62c1bfc8b82ffc9476
SHA512 d1e8bc2bdd01918415e570bfe09c436e2c18d112c27b88d70349148c12af1039baa01eb21881e8ece1b29de6fe3e065a2c8f48d38d1a702f277e9fd866b0ef44

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 319276116e0c6727f1ebc6944bc65f78
SHA1 849f122bea5fe9823a4440f1bd107dd1ba2cc570
SHA256 ace554619a5f5fc01ec8e631aa7d8bcd7c6f57a17fb3afd8c82c2a2105da8f58
SHA512 aedfdd1ed5682231fff72f0d2a0006857666c0e976cf5cd2b38b2b07caa93c4691b5fc978d00633f2ee1caa4b8825c407299d42d4212e252fc74961b287b42a0

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 424aa7cc3df0d311ab06f3ca59f7d5c9
SHA1 5b0ad0e0a731980e525024fea2ab48b38773562e
SHA256 ee05410772ba9ce5be7785a9c66981f1c57a23c84e867cacceaf8eabf346688d
SHA512 1b91e247b4cf5966c1f426481e1c95571d7c549bef5597e8eca827b5fc79ea64da0370821da96972a5ad15bbce40703ba2f3741bfdc9e94f94a37f7e7c6420c1

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 86e6e1124b12c1561328c9330293ee7d
SHA1 7a8feb15db2d64bb47466dda753c1c4eb76db2db
SHA256 8ed4c3cdb8e6c5302494d0461571960d127126b3020ef5a79073cc73b4164680
SHA512 f1378b556f458da2104e07867e848dd50e2ceeadf498377b274bb4d4850740d28e9c4bd5c0bad662729170cdda1030b78cccdd6d4a6141bdfd6a133a0a93169d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 8428fff8efa2f34d5b4abe569f995add
SHA1 ed641f67ea6c79047309c86afb9c2606ce893d72
SHA256 1e7a9df0c91957116d5f66ea5b48bd2d7c3d494fa2fc08a1b1b13da75ac0cb10
SHA512 1c3c93fdf27eb4549a26eef80c34e54d416d6867e90ce75f153fc680884bf8f95f9a31afa176234e17eaa85f9c3858f6a4839c130f6a3d0680afab32cfd03497

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 60fb2b5b2f4f053b8b84757099a31a57
SHA1 19f4162c9876ad821f4cda9c3a53ec86c79d4963
SHA256 f3a3a3acd1e1e5a147b715d1921e0879c19e264e012fcf2302b8acc61f898470
SHA512 1585291a029578383076c122d990ca2fe9923a7a42929a4d1fc8f6287ab4482553ada8b54b859f5d0ccb28885c59a0512d2cd8503e5652dea54a5f71efc7c465

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 1fddaaeb31c724f60b11c74b622f890a
SHA1 ca4919142cd85ef18a43e3637de2ce2ae53efea5
SHA256 d9fb1ff8398e7c4d1d7495da050e8443b0f60ee5ca0f93a7c7758aed264d3a76
SHA512 d27a49c703b43f26ca340cb615305a144cfeb054bbf4ce2cb54868339e1e061be73df4edf60110a4fa187cf177043f21fe6e596d1f0b2bbcf952657f616a2805

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 6d1ba5433ae8d097222740528f37f2d6
SHA1 e2290bc0a1b574e10d6cccb7080be8a7c4ea2eed
SHA256 de2dbf769e91992fd821f4e68c7e3fcb641d8a05edf95abf4ff93e49e3e0107c
SHA512 7481dc1861a72ac619c1cc12faf9deeca6d0a280e27be142d6c9ae960a5e3fa0b110cf34ed0f5a329c45005b8e35d6915cde6d6bf9a6172f09b89ac45d2d78e6

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 e6af4b95e9f1f069d49c80da598ba096
SHA1 e6bf5c93a5848123041bbf15c8793c6dfb5d16cd
SHA256 680abcd2e071b572f70dfe61457a2733989cc47adb0d9967f1a2f46e9e76b40c
SHA512 bd62c62ffaef091e91822c2363728093ae26e38fc33fdc9368bc85d95c6325b3c44a9df0ce641e38bf9bc705cd10412130c6e79fbfc4a9d30920b490fa271e7d

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 7ae57a24d60e4cb2ff911192fcbb6a9e
SHA1 374b9db2ddfe8df5336a8668ca67e38778dfdc3a
SHA256 42b7e58edb3eb1e8ad1f0a384bd32b5801305e307197cf023264ab780f617c9c
SHA512 abe30815258da9c89f662f3861f8c5bbae8b7bf65c31738faa63bc3f7081b17f2f340d6777066205e967cf8018be1848e395d31ff573473e61ec9c90152507ea

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 de8516f1909b8b610fd82c96a7ede4b2
SHA1 6963b2dd6f65c69930dad0d16a58645b566f546b
SHA256 62ca56f620f24f731323ad480c03cefc98b07bcdf6c32e32188802714a15fa68
SHA512 636845d0037593c3ba4ff20c9bbd76fa107d160732564513ee2173ff0fa19b242c0bc1baf526adb5128a04488e67a6827db6b53fe0af7c1e5cb64afa225fcf3b

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 63f9e701bf61a2ac0f46f6dde2d6dc19
SHA1 ddcdfcbcdf131570ff06d0e21703601111a76e1e
SHA256 dd01a6d3a3d834fec38f6eea37bc7626b114bc2fe113f84f95b26527ede799a0
SHA512 715b36753c775e4a5a4865887878ba720d8fd915aa2a63abf563f5960a6679b37097bb5c0d3dd41d6628e38816bdb78a5b7e33a7507f772cd4cbcfa7bfa14903

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 f0e21187ce6be048a8a01c8ce01f78d7
SHA1 819ac0b22e5a9306c2e1509cff87fc09bd423430
SHA256 4187bdf242159a7f2bf2bea88a9201725d21ca33048cc066d0ef466232c2531a
SHA512 fc419f083741e1bdebf2b42d74a4b51bc11ecf7451ceb0f160e6ca46e30bf8f52f64335455a3e3eb5af1887eb252965a5cb93ec45c8bbff6bb66dea78db41bbe

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 ef99b112cbf3cb29f33794af6e31062a
SHA1 bfb499e5539036056edc950301c6322f7da46344
SHA256 38a12c5fcc2de9d5e4b4758cafcbbc1767d1edb9d6b7a5b00bbd32495c376bb5
SHA512 a1d233d1f1801bdb79ee4ea91298b1e0bdc805d58bacf200b06ad4abd8dfb196b28909177a38237bb7f76132535984dfe9cb6723a8b354e05a15114683b9bcf8

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 323397745fb40822d64812956a479439
SHA1 17e14a0c486d859d6a1d3fd1f70796200b0608cb
SHA256 bddc14db179c8ef31def6bed5f63ae889858ba3ec64c13ba14ad247ee90f76c1
SHA512 9862774aa3019ec1f5aacf5227178afec784e50400af174d44cd4e4b4d49797d51864b6ae5cd59f2b2274098fd9ba95b342d393b9fb8a873947dc33b89875e50

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 2abad61f3ce7b20c05ada520fee72bb4
SHA1 ade1d8efea2d6c4ed1f48f714e84f5e5f3eaae3c
SHA256 8b05dbbf6c78e385e0796157753cfed8f3b3db4ddc8555559e82871ebac85f51
SHA512 8aaaa37366b0c12f1731b7f269a1751b11dd00d00d2edd72d1b0357ace8f70f10e4394bd15ef02a629d814c9a1f6dc8c1d792a5fa84b9e5073d49a4e0054d46f

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c99ba4851e34ffebb183a3945a538204
SHA1 7101bf7d3ce8f54e6b1e9fe0a94b6147fb6e9e55
SHA256 bce37f5338bd97bfb9546e86e455a614d2bfa8105eef3dbeb8203354117a5b88
SHA512 e06b429ff1ab68086e92cc5485570cf53d7396c0b83df60beaa66e51ec6ca49cb45ed17886231466bf0ecc9896d9c144cf4b22d6bcab26e6f100080e17ffb3f0

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 b43c76b0de670c4b60afc14c0ab39ee3
SHA1 4452dc6e6f3f64b28948bd7ce39bb1c8b9877d15
SHA256 3a6408035eb2b6e721dcfd5cbfef5dcc94cf5277cf645c78cf8a1e9affb2c0db
SHA512 5fac94db7e1e69248a6a7d788ec54ba2ce6619257a08c18f180c9712f25188286183daeaced063cbfd44585db049ec3e77fe7d6fff1d0d8c618fb5abfca6b964

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 79bea0546958b6fe941d9dd3df00c116
SHA1 acbb2672be398c09d6de67f2dab040c333349623
SHA256 6a102f3dca01150cffbbebd72a80b2da6491fa6ddd14ea74a067dfa73025f844
SHA512 ad65abf5a11a3f9fb32e24bc58da93d2058a5da83b118b55a458c1551d8591737fa422b3893f33c4ea77affc503bf6ace8b9868837b531a5e7e132ada7a45f3a

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 1eda8e99319c6cdd85a1a7d5612b326f
SHA1 0343b661294598df763b9b615be2ba1b00140126
SHA256 6cf6d134fbda7308c0696b7c3899d18dbb4b0c400733f2c186bb8319cfee6ab0
SHA512 0a99d94ce3830f1524cae84875c6f76183032198715204de9916439a9f056f1f07b474ada71acce37f10169538d5bef2e6a8b2ce53b95241614316ede104bfec

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 2d5f75ecad11c02a29156708c8adbac9
SHA1 2e5446820ba88a894f0f650a2b47f9b062708101
SHA256 c30cb4925ff7dc0cd20f3c1b6e9ccdb7505cdab92da6b022e3951228d456e852
SHA512 3d0103086d0ebf9e3f41e15677e625cb9bb2d017bef1a30c02876f595b165804e4624ce385010dd0d05e4c4c6e160881c0fb47887ff1cf6779399a72bf280ea4

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 f0876ac39113575617f6e203b4f7faae
SHA1 0444e5135e66310af050466b374ebf84d5ab6278
SHA256 713632742d4b7e154f7036b870dc43cd8815eed4c493abd2a0a209a9d22d8784
SHA512 54f6524473001dd5e0077a2767658104185a6f9f1d22fa3f5c1e3d691c66cfa7b9cbaaeddf90425b045cf82570a1d1f0b01be8e05594a43c4844dcdf501e3e27

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 fd030c986c03aa081ff0337478a1d63b
SHA1 92b9f91a3bb4d31889a63db15f50d842c9e91a48
SHA256 63e5cc5df38bb6510860f99bf5f16bb9749baaf2a0e77d02eb27dc79824d06c7
SHA512 e9ad0c5ce3f157e74bc5908c70b1bda6a25e59f9db49f058a9e1daf8e5691263e434ae0ab2bf021196322b815a2bd9a07d4f968616bd8658f8630908abe96fde

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 09e0e2dc77d9bd25bd8c06d9cac7bef3
SHA1 4947341d8da18d8926944f8f13d3297a84f22353
SHA256 c4e7a49ba47c40f1f7cd053d6f9e038058b9902e466b4b3cd1bc1fed840b960c
SHA512 2567b5f9b2f8eb6d0fc78fc3fe1da919cee6b815b3fa54e30c5fed4553277e9b84785cfac6b41b9fdd0a54ff7bb844b20665d77c4df52ed31dbc2ae167415a57

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 2516ee9ac6c2749c2c3f9a5035ea4ef2
SHA1 e075656ebbc8d0bfc31894daa0c5452fe267889e
SHA256 f2b9b266a23d0f09bbe54d91cd57e16eafee7c151059a5a331cdf2f1f6f6c545
SHA512 198870f003d5e0dc53fca56d84541668d96db103ee411fdab433c7728c1ab3d3e223287e3340e4906a65a5622042298239cdb290ccee7ba494abf234a9c9ab90

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 3d10d5cfba73c012b5b501af2f25c4c9
SHA1 049c20c88fdaab0df303dbdfa6fde862dce81ab3
SHA256 19de6cce839db45f644e81362e7f62a78d97a4787091f7feb67b32ed568a73ad
SHA512 8f836fa39cf85325202e92ac85d4e97fa4ffec92e0f95b712c0862d0cb0be814ed0f94dd8e07b564e5d06ac0018778735fd6f210e5b7564fb2d832fbd2235bfb

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 c88f56009837863b4f28a0e7c8169979
SHA1 4d96e9454227ff3d039c0b72f858c02fdb0c0d7e
SHA256 8268a6e1aee550fbe24e4f76a85149b3a9257d96a35f4463e4b72edb9f68e589
SHA512 860dd36fc4a5ae0b870f863ac68b76edb987901ad694bfbd21c97e346e67a2a64e7d94d61e191dda8550c131ce2b1072fba42dd895cf80e80468b0b799078df5

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_CDaYeV.rbxl

MD5 801bf8dc21cccdd04de002b57f11ce54
SHA1 e04a647c75d431aae0b77f92dd71c13fc92112f1
SHA256 5390139073c33015ec5c94e27f9531c75ac52bdd8aa3a93c6e65e884054c9048
SHA512 a87e1561cc97efcf8df410a6870b0dc2dd9442807f78f873ba1d2237033f95e6b5e159a74e2a7c63f1ca73442f4f98f560e2bd78e05565dda5de9384371cb2e3