Malware Analysis Report

2025-01-18 22:12

Sample ID 240502-tb268sec76
Target sample
SHA256 5df4130c342ea893adf523c4688f1d2c6ce7ab0bfdecfc90b1e6d124d4c4c229
Tags
adware discovery evasion execution persistence stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

5df4130c342ea893adf523c4688f1d2c6ce7ab0bfdecfc90b1e6d124d4c4c229

Threat Level: Likely malicious

The file sample was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion execution persistence stealer trojan

Modifies Installed Components in the registry

Sets file execution options in registry

Downloads MZ/PE file

Registers COM server for autorun

Loads dropped DLL

Executes dropped EXE

Checks whether UAC is enabled

Drops desktop.ini file(s)

Installs/modifies Browser Helper Object

Checks installed software on the system

Adds Run key to start application

Drops file in System32 directory

Suspicious use of NtSetInformationThreadHideFromDebugger

Checks system information in the registry

Suspicious use of NtCreateThreadExHideFromDebugger

Drops file in Program Files directory

Drops file in Windows directory

Command and Scripting Interpreter: JavaScript

Enumerates physical storage devices

Checks processor information in registry

System policy modification

Suspicious use of WriteProcessMemory

Enumerates system info in registry

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Modifies data under HKEY_USERS

Suspicious use of SendNotifyMessage

NTFS ADS

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Modifies Internet Explorer settings

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of UnmapMainImage

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-02 15:53

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-02 15:53

Reported

2024-05-02 16:11

Platform

win11-20240426-en

Max time kernel

1049s

Max time network

1054s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\sample.js

Signatures

Downloads MZ/PE file

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_3AB9B\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{499F713A-605C-4F6D-BD6F-A1B65C130632}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO\\ie_to_edge_bho_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\PdfPreview\\PdfPreviewHandler.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=C143DC713D09466EAF791BB69E4DC657" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C0CED88A-E8EC-43B7-8361-E6FD07A6DD19}\BGAUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Lua\TerrainEditor\Light\Large\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_3x_11.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedge_200_percent.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\content\textures\ui\MenuBar\arrow_up.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Lua\FileSync\Light\Large\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Shared\WidgetIcons\Dark\Standard\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Localization\Locales\el-gr.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\ReactOtter\React.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\SocialLibraries\SocialLibraries\Components\Masks\Style\TestStyle.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\VisualElements\LogoBeta.png C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\content\textures\TerrainTools\mtrl_limestone.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\textures\ui\Controls\apostrophe.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\textures\ui\btn_newWhiteGlow.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\textures\ui\SearchIcon.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\avatar\compositing\CompositLeftArmBase.mesh C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Shared\Navigation\Dark\Standard\AddNoBorder.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Constant\IconSize.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\StreamNotifications\NavigationRodux.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\content\textures\AnimationEditor\icon_whitetriangle_down.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\content\textures\LayeredClothingEditor\Icon_AddMore_Dark.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Locales\nb.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\VirtualEvents\RobloxAppLoggers.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\icudtl.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Shared\WidgetIcons\Light\Large\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\scripts\CoreScripts\Modules\CaptureNotification.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\JestMatcherUtils-edcba0e9-2.4.1\ChalkLua.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-2fca3173-0.4.2\LuauPolyfill\String\endsWith.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\RoactRodux\RoactRodux\StoreContext.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\textures\ui\Controls\PlayStationController\ButtonR2.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\Notifications\SoftLandingAssetLight.gif C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\roblox_lumberyak-5fead8c7-0.1.1\lumberyak\benchmark\benchmark.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ExperienceLoadingScript\ExperienceLoadingScript\default.rbxp C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\BuiltInStandalonePlugins\DepFiles\PluginManagement.d C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Shared\WidgetIcons\Dark\Large\LocalizationTools.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\content\textures\ui\Controls\DesignSystem\Thumbstick1Horizontal.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\content\textures\ui\Settings\MenuBarIcons\RecordTab.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Shared\WidgetIcons\Light\Large\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Actions\SetPurchaseFlow.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\textures\ui\LuaChatV2\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-12e911c4-0c4b13ff\LuauPolyfill\util\inspect.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\RoactNavigation-067f4e4b-660967ca\RoactNavigation\getChildRouter.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Container\MediaGallery\MediaGallerySingle.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\content\avatar\compositing\CompositLeftArmBase.mesh C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\PlatformContent\pc\textures\wood\normal.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\AppChat\HttpRequest.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\content\textures\ui\Controls\DesignSystem\ButtonSelect.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\utilities\common\errorHandling.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\PlatformContent\pc\textures\cobblestone\reflection.dds C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\DomTestingLibrary\DomTestingLibrary\types\get-queries-for-element.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\JestEnvironment\lock.toml C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\NetworkingAliases-96003ad7-0.6.3\NetworkingAliases\networkingAliasesTypes.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ShareLinkInvalidModal\Rodux.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\textures\ui\LoadingScreen\BackgroundDark.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\fonts\Roboto-Italic.ttf C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Lua\MaterialPicker\Light\Standard\Generate.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Packages\_Index\RoduxSquads\RoduxSquads\Models\SquadMemberModel.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\RoactUtils\Promise.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\TenFootUiControllerBar\RoactUtils.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\TenFootUiGlobalNav\TenFootUiGlobalNav\default.rbxp C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_2x_3.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\BuiltInPlugins\DepFiles\ScaleDragger.d C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_350713591\Microsoft.CognitiveServices.Speech.core.dll C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_350713591\manifest.json C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_313700760\manifest.json C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_313700760\protocols.json C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_1236171631\crl-set C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_1236171631\manifest.fingerprint C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_350713591\manifest.fingerprint C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_1236171631\manifest.json C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_313700760\manifest.fingerprint C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A

Command and Scripting Interpreter: JavaScript

execution

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\PROTOCOLEXECUTE\ROBLOX-STUDIO C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Edge\InstallerPinned = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService.1.0\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ELEVATION C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ = "Microsoft Edge Update Legacy On Demand" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachine.1.0\ = "Microsoft Edge Update Broker Class Factory" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\Elevation\IconReference = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\msedgeupdate.dll,-1004" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeMHT\shell\runas C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ = "ICurrentState" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\MicrosoftEdgeUpdate.exe\AppID = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9F3F5F5D-721A-4B19-9B5D-69F664C1A591}\VersionIndependentProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\open\command\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --single-argument %1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ = "IAppCommand2" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\ProgID\ = "MicrosoftEdgeUpdate.ProcessLauncher.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\version = "version-7d64f40489634ca5" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\VERSIONINDEPENDENTPROGID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgePDF\shell\runas\command\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --do-not-de-elevate --single-argument %1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.htm\OpenWithProgIds\MSEdgeHTM C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EA92A799-267E-4DF5-A6ED-6A7E0684BB8A}\AppID = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ = "Microsoft Edge Update Legacy On Demand" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\ELEVATION C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback\CurVer\ = "MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\VersionIndependentProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass\CurVer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine.1.0\CLSID\ = "{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\ROBLOX-STUDIO\DEFAULTICON C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2468 wrote to memory of 1004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 1004 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 4676 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3752 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2468 wrote to memory of 3912 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe N/A

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\sample.js

C:\Windows\System32\wscript.exe

"C:\Windows\System32\wscript.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe4e56ab58,0x7ffe4e56ab68,0x7ffe4e56ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1676 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2184 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3124 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3248 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4300 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4456 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4480 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4684 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4784 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4956 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4668 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4156 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4880 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4152 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4512 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2876 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2872 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2704 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4852 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

"C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

"C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe"

C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_3AB9B\RobloxStudioInstaller.exe

C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_3AB9B\RobloxStudioInstaller.exe -relaunch

C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe

C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_6DDD4\RobloxStudioInstaller.exe -relaunch

C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjEwNTlCRUUtRjBEMy00QTYwLTgzRTEtNjJGNTQwNjI1Q0IwfSIgdXNlcmlkPSJ7MDEwQ0M2REYtNEJGNy00NjlGLTgwRjctQTNCNERDQkY1RDlDfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InswOUI4RjY5OS1BNTI2LTRERTctQUUwMi1GMDg1RDlDMTc5OEZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjU4ODc1MDEwNzYiIGluc3RhbGxfdGltZV9tcz0iNDQ0Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{21059BEE-F0D3-4A60-83E1-62F540625CB0}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjEwNTlCRUUtRjBEMy00QTYwLTgzRTEtNjJGNTQwNjI1Q0IwfSIgdXNlcmlkPSJ7MDEwQ0M2REYtNEJGNy00NjlGLTgwRjctQTNCNERDQkY1RDlDfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntFNEQwMEQ4Qi04RTAzLTQzREYtODIzNy1CMDMwMTY0NjdFQkV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjU4OTA4MjEwMzAiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU151F.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /healthcheck

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QjNERTJENzQtNzAxMC00MDQxLUFEMzAtQTg2QzExODgwMkE1fSIgdXNlcmlkPSJ7MDEwQ0M2REYtNEJGNy00NjlGLTgwRjctQTNCNERDQkY1RDlDfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsyMTJFNzZCOC0zRjIzLTQwNjUtODAyRC1FNjcwNjRBNzMyOEZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE3MS4zOSIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjI4MDM5MTAyNiIgaW5zdGFsbF90aW1lX21zPSI5NSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{B3DE2D74-7010-4041-AD30-A86C118802A5}" /silent

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5648 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{149839AF-BFC8-4356-B2DC-C6E3E13D3D31}\EDGEMITMP_806E1.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7c33d88c0,0x7ff7c33d88cc,0x7ff7c33d88d8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5648 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1512 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5608 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5856 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5912 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjEwNTlCRUUtRjBEMy00QTYwLTgzRTEtNjJGNTQwNjI1Q0IwfSIgdXNlcmlkPSJ7MDEwQ0M2REYtNEJGNy00NjlGLTgwRjctQTNCNERDQkY1RDlDfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntGQjlDREEwNi1FNUJCLTRBMzQtOUREOC0yMDEyNjk4OTVFQzR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjQuMC4yNDc4LjY3IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1OTIwNTAwODU1IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff692d788c0,0x7ff692d788cc,0x7ff692d788d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QjNERTJENzQtNzAxMC00MDQxLUFEMzAtQTg2QzExODgwMkE1fSIgdXNlcmlkPSJ7MDEwQ0M2REYtNEJGNy00NjlGLTgwRjctQTNCNERDQkY1RDlDfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins4M0Y3Q0UxNi1DM0Y2LTRBQkEtQTBDMS0wNjc2RTM1RkNDREJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjQuMC4yNDc4LjY3IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2Mjg5NjgwNzg1IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjI4OTcwMDgwMSIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjYzMzUwODA5NjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2NzczNjkwODI4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI3MTI0ODIwOTA4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iMzY0IiBkb3dubG9hZGVkPSIxNzI3MjM3NjgiIHRvdGFsPSIxNzI3MjM3NjgiIHBhY2thZ2VfY2FjaGVfcmVzdWx0PSIxIiBpbnN0YWxsX3RpbWVfbXM9IjM1MTA0Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-f0582db71b134926\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4700.4924.18430262404433282745

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x160,0x164,0x168,0x13c,0x19c,0x7ffe46f8ceb8,0x7ffe46f8cec4,0x7ffe46f8ced0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1720,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1944,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1960 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2084,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3456,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3740,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3972,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=3448 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5752 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6248 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6712 --field-trial-handle=1828,i,11019534091825984622,16436679085771323794,131072 /prefetch:8

C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:Jt0sjeGKiin6B8p-08fPrMsfT6W4st5ItOujmABV7H3i99gIBVeLUUtx_Ww3NxKpEPOaqdw5MNQ4U3DkoDVKQgodeXO0BAzWwPt8KRX5d1MT_aj5TltWN4vUXmmfMl2dLJasIQFuHH8H5X4s8TTiehEYo2B-WLgiZNTXoie70nBMj482zAHToN-yTazGKFqwft_ULZse3TeyZxPt638tA7DrIlOUxclzNyOzQyXZsRk+launchtime:1714665556922+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1714665347670006%26placeId%3D8737899170%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3De6e4e59a-752f-411b-9359-dc79e0fb436f%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1714665347670006+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=4776,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2300,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4908,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=752,i,14143712500686855196,7583042177224800860,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4088 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004B8 0x00000000000004C8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{499F713A-605C-4F6D-BD6F-A1B65C130632}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{499F713A-605C-4F6D-BD6F-A1B65C130632}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{D5B231A4-E749-4E3F-98D9-8758874F74C3}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RDVCMjMxQTQtRTc0OS00RTNGLTk4RDktODc1ODg3NEY3NEMzfSIgdXNlcmlkPSJ7MDEwQ0M2REYtNEJGNy00NjlGLTgwRjctQTNCNERDQkY1RDlDfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins0MjNFMTRGNi1FODg3LTQyMjktQUQ5NS03RTk5NEEyMjRDMUN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4NS4yOSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-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-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-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjkyNTY3MjM2NjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48cGluZyByPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0iezU2RUIxOEY4LUIwMDgtNENCRC1CNkQyLThDOTdGRTdFOTA2Mn0iIHZlcnNpb249IjkwLjAuODE4LjY2IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzU4NjIwNjE2MDM2ODIyMCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjEiIGE9Ii0xIiByPSItMSIgYWQ9Ii0xIiByZD0iLTEiLz48L2FwcD48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iMTI0LjAuMjQ3OC42NyIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiB1cGRhdGVfY291bnQ9IjEiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzU5MTM5MTE0Mzk1NDIxMCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjEiIGE9Ii0xIiByPSItMSIgYWQ9Ii0xIiByZD0iLTEiIHBpbmdfZnJlc2huZXNzPSJ7QUNBQjA4ODktRjdCMS00QjQyLUI5QTQtNTE3M0QzMTNDNzEwfSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUA323.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{D5B231A4-E749-4E3F-98D9-8758874F74C3}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4700.4924.14707373078912827720

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x168,0x16c,0x170,0x164,0x140,0x7ffe46f8ceb8,0x7ffe46f8cec4,0x7ffe46f8ced0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1668,i,68884927686967862,14537904449476016444,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1664 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1828,i,68884927686967862,14537904449476016444,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1980 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2176,i,68884927686967862,14537904449476016444,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3600,i,68884927686967862,14537904449476016444,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3964,i,68884927686967862,14537904449476016444,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4652,i,68884927686967862,14537904449476016444,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7RHhPYmpIR2ErblJhMmF0QzN3bytJRXBDNzgrWlllQVVia1hwREMyY2o3VT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIiIGxhbmc9ImVuIiBicmFuZD0iR0dMUyIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjYiIGluc3RhbGxkYXRldGltZT0iMTcxNDE0NjAzNyIgb29iZV9pbnN0YWxsX3RpbWU9IjEzMzU4NjQzOTA2MjQxNzYxNCI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIxMTQwNjgiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyNDk3OTkzNjMxIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C0CED88A-E8EC-43B7-8361-E6FD07A6DD19}\BGAUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{C0CED88A-E8EC-43B7-8361-E6FD07A6DD19}\BGAUpdate.exe" --edgeupdate-client --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NUYwMEMzRDMtMEFBRS00QjlELUI4NTgtNjAxREY5RkU0MTREfSIgdXNlcmlkPSJ7MDEwQ0M2REYtNEJGNy00NjlGLTgwRjctQTNCNERDQkY1RDlDfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins2QzI5RUZBMC03MjVFLTQzQ0UtODJCOS00RjA1NjA1RkQ4OTB9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-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_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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTI2ODE0NzM2NjciIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSI0MjUiIGRvd25sb2FkX3RpbWVfbXM9IjE2NDkzIiBkb3dubG9hZGVkPSIxODA0NDQ0OCIgdG90YWw9IjE4MDQ0NDQ4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSIyNDgiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff67a3b88c0,0x7ff67a3b88cc,0x7ff67a3b88d8

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{35CBAC28-0161-42A3-99C3-E6946415A1BC}\EDGEMITMP_AE315.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff67a3b88c0,0x7ff67a3b88cc,0x7ff67a3b88d8

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe" --msedge --channel=stable --register-package-identity --verbose-logging --system-level

C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff74cd688c0,0x7ff74cd688cc,0x7ff74cd688d8

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k AppReadiness -p -s AppReadiness

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 623, 0, 6230555" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4496,i,68884927686967862,14537904449476016444,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QUFCN0ZCMDItMzIwOS00NEJELUFGNTgtMDBFNTI0RTdBMDY5fSIgdXNlcmlkPSJ7MDEwQ0M2REYtNEJGNy00NjlGLTgwRjctQTNCNERDQkY1RDlDfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntBRDAyQURCQS1EMzAzLTRENDUtODRFNy1CMkJFQ0RFNzRDMzV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyOTk0NTAzODE1IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyOTk0NTYzNjk1IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDI0NTYzNjU5IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDM4ODIzNjgyIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PHBpbmcgYWN0aXZlPSIxIiBhZD0iNjMzMSIgcmQ9IjYzMzEiIHBpbmdfZnJlc2huZXNzPSJ7NTJFQTVCQzItRUJBNy00Q0QzLUEwMjItQUYzNzJFQjc1RUYzfSIvPjwvYXBwPjwvcmVxdWVzdD4

Network

Country Destination Domain Proto
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 4.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
GB 172.217.16.238:443 consent.google.com udp
N/A 224.0.0.251:5353 udp
GB 172.217.16.238:443 consent.google.com tcp
GB 172.217.16.238:443 consent.google.com tcp
GB 142.250.179.234:443 content-autofill.googleapis.com tcp
DE 128.116.123.4:443 apis.roblox.com tcp
DE 128.116.123.4:443 apis.roblox.com tcp
GB 13.224.81.77:443 css.rbxcdn.com tcp
GB 13.224.81.77:443 css.rbxcdn.com tcp
GB 13.224.81.77:443 css.rbxcdn.com tcp
GB 13.224.81.77:443 css.rbxcdn.com tcp
GB 13.224.81.77:443 css.rbxcdn.com tcp
GB 13.224.81.77:443 css.rbxcdn.com tcp
GB 3.162.20.4:443 static.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
FR 128.116.122.4:443 roblox.com tcp
GB 3.162.20.43:443 images.rbxcdn.com tcp
DE 128.116.123.3:443 client-telemetry.roblox.com tcp
DE 128.116.123.4:443 apis.roblox.com tcp
US 8.8.8.8:53 43.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 3.123.116.128.in-addr.arpa udp
US 2.18.190.76:443 apis.rbxcdn.com tcp
GB 13.224.81.77:443 css.rbxcdn.com tcp
DE 128.116.123.4:443 apis.roblox.com udp
DE 128.116.123.3:443 client-telemetry.roblox.com udp
GB 18.172.89.84:443 setup.rbxcdn.com tcp
DE 128.116.123.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:50141 tcp
N/A 127.0.0.1:50146 tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
GB 18.172.89.84:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:50150 tcp
GB 18.172.89.84:443 setup.rbxcdn.com tcp
GB 18.172.89.84:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:50196 tcp
DE 128.116.123.3:443 client-telemetry.roblox.com tcp
DE 128.116.123.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:50203 tcp
DE 128.116.123.3:443 client-telemetry.roblox.com tcp
DE 128.116.123.3:443 client-telemetry.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
GB 18.172.89.84:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:50211 tcp
N/A 127.0.0.1:50216 tcp
N/A 127.0.0.1:50222 tcp
N/A 127.0.0.1:50226 tcp
GB 18.172.89.84:443 setup.rbxcdn.com tcp
GB 18.172.89.84:443 setup.rbxcdn.com tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
GB 23.73.139.43:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
DE 128.116.123.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:50468 tcp
DE 128.116.123.4:443 apis.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
GB 172.217.16.227:443 beacons.gcp.gvt2.com tcp
GB 172.217.16.227:443 beacons.gcp.gvt2.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
DE 128.116.123.4:443 apis.roblox.com udp
US 8.8.8.8:53 86.154.64.172.in-addr.arpa udp
GB 142.250.179.234:443 content-autofill.googleapis.com udp
US 172.64.154.86:443 roblox-api.arkoselabs.com udp
DE 128.116.123.3:443 client-telemetry.roblox.com udp
US 8.8.8.8:53 assetgame.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ncs.roblox.com udp
DE 128.116.123.4:443 ncs.roblox.com udp
DE 128.116.123.4:443 ncs.roblox.com udp
US 8.8.8.8:53 twostepverification.roblox.com udp
GB 142.250.179.234:443 content-autofill.googleapis.com udp
GB 172.217.16.227:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 104.18.33.170:443 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 lms.roblox.com udp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
DE 128.116.123.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 locale.roblox.com udp
US 8.8.8.8:53 thumbnails.roblox.com udp
US 8.8.8.8:53 170.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 chat.roblox.com udp
US 8.8.8.8:53 contacts.roblox.com udp
US 8.8.8.8:53 notifications.roblox.com udp
US 8.8.8.8:53 accountsettings.roblox.com udp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 friends.roblox.com udp
US 8.8.8.8:53 privatemessages.roblox.com udp
US 8.8.8.8:53 trades.roblox.com udp
US 8.8.8.8:53 syd1-128-116-51-3.roblox.com udp
US 8.8.8.8:53 aws-eu-west-2b-lms.rbx.com udp
US 8.8.8.8:53 aws-us-west-1a-lms.rbx.com udp
US 8.8.8.8:53 dfw2-128-116-95-3.roblox.com udp
US 8.8.8.8:53 ams2-128-116-21-3.roblox.com udp
US 8.8.8.8:53 fra4-128-116-44-3.roblox.com udp
US 8.8.8.8:53 silver.roblox.com udp
US 8.8.8.8:53 sea1-128-116-115-3.roblox.com udp
FR 128.116.122.3:443 cdg1-128-116-122-3.roblox.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 128.116.95.3:443 dfw2-128-116-95-3.roblox.com tcp
DE 128.116.44.3:443 fra4-128-116-44-3.roblox.com tcp
US 54.177.223.231:443 aws-us-west-1a-lms.rbx.com tcp
US 128.116.115.3:443 sea1-128-116-115-3.roblox.com tcp
NL 128.116.21.3:443 ams2-128-116-21-3.roblox.com tcp
GB 35.178.130.94:443 aws-eu-west-2b-lms.rbx.com tcp
GB 128.116.119.3:443 silver.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
GB 23.73.139.64:443 tr.rbxcdn.com tcp
GB 142.250.179.234:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 3.21.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.44.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.95.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.116.116.128.in-addr.arpa udp
US 8.8.8.8:53 231.223.177.54.in-addr.arpa udp
US 8.8.8.8:53 3.51.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.115.116.128.in-addr.arpa udp
US 8.8.8.8:53 64.139.73.23.in-addr.arpa udp
GB 13.224.81.50:443 t0.rbxcdn.com tcp
GB 13.224.81.107:443 t7.rbxcdn.com tcp
US 8.8.8.8:53 50.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 107.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 games.roblox.com udp
N/A 127.0.0.1:51814 tcp
DE 128.116.123.3:443 realtime-signalr.roblox.com tcp
DE 128.116.123.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51947 tcp
N/A 127.0.0.1:51965 tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
DE 128.116.123.4:443 ephemeralcounters.api.roblox.com tcp
DE 128.116.123.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.123.4:443 apis.roblox.com tcp
N/A 127.0.0.1:51982 tcp
N/A 127.0.0.1:51985 tcp
N/A 127.0.0.1:51989 tcp
N/A 127.0.0.1:51993 tcp
DE 128.116.123.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.123.4:443 apis.roblox.com tcp
DE 128.116.123.4:443 apis.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
GB 13.224.81.14:443 css.rbxcdn.com tcp
GB 13.224.81.14:443 css.rbxcdn.com tcp
GB 13.224.81.14:443 css.rbxcdn.com tcp
GB 13.224.81.14:443 css.rbxcdn.com tcp
GB 13.224.81.14:443 css.rbxcdn.com tcp
GB 13.224.81.14:443 css.rbxcdn.com tcp
US 205.234.175.102:443 static.rbxcdn.com tcp
US 205.234.175.102:443 static.rbxcdn.com tcp
GB 3.162.20.43:443 images.rbxcdn.com tcp
GB 13.224.81.33:443 js.rbxcdn.com tcp
GB 13.224.81.33:443 js.rbxcdn.com tcp
GB 13.224.81.33:443 js.rbxcdn.com tcp
GB 13.224.81.33:443 js.rbxcdn.com tcp
GB 13.224.81.33:443 js.rbxcdn.com tcp
GB 13.224.81.33:443 js.rbxcdn.com tcp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
GB 13.224.81.14:443 css.rbxcdn.com tcp
FR 128.116.122.4:443 roblox.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
DE 128.116.123.4:443 metrics.roblox.com udp
DE 128.116.123.4:443 metrics.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 2.18.190.83:443 apis.rbxcdn.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com udp
DE 128.116.123.4:443 metrics.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 14.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 102.175.234.205.in-addr.arpa udp
US 8.8.8.8:53 33.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 83.190.18.2.in-addr.arpa udp
DE 128.116.123.3:443 ecsv2.roblox.com tcp
DE 128.116.123.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
DE 128.116.123.3:443 ecsv2.roblox.com tcp
DE 128.116.123.3:443 ecsv2.roblox.com tcp
GB 18.165.160.20:443 js.stripe.com tcp
US 8.8.8.8:53 20.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 followings.roblox.com udp
FR 128.116.122.4:443 followings.roblox.com tcp
US 8.8.8.8:53 aws-us-east-2b-lms.rbx.com udp
US 8.8.8.8:53 c0.rbxcdn.com udp
US 8.8.8.8:53 atl1-128-116-99-3.roblox.com udp
US 8.8.8.8:53 roblox-poc.global.ssl.fastly.net udp
FR 128.116.122.4:443 voice.roblox.com tcp
GB 13.224.81.10:443 c0.rbxcdn.com tcp
US 52.14.203.156:443 aws-us-east-2b-lms.rbx.com tcp
US 8.8.8.8:53 aws-us-east-2c-lms.rbx.com udp
US 128.116.99.3:443 atl1-128-116-99-3.roblox.com tcp
US 8.8.8.8:53 c0ak.rbxcdn.com udp
US 8.8.8.8:53 bom1-128-116-104-4.roblox.com udp
US 8.8.8.8:53 badges.roblox.com udp
US 151.101.1.194:443 roblox-poc.global.ssl.fastly.net tcp
FR 128.116.122.4:443 badges.roblox.com tcp
US 2.18.190.80:443 c0ak.rbxcdn.com tcp
FR 128.116.122.4:443 badges.roblox.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
US 3.134.228.184:443 aws-us-east-2c-lms.rbx.com tcp
US 3.134.228.184:443 aws-us-east-2c-lms.rbx.com tcp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
FR 128.116.122.4:443 badges.roblox.com udp
FR 128.116.122.4:443 badges.roblox.com udp
FR 128.116.122.4:443 badges.roblox.com udp
US 151.101.0.176:443 m.stripe.network tcp
US 8.8.8.8:53 156.203.14.52.in-addr.arpa udp
US 8.8.8.8:53 3.124.116.128.in-addr.arpa udp
US 8.8.8.8:53 184.228.134.3.in-addr.arpa udp
US 8.8.8.8:53 3.50.116.128.in-addr.arpa udp
US 8.8.8.8:53 176.0.101.151.in-addr.arpa udp
US 52.33.51.5:443 m.stripe.com tcp
DE 128.116.123.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:52879 tcp
US 8.8.4.4:443 dns.google udp
US 204.79.197.239:443 tcp
GB 23.73.139.43:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
US 128.116.99.3:443 atl1-128-116-99-3.roblox.com tcp
US 52.14.203.156:443 aws-us-east-2b-lms.rbx.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
GB 13.224.81.95:443 css.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
US 2.18.190.80:443 c0ak.rbxcdn.com tcp
US 151.101.1.194:443 roblox-poc.global.ssl.fastly.net tcp
GB 13.224.81.10:443 c0.rbxcdn.com tcp
GB 3.162.20.32:443 static.rbxcdn.com tcp
US 8.8.8.8:53 32.20.162.3.in-addr.arpa udp
US 52.14.203.156:443 aws-us-east-2b-lms.rbx.com tcp
US 128.116.99.3:443 atl1-128-116-99-3.roblox.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
US 3.134.228.184:443 aws-us-east-2c-lms.rbx.com tcp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
FR 128.116.122.3:443 cdg1-128-116-122-3.roblox.com udp
FR 128.116.122.3:443 cdg1-128-116-122-3.roblox.com udp
US 8.8.4.4:443 dns.google udp
DE 128.116.123.4:443 auth.roblox.com udp
FR 128.116.122.4:443 badges.roblox.com tcp
FR 128.116.122.4:443 badges.roblox.com tcp
GB 3.162.20.43:443 images.rbxcdn.com tcp
FR 128.116.122.4:443 badges.roblox.com udp
FR 128.116.122.4:443 badges.roblox.com udp
FR 128.116.122.4:443 badges.roblox.com udp
DE 128.116.123.4:443 auth.roblox.com udp
FR 128.116.122.4:443 badges.roblox.com tcp
US 205.234.175.102:443 static.rbxcdn.com tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 204.79.197.239:443 tcp
N/A 127.0.0.1:53647 tcp
DE 128.116.123.4:443 auth.roblox.com tcp
N/A 127.0.0.1:53650 tcp
US 8.8.8.8:53 usermoderation.roblox.com udp
FR 128.116.122.4:443 usermoderation.roblox.com tcp
DE 128.116.123.4:443 auth.roblox.com tcp
DE 128.116.123.4:443 auth.roblox.com tcp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
DE 128.116.123.4:443 auth.roblox.com tcp
DE 128.116.123.4:443 auth.roblox.com tcp
DE 128.116.123.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:53843 tcp
N/A 127.0.0.1:55074 tcp
N/A 127.0.0.1:55076 tcp
N/A 127.0.0.1:55078 tcp
US 8.8.8.8:53 develop.roblox.com udp
FR 128.116.122.4:443 develop.roblox.com tcp
FR 128.116.122.4:443 develop.roblox.com tcp
FR 128.116.122.4:443 develop.roblox.com tcp
N/A 127.0.0.1:55091 tcp
DE 128.116.123.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 assetgame.roblox.com udp
FR 128.116.122.4:443 assetgame.roblox.com tcp
US 8.8.8.8:53 clientsettings.roblox.com udp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
FR 128.116.122.4:443 www.roblox.com tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 t0.rbxcdn.com udp
GB 13.224.81.50:443 t0.rbxcdn.com tcp
US 8.8.8.8:53 27.139.73.23.in-addr.arpa udp
N/A 127.0.0.1:55094 tcp
N/A 127.0.0.1:55097 tcp
N/A 127.0.0.1:55211 tcp
N/A 127.0.0.1:55253 tcp
N/A 127.0.0.1:55255 tcp
N/A 127.0.0.1:55263 tcp
N/A 127.0.0.1:55268 tcp
N/A 127.0.0.1:55288 tcp
N/A 127.0.0.1:55295 tcp
N/A 127.0.0.1:55322 tcp
N/A 127.0.0.1:55339 tcp
N/A 127.0.0.1:55341 tcp
N/A 127.0.0.1:55343 tcp
N/A 127.0.0.1:55345 tcp
N/A 127.0.0.1:55523 tcp
US 8.8.8.8:53 assetdelivery.roblox.com udp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
US 8.8.8.8:53 c1.rbxcdn.com udp
GB 18.172.89.41:443 c1.rbxcdn.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:55543 tcp
N/A 127.0.0.1:55546 tcp
US 8.8.8.8:53 economy.roblox.com udp
DE 128.116.123.4:443 economy.roblox.com udp
DE 128.116.123.4:443 economy.roblox.com tcp
DE 128.116.123.4:443 economy.roblox.com tcp
US 8.8.8.8:53 c0.rbxcdn.com udp
GB 13.224.81.89:443 c0.rbxcdn.com tcp
US 8.8.8.8:53 t3.rbxcdn.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 8.8.8.8:53 c2.rbxcdn.com udp
GB 13.224.81.78:443 t3.rbxcdn.com tcp
US 8.8.8.8:53 c3.rbxcdn.com udp
GB 13.224.81.32:443 t7.rbxcdn.com tcp
GB 13.224.81.32:443 t7.rbxcdn.com tcp
US 8.8.8.8:53 t6.rbxcdn.com udp
GB 18.165.160.87:443 c2.rbxcdn.com tcp
GB 18.172.89.13:443 c3.rbxcdn.com tcp
US 8.8.8.8:53 41.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 89.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 78.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 32.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 87.160.165.18.in-addr.arpa udp
GB 13.224.81.22:443 t6.rbxcdn.com tcp
GB 13.224.81.22:443 t6.rbxcdn.com tcp
US 8.8.8.8:53 13.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 22.81.224.13.in-addr.arpa udp
N/A 127.0.0.1:55549 tcp
N/A 127.0.0.1:55572 tcp
N/A 127.0.0.1:55576 tcp
N/A 127.0.0.1:55578 tcp
N/A 127.0.0.1:55580 tcp
N/A 127.0.0.1:55582 tcp
N/A 127.0.0.1:55584 tcp
N/A 127.0.0.1:55613 tcp
N/A 127.0.0.1:55615 tcp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
US 8.8.8.8:53 inventory.roblox.com udp
FR 128.116.122.4:443 inventory.roblox.com tcp
FR 128.116.122.4:443 inventory.roblox.com tcp
FR 128.116.122.4:443 inventory.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 lax2-128-116-116-3.roblox.com udp
US 8.8.8.8:53 aws-us-east-2b-lms.rbx.com udp
FR 128.116.122.4:443 www.roblox.com udp
GB 13.224.81.3:443 js.rbxcdn.com tcp
US 8.8.8.8:53 c0ak.rbxcdn.com udp
GB 13.224.81.95:443 css.rbxcdn.com tcp
US 8.8.8.8:53 roblox-poc.global.ssl.fastly.net udp
GB 3.162.20.13:443 static.rbxcdn.com tcp
US 8.8.8.8:53 c0.rbxcdn.com udp
US 2.18.190.69:443 c0ak.rbxcdn.com tcp
GB 13.224.81.10:443 c0.rbxcdn.com tcp
US 151.101.1.194:443 roblox-poc.global.ssl.fastly.net tcp
US 8.8.8.8:53 13.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 69.190.18.2.in-addr.arpa udp
N/A 127.0.0.1:55680 tcp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 172.64.154.86:443 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 tr.rbxcdn.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 13.224.81.107:443 t7.rbxcdn.com tcp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.123.4:443 apis.roblox.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 2.18.190.83:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 c0aws.rbxcdn.com udp
US 8.8.8.8:53 aws-us-west-2c-lms.rbx.com udp
US 128.116.115.3:443 sea1-128-116-115-3.roblox.com tcp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
GB 13.224.81.10:443 c0aws.rbxcdn.com tcp
US 35.82.238.102:443 aws-us-west-2c-lms.rbx.com tcp
GB 216.58.212.202:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 nrt1-128-116-120-3.roblox.com udp
US 8.8.8.8:53 pulsar.roblox.com udp
FR 128.116.122.4:443 avatar.roblox.com tcp
FR 128.116.122.4:443 avatar.roblox.com tcp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
PL 128.116.124.3:443 pulsar.roblox.com tcp
FR 128.116.122.4:443 avatar.roblox.com tcp
FR 128.116.122.4:443 avatar.roblox.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
US 52.26.51.94:443 aws-us-west-2a-lms.rbx.com tcp
GB 128.116.119.3:443 lhr2-128-116-119-3.roblox.com tcp
US 50.19.116.254:443 aws-us-east-1b-lms.rbx.com tcp
US 35.82.238.102:443 aws-us-west-2c-lms.rbx.com tcp
FR 128.116.122.4:443 avatar.roblox.com tcp
FR 128.116.122.4:443 avatar.roblox.com tcp
FR 128.116.122.4:443 avatar.roblox.com udp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
US 52.26.51.94:443 aws-us-west-2a-lms.rbx.com tcp
US 50.19.116.254:443 aws-us-east-1b-lms.rbx.com tcp
US 8.8.8.8:53 102.238.82.35.in-addr.arpa udp
US 8.8.8.8:53 254.116.19.50.in-addr.arpa udp
US 8.8.8.8:53 3.120.116.128.in-addr.arpa udp
US 8.8.8.8:53 94.51.26.52.in-addr.arpa udp
N/A 127.0.0.1:55692 tcp
N/A 127.0.0.1:55694 tcp
N/A 127.0.0.1:55696 tcp
GB 3.162.20.91:443 images.rbxcdn.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 13.67.191.143:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
US 199.232.210.172:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 143.191.67.13.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 catalog.roblox.com tcp
US 8.8.8.8:53 presence.roblox.com udp
FR 128.116.122.4:443 presence.roblox.com udp
FR 128.116.122.4:443 presence.roblox.com tcp
US 8.8.8.8:53 games.roblox.com udp
FR 128.116.122.4:443 games.roblox.com udp
FR 128.116.122.4:443 games.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
N/A 127.0.0.1:56070 tcp
N/A 127.0.0.1:56078 tcp
US 8.8.8.8:53 groups.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
US 8.8.8.8:53 avatar.roblox.com udp
FR 128.116.122.4:443 avatar.roblox.com tcp
FR 128.116.122.4:443 avatar.roblox.com tcp
FR 128.116.122.4:443 avatar.roblox.com tcp
FR 128.116.122.4:443 avatar.roblox.com tcp
US 8.8.8.8:53 accountsettings.roblox.com udp
FR 128.116.122.4:443 accountsettings.roblox.com tcp
FR 128.116.122.4:443 accountsettings.roblox.com tcp
FR 128.116.122.4:443 accountsettings.roblox.com tcp
FR 128.116.122.4:443 accountsettings.roblox.com tcp
FR 128.116.122.4:443 accountsettings.roblox.com tcp
FR 128.116.122.4:443 accountsettings.roblox.com tcp
FR 128.116.122.4:443 accountsettings.roblox.com tcp
FR 128.116.122.4:443 accountsettings.roblox.com tcp
US 8.8.8.8:53 locale.roblox.com udp
US 8.8.8.8:53 c4.rbxcdn.com udp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
US 8.8.8.8:53 c3.rbxcdn.com udp
US 8.8.8.8:53 c0.rbxcdn.com udp
GB 18.165.160.46:443 c4.rbxcdn.com tcp
GB 18.165.160.46:443 c4.rbxcdn.com tcp
US 8.8.8.8:53 c5.rbxcdn.com udp
US 8.8.8.8:53 c6.rbxcdn.com udp
GB 13.224.81.23:443 c0.rbxcdn.com tcp
GB 13.224.81.23:443 c0.rbxcdn.com tcp
GB 18.172.89.55:443 c6.rbxcdn.com tcp
GB 13.224.81.23:443 c0.rbxcdn.com tcp
GB 18.172.89.55:443 c6.rbxcdn.com tcp
GB 18.172.89.100:443 c6.rbxcdn.com tcp
GB 18.172.89.22:443 c5.rbxcdn.com tcp
GB 18.165.160.46:443 c4.rbxcdn.com tcp
GB 18.172.89.55:443 c6.rbxcdn.com tcp
GB 18.172.89.22:443 c5.rbxcdn.com tcp
US 8.8.8.8:53 c2.rbxcdn.com udp
GB 18.172.89.22:443 c5.rbxcdn.com tcp
N/A 127.0.0.1:52455 udp
N/A 127.0.0.1:56099 tcp
N/A 127.0.0.1:56101 tcp
N/A 127.0.0.1:56112 tcp
N/A 127.0.0.1:56117 tcp
N/A 127.0.0.1:56120 tcp
N/A 127.0.0.1:56123 tcp
N/A 127.0.0.1:56146 tcp
N/A 127.0.0.1:56148 tcp
N/A 127.0.0.1:56151 tcp
N/A 127.0.0.1:56162 tcp
N/A 127.0.0.1:56164 tcp
N/A 127.0.0.1:56166 tcp
N/A 127.0.0.1:56168 tcp
N/A 127.0.0.1:56170 tcp
N/A 127.0.0.1:56172 tcp
N/A 127.0.0.1:56174 tcp
N/A 127.0.0.1:56176 tcp
N/A 127.0.0.1:56254 tcp
GB 18.165.160.87:443 c2.rbxcdn.com tcp
US 8.8.8.8:53 c7.rbxcdn.com udp
GB 18.165.160.87:443 c2.rbxcdn.com tcp
GB 18.172.89.57:443 c7.rbxcdn.com tcp
US 8.8.8.8:53 46.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 23.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 55.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 100.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 22.89.172.18.in-addr.arpa udp
FR 128.116.122.4:443 gameinternationalization.roblox.com tcp
FR 128.116.122.4:443 gameinternationalization.roblox.com tcp
FR 128.116.122.4:443 gameinternationalization.roblox.com tcp
FR 128.116.122.4:443 gameinternationalization.roblox.com tcp
FR 128.116.122.4:443 gameinternationalization.roblox.com tcp
FR 128.116.122.4:443 gameinternationalization.roblox.com tcp
GB 18.172.89.116:443 c1.rbxcdn.com tcp
GB 18.172.89.116:443 c1.rbxcdn.com tcp
GB 18.172.89.116:443 c1.rbxcdn.com tcp
GB 18.172.89.57:443 c7.rbxcdn.com tcp
N/A 127.0.0.1:56290 tcp
US 8.8.8.8:53 57.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 116.89.172.18.in-addr.arpa udp
FR 128.116.122.4:443 economy.roblox.com tcp
N/A 127.0.0.1:56326 tcp
N/A 127.0.0.1:56330 tcp
N/A 127.0.0.1:56407 tcp
N/A 127.0.0.1:56421 tcp
N/A 127.0.0.1:56431 tcp
N/A 127.0.0.1:56433 tcp
US 8.8.8.8:53 t4.rbxcdn.com udp
US 8.8.8.8:53 t1.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
GB 18.172.89.34:443 t1.rbxcdn.com tcp
GB 13.224.81.32:443 t4.rbxcdn.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
GB 13.224.81.19:443 t6.rbxcdn.com tcp
US 8.8.8.8:53 19.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 34.89.172.18.in-addr.arpa udp
N/A 127.0.0.1:56490 tcp
N/A 127.0.0.1:56708 tcp
N/A 127.0.0.1:56718 tcp
N/A 127.0.0.1:56730 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 19.139.73.23.in-addr.arpa udp
N/A 127.0.0.1:56941 tcp
N/A 127.0.0.1:57011 tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:57046 tcp
N/A 127.0.0.1:57048 tcp
N/A 127.0.0.1:57050 tcp
N/A 127.0.0.1:57052 tcp
FR 128.116.122.3:443 ecsv2.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
N/A 127.0.0.1:57113 tcp
N/A 127.0.0.1:57115 tcp
FR 128.116.122.3:443 ecsv2.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
N/A 127.0.0.1:57131 tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
N/A 127.0.0.1:58254 tcp
N/A 127.0.0.1:58416 tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
US 8.8.8.8:53 t0.rbxcdn.com udp
GB 13.224.81.100:443 t0.rbxcdn.com tcp
US 8.8.8.8:53 100.81.224.13.in-addr.arpa udp
N/A 127.0.0.1:58576 tcp
N/A 127.0.0.1:58582 tcp
N/A 127.0.0.1:58754 tcp
N/A 127.0.0.1:58796 tcp
N/A 127.0.0.1:58798 tcp
N/A 127.0.0.1:58800 tcp
N/A 127.0.0.1:58802 tcp
N/A 127.0.0.1:58804 tcp
N/A 127.0.0.1:58806 tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
GB 23.73.139.27:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
FR 128.116.122.4:443 www.roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
FR 128.116.122.4:443 www.roblox.com udp
FR 128.116.122.4:443 www.roblox.com tcp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
FR 128.116.122.4:443 www.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 2.18.190.76:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 auth.roblox.com udp
FR 128.116.122.4:443 auth.roblox.com udp
FR 128.116.122.4:443 auth.roblox.com tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
GB 217.20.56.36:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 36.56.20.217.in-addr.arpa udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 204.79.197.239:443 tcp
FR 128.116.122.4:443 auth.roblox.com udp
US 8.8.8.8:53 thumbnails.roblox.com udp
FR 128.116.122.4:443 thumbnails.roblox.com udp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 67.139.73.23.in-addr.arpa udp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
FR 128.116.122.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:59436 tcp
US 8.8.8.8:53 presence.roblox.com udp
FR 128.116.122.4:443 presence.roblox.com udp
FR 128.116.122.4:443 presence.roblox.com tcp
FR 128.116.122.4:443 presence.roblox.com udp
FR 128.116.122.4:443 presence.roblox.com udp
US 8.8.8.8:53 games.roblox.com udp
FR 128.116.122.4:443 games.roblox.com udp
FR 128.116.122.4:443 games.roblox.com udp
FR 128.116.122.4:443 games.roblox.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 23.73.139.57:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 57.139.73.23.in-addr.arpa udp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:59780 tcp

Files

C:\Users\Admin\Desktop\RepairRead.lock

MD5 047d7d4545db3469148dea4deee6c3cc
SHA1 febec40118852db2685ef8c070885dbc6580d2ba
SHA256 964620f204be00f7d28f1b22b1180d6655717f8881cce5ef39d7389cd7e87d3a
SHA512 df568ca8bc541a29d16f187cf29b2e4ca336edd884328f5b56112e634af77f6174fd866a14bb33969bebabfaca15703ac384fdd483e7fb58c4a4c3e1a059dbcb

C:\Users\Admin\Desktop\SubmitSearch.mpg

MD5 804900f5d430cc3d947416321b4d8dae
SHA1 2b622b0766bf7bfb980af308544a30e4d32c1a0a
SHA256 57fa62c890a61bd2c91d705718a680a7f3b60887b65161da89e0068bdbd877b8
SHA512 89ebdb7237b566d72cd42697cc422d47090a29ac6fbfc032a8636056a67c053d3032805525e5cd15347d6751e47b7b4fcc473336c483f38887b787995b67187e

C:\Users\Admin\Desktop\SelectExport.temp

MD5 3d016b7bdfc55b9ced921ad9ac5d8f27
SHA1 0907f4b7f94514d3c6f8ed2bfb93ffb566dc1e40
SHA256 cde30148e5caaa883dd8872804ce3b4eb87f210302984cfd19b6a0d5a07a7d40
SHA512 34700307b132eb06293a32f4fbd7068fd49be6fd1315fa47d6fcdb1530f76ffec5ed10cbdb61d2267c4d38235340817d411520e46ef97c6d95b7800d727da26e

C:\Users\Admin\Desktop\SearchExport.m3u

MD5 675972c44d554bd8a637f3389f8ec0a8
SHA1 8d1110c35e1b88eed876bef9f986767fe674c4ff
SHA256 9f8efea7568810b5e773d5ad53f0a45c8dd6ebff1e5793a6f1a8d69a951851cc
SHA512 1a515440476443e551d9784aae921be33b2c834f8cc6e0180cc874d392295dc7ac13965a5a9424aaa845593d2a437adfad95ccf7fbe4711f902fd4b83f9da98b

C:\Users\Admin\Desktop\ResumeUninstall.xsl

MD5 9678fd845b668d2a2ab3967c44f9cf74
SHA1 3a29bc718346f4fc0ed89a77b83fc400c9026eb9
SHA256 f28ab93505be99a9cf43c79c57835e18d0e388866e278ee9eab8290aaf56a677
SHA512 564c890850f49105275e44d5e7866f89d9b616e35ab0f738726f25cfb9125845f70c2ccb0a03d5e9cfe99631586b472f62ec864a91c92d45d4738a7447f50ae7

C:\Users\Admin\Desktop\SyncUnpublish.cmd

MD5 e75b67e840408ef9ee45aa14b90f758c
SHA1 306efdfbb8f1c6d107e3ed913357ab87730dd25c
SHA256 26ce728c0d9cfd8218ef0ab80a0424698f089a5979f556238a40b8a92d6d2e54
SHA512 d7a52772d93f025a61d24efa064bc00d4372537dfa0bda2093943440b2e1fea08236613af27cb3b1d87f27f41b319ae34360ee6c0d5e6789a3a46aa056219e0e

C:\Users\Admin\Desktop\UnlockResize.rm

MD5 1eb60f65a42e7c71cb55e1444a64d0b9
SHA1 1d5e3e76a3f900317370e3cd29e950d046e6bdd2
SHA256 5e741904360b9ba195e44d5a0f44505c8ef6958f7279197827a5261c68d67249
SHA512 bb763d0f064a21b6da8ba9ed65118e70e54d601481714a9143279b76c0c014f10c87376a50812556599a3da43ee237b170fdb7b1699c0383d3e3a726b55213d5

C:\Users\Admin\Desktop\WatchReceive.wpl

MD5 d48edafd83c6e09e26a7a1fa26b47ab5
SHA1 8efa98506daf2b8253453e63b8f5ac8e2c84b327
SHA256 106808774d22f626c9c43aab11d5e7aa57d112a5099ddc4b198e6181fc766366
SHA512 b114532bb1c125690c94fc416f393e121e546fc2871d41334fa0077a781b53fe16217dab11cc5e55f96f01ce870a95a3cf5cb4417f234a607a6b242efcdd4d00

C:\Users\Admin\Desktop\CheckpointEdit.jpg

MD5 fb8d1d764fc0d440903b00f64f80bfe5
SHA1 c40a26b1e0e0bf2d098e98f3f34f74e413d7df10
SHA256 470727bceb9cd5e14aa60d510aa12c40519c6d4e3230609e479549f8945946de
SHA512 87b3e3706bc2a85a9381a077f10941ab5028fc9c63210a9a24f27ba9337d43e3f318c16ac7c166b247c0d992a047a33c718f59a49022a268f7270b1ebba00912

C:\Users\Admin\Desktop\CheckpointDismount.tiff

MD5 771ab5f32d5b46c72303bba9bc22a9cd
SHA1 5068657c4197c2118ef4fa2ccca87dd774024dda
SHA256 541b45e5407dc5ba5ad2d0a7f14052c0bebd5fe42d9ad77e93cc7a664d0f3605
SHA512 9a7aacfd642b295e4543c8b54f4e963444a6276e1355262ac3c1aa25e5f162c3b21726f0c41c5e37d31865db379703787c0eae2e43591d1c7b06506de572f37b

C:\Users\Admin\Desktop\ApproveTrace.M2V

MD5 e331f2796f37ce70d2e6469bd1f49869
SHA1 fdb61693b01c7b17acd75009d6590e84df7d89fa
SHA256 9f1c4e677896683627a05cdd796b0a319d963013f787f9e0595677df93e3a54f
SHA512 3a79779a95a76559b32f08e96b4e08e35c622f5f57acfccb634a77439fcca10a33d99d963ba7c890216e3a1eb1f69d23b8934e291b403295a2de58fff7bd38df

C:\Users\Admin\Desktop\CheckpointRegister.fon

MD5 d9cc963297e4079fffb20bc7493990a3
SHA1 be841148903fc21ba8ff935005f2c8c75b42536d
SHA256 4ebb59f75e17fdd73863de4755a2ad969a2af6150854fe234e5e2130adacc247
SHA512 c7c7cf2f2388c410a2e9970cd7e3bb788692e3b5902c5a25a9f89063c67f531aff5b627f87825deca2e20aa44af72f1ede8fe25c07a2ebd99b83df322709680a

C:\Users\Admin\Desktop\CheckpointStop.htm

MD5 621eddab5d4d216209247e077ed60d42
SHA1 3a2243cdc2f8d8156581644ee21f9fae22a1cf36
SHA256 c27f0ad71a2a97695574fc3f90dbc838d758b7148d0f82357abc51ddf607735a
SHA512 e7cbfed65ae816e77053b158a4b5c7a698b2507bc956fd883cfd42a7cda76424d3a7a5481558d195ea320f4d76e9deaae2dc91e894bed38d6fccb685fcfdda09

C:\Users\Admin\Desktop\ConnectTrace.dll

MD5 695fa75a5eae0b551cf3de2b9c2ebebd
SHA1 5542ae018433d5b001d320ac7bee0d67bd89ec7e
SHA256 7657dc4e6bf21646b3cfd748f3d435149bff50850d2535cb49c2e8f1e4002e5e
SHA512 66e23c89f0626414764b4a286949575f44638ef85e242850d79714b767cdbd5e3bcc03dc42b31ffb874b69806c94bafe95931990bdbb7aa951ad06395a475120

C:\Users\Admin\Desktop\GetLock.mpeg

MD5 d3d1ddc304a48a3ad93f21548f4ae336
SHA1 1b4198c546418378f0e222f7ef1e0c2480fc29f6
SHA256 36b3bca30c6fce0ac9f178e0fa94f6273200b167c4d2938ecc7f1ea532481ae7
SHA512 46303e073817daaef5f65bd3a1c65b3eff15a5e1dfb3f72b543a6efee0eeefc311feabc298aa30972bb2b797a5febc0e74829abea8fa3365789e6beb8064e6bf

C:\Users\Admin\Desktop\ExpandMerge.7z

MD5 69dc3c072e160b2326957d27a496a88e
SHA1 7a8935f720eee404fcccc7f5bf3944470f08a813
SHA256 3f45744d0d1d820d5b2da936860354e3334379e6b2b79901a8d39347769ea3a6
SHA512 259b3d29870ac1b09c073254f16e211339118a5b3e5b66ec706795f431d28dd2b7e7db2dadc21e6eae3ce8bfbf5bc2a4b1efd84836ac4efd9cf71072c151b62d

C:\Users\Admin\Desktop\DenyOpen.docm

MD5 f11f658bf715509677fbbee42a883e66
SHA1 1f6e1be3feb7941f623e216e5becf0e7a58110d7
SHA256 7cbf5f6811a86029d696d3eb91993d13ed6e46a4c0d977b91d34e66875bfdf68
SHA512 a99a48d7edcb9bf554bc3ccd0870e851d868faf0221aaae20a4344d5e5e738c0ca5858919da4fe4453afe5289f612fe5fbfc23390f4f45eaec747c58376f059b

C:\Users\Admin\Desktop\GroupRegister.vb

MD5 b6b2a9d3817e3372eca791c8c1461830
SHA1 de78dc656f5918b3103ddf93bcd4e2a2e52b57f7
SHA256 724cc7520d1fc113a248cf957403b8c21ca56517cb352ec23c41edaf173c0e42
SHA512 18598f3ab40b2e732b53727ac796ec21fadd8add0748f71939ecb581967724d0d974df3bac8446f8b093693bb64f73d21bdb4b3e3662ed2716c86a8b8129f2f4

C:\Users\Admin\Desktop\HideExport.htm

MD5 b820eeb750a95203cf97990f1e652e0b
SHA1 30312e42809f9a6b7c168534bd8939888fe4617e
SHA256 87f1dfb17d8bcb059f79e04c423247fdf6f2c4e28b615cbad3f9c77a4960e9a4
SHA512 edee88a6417fb36f0b8f287f03866963c83ebc24a120a050506145e87862c83093668beb910a2136bcd038c1ef5eda130ad2a9da081c861bfdf7415bde843c44

C:\Users\Admin\Desktop\ImportMeasure.fon

MD5 61a33cfefd23bc9e1447a2b179cef575
SHA1 b5e72fec1dd3b4c751c976a79e04c8203963e5a5
SHA256 29cfece467eaf37d57ab59447ab9fdf36616846d986e7b580cf9a0d6cab85da4
SHA512 358bdc4d142f6dc5658c1c70ef4e9398a4076d2ae95525710ec0d165152c41dc3832a84b9e996239ef159a016696961136eb51b7068d2d86b6110c6c45a86154

C:\Users\Admin\Desktop\OutTest.clr

MD5 a3e32fc589fc6c3a3d2fe18a38ac7e81
SHA1 523a947f673208111d395df034e8c743d3a6fc1b
SHA256 3e058f8113a50f01be61ed93100bb1f258ef071c1bbc33ab90c75f67fa3c16f9
SHA512 48443195e82a568fad4f5801bdb3383ab59dfb0470798b2760fbd052320c9f0425e66ff6c21395bf35f287103951652db7c87a8faa468d9025d7abdcb2a924ca

C:\Users\Admin\Desktop\InitializeShow.cr2

MD5 93c930c7bb24a85d1005908d6f61fe2a
SHA1 1f08d61135b6ce6376198c0c605661ce14f4a49d
SHA256 b3a27081d032228a77de0dea042c1793062617b279d52ba598931c9e223c248d
SHA512 308f9f85127f8d698bc25e0b8c891eca833f68b5c5d62197bea8d975137df1d580fc9543d967538ea89be2f3c5e7959b43d9cd547fc98b3906ef360cbdee111e

\??\pipe\crashpad_2468_DXJQQIJYSGCYAAVJ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 c3de1d5be34b621b678cae8bfe681600
SHA1 5e2601cc707f7e55e33da0f2a0ad1e91de650719
SHA256 7d3c743d65356974e7693f58882db2be1e3d0ca41d5104d18648dac082125d14
SHA512 4c8af41f8af2c7408d52a36657b593c165ad0042cceb51267166497a2d1a7d4c1f5278fda140e95bcce83e9623d48b6428d9835ea63d34282218c3d49dc7084f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 97f2a5e7d0c258577ea5cf1fbfac564c
SHA1 c6471742720f3601e396fe8654620f2b2446f746
SHA256 7e14fce91026710be766aff7531e751cf8e6f301e0e46ef550a733f78cd48ca5
SHA512 01e1db91d0bf1f45d853781f474ce466d6913dca1c03893c890ba77298fcbae78e41cb9cdfd840dc70995cb23ecb7418a9a512d07d3c954877dca91bf86aba9c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 08a465920bcb699ef32b3b0430a9ab9e
SHA1 5668cdeb3582f0ccf2855b913f93508e66162b52
SHA256 fd2d2eb87ce9867f25fe3c6fe264118a821e06b32b5be583cdb5a092510b2ce2
SHA512 c09828e743ebc57f63e06b1417edf989b7c9054b09d7b73e16a2fb3f10da43f968e868efb4bc44504f8dba69d77b74e43262cd7178aa531a0011b960513968ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 3b397de157ff73acfd0a321eb7ee1da8
SHA1 0d5f1d2fade4b2198b28655c1c72d40d496ad89b
SHA256 4363588693833288d4f01f00286edd1cd1d5b47b4803945aba59786dd5a47668
SHA512 45b98096f89e3e943be9f6f9bef48614921cd03dca8f92136eef37f529ae5250ddbfdd0bfcbea5efbe5c07813022089fc9cba4a91b0d513344dd8cd09fe087af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f6e70bbd3a4b6c2f85223f66bf019973
SHA1 4f7a7673575f744a4ef5b312a3056b00828b3dd0
SHA256 a007fc2af0ec9e8e4f7818f7683a43c8958510ddf3c6c5c049b1d9353cd976dc
SHA512 7445880204a2390b892b0140be170b930ba8719cf838a49a69673e0640672cb8ce219a0414d714231c3ff596e801371c067cfd9505add82ef75b2696edeb9955

C:\Users\Admin\Downloads\Unconfirmed 916160.crdownload

MD5 a2f58a117c60b1622eede88d2163ef19
SHA1 91ed6cf5b0efb2c0bd3e06ab5775775ccd1bd631
SHA256 e74d896bc3469b5a28eb5a04ea364a9ab32737d573868fb08a327820ea624c04
SHA512 19964984f66876032ef15283c25e31737e1f56c27a3f9d7fe204dccdc0a45c64e3380a5924f4b82301e55a5371bd7c9c61776e8ae6cb15a0e0502d189384c14f

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 83dbcc53e36b9719f4ee6e252eb9bf63
SHA1 c2fa21a3f74e3ae68b812786ec49af7a86a3b7d0
SHA256 798d2a9dd98fc09f0e7e1c06de146de24b89d2eecccf0518eead287589031a88
SHA512 d1683df78d8722023d5e505253d208af722cc526b16555224c0bc141d8854db136e4ee901bb8d2b56137dd10c0acbdd00d8d0635d7753579b60c6597df62aa9c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 29756a82fc27951ee0779f712d21ffba
SHA1 f9a3124e85833f7b9e075288d8571eca4cf9782b
SHA256 17c96b20f21d57cbe7573338ad4494df2a98998c0aaf4316c4731dab127a846f
SHA512 1b1a52b241ee078fee846f055976cc5b1d368ce0651cdc9bab3f4264b37f96ad00b22f82a4e9ecf8405470a95be80cbb7a81a57624254af6a79f983003195495

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe593109.TMP

MD5 8086189d71ea9bb5d03382f1a74cf138
SHA1 7610d519b71af020567c1310c1996e81a8b500e5
SHA256 0652168d69730ccaeefaf7e08d605c5a329afc334d4f01bceb9b6feebb7e9e37
SHA512 c8d30f60207c137c493963a77e9fec3de327a436eee77b144108bd3642c27fd92e2d55194225dc87bfedf2e9f156c3747790a40116a1b24ed3f55ba4aabb9c05

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 1bd283ecd104b2c6fe525e8bea5f19c6
SHA1 c54d4ed0e5ed00bfd15bb960b610c0be97b6e360
SHA256 795ab10f5ed99298d422c7fb5d7ead740700647a12d9ac5e00f0b1be17f09852
SHA512 f4c76041705732e1f811b6a1d1315aa0d95dd2a210ead5679e83790d73861bbb5bd4a656217e10f5fa7713db2e509ddf31064b5e689dcace33a77858585ac480

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

MD5 e284a7bdf53b953d5514c6abe985ed60
SHA1 91655419b0e29b53bebbd102127056f396af6bb0
SHA256 de29073ba5d2f701473a80f14c9dc35b2a11194918b8f682357b09d57c2aeb2e
SHA512 2066d8dd92d2c64df6eae441fc25914a6214ff52ad264a38c156f59fd1587d6a7627f19a1b537fd82d95b7c66acaf73169b855df55fce0163bd3b05333377195

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 760da86d001b3c1b3d87821d0a056339
SHA1 674ce5005eb22e5f24b3d990a57648cd83bfa9dc
SHA256 07416a5c9f470e1ca53273cbc43619dc1f048c93d5ffd0a78e37748d945965d0
SHA512 5ea70683336a956b5043ccaae480cf7640feafe939f76f08dbce83c2d5e69be02dd49d3b269e9fcb2ed9600af685fd72b223b8850893be77f762d8069f5bcdc1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 68b2d9167c5348d31db24fffb0045e5e
SHA1 92a1c1c5d52e9eecb2e430c467dd4697cf15b8ef
SHA256 4cff5d50e04868fc7e8bc38b0f8a84061b1d4198f7281da9f6a93620ee41c65e
SHA512 6fe193547514d79e6b948915332fad0e4346ab2bd22376aa90ef6c2cd3199449d848724e93da9680acc2237e21d7682b43c21bbc78945bd2f4a63b29c6891dd1

C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem

MD5 0194eb945475f93844c0fae769c0fa0b
SHA1 d72876a801c702348ea5b4b4a333c484f2a721fd
SHA256 a6bc06b8255e4afe2eeff34684605d04df9ec246fc201bf5e44137987189a0d3
SHA512 72a00fe6b9111cab22f1f424f815a617be2041a3857a6265b004ca1bfd10f345ca33369cd43009b483f9436ccbcd69c70f7033a85d94527b1f39846b75b43c17

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 ca6ed05c9e761d06fd3451d93f365b4e
SHA1 ea7ec50ca982fc9b5d96eadebd77869180f04f2e
SHA256 7055a8e00d009f7f8265bd3dc81d5b60dac219777ec1240ca2c95a53d251265f
SHA512 f485ad1f4fa8fae7193c2c8714079e7420364d93a0993a8fb202367a5378e7c0c4e43a0328331d404416e7ebc58f1f29ed73381f36dc513795c762d275b5622e

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\523f61d67bf4c528e001c52e84c35ef0

MD5 523f61d67bf4c528e001c52e84c35ef0
SHA1 f26774809dc1ea0bc7376606964ebcc06bfdc398
SHA256 834bd41f708d1393a528da769b015538b45b279b4af4969e1df54c0c426add3a
SHA512 d99d834d3632804160428367360f8a4c0ab6e1c9146ab12b07d6f44c30def1482809d5cac41ae84a64e5d8b99a4fcf2090c74e39b2692094168737501301b15f

C:\Program Files (x86)\Roblox\Versions\version-7d64f40489634ca5\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EU7A66.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 f30b3307cc42816ede92d8b0c526fb8d
SHA1 3105b9d207d86c0103776fcc6855f938cc678622
SHA256 ab09e51466a32e3f53e148803a216fe6276ee6d5c101e30bef0d7fbf90962527
SHA512 11da2180673c71ca17bc485e6df6b711de294777d9244b2808892c5aa1f016874b2817b815469c3a5a30f1438f384d5546bdacea190eb8ef62af81f307ce5ce2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a53da3de531cd88f32929a5b9f920bf5
SHA1 ef020359c5b8d160e65e4ca0d07f618718998080
SHA256 8e002ea0066bb394b86151afc73e0cfe708990d9a107b705bbca827aa4e2e7a9
SHA512 7d7c6847e1e7184f82e062ea591acf396dcf286cd8cdb24827a7a29c17fefbe15722dffa4d5e9bd6635653222ae3062a7254bcbe0a544eb865fdc18ff9853c7d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f26280f5972791a65368eb4cf987b66e
SHA1 7bf7b410257d0c0e658d2c1120c525fb05f78307
SHA256 44feea77a04898d7cb4cb35ab6de938d228cbf7ba362e91c666e5a89277459ee
SHA512 e6952af5f3b29898e7beb96c7c404a83ca368b0d54d2ae4e878cac91a4f3bfce8618bcaf6ab62dfba70686b1d8110470845d58b39e7f531237c76ee43d5baa85

memory/4640-638-0x00000000734E0000-0x00000000736F0000-memory.dmp

memory/4640-637-0x0000000000990000-0x00000000009C5000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 883b5b9109f5a10b8603d1d363a12d4e
SHA1 4021bdf4f2d6b6d9067e57b2dd64c39cff1eaa93
SHA256 b0b8d2f7aba91a3dfd860cc409ed79d1b01fdcd9057e44294a4aa3f62a5fa6ab
SHA512 c5bd7f3b0fc687a641f879454ae5b20ba3a6a68b726c9059a1c97013e8cd650aeacf3ec6d7bb8b4a64727b3906442ee0b42ea6d99852ee02b6a2f6b615d3507a

memory/4640-812-0x00000000734E0000-0x00000000736F0000-memory.dmp

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 620070a035cbae8cd726c16a4d33eb7d
SHA1 f522e0309b608717383a4d11d5fa185d0ccfb885
SHA256 e6d43185cbd31f1bfef7154b65cc119ea80c9e40f99068edb95a3d18a0e4d85a
SHA512 4289b55fdf83661533b07c4ad86c4f14fc49fc98380e0762087344ab93f62bfcb2353e5dc2f8b2cc3bd4bde60e1567f4dc1fac49f06fb0283a9100c970b8aee5

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 200dd1a9ba3ac98099b6669dc5414018
SHA1 2735620b0c8dcf775a0099009bac15af1ee3fea7
SHA256 d84554c2f6762fd73bf16792220bb7e58271db0ecdbd039006d780804d08d23e
SHA512 2e1d4964da5ad0bb8bdb4bdd7283b7c0f36a00940aeacbcfaebf733077d7e058c8a40ea161c3fc3df67e4055cc0031b633cf8b07388be1a15a3c461d6aa738d8

C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Installer\setup.exe

MD5 c31297188ec9fbaa60449f769339963e
SHA1 8502d9e0cef18137529f0a46ad6e69a1577e6cae
SHA256 2e2eff110475dd3dfd732ab514e4692032e67b2d228d0081634a87f45cde5ff9
SHA512 9525e3e08b953fe36270c7b4868959e9bded055c5577e5ca94d79606b671e6660d180f763b54a276bf356e82d7073901c373e0b40cfca924cc4b38384c20e22a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 5401cafdd9d9ab180c6a37c3bbf4b5dc
SHA1 22de18e13fb75b6dcd4cf77f8d79183cad5c9e3e
SHA256 2eced3073abd37e5a825608d5f0181ca46f93fcc5ddf2aeb6055296d66a41674
SHA512 3d46322cfecdb3030608fc27e9787824ea6b94844cb32cfde8df8f421783449b62cf8a59afa720fe54509cbc7407cb043ca68e60c4c9e7b4edd9dab028c16593

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 365f15c3a5aa86210043e61616b71f38
SHA1 0bb3e129651836fc538ff65a2879920e66225c82
SHA256 19a8d5168493d6cbac469b450d770c894db398878eed9429dab02abe3ef8a5f0
SHA512 f848d3371c884b1b6249b2699bcae0fec0d12a387b1f42d1dad67cc3c4c0f8d1651e80c069483552f0205e33360cb5dfea8db19ec9ef21482f7f29a3fff626f5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 12b2eaf56a12312de299a360b65bd66d
SHA1 266615ff6b1cb926424d953b5119be4546b0d701
SHA256 34ab7331635d69d255d89d272daeaf9dfd6fbe8791e12e400de27241be53e1ba
SHA512 87a53592fc17c1321fa0a84d47dbf4cf9ec69b729b9c46bf0c5031ec5447ee93bdcc77dbd898482042bb767d9304a260014f75ece8e9dbb26a4aa6e45f2002f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e0fa9615b6bbc6d5c2a422a8a0a5b54d
SHA1 189ae7153eaaa5a998db4be0605ee8f07a97e5b4
SHA256 2ab78799ee743341fbc0497cbd4fee206cc8da6c009e4316affed80042f0c6b8
SHA512 59a5cfc40ee315d337e70cc9589c971e20a004ec1a704e3520638706d6f72e4e091937b040bfdf7f256d8b5805b486181618f039c882fb8c86845e3592b8d8f5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e3b092dd65f1595e24dec8ff5a6daf2e
SHA1 0dabdc4f732af7840a93cfee5b615070510866e8
SHA256 b8a8f784796ce7c5f32ba7d103df651f273ceb97a6c367bb2ed0c93ec9f3baba
SHA512 3381992a9ba0398a4002fceba19a2ed6fa03fa6f64886849cc756b052ce635efcfd45b528f7fcc6c92b3b2e4f5a9cac9788c34a35c8e1bd3e7be185f31ac7670

memory/4640-1142-0x0000000000990000-0x00000000009C5000-memory.dmp

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{24F0F845-C652-472B-BFFB-DC1B4A640C25}\EDGEMITMP_46528.tmp\SETUP.EX_

MD5 5070a34dbada1aaa375cc572b5fc7d0c
SHA1 e74b7ef714755870976abe3d2b4a7db0b9cc21e5
SHA256 03e7a32e1f10fced6a07dfa4e6cfd92510d4bf6929d423798e4fb5ca91fe6c20
SHA512 fed3fcbb64a59070b0efd677ca2edc982d28e37cdf7283f2777af8aca7d3760a7eefb8d01b3c2bf4b4ec3708a74c3412f0dede91e31dca1b6f8a4e4edc673aa7

memory/4784-1153-0x00007FFE70900000-0x00007FFE70910000-memory.dmp

memory/4784-1162-0x00007FFE70B00000-0x00007FFE70B09000-memory.dmp

memory/4784-1161-0x00007FFE70A70000-0x00007FFE70AA0000-memory.dmp

memory/4784-1160-0x00007FFE70A70000-0x00007FFE70AA0000-memory.dmp

memory/4784-1171-0x00007FFE6F390000-0x00007FFE6F3B0000-memory.dmp

memory/4784-1172-0x00007FFE6F480000-0x00007FFE6F48C000-memory.dmp

memory/4784-1182-0x00007FFE6E410000-0x00007FFE6E420000-memory.dmp

memory/4784-1194-0x00007FFE70120000-0x00007FFE70130000-memory.dmp

memory/4784-1199-0x00007FFE70140000-0x00007FFE70149000-memory.dmp

memory/4784-1198-0x00007FFE70140000-0x00007FFE70149000-memory.dmp

memory/4784-1197-0x00007FFE70140000-0x00007FFE70149000-memory.dmp

memory/4784-1196-0x00007FFE70140000-0x00007FFE70149000-memory.dmp

memory/4784-1192-0x00007FFE70120000-0x00007FFE70130000-memory.dmp

memory/4784-1191-0x00007FFE6F2D0000-0x00007FFE6F2DD000-memory.dmp

memory/4784-1190-0x00007FFE6F2D0000-0x00007FFE6F2DD000-memory.dmp

memory/4784-1189-0x00007FFE6F2D0000-0x00007FFE6F2DD000-memory.dmp

memory/4784-1188-0x00007FFE6F2D0000-0x00007FFE6F2DD000-memory.dmp

memory/4784-1187-0x00007FFE6F2D0000-0x00007FFE6F2DD000-memory.dmp

memory/4784-1186-0x00007FFE6F290000-0x00007FFE6F2A0000-memory.dmp

memory/4784-1185-0x00007FFE6F290000-0x00007FFE6F2A0000-memory.dmp

memory/4784-1184-0x00007FFE6F220000-0x00007FFE6F230000-memory.dmp

memory/4784-1183-0x00007FFE6F220000-0x00007FFE6F230000-memory.dmp

memory/4784-1195-0x00007FFE70140000-0x00007FFE70149000-memory.dmp

memory/4784-1193-0x00007FFE70120000-0x00007FFE70130000-memory.dmp

memory/4784-1177-0x00007FFE6E3F0000-0x00007FFE6E400000-memory.dmp

memory/4784-1176-0x00007FFE6E240000-0x00007FFE6E250000-memory.dmp

memory/4784-1175-0x00007FFE6E240000-0x00007FFE6E250000-memory.dmp

memory/4784-1174-0x00007FFE6E0D0000-0x00007FFE6E0E0000-memory.dmp

memory/4784-1173-0x00007FFE6E0D0000-0x00007FFE6E0E0000-memory.dmp

memory/4784-1181-0x00007FFE6E410000-0x00007FFE6E420000-memory.dmp

memory/4784-1180-0x00007FFE6E410000-0x00007FFE6E420000-memory.dmp

memory/4784-1179-0x00007FFE6E3F0000-0x00007FFE6E400000-memory.dmp

memory/4784-1178-0x00007FFE6E3F0000-0x00007FFE6E400000-memory.dmp

memory/4784-1169-0x00007FFE6F390000-0x00007FFE6F3B0000-memory.dmp

memory/4784-1168-0x00007FFE6F390000-0x00007FFE6F3B0000-memory.dmp

memory/4784-1167-0x00007FFE6F390000-0x00007FFE6F3B0000-memory.dmp

memory/4784-1166-0x00007FFE6F370000-0x00007FFE6F380000-memory.dmp

memory/4784-1165-0x00007FFE6F370000-0x00007FFE6F380000-memory.dmp

memory/4784-1164-0x00007FFE6F2E0000-0x00007FFE6F2F0000-memory.dmp

memory/4784-1163-0x00007FFE6F2E0000-0x00007FFE6F2F0000-memory.dmp

memory/4784-1170-0x00007FFE6F390000-0x00007FFE6F3B0000-memory.dmp

memory/4784-1159-0x00007FFE70A70000-0x00007FFE70AA0000-memory.dmp

memory/4784-1158-0x00007FFE70A70000-0x00007FFE70AA0000-memory.dmp

memory/4784-1157-0x00007FFE70A70000-0x00007FFE70AA0000-memory.dmp

memory/4784-1156-0x00007FFE70A20000-0x00007FFE70A30000-memory.dmp

memory/4784-1155-0x00007FFE70A20000-0x00007FFE70A30000-memory.dmp

memory/4784-1154-0x00007FFE70900000-0x00007FFE70910000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 322ad2346af2fd835fe3c8debada683f
SHA1 9667faecc63f11af80961ff65fec9c00112af518
SHA256 70a50c225dde3857658d15876fffbe91c92215ffeea60cdb1171659113e82934
SHA512 084050575c8261fe4e880ebd9bea22ee36a6b78f058f7a0161088a5b4422fa6e5c46dccad6cd786f8ec28fd1122f7a9f3b03405b37a7a2a81291d7a665a6523f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 c13acdeca87dda2360a3853b3c2e739c
SHA1 8b0bc1ae35f0206dafe76ee50eea17844d085bf8
SHA256 321b518758dd28da45429d892ae50743f4b40578c2fe9aa06a390bc72b67c0ae
SHA512 00636841561654cfb60c33bfdb9aa34b411ac994ea4c5e7d106478bd5ef103a988547f88c9aa64d79b48ea5c6417f7ac53c898a38d17e46a572a1c20ac07bbc0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

MD5 903351785c6d1035f5981effb0986406
SHA1 321c14288fe3d79aa26693f46b4c5076e7bb3381
SHA256 45ec7eb947af3c2b6679920e7ddb8d94f5c65c212214c8c6a312a6e7f08c53ca
SHA512 556595babd363b7d6d0b2599ab5e2e3f50b6de0fa753a7733dd6f4f3de7e48c5caf12ecc12adaee651440d5afb3f9b817ef48ddb29281187663e525fbcbba451

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b9daef0af0dbcca96a9a7ada1630ff56
SHA1 a0625fb3d8d5413c74249a9805815332a0bc3dd5
SHA256 0225e0ace778c915a5ae69ef6028359061079381ea3aac54053a50dd86e8b018
SHA512 fd312dbdb97e585f12cba246f51e0b748c16a91ffaed2d2b177e01dc974b2e1e8fd6e697f26ef39be719a4d6b63cfbdee9734beb3caf359f29c15e3426ff6ce2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9086243d5dc3e78b3d3093ae089b8980
SHA1 2a1a78c105680ef754dcbbeb68926c216202def7
SHA256 1c7ee702cf61fb75d36b75ff57515fadf938537d98b6aba0c0d6a8d27fcb79d7
SHA512 b1e90371a8527367e9965d378e42842c7a7842a2c409d65555f63f984c38de7b7cb00a2a9be0279117297dc1b573e7911129591a56a2306c52f21113a44527ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b0a3f9529c8b7e06a40fe7eeabd4cb1c
SHA1 ca795a9d8b90707ea2052690c5951380f94a38e4
SHA256 8c0f70108762a8d5935874f79a81187381be07479bc446eb30680d26606d2b4d
SHA512 c7bc0b36ed60d41a35cf38443360cb30c2073e7e73f28d29eca37de068265ae91aaa423c7134b8bb7a808ceae67a34c5e4ce96dbc0e38a69701d703ac0bb5f47

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 182f76fdcd69d0a53d7de2b28d801b10
SHA1 5d9be561b2de05a77df98e97ce930c679c69b4ad
SHA256 0e0b122d82b1e50dc4ac93744099dbf2f3f1316074a8f2ac19c8fe9af8c2d62f
SHA512 238c2bf5069d6a6fd0b68913e19f143c44913bfe54fd4ae391d44e8468e319f8186f080f56d2cd3cfc27eadc66cf742058c9d9b4eda89a6a07d7bb31cf415d0e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 65fd1380d182d1bc25fff3b9b1a5b71f
SHA1 0f9aae2dcaf7c74f46b3005d91466a7435c7acc3
SHA256 4732e22045880b90c6271d59f363e83733ffe557a81614e73575fb83da1422da
SHA512 ca4a384c6bef0a72fbf7f286fdd03ad706a9437d7171d06196dc09fea7f042f3b84e20cc27a61be3187bee4faf034fc65bc700199e0436b794f6670cf101dd61

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\000001.dbtmp

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 669d9adc3e89a9054318abca912f5688
SHA1 440509681e7425093879c77eaec51cde9f795fe2
SHA256 754fd84be257f83c2a95921b2d5b0b76d30585805bba2a6d7f0f4819dcbc3eb8
SHA512 c827ed63e8046c63738d1f9dded95f9e8da90ab4eb6cba638f64dc167f7b47dd89a2c79122737922e590dd2bd761eb84fc70fcf5010a46e85299dcd6e4fb0085

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5b7878.TMP

MD5 c16cd63d25610401501202e2b2ce0913
SHA1 1751b4ba24bfdaaf66126a1a52b6cf44633ea15d
SHA256 1790812b6dda67ce91c648b38b5063e31a55caadb6786d21071dd55ce231fee0
SHA512 1fb1c5a027c57fc3268ab764c4eba68ea78c26deee0f91e94e266c154b3504213befdfcbc9a02f359537427433d548ce1dc357440505e22c8facc11f6aecaab9

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 21889daf8dd57db5d0191a2bd7b3bf21
SHA1 d9b486a643190e410d2a9e29fc767fd438108b9c
SHA256 d839c6f2764bc6f1131cff78b8a7090dcef9ea1f218311125ef7afc637287324
SHA512 9423287d1a2dc41f72949ef90b3d33c3fa539ed98d05f2b35b173d2dca114d782df1895ca060b0f96bb7de51452d4d0dbe699876ec349e27b061f60150e9ba90

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 97fcde2f7b94d4dc5744144c7380a5f1
SHA1 c3cf7757d8258e1988e143b3b3f610087c501007
SHA256 66e8857ba37a53bcb7cb1261c4a07f195333e8effd3aa67ac57abec14a7399e9
SHA512 e1af5702e6a63875d6d4b92b1873df8d1fb38a2afb89293d5679660a2928fa49c46cf188b26782886bcca90033c86b7b6a426d7ddc5b7cc458def296a2bf7e08

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 f912d3526d257be8105eb097ec811c6b
SHA1 4ef4e9a30372df6eb46e75680701d8f62a66fc1d
SHA256 08321c5492bc43941f66a1c9d6babda8199a0fddbeceeda6973f4d944c8d8c3c
SHA512 d5c5d98abc3a0e2054cc05bf69608350c4bf6fb9265303c49ef5edad0808bc5e60f33bd134c349a66d2a64fb87eb1f17c5891ed62e6ca71c680ebcc4c4ee8f5e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6ec907b73f171728090718ed12e2f3f0
SHA1 78fa947c040a06ac3b8e86b997af5aa88ac94ff6
SHA256 befc7e822c75ba15ccb7cabf3cfb92aa958ca43c9242d0488160913360b339d8
SHA512 4a8aa09161930ee867c8b4fb4ae10d6955f720a4f1a488628a0a203b92b6bfcd61bd374518e1fdece1ab56076b83395756d5ad57f95fcda08216e79174cb9ab4

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 eca4898e94c49cfdd77c346cf0cd2c24
SHA1 c912eb3660e7df05f8ad4431c87cb535de7822f0
SHA256 19d97aed2728bdded66b6a9beac47a2bb7d426f21f016cc79b195a462c507344
SHA512 0ae3fb5f261354288a7307402adc90afa95ba639e58955b36a2d5f30e3b165cba960320abb517b88d01b16d8bf17df154ca3e8b06603f7ec8c530aa0fa85e70d

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5bccd2.TMP

MD5 377491dacfcaa4523ad31699d04fcd20
SHA1 8c7802e582be0b9ff5f9d37d3fdacdc1ca046471
SHA256 52515a88336140601593179c3f1e97badd5291c550e66bd964a24ac64dadd174
SHA512 b6aed7d59bc3c7227ef165a7237f7960964e2ca7c7dd1b5613059198c107375861d7e0ed705d60e1aa9640eeece5ee480d9dd1278844cb56a478e897b8ad242a

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5bce2a.TMP

MD5 65b0a6b4124c2a7c221a1da4ee3a944e
SHA1 3a9f05e6813075239bbc100319e7c18fea16a1d5
SHA256 c70d52d88a603cc8bd0978cbc2a22c5c4e9dbf9caaf3372e58f0d3d7f7bf858e
SHA512 33cc5dcc23b4829a218d3aa6bfbfbb4e9fcc3ac8c1bb9c36432eef570943baae0c82fa5a4b346e66219a0bacf780757663ed15b0ef72a68f35f4cde9815ed625

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 9d0bc64e9cf47902a3e5cfaca8718560
SHA1 664d1fc540d0f7ba1bd91f64b2874c2157e098ca
SHA256 234fd31eb49d3ad34d4718749a858aac74aad110967f410e51a81682cf64d143
SHA512 e6880c8674d5755b6868e9aac0870c2f94a115f73a9f7ceea110316ec626d55f9c9ff483b452bdd01220e188201606c9ee4e8e83423e70222f7465d4856780af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ecf96f4c9c31cd330dbf212e2fe2c755
SHA1 c5c7a8a3e183ed2aa700336ca953103696782a4f
SHA256 468d646b632024be0f9dc6f7bef8c3642b6cedd8d472b9de5412a2110bf40377
SHA512 17f2931b88c7ad3dcf4905947d8d3d589fcc40f42179bad90ff342ec2cee8d782e0a64b047795814a6b3360b1365ea11e8d44868b3e6043b78db32f82199bc3b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

MD5 f2468f22e37106265d27a9314261e01e
SHA1 210b3e5b45ecadd56a72206a1309c8c8ffc12f3b
SHA256 b28773d7b44c01e78e442493c63af55723c31afdf7898196f35979d373105ba8
SHA512 1a33612856fc3d3adb942b151b8e6c9ea9cce2061d11dc809351523117510628ff271ab7a762c979c487752893870327b6232c626e9d9d84b3d4a83f6362618f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5 03ca33f546bc5756e3ac28342a36db66
SHA1 d9b0336e536bbfaf915e4f09bfc0718684feddc1
SHA256 9b83838060000c85ddd7d43e3dabcd519d18bbe3fb73d3bda4fa9c3731cf54df
SHA512 ff17fdc55d6f39795fde4887d8dfa92000cba72a29758cf723e9f79bc1165598026314fe9772b04dab83944c4aaa743277b61c25280c7def57516d781b57f8eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021

MD5 35546a327f10cd0a628389300e5fb929
SHA1 b13f9d279958adcbb5eddb91ecee6e44d57fdd62
SHA256 bf339c1b4d253fcc92a0943c8337e2a8c2d048eee6e1d5b1ffe3a97fd9b7e458
SHA512 202b01da6cbeff283a3381ea700ece914b52cd9d1255e5728ccb8cfdca831d0941f7e525bccb304de9dd1c32391575815a9f329389104abdc85201712c15a06d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

MD5 d96b6a74c9ceff02ae9cc41bfa91c77a
SHA1 99c666491cd95939d2b65bdab76fac42e5ea3c38
SHA256 3f545bdf886ada31f172f4a4a9dfb81d6a8268b77061f6cb8ba791f32301540e
SHA512 f0e1eb4063c707da65b23bcc362877b936e3a633e6fba30dd2271ed9418af408492074f25ea47826fa8199aecbd2089375722ae7ef2661776fcf6ce2b2544395

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

MD5 8144e6637f4c38fe7104aee0830e8639
SHA1 baf44459604befb30853dccba736a3929e9c5689
SHA256 d6d2c4389707b0a2e0c54a631af49952a1ea4aa268683ac235558ef784a53c56
SHA512 3fb1affb4b87e03284b19e866206da00ad0c9b6015a649342967e8aba535db9796b2787dd2dbd00c75ae362ae6b1174cb0ffb994cd86c14c8326d50d381f3c10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5 b3acbb29b1e830610c17f0582e6ae589
SHA1 fc5797a80e6c6851343d05ab0d3f7113650ef05a
SHA256 1adb50c0b3684164e427f4055f27bcb153531edfa36b16116b4d8133d4777e11
SHA512 b24d35c3643723df7eac5c5123f7b43dc74bed0bae844305ba72014990a655f70a193f0a7013d0513349af3172adf057ebe9bb41ad3135194bb542974a0db142

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

MD5 21ff44e23aa4ac52d5a4918d42dfa206
SHA1 1c27cca46bb81fc0a911d267274954ae51771740
SHA256 6559c591bc68390f48c416f509703d015ec88d5bbc2d26c45c29275f09e2531d
SHA512 5cc990fd3ed4cac83d4a15dcfe59ad36b8467607bf9d865e117428ea0f215d6575ce9061d02888ab0c4d2c3e6956aed9abe367b18c1ec6d6edac40fa83d4d898

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 6f088405228fb75e2e2a60c4359c6ed2
SHA1 c4da9851fc3ed893df24004bf827e0ed535d5ce5
SHA256 760e7cd6357352e0390d59b3bda9a8683824eafd3686b72ae07da6c0670d2130
SHA512 f99d0724a844b32df63082b90f00e0b4f625ba3968e774546930b85d5cbf5f9c20230102393778e7104e79dbaa367552177fa6bb992cfd5b5838a9087380c3ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe5bf4ad.TMP

MD5 adbe7428fd0768ce0976073015769452
SHA1 86de0c59384ba2b72e92dcbe73b3289e13803f7a
SHA256 c4ff8b0c3c208cc63cba600095d4c5e11dfceb2a066139391be492d328db80b2
SHA512 91e028439a3f15f36875e4ea5d2638b24a976c3281fcee4370b59d5f9cd7e109cf21a369d84ba0874209e1e0721f0f6142339ff35661e2477caf42d165e84514

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000dc

MD5 588ee33c26fe83cb97ca65e3c66b2e87
SHA1 842429b803132c3e7827af42fe4dc7a66e736b37
SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
SHA512 6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\df872775-99a0-4dc6-a89a-a1c998cc7f64.tmp

MD5 91f8cf0949d99514fa1838b66e432b9f
SHA1 37dfddca78aac29a190d2f8bc1be24c238d46bfa
SHA256 b72cdb23e7e620a276ad674c32d9c73aee7c67042f6a5d2ca3685e871ad5c175
SHA512 25f4e9b1f384eeec58ad343bbe46a35d3ced0e7c7e70f48a0b4f3cc7b0b7f9e68a470a1acdc7f04c01b31845bff297890b4942326f5a51603d9d9d6f1728ae9d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 592ed123cc1cb890023e91b2ea2c33f2
SHA1 d428fe457884b359b74b67aa1a0d923912f89656
SHA256 1d3e0a4dafff1ff09f9b6aa3b826b351905bbe141eca6f15cdd949e43a0b6977
SHA512 edce546d5c42a58ca6dcb8ce9ddcb9327a6228e29e25fb7d24fc95d657f62758463171ed82481febb41c368c8eeeeaf129e0e011b48e43004a2475c4da9e9589

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 8476051c138601a2f369cbbfbe324439
SHA1 91020dc5d9e28e24b2dd0ced978e2569cd8ba227
SHA256 4da6b23a9edb9d0f9aa2c8154c72d37afdff6c9e490d8dff7ca1101ce4fcc86b
SHA512 0e1fed0e66d17b5b375ba2a99b98be9fec85b1e3da6f356d6f7beb7836ef25b128ffc9ce0adc2094ef97e266fd6a85715867e43821886ec027b5524ad8b9ef9b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 bfd1cc3009a9a51252c2e4a862b2d649
SHA1 e4b8284d6702bf7562ca53f137fc6a5d23400803
SHA256 1f37abea22e71489ae0de96a84713ae23d7f2d95ee7f88ed6cf62e278ffdfcbd
SHA512 4de446b57d9ac4a62a8c1fc46f89f64d3a5387de118d4eb6bdc3dd8cbe98275dc105854b7fdb9ddfc20a675cf293ecc49869e4044f5244d2fa1fc0052d456934

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b93252d56681d03c592da7510a767056
SHA1 d22a807cbf64dbd3a6166293f9dfa2bade44d96c
SHA256 d685126a94a3d2981d50e7934bb14420e8dac445c7a113407d527d78c1ba1cce
SHA512 3ad22015b0d8ca97c8e43b0e7768781a14249506672f08ff4aefc744c8b8f3c62ec10b0dc8946cdee449f1f3e84184895910f54589a30864fa36c814e0c0d19b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 438806a5d2c7891f4e15d98ff8aad063
SHA1 53810aa3c9418629c3e44ed08ce70b0fb1bf6f82
SHA256 a285fba326c45d7a288381082a5edd2328c1bf373f956fbd0aef8da5b91be5f0
SHA512 acb816aa27ac903f010edbde9a14999c35a6bc8ebdecf828345830fbd9af36743c4cfe8e579dafbabc1d81a38fc34e6295b9fd3acca56ede77e6ae38be69c357

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 f2985216a8d3233dc1230b7adf5c768e
SHA1 ed8eb1b191cb93201c24075fe6f15faa631ca06b
SHA256 b0a49164c9ed3542b3da6110d4eaddd81820fea67b6f12e985da49cfb79f65b0
SHA512 e630465824622c53a5e2a1a74b716695505449e9a4dd6966b6b29719ccaa75c73dfda5292e1cbd5499907c593603cc19f1666698299d23083d149c0558cbbad0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 210b4dc2f2119d8b70399efd1d996c65
SHA1 852103df9eaffcc57418c1c06de4f3a861c005af
SHA256 e899069668c90fd8b8353e2ca5906651661ca33f86b9cf064a54046d865a2fde
SHA512 36de667a66d6ab2acd50f922de240dafbf50a75c8f0f511a5f19a709d90acba67fc9b80f2c3258962b94707464e690e6893579b8278cd3389932de0b9ac36abd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

MD5 5603b360361ccee22e80139155302574
SHA1 0834d5ef163e14699ae495fdf654e9a6803c60e3
SHA256 628c66400b1ccddb5db7006fb7077565411ff4f0ea65edc45a422e8680a261cb
SHA512 4c69cb561c0d31394be447c34fc4b8387d20833b9812898d00a538e1a44607aadd2d0a9c02b59fb0a1f081a758d710dad2efabc9e0ca6b67244e1cbf3e451003

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 230b416cce0fc66fd5d5e519fec536b9
SHA1 de389f9fb8bf91e9b31e7404cce266b9c56d00a6
SHA256 b8531b8359ac8cdf0475bf23eabb77981d5ee6eed8cd049e031a56764d90369b
SHA512 9c6aefd331786125d79c08db84dce3ea18449b669cda5eb6a8e583689e7070851c77e71bc1414a1b677bc7d0c56b875be9bcddad41d95e60b1963f4c86343344

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

MD5 bc204a546c48c0774a959fefcda02a26
SHA1 5870bec813cd2df43b31da5c3d9205833c3b250f
SHA256 a1623e630cfd13334a505142e86b148477e4e718a913b6c37ce5cbf9f1cd25bf
SHA512 982289689f0ba4aa035431b7cf520fc8d9420d8ebd9ef056dc1f00daef958c3d76df2fe54aa1bbd72edc457800a5470415959af6a6326554c9d638dcb065c684

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032

MD5 21af9bc981d404957c6344aaff4b3e28
SHA1 e5569bc0876884ded0d9594432cc261effc66d47
SHA256 e9515acb1b0c8f7c1008358ed424d6563cae681f0e87c53547d0cb7b9f51b051
SHA512 fb42427a114a3cb5739c30f6235c4fe3102876b2063772665c82ecce483955d357dead930e6da185f2b27fb0e72b9837ee272c3271efa5b7e80f98edf4cfaae8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 86257770134f1412909a219d549d32a5
SHA1 3abb97c45a4a5331b7a16adc2c5880b7eb98953d
SHA256 592e2c08c76089e9f39f6953df43204ce2ebc35962434d15c32601376ad6e0b4
SHA512 7f4c0d15c60460e828118c45026970276064a091902f3549b0bf0dc1beacc9816c450b2c3ffe4f4c36d88692f4b56f37ec3ff1f2aa2702c2a737676e13483e87

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 823c866c8b905fff38d7c508cca20f35
SHA1 9fd24551f469aaf130f2371c2914f68b84883d02
SHA256 8a4f7e40d4d9c37abfc8c69e88b074cc36f03f72728383f019d96fded3bb4db6
SHA512 d83e345efa2e33483f2fca655071474d8271ee14ddd3232fbe7850b3ae1acc164c4e85238337b3ae5624f8e0c442c60b95ab0c8183722779a46123da7b67766b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5c8c3a.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7e3af53e028b85596189cda9ec9543a0
SHA1 87de3903d591fdbcacae0d0bdaf013809d814f5e
SHA256 28ccca460f4775a9da2d30dffb39368500271a6db0d26c8048a3bb55c2aec880
SHA512 e3ce4251c6412ab5a69f2258fe408240add624a89e507c5dda51dc8dd3bb12481a238e5c1a5e194dc128cc543fa7c229d436290f1b12649c48284908a9dff1b1

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_350713591\manifest.fingerprint

MD5 5bbd09242392aacbb5fac763f9e3bd4e
SHA1 14bb7b23b459ce30193742ed1901a17b4dcf9645
SHA256 22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297
SHA512 541e4c7998e91a5113f627c2c44e32b54878fe225b3b9476572f025f51f2b4ec4a44b102498adcc22b8fe388970645bacfafb6e7fc8a216df4d7bbfc8b0ff670

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_350713591\manifest.json

MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b2821051989560dbe877aba3a2bf66a0
SHA1 846a0ff0a87e55775f7b0027d64bc858f6ea67f8
SHA256 072fcdceb81083b0cb90cf87feee4d189f0663c94d4e0e4955118e2099e36484
SHA512 fc9b08a0c6f9c86f2e9f23f281f50ad7addd684090a790b320e8cf345e91683aff2b3f42129a3d95e5052660b45664f23d21b5f2b5eb5c28a22e302119bd42e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0c1fd7d5a181ce6ab6fe76d43c00e790
SHA1 a17e65a280741c91c06f4d6d5a5d96b91f0b064e
SHA256 50a779ccde6e350527dc8099b733997d81bb797796def501ce9ce69a84f19697
SHA512 1fc282306b2d56664d03142de62e95d2abcd1c3fca4832b4a0bdcfca891afb3b928da6caf36bbef186e4fa7635389e946295267fe59cedd8892ea2cec405ad27

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ec0b67acd53df43503204c33279ec355
SHA1 f01e06a11c3b2d07239d0158ec15ad359dbb8eca
SHA256 7623a83de28ac0b794339d91c8aaa4f635e5c2b3de4b6f0aac28bb4de6c692bd
SHA512 cf7b9c9c95a79d5a6698a94d1c3fba0d5cc9930fb719b9506d3a9076ab29d470b3077d7bd897f4659444a0117eb0d8475ec0dc70f578423421764af2d273a9df

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 37959120cdf070f43bf2f6896798fabd
SHA1 06d40b590cd3827ca680a6618e8b150c09f9f7c4
SHA256 5f488e99f191d4d2b803d0326b02fd4b7eec72c75fe1f37ff4fd72a748e3c739
SHA512 ae3ef3be887a6ed737a1462939d505a881f883ed1f73baed5a47f25b9d16ccbc85d089cc7c8153c5f2ebd0324433c1f0704d476bf68bb359662a16411575afa3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a3b7de024f13e2d5e0e74ff089c2da9e
SHA1 53f9e5b5223c5273cba433970f509c3dfac19148
SHA256 8e4b62aa8d5ce5a0f521f2ccb8ff2c3541a04bc0e66edb753419b86ec26d3a20
SHA512 2ead0383e64bd952e64e3cb7be813d9000a16f5799cdea58dc9bfad4622273fe142169cf95ad4697c76e12b0a99c24deba7ec6743d2502e71c7f77e389646db2

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 76170099771baed6fd227e3ea273ca3b
SHA1 859f6ed9732975f6c98c751f7e421935627c64fa
SHA256 b7c2f792a619f4a8eea500e5abeeabc0636f5b62b921062ab1f5f07211410ccb
SHA512 38d4f316ba04ebbc85d0b26bce5328ca16b48f342a1dc178e469a5d8dd06f9a5cb14394acfe63800f930d10079d3f266a98d8556eb6afec151b1e1dd4f315740

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 91750612f36ddca7c7247ed4b27b72b8
SHA1 72eed087405347ad8bc62b06a56ac79bfc77e294
SHA256 e356eeac112610472df43133a693a41378314a75b41e0f4372d580ef1df346e6
SHA512 797440148de616c5c2c8d8c2afe52045d9f6ae2b2a6f05bafa5c31ce01247cc8b16deab4519a68a0729a221d54452ad896266c580682b7278be0e578a59eea90

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 cc24f4a708d1e804ac033e0449b1e894
SHA1 67da08b98b5c8d7f9737336ecb9c1d3205950d84
SHA256 118683acf2e0fc1e2ed66c1e4dffef7257eba858ba8cd5885b4b5524b0b6f6ee
SHA512 db6533df85db651565ab302e6c68df1b0a7986f2316e669e400c8ecbcf3a68d3ff5ec1d1916c25d4268e60ad99ebe22844537b3ec943b149a5bb4071f9a9e762

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 da54cc0b72a97b0b820e469251806900
SHA1 ce492e5cbed3905d611540e68f44b0262caca8b6
SHA256 a4cf0e07270388ee462fdb90b764f80b2bcc80f0d11d350253fe973e477dbb05
SHA512 fdff25efc622ff373b41e2e0baf0d1f5e5aee0be84a371d77f28aeadade1a3595a6cacb4b2989fb1c48520397e320a5aa28c5023d2c2f39859d9848fef879389

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 70e4f643ab5cbca6c77f74a72005394e
SHA1 d820785a40dc24f85192ae6cd4ab5a31887e6dea
SHA256 d4916630dd0abf5be1119e15d8c64ea42a93d806651f6083abc19f4f5bcd4f57
SHA512 58b26368b2e9f8e97d71ef7f3027f525489509ed73f1130108441fc6dc98a405583be0c814c279692c53428058c7ae89b41ddae9de26b1acc717211ce57a816d

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 e313491a00ece05d39efd848721509f1
SHA1 ad9c22be09151894793a648428a3eb2dd0a7897f
SHA256 e6bd270fbc151847dcda30ab44994575d4ec33b444608daed636234e63b84435
SHA512 836c27503336cb25f252d1fcb197e490d2d87f845f85a4467deedcf5f8c2d6e3cd87f28e27eaf7f7158ffd794f87c7582c80ccc19d52f58b077ea1b5ac1fc3bf

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 e5179b4515bc6df75d6631494534166e
SHA1 f7d1e59af320d59f435be951c510d2e21745d199
SHA256 3f021cf7b8be7ead06dbf6ac1251c12e5ec3db1d6aa1bb93da74e59426d78d3f
SHA512 ca8b0b2cb9d8c4f18614e45db99e2d3ac7c6cd39839b4a3e5dd2785f746b236ce611e55dbc6341b9d51176648f49bebf4da191a4dff43046a517753fde4ff5f1

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2000_313700760\manifest.json

MD5 58d3ca1189df439d0538a75912496bcf
SHA1 99af5b6a006a6929cc08744d1b54e3623fec2f36
SHA256 a946db31a6a985bdb64ea9f403294b479571ca3c22215742bdc26ea1cf123437
SHA512 afd7f140e89472d4827156ec1c48da488b0d06daaa737351c7bec6bc12edfc4443460c4ac169287350934ca66fb2f883347ed8084c62caf9f883a736243194a2

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.8\protocols.json

MD5 6bbb18bb210b0af189f5d76a65f7ad80
SHA1 87b804075e78af64293611a637504273fadfe718
SHA256 01594d510a1bbc016897ec89402553eca423dfdc8b82bafbc5653bf0c976f57c
SHA512 4788edcfa3911c3bb2be8fc447166c330e8ac389f74e8c44e13238ead2fa45c8538aee325bd0d1cc40d91ad47dea1aa94a92148a62983144fdecff2130ee120d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f98f889c64541951066e8ff670735472
SHA1 a62766bcab6da2ba116b35e4ea4d3b50bb36d0fc
SHA256 ed16b3e13a9f526f6a24a8592fc65a4cb39af25f5a67a5fcc650d3b8eac6930e
SHA512 768298383e59000b7efe451e79bb712e6cfa8af7dc90dbd59e53645f1134f24f08c343800fd12e6493a14d35418cd6e73c704bf4bbdce00b4dce6af8dad38b94

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 341377e300814d43cc753d800bd59a8b
SHA1 a387ad2f974c462cdef12af3ef2eb03c403b6f83
SHA256 1bc930de47b8fe2963017f2fea7aefdcdb55947092f8e621c1a9b7833c4c2681
SHA512 c779bc1b5ed76e5e2aaadc0b10415171eb964ebae891135667d16584cd7bcd5efac02f29877d20448d0de37b556cd42d41f9740c8591be9b38b3ebd9dca0c2a7

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 9b1dbebad27f673a3c53e81745558737
SHA1 9fb29c84c0e0a93c6ffb46db79c347d59fff0490
SHA256 bdcbe37295fdd0fec75e3c528e27a54bcd0fa131fcccc74e661789f9e0505e3f
SHA512 8039ec555bc67e5f4e232910d91e79a854cd25042346a2f32dd837f17b190632327f6c78f80b50c3174336b6acd95c9eaedd196f0b3f89cdb850b19261aa16a2

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 1ad5b9818f10cbec2c5a95c897505533
SHA1 be7fa3f5aede8fbe2820a884d2ae30068085adbe
SHA256 64a910dac40bafdc10fd8dde7ff29f1e021af5807317149262985125dc29b332
SHA512 db7c791817973623763d561bad8b3155e2441e95ab329e26e2bf276adf9a23e880f74748b5c04337db09a8a1905abbda7be2c5da0bf0b9a7bd125bbb038dd101

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 e3aaee910ffd07709e667bdc328e8a26
SHA1 2fc488e67cd17c247a16efe80ead679b7a60cadd
SHA256 f8b4971ae699deb5cbe3c6bc8c56d37ce141b1ddcd8b39352ebdfe362d7a83e5
SHA512 60e2a2dcdec92c7dcef70ce04874600cf39dfb6e4eb3bc0035d29d1b78bfd9f5ee6fbf9cad1fbbe2431488458f9318a346ecc411af60d1aba2babc9e8b98009e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 f1525b4947f068486ca1a2a271cfe862
SHA1 41d4e6ec29c67350bd74999b82f9c805a4f2ffbb
SHA256 355dbc02675c8f049ec5d0ffa097bc18a523953b2dbe92bf225855109e02ab42
SHA512 0766efb00d564632fad8e58a96375316f25a326e41318b7cafbaefc9fccff53becb199e408afdfd64d4edc895b4b7e63f5a56f80cd7bbe269f9db13c6e926f99

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5dc6f50d2d262c6afeac810756f4039e
SHA1 5f0fb2bb7abb84f4bf4c8ee5a2e2b0b434339dbc
SHA256 af6e5dbdffe560a0868460befec9f2d45e7296b66e1b55ff77563e91c3056484
SHA512 86d6fb63c16afc31c505e693c7442a9b145329a7acd3443c32d7b58106c4358d8e16e001c12db6914dcee2057ca57bbdef6321a0874f7dd1eb9789b80304e2e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0cbacc9a3c6aa07deb13db83f658936d

MD5 e3690a37568ee9fe7f191a17a47e2146
SHA1 476c939e0ca065001820946509e36ac2842fb1fa
SHA256 b8da756d34febd98745815e7ee643c49dfdf1adeece7fbdeda22487c06472f28
SHA512 c7b777cb3616fbe210b58c1e2395ffb378ffb36c2fed3af8c634e7d39667b9b433386d1a284f936a1d4e10e76c7a678e97216fe801cf95a0fc3fb313fc4514a3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed

MD5 808cb55c51b6fc55fa6cdb17892dc876
SHA1 4487b86a3a42ff05e109800b1827c100390245c0
SHA256 eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d
SHA512 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ceea000e430b7c9714bd62a61ef5eb0d

MD5 e6bf3b994b7bd85aa47c17406d367d2b
SHA1 b18be2803acd9576aaa72bb19116b09680f0cbd0
SHA256 92638ea5cef2b20242923fd21757df86c8c434ff12243d480250364b8480f2fa
SHA512 3e207bfe1b30c981fb533971769a4051c0c87ffbfcabc012606ec939c5b66f2bf59cefeb85c2b903856d6396584b2c96472965c11d90d6a1ac9f59b29cf3d664

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0cd0725ce628c802aea646becfd46a5

MD5 b7c03229a5a8d6586e4532281bf1bcf6
SHA1 e2cf4dcb1a5ed9ec90882b05fd92a1cb2d9b7031
SHA256 2f68626defe72fe2f0f653e4f329dc40a4da28ec0b6805b7e372df74503490e4
SHA512 4b33587bd1e348c0c3c90ab22556c1a1634c9c16a7986d5ca92cf409a6bc9a2d4ef6ff29f1c56fbaeea7ea42b9e6bcac980f3a13869c7321dfa94b3d4c68498b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\95d98e1cfee595f720d12856399cbd72

MD5 39be6457e3ff988375205765c4660895
SHA1 8e946b84ba320df9c28aaa6e759e24719ec38aba
SHA256 1194e8aa1e2ff45887bca03f3ddee55de61436c660e162ae343ee64e7d146da1
SHA512 80f75601d5887291d0f2884945dd2ca197090431fb30dab6e6ee9ef601076950922a75f23a577dc58824a8ea7f57c48c1a742cdbc13a28215bead6b2b0b47033

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f10b6865c21c904e29f52a54a31f37a

MD5 38b25c1089062288a7a9a8876138e465
SHA1 d7dc1955cdabe9a50ef4f6b345c9012e3efeb56c
SHA256 e39aceee4952e730f1a101894520b046ff21156ebc79c0f8e070e87af20fdd29
SHA512 198469bc9aa03de2c29b322cee7714a67b1b421a8fb0b6ade7148f54fb5ea0a37f6afe5e80f052f41815174363ca2b2dc8395534c624f0f87d2f7a0e9d773dd5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1aac6bdbb2642f3f23fbed64d042c3f

MD5 2c65a49f36fbe81aed88d7626a0112e3
SHA1 832fc429cd021f288f5ef9531e7dad6c9c6507fc
SHA256 eb8f138e67962a5c7db64722b78454da2e3c3d656ec8d72c9bec566f10a942de
SHA512 4fe7c7a7e439f6b43bc13af9291994ff913fa65ab1d77f162c97b18ae505b1c46ffb2c9236b7c9010580b095526a58204bf182aa5d476e3d0a006b2ca450d181

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d34a1f5416fdc978c6e0c7edc7d67a2

MD5 c76ac26f80988d0fcf03874d625b86af
SHA1 b04a5e95018f8eca571daa4077e66626b9ba0de6
SHA256 3dca66141315cdee30f7604013deab2fcc1dd74af93f9630fb700b7606f531ab
SHA512 23ba1357212eb135ad87fcbb81bf73fcf2e189da34f08ca1cccd40d763a856e9ca8ce5514af395caeefca2b0dd3a6fe3b8d43e060c5baf5139fb357fedb90a59

C:\Users\Admin\AppData\Local\Roblox\3849981175\InstalledPlugins\0\settings.json

MD5 a124ac9f9f82ce9bfa4465e75bfad473
SHA1 465ee8d621bdb73b9987dbe479b976e1cef6917b
SHA256 97c10ff6f86f63a5fe2097b8592321a600ee8415cd1822e441c0ff138139261e
SHA512 2e5205b90c7de76a8ff73163520fc36db7ced0f891209e6f2223ec5419b0a08b0aaf866d9f57ccc7f99a1209d9b94567f840374387282090f54b33f35fe367fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 2c5c80f2d0b1751aa65c0c029961f544
SHA1 ba65bc0730a001cf456c2d28571a8c174e8899a7
SHA256 0a273c93adc2bc7f7e8241eb86379f69ae4e7689940313a829948547283bff23
SHA512 f0a6d1c735443499379eb099d2eff309cd75da93f909d66ea456a4e2408189c1ba1553e841c23453d6df9a4959f706be570c18bc86df42262df68cfa456f3914

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 66d3c017aae9b9fe027b645feb3ddf07
SHA1 a8d3e9473252f070e0aeaa407edd2e5517b34c74
SHA256 df6b38bc520359427f3e6ac6ec7ce231cdbd0e96f892b5153f4556086813cec8
SHA512 c272e2d0831f13eb7bbb77cb40514aa7150248775522563e24864aa279f681c6b9e3565012cd3e6ba09dde2d26d375fd9ce0c2fe5041fa19be4afb7ae4218914

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 12befae09fb66931f3f389166afbd88e
SHA1 6b9e90705a817467735c19331e0428216e03dc83
SHA256 a596a09eafe13e1eee704d56f136a042f268088ba4da0743cd4154fea9672577
SHA512 2f04c3a80b30c754db4c50c53f2e95939b2fbdfccd78f0169e8800664b3a533e4fe8bb7d14605121275e0ea5c89a0cf27ac6dab3d3d31b8b264dc577ba101bc5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 718a3d2fca9af1bdf486cfc4089113f6
SHA1 deba88a9cc5d0db92acf102fe00b60adb781170c
SHA256 dd5559ac72f90a363a5c3d853a0e298f25cd3ef50b4af5247d4987456775ee00
SHA512 9189c0131246df524a77dfc9fcee5f6e6aa8268df69e456319ab5c6d177d849f6b027cca607d664f43bdb18bf262cd04b8ab37c1832edea46c82c39ea542fa9a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c0b1139b4f1e15f2e21de4228423f86c
SHA1 1e101ee15fe11d4daaac1fdf3ae0f24ec991c1fd
SHA256 0a7c387dd12a16f749f13c1cf8c2a806a5589ec73a73b82c540e44efeb798a1c
SHA512 b4753669534652143caad8f4c50a25fe2315102f10e4daecbc918a0d755020790394928435b2e49c1e8aee3ec126d171e6ebba7c8cfa324f87523e09b2cbb42d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9e5247c83a4388f61f90087251c34f1d
SHA1 ac405df2ffdc017442c059962d9e56848480a1f5
SHA256 d41567b2b805e5f61be9bc9b8110416fc4b9b4ea1d290f89ac973cf6216c7489
SHA512 10dfd71339c7e1d4029d7a6a8b4082cc504aee231a29df005e6e7a5c7419d1076cee1d2255cf446626175582e46f5febbc34850634fe416b1dcdeb1e330281cc

C:\Users\Admin\AppData\Local\Temp\{53206083-46E8-4123-A2AA-414CCD0E9539}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

MD5 b18c705b3c68cc49d9bf3649abc75c24
SHA1 6dc8963dea0f3185368790dee2a346301b4fa24c
SHA256 c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa
SHA512 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8cc273e9bac12ab5fb3775a8a0000d0f
SHA1 08a6c514b3f7bd2c57d061a5bc13b4b0035053a3
SHA256 43ed73e26c85cc4a0e4bdc54c77a388055c49fc01b07817560a3bd2ccca4e5fb
SHA512 9d82c5724b5954072b26cff32504ed0f4435168cbb571f1cf593df1b906b8b83efd01c06167fa4a6c030b219fe08ec734faa02effe721cc754e6eb782fa1ee80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5e46a20288a1db9e27ef793f6a422d3b
SHA1 a0bf42e6dbc759a93750796abbd7bd36c8ff5217
SHA256 59621a5de353b2a35635c3d29a59cccd9f27ef8bc3f1c3c325c4cd7ed8098360
SHA512 37222006e7e69e3a96587762fed3b4c590e6c71245a5d95bf764e213dded9ee69cba408af2f82b4bcd0fa77a4055613432613b3cc2513d4b6c7cb26e1778c7a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 fcec0e148a1d5d346cf60fe60d48dc75
SHA1 c94b8b39f5557bb2562705adfa507d3b88cc4f32
SHA256 48e2cf2cae28834e91ffd719d7d153433e84e90609caaa97f7c626b64b20946c
SHA512 3f4d681b843599b4301a488c787da9702650e0b6b876f38a5939397b0809e6c481492979e4c47d1ba4fdcce7ca6fe23ccbcbe8187f4c5159a4e25dba36d52963

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7180159d38c1b7a2d1b9426b68ede7fc
SHA1 4d9b53e628353c8be33d1593f0eeb7346d92fa8c
SHA256 532584f4c0946f600d4e9c3a20b6ce27fffffb9c5ed3fcc5401d5f4c720c16f8
SHA512 29dc7f6ab0c4833521d70bbcb67f78e2b4a073557de079a54a3df69e681838d88c6eed06f01464dbcd93627360388934ed3ea59d940b2545a2398d06100e4ba1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e97286816ff3cf09f9cf23441d6ca648
SHA1 a6139a26ef10e7fca460ccedae8499efe9e90924
SHA256 0167117524bf878c6cf123cb5cb22220cc5a3499f64f5f79789a0ba0e31ab23f
SHA512 ff1c0f31f9302b42ceee6440e97014d7260b75115b033363bf5a7de26b6cb811cd77e31e3e6b4153565b76910b3f507af0b337e126b772d05e73f9e52aedb4c2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 47a5206f7f99bf1418adcd19e69b27b3
SHA1 0378fb315c60c0606bda81ad1bf27369c1388ed3
SHA256 0336a67947d768cd188dfec8970016c591feb3d1a9eb815b95f3a13de8c23c31
SHA512 ca92dcc6f402251d4b4921f01e8cdd41aa706ecf3d4da71cac8c08568732b58c2fcb04d8cb19e1fa25751b638967e02f308b7c6d30a610a42731d28468c95932

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4bc6cbef5c208e28e807a9385cbdce8d
SHA1 60fdbcf0751a12aa87ff5e25dcde2fb8395e408c
SHA256 8ac515f1644726b5d287e90c3b05c25965f99779244edd3e89daca2acd06c11f
SHA512 ec5ff573dc1b50e71c27375147d901c383fc04cff3021bd1dcf82d403645621c00177c1480945f0461eae64a7c52f06001482e219016904c93a43f5862bb8a1a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\652185ae9feb5d896e49a430a021f8ef

MD5 a4491030107683734770c831ac0f9e57
SHA1 1e1e95da4d2a8396df6733fbb50dbee9ec007c9b
SHA256 66ec361bae225d3e052583569f76bf580f36aafa98930c29007969f6fb8c64dc
SHA512 396304a21658953c2426a91825cf0e992fe4be7c65ac15d440f61e6898afd331fc8307f588de1af0ecaaa099adcf5307c1bd6daa6da0cf1b695a5ea65d1ef437

C:\Users\Admin\AppData\Local\Temp\Roblox\http\09aa227a10aaaba90b90f84f159feaad

MD5 344f8f2bb2a373a8f6556189faaeb237
SHA1 dc32132250d6a90e83e5249bfee8fdd810e68a4e
SHA256 8506fcc09099ab20976a9585e193d68d6dc6954f95eead079dfd51de202345da
SHA512 1b521b16e3af753e351592ed78741dad076352d3b9444897091598afd8a6c7b794901e07085fb4dd5d6535ed3d32b5300d334c7fa9617b674de8c1dd47a62f23

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6fb4bbba68b4bf0b2d690f78873151e4

MD5 b53404828a55bc368a85cfba2c27b415
SHA1 5c806af6db3a3e2439fb62c411e8025d87104b34
SHA256 53433448723f461f2c190732d148ff2bf0000748b0f5ed77ddbd5960c3d5a65f
SHA512 16f3db6b894c5bf89a1c9bdd1544b627181d309169fee1bce8430fea30e4e4b8f5a1074eb870282c65ed476f209db16242df4671c6f221aacdb48b9a093583d3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\924b7d7079baffd1d4883767fb51d833

MD5 d906b1c84ba89e9d537dd656236ad0fc
SHA1 bd0282fde0e710a7f0cb43739ce4db6acfd1aed4
SHA256 41b4b6ebfd9dc649b48cb0594d0553b8ee4023c97c8c41c741904d710830c68f
SHA512 5780dbb2a1f1ec73b67982fc013b2a9c508741ebf1318750d0043850c31d51383ee50831405b2497f88fa3964523e90639a64d6c06778be5521650d0c732424b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9c69b9a9a79613446af3925816030ef

MD5 6d7738f6530904547b564a95302a3fd7
SHA1 2e13d7cf95a2d3c3c1bfc07df018fee45cffbda1
SHA256 106d9ab89111cbda19abfadae33a2c8d8bacbfe2414f8666071a211b702d713b
SHA512 901ae007eea5f480509018f2e2be6c806307d2de7cbfe87db196eeca918698144bb264964ceab0841e9f9ae06e9ccff15e7f9340fc45474df9d67b5e30e80099

C:\Users\Admin\AppData\Local\Temp\Roblox\http\296e73a1349e86aeb861200c78a0bc75

MD5 34cc0c61d257e5fb5c02c07164b63171
SHA1 cc30a2fadf31cda69cf24ece9e31813c3d53e804
SHA256 c621a086eddb8aca295d5833962c179e0fb8c3cd4b4686c77b849dd2eb67d0ad
SHA512 7adc071bfbbf0b3f10462167352ff7c0a4dfb945902104fab3c761fb887d1f1b8243e536b0d8fdef8daf6f80c9c90e02b76df8cefbacf659941ee3b6ce0a76df

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3560ea3e562924c1bac9b2beb76aaec3

MD5 41667b8aa503dea7778a010125875f6c
SHA1 a2b973560df72719d9229283e9b9c7dd763e2f9c
SHA256 0e0bae83225844743bdce37e0936ae22f662a4e5780f2d0a4b0283b9c654b13e
SHA512 0ff1d57116a4253ce9af2010032f5663f1b8035a01641ae69fae77bd251179822453261bba8dfba078bace996b45a695796822186e9e04dcbb51272e4826ddd9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9b01e69118965d52e5265f29372d9ad8

MD5 ebf1c9c019441ccdb22b0cf28f0d649d
SHA1 26c1833a7c8c54b0b896001ac5fb2e4b6d8848ed
SHA256 00e8860fe46be93e5c0ab48c8bb606f3c2fa8d04bd03edb4ce359849aae2f01d
SHA512 905a5e8cac9dbf30430d69924648180150e5828103204cf42dad39dd39519a5c2e48a25b9083b4363f5dfd65a435bc009a8e8b5e023079731779fe9f762549b8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f87d8770662d820150daf416019dfc15

MD5 0b833c67eb74f1bdefc032a05da0c2c7
SHA1 64ab23ecc4d49a60515a1e8275a88d6a2ea7fc75
SHA256 73c6dddb3fc7f23d6cd19b51aec082d7d5fe2f30506214e0a351050d017d5eb2
SHA512 442060163dfebbcd9f0a7b30ec03c8dbe3844acf72cfaa88355cfa963a599d8ff4b38b7524ca7a340675a6b9dc7e1c4722bbec05346c6ae140e24a0a9635fa26

C:\Users\Admin\AppData\Local\Temp\Roblox\http\68be0597e23748cbd51ccf6007d5f0d2

MD5 cde3d43ca901a8764b84708dfea8f4fb
SHA1 63c3f31f9acd6d6daefc4c9cd271cf564d0ebcf6
SHA256 9c280e0bde45c78bc28e3e3bef038a19b1e30046d581cd657e5e8c3e222d021d
SHA512 648c038f3c937af0bb9eba9238cd6740b3409c84d5492965f1cea1069ddb0176458d3242ce36c5494939f959c3565513a18c4666e1f01f4a960a842f82fb7a4b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e938d7a0dbe21ef23a0f6a38d7b83027

MD5 9913c7fd61ec0a84f89f43d456b92452
SHA1 6324f7e5d93602ddd2127f792b2fd27b5421821c
SHA256 56b839413272aefdd9e7ae7cbef017c8fd026fc704f41bb3254752b4ff460f78
SHA512 d7549fcc50f2cf9d81480ef3cc12af0e52fc8c0078116b81d12dd46fa9e481c56797d94c30a9a0bc25c042f2b45f0aa49c30dc1cbc1b1de9d5f70b33b7b065ad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d9e079dc94db9992752460d2597a5bf

MD5 b4d154a82944748d05ad8692244b1760
SHA1 a350c3b17e1eed27fade24d528d2e8af31389b09
SHA256 2db6928bbcca1c8ed423191656dc6b72e2e9580265156d55d4ec12ebf2fd5bb2
SHA512 9cfb9392b92455681f919f1573273da0e85454bb67a3e3693683339ac6cc68854980ddbc52e460abe0db46f011e96334792d3ef55584976e9b4ff32b0d976076

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6334fdef2c64d0d1e2c4e2bf4106230a

MD5 ce9a8167c311bfff516c6db2eaefeed0
SHA1 6732582958361ec40e11d878dcd78e7b126e708c
SHA256 19ed1a8c0f3b170ef03204fbfc15c8ac5860fc7e78a12ab538fc7d822ba557a7
SHA512 b080f0d2d9fffb48ef66ac03e64b0e8ebd79d261c704ff534846512c57b062816890f38942c6783ddea216e5fd49d94c51184aae10c75bd099b8c60875125dd3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7c5fdfad1dd6897c9cce66bf2c39d264

MD5 5e00e3d1f62741eb6b26c04b94f429a0
SHA1 adb888f8d9496549f7d4f7cabc1593b01b6fd814
SHA256 7de039805fde0885cd77381dae12b22d01d4ec839702eb7f11192030cb1fe343
SHA512 9beebca0445cad76fe1e341673a47a4075432242b45148452e4dd09ac0d0afea42f676b5a3033886b87a8476872f095f7760c5ba393522065607f5e92e95a756

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cd837cbfd07b382dcf0e5ae670607cad

MD5 ccefc59716c865767c12dfea7e4b3395
SHA1 9a800e70dbfa4ebd134441037725c53cf57726d5
SHA256 91b1bf4548557947c8b117577ae6a4c1ef5acb2076d85ad84dc37dcd510186b7
SHA512 d28873e67b6a19b822b7d56456318f3120d2aca11f91d798d6e52a17239562fe5c757c665d0997d26fddaa4d1e696d15090604b06e9b7f33efa455a211b957d3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbb98eedcebd230ad36e2abab9f72746

MD5 4102f2d5d4c69824446df497e41c0bb5
SHA1 3f6252fe5b5045be3680c66133715619be9ca201
SHA256 b77947cd55b154fc0d6a6ee31db0cb5bd47a7e9018a12574976fb6b12f2655bf
SHA512 a04e818f5ce77839d63afb50cbf2d4421007bddb92a72495b8ee5569bfd1333de74c2354994fe161eebc7c81d5cf6d98c1137e1800c0680318d92db09f634489

C:\Users\Admin\AppData\Local\Temp\Roblox\http\935f70472e06f4b1dd154f64b8772b23

MD5 5b33b25d8ad7c825e351f4bb0f1790c3
SHA1 4e5f546adb60f8fe16f9837be183aa585d87acd9
SHA256 60b58737a0225ba21efa1accb031f995a457ac903a42075179a012fe0fc55bbe
SHA512 8810853133ce38962853bb38f7cbfd061ddf4b06941fa292ff2fdb29f35fb0ff35a400b331750fd501fcaeaa54fc6b85b2d01e6ba627f132e8feddb03e965d77

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d51e88c3822208a90be374c76d73b25

MD5 ec5ded319150e95fb788a914f4765d47
SHA1 889086465857ed81af2c8d00c350ea967537e06f
SHA256 54f475d73cc6524dfd2f020491b20b2e7b14cfe2550b6480b03d5ad697ca1f96
SHA512 a1f0639bed3b6578a1cccf00faaf28117179939d50d166de984161d7c5cdda3041eeac953d0ee51e2a8bd7c89ac1875c37350485d89720df8c1d9f1858041cae

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX160ED608BA0841898962AAA02E40C8A6

MD5 9de52d85b06da1acd48afa0d6d1d19aa
SHA1 6683b9c8eabeb1f315873fa6bcdfaaafa9353ad6
SHA256 8b231ef4bd7d12979f583d8c1b89c66ae7e379d6557a1bb6bfeffcafc15f1a2b
SHA512 f3c1210177102ad92dc8661720f12f4c6aed3a86991b59c823471464feb2eed41cc1512acc864cdace009852380701c20a694fdc0311d5a023c2b9298979c8fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\774ad174c53c04e6b1a29c22a5f6e32e

MD5 99bec00bfc46f3e950ee281f6c95acbb
SHA1 38ab6e7d03e5a58a32fa8b93cdfcf4fc1a959e48
SHA256 df51d04572d489f40be555b7273f7ed2e772480f2827e3bda6213fa38c909328
SHA512 04d346260c3083e318e1b7025e78693f97ab7da9511927efe02e9dad7c96755df7b3dec8bafd175c53514bef532c24846b8e9c429ab0f7942bb9adcadb2c757d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb1f01b605aa2e32ddd534638d366996

MD5 49d8d883f570d0e9c84eb3cd65a9e7d1
SHA1 b2a59049a67db07b7340d6ccd642974a7b036041
SHA256 9852716cfc073d591c9d46e59b1c6727a17346267d180238bdf280b62e4bb5ec
SHA512 1200a94f88761961385d6ed7a34d546df895f6c7a94df20d7f0e42c651674a34ee5f117c5120cef546336843a3f7fd248f27e34821076ede23acd4ebf1290a9c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\22b19b20581c5f62166a73f4ed0991fb

MD5 908169b22541e44d56f5d1909909805e
SHA1 40f82ea8fdfd3295706176ce7ba412e753f8eeab
SHA256 d52f23e90b859cc5787fcd15679a6c5ac79ea5bc9b03d5f58e6a67f57afe5bfd
SHA512 b4fef403d66bc05f31fc0929d38f44ac15ff6f2d3cb02160073a9d939ba28e985fa77521e558ece1c4ffc73c720c63ff263ae14adb2ec7b19d0cdde82513efcb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX7A20710EA5F3463D92A4FE780C18ECBC

MD5 934a11b8eaef18e6790e660f167b251b
SHA1 1195e4573af3ac1c966de8210b162d76f57df7e4
SHA256 8a8ffcca05368fdf6f8941aa5ebf50c565c4946e660dac731827703d5d36665a
SHA512 7b9ec190b7cbdaa40921a775beb6cc245f9e92b12785d0c1a9fc6285a996a809a2c80546a099fbdf5e2628404e4cedc2ab652f3e02c27012fd2fb3ea6d1ddaa1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\576c7360d7dbf5c209ea184dee932ce8

MD5 8b87e00e15e8b22c07fe61343b921def
SHA1 5275488ffd82741832f38ed90f0ba311e06a8c67
SHA256 e9bbf61c79723b15b5210f18154f102fc48902e154ef8feea2527b78e5941103
SHA512 0aa79e6ac8b69bbfa10dd41ea6200ef2ba9c7354969a74deacbc36e5cdd79093d6f592aecf35280beef8fb51a520ad0f80a44d76e63135c1e2f5fb19bdd4ba23

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc5bd8ade378eeb2f2c571d459c3ed38

MD5 e6442c3b94168425e8e5e9be9c2579ca
SHA1 f4b4480f6777ba1c62e7ee2e96f2e2042ccb67fa
SHA256 8c0de767b4c71ac5ccf0378292d2b64a0493364487e6799556a39dcb214f7810
SHA512 22e14c0f2002b3b184becca17f9419362b9620e6988d7750a721ba01f3554f0e759c558185be444d44364d7ac7354eb0d2d50ee47ba741365eb46662c502c782

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b51282e3f36eec204496ef04b5a60434

MD5 66628f78eac11a613b601ca143222c62
SHA1 56077c46e761cba8331b22cdc4b524562e346247
SHA256 bd84487878077b34628f1329b8fc46eba754374786cb3048f7db8913506fd0b4
SHA512 89eca651507c5c347c508a5dc09ca1ed9374321b63f7abd9d539a5c1663a296fd6cdd9407e762584be201a7191cd5444617481c1cdf6eafce4693d03a14065af

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c671193ef1eb8f6f9e4146e90911f4e2

MD5 80233f8baeb5cc11acbe3e4d4e4a8b03
SHA1 565f9c97e5c6d237adf7ae05f98aaf219ff0fb4c
SHA256 17f7218e051d2967101902591742827a1e204dba56b0bcdeb9ae5dea795ae171
SHA512 ecb1dc4299735ba4a953c5d1bafec3429fdb3e53ca62d51ec3ee310339bdd8207c89b560d7fa7080817ad9135bda7f991b784e9dc50f94b0e3c334bc13864657

C:\Users\Admin\AppData\Local\Temp\Roblox\http\76b2edddd96a9ff7ac03c65825291baa

MD5 0ccacdf365dfde9362c234cb7dd79467
SHA1 97b3deb9307d70d2e27e4cb0dab622d3f3b94d61
SHA256 a6d45aed9f36264de3b92d9215427fddfa90815da89d52b102cdf84f1b31d64f
SHA512 e0284c852db5c4fc48c3ace16eb7d4425028533bb21e82f5cab5a4ed57a89dd0a1f82f7f642e66c8224b2787da52b5a2f44473d8225225fcc884cd92f7046ae0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0da1eff9a99725e6873478bb53e6ad07

MD5 20a9b87070a921eb6ca606f4b49e4ee5
SHA1 500f261fd7bbcdaf2b4b2a3a6fa6f0cc69836e49
SHA256 0cafb5b24a63bf21914494b4800b2ab0aaadadf01fd5413b85ba98b573b8cd61
SHA512 65279869345c2add4d752e8db9b2b5d57f2f21f7441559a76a8c1dad56c8759a37bcc0741bb96164e874fa8062e89e2c200816625328126e019b377e79a973f3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXFDA76C176F48475CBBCBF017953CBB2E

MD5 b04c0dc18c7d55cd67b193981117e8e5
SHA1 de1b8da5292626c82c5369243ab17e1fe87819e8
SHA256 0e9e0d48cb004bf17d389dc2d43451e7c45546210703bf2c36048568477f538a
SHA512 e6a2aea601a6cc021d9537fd56eaf034dbc5932f9dfeca57fa69921733af8d1c22fa4997a596f2895ca60a9a064ace6a135a8c5893381595521da9cdcfcfbef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b8a499bbf45de839b1fc36948baa3c86

MD5 74d8c20fe5643091014584ac3f31cc9f
SHA1 5e674146e35fb02aeea8948808110a2879d43669
SHA256 b3e37830647d9c89208242c7b88ea9a369289e9f7391833995d81e84429d5988
SHA512 1a919ca6aabe13b11a04b9d96534ffddcfbf6f96c001f9fc562ff6d59d90c6bc4a953288448a45cc6be6396c5a9f0e1e7e264a0c0b806121fa1968f35206c011

C:\Users\Admin\AppData\Local\Temp\Roblox\http\912f5fc3f8ee84a59c48c411e53edbb1

MD5 c77201c032a8d835884aaef460a86426
SHA1 65082a70376eceba181d6a51f0398813e9e3c8dd
SHA256 6d97a18d7dd1a3971760a44b5c85aef291e6338c1e926ebabca6f5fe31c675d9
SHA512 c66c74ed3df2b1f39f047cb8ae6ef52275b0a3ba2e631ee78ab5af54122fd8a2fcd9dbb9a4d8a70585f50edfd16ab95e4200ec2e3599c28adb8289a8e61afa21

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7e19bbd7e01b1fbbb782ad96ccdd0383

MD5 4bc0f6370fd0b2a524d2241fac6d4cde
SHA1 38176dd2cce4716b89dbad35bae6ca6b4efc4ebd
SHA256 dac028bcb424fca6873e241c8f8b68126c4bc7a2a29d353197491d3ca05f230d
SHA512 6ca1114d117db919abd5716a571e3ef828d18480ec94e3676b07d994ff1d41d09a9dcec0388ff0dff7ab14ab87f6e1168bc5f1625bec50a27cfb01dda9db1b8d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3f93504bdca796e3dddb64afdf1c765e

MD5 3d6ae078cc3b6e83f8a6a64bcd2e0070
SHA1 1bdedf5e6900174a3dab73b94f1f7613abe189c7
SHA256 ea53e0500ba54ad16c65d3c84682707ceb5f58b552efa1dea35cc21a7c74b1fd
SHA512 72baeb24e4af7353a38208d130bd2f085bb6214bca1c60bfa288498ce74e7e36215d1f8bf4f9fc04ea2d73ca9c461751bf16949a493163e5867b29dc16692d00

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0aaf6f7317997d554f4a87946e18f4bd

MD5 b7fcabc842e34093c2d79eddb9b0a14b
SHA1 a6ac7bc76d847debd8851693a34c9d4652770ec9
SHA256 ea654e6a85aae695ed6a83519d28e14c497685a7d9a1e3113de375dfad9c0105
SHA512 30bd3f1a0f400ec09fb702f60da46d66415fcfbeb38f0c4ccba33ad9ec0f31c536dfa514ab06a7f4fe96b7685195a69f9d30caca2244dda3ec8866193f2ce26c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\373eb9f859dfb4f553b19748d262bbb1

MD5 e6ac2d485aad3b98341b7d126a034c04
SHA1 4193eed9387a9645f6cb6323b48f31d4ae7096c7
SHA256 05defb267e9ef077e09014672106fb227f7166552fbabb131ca26195fbd32b90
SHA512 18ec7a42adabfd627061a45546b2499f9cd51650ee7d3d64b1c5eac1920771f093da37656ae8a07cbff974ef8f1328eb74392d87d6aca52da0d8dffbef4fc700

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2f20103cac5461a1d3547c6e14d7587

MD5 1b9490b907af8da1fcdcca50c8f65b90
SHA1 cc193d424cf6411e6354fa24ab94a1edfd252cf4
SHA256 7332f2665454eadc72aa894f2dbbe8369ed53b1462c8951d2c0f3e1f09616397
SHA512 bbc0bd3e165b69997bce74bf28349edd89dc8e7509457c8a40df3de21745f3e63d0026101b4a31bcdebe0411a620168b49ec0f0431b7ed2315f92e346cf458b9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5aec6dd7831bb40cad69ef531245c982

MD5 c8e8488f5a8df7dd94804ff45977c540
SHA1 2e9f11a2f761082a2bb2e9b971bf3de206e9317b
SHA256 44cf4d3c5439ab9a4d150f64b0823c6cdf1210fd79e5b21ddfd76e6238389c6d
SHA512 feeab5c3b54472ce79c7dd005e9b4b39e2e1368797168c4d30400504b9141b989d8614d2a8fc4c1116e4b91928ab2822a8ffa1c452c7e8da9ef29a658ea2fe06

C:\Users\Admin\AppData\Local\Temp\Roblox\http\59d6162b990b825e47a5a17840a290b4

MD5 4a06d8dbb0a44093cb060444df66e9f3
SHA1 82d9fa21844ac6d38549a21c093d0090b5eef4b8
SHA256 f33df6a2685b9a7d34d4b2f42d438605a71f663e2214900174ec0f10f3693848
SHA512 3057c4a3f0e2a11baccce453ac09966a604c5c6c56d3d619783388c2ff4e2d431cea959b489b51cc63b3f69bd23a9e6115765a0d1ce19fa6e41b5d5d412a81a4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb9ee8cc819203f05d7637ede0beeb9e

MD5 a56419bc5591c9df7bdf253e676b255e
SHA1 9612185390e998ac3565e7c757f8cca6b9b59872
SHA256 f1335ea78520b8a7d35be3023d35c753c284ac25e749a829050ac047d6b62ceb
SHA512 f028a91defe8354edf28097deb334fe212581ace1f5758e4b5ebad940609cbd17d6c09caa1c86afd9033120329248c08694830b1bc8b84572554cae33224b185

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f9e35446bfadb5d4129043fa8bb82b1

MD5 a7472e68952a38918dee3797e5692012
SHA1 dfc37353f19f0002a2b8df87dbc571f67727a56e
SHA256 6d7fb2b5baa15b69a1be6f749d593763818b877a11de32a5e56ade74c5880e21
SHA512 e3eb12d3812441f01fe8eaf698cf714234bd2de164bc674bda5e41b7b100ba75ae5a2b1ae98e38a74defd2dfcb74fa92649b091b4cfb45c2dd71bf11106eb478

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2b30553b07e18a0d003e4a1bebbd61a6

MD5 09c26f8cac35fb8e115d32ac102e5f16
SHA1 7bf890275ed4c9e158ab1bb2c2af6505cfd54f89
SHA256 751554fba217c8e1876d769d3909a63fb3f3dd7fa4ba9a9e7baf0f75e22e3f3e
SHA512 e608500fd78d4a687adfdb9bd69160b44ec3ef564c16fd7cb5e4517f9d2acc64254d3f7bb3d95db27bcab0b01af668ad92c4b7b258ce8a54804a0ba491c39303

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4a1dec29780392dea5242040f94c9217

MD5 c6c3ff875f74c8a78cb8eb192898d30b
SHA1 5b7e8360f06d5587b6efae4aef8927a393299a59
SHA256 0080b5b0005cefeb793db0cde8fa2f170e72ee1d1564977832f23f1b6741c086
SHA512 527062c187cc53b5df67fef00f12702c1955a0f1dc2c815cc90a6746c788164179e93e1eee352307d61cae5c1b6b28372d4ffa8242f04166fc1c0dabc593a70c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b5c868db2779185409fb3b2401eaa579

MD5 1bd1d720cfa8799424b0adfb28e1a3c1
SHA1 33347c66789d777a2156a46bf2556469ae5ffe47
SHA256 a0177c39e8f96dcd53919f49e4ef5e41db8a4fbb44f0e215ed8699030febfe9b
SHA512 768a67f51f0fad77b4249ebaefb6ed3528d92e691ee4f164188fa7b2312f9d73cacf03a77f2c268f5c31ff2bb7490e5b93e19dfdbc80011ec3bd70aff4b60de8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bd8fc30861d59170337a8af42d319ed5

MD5 ac1be1d9939bc14593b6622c5bd760a7
SHA1 fd69ae312e76e3535cdd9db2570a664e47aa25e4
SHA256 ed50f78aa9fc27e2efdbfb344721e3b0132259123d1aa467d67163ce49f35485
SHA512 a4e11bc5f8f4f16bde2c89088da58fc99df4aa8ca72118f41b39a55a43b41d93602c3e3ce8d2cf5527be5f44394981c025a4a3398da6d07806564aba27dbcecb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec47b467af331a6628abac2c3273b943

MD5 b726e8a17c6945a78ae38cd633161a13
SHA1 15c457b79abd8f7574551a5ac06446e756310eed
SHA256 5dd96f2c8013dbc100ab3e2ea993c4e4b49617a433b46e4ed693090111edd605
SHA512 e3dc84b822a584fefab854c216253de3967b048087d4782f708858c2c7fb07663ffc46be7625a3647a753c3efcbd482374f74ac3b87188e0323cb1fa7115dec8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4563cfb0e3cc7ac81fa9e1430a798c97

MD5 8289993517864bec0bc6833291375b80
SHA1 3ca4cd4efdb86792d4d8c9c3c53139c437a51642
SHA256 207f707b15311f20acf9f579109942788e7c8239de61bf37243a6dd49f70554b
SHA512 658d1e7ddbebba31aa8c5a81964e6a6cb01fbb384d6a6916b1edd6fa9fab4954d780ff87c16fb8e3f51f1a2ecaf34b45cf462e5da3bcbb75dd7ae050451751e2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dc4df0672a0d4b43384200f964369627

MD5 fb6e6922cb12ad73cfa851f8df7f58bf
SHA1 0984931e90eb29a3e1312bf5f5d741f9082556f2
SHA256 d502d74d21b6962804cd0c4469bd3e8805c188cc092b3bd06535126f9e8c8388
SHA512 f6b43b3f1d7315ba29f86bd7d378a0d234654d5df35a4368bdfb928893ecc1cbeba068fe13fb044a284989463480936e0a891e79a5cb1c3b15185052b60fb624

C:\Users\Admin\AppData\Local\Temp\Roblox\http\44763be8b197d9f18d2e61185a91f7d7

MD5 f2cdc3fafaeac94699662abf05ded219
SHA1 f8e0444a11fa743ca89d9dcbe9839e15cc5280e9
SHA256 ef596a0a1e3a50a06a927160ef9e32de2addc4e6c43f6590e3f0880102d96c0a
SHA512 2ee35eb7336e115372dd8f214f671adcf88ce07242610825b0e9331093ba6f20f21ba40aeb8e703abaf200eb2c32d37547482837fd62977d0eac208628e93e85

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5004b5e6339c240abed1c8db09d4a290

MD5 2344d8b9516f40c1d143918285594914
SHA1 4a19e1bf2c424d145934d9101b7f0b2e13cf8540
SHA256 da4bc4fdbc10b67903261666a64ad02ae1a3b435edf5ecfe2405a01d6b314f10
SHA512 ea17b5d0b61cc8372cbccb97b18cd8b372808dcfa3b2721261f3236151f22e1270efefa9c0b9d26fffa7e7c928a67e33abb9c0279fa0cc5e34658031dc410510

C:\Users\Admin\AppData\Local\Temp\Roblox\http\310351f8070aeecf9a76bc3841cdcd2f

MD5 5d1c129833102cb0eebe7b138a73332e
SHA1 144ce9f442359c9303a0fabda667d07c0f7a8eb1
SHA256 11f781a2a7ee79952f1c07f179d38bd5bcb124cf1437c04f2d270b825cab602e
SHA512 881c60c1c95c78ebd723c4c6612196c4918ed9a6ff82b478af3ede821d9f5e4ef1ac3b2bd1453a040e88fda84bd8343502a3005c31a2ac2b0b19465d91740db0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bf23c0df55adcccf8e3110482dd8d129

MD5 d42fb19480b4b92a72f5667d491ec504
SHA1 f85a96ff15ba14d6622d85f0c13f0e684ca5f5fc
SHA256 569cbed068ce436e26bdfab7d1c55a378e20a20f8e6849e69f0df0cc3b8d3e1b
SHA512 54f3a4687498342de80de95e45002bb5c0a96bc7ea35190ca5ecc5cb519f0930a697fe1a2312576b12365fd30110d8b114eb46db76d908d1a525882f404d3c3c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\40172473bf1072a72a786d391c55040c

MD5 a137454faf7f482457a93f32ffcfb6c5
SHA1 d4d41871baf679aad52413e9a2a6d3cdacc344f7
SHA256 c5f7459f3d1420f7d81eb8650db76a555804c98850ca9dda9049d5a664042c1d
SHA512 19ae6d59105656a6102137f2e77585b9276db2ef4022f218f104b06859ce6d4cee50dce167bbba2256769fc8bc2c0decb754a2657edeb30ca8f62059b97f024b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\394017880856753bd56435f9b6f878bb

MD5 186cfe66788a1700e867a316c486718a
SHA1 67322873651d16b317fbfe721a2768304428d8e5
SHA256 56a5a13600307dd5a4bdc4576f99bc38c1992103c0ce33c7cb075a82673c939f
SHA512 b9dbbabf2c5e8fe9c5c913b8b7e8639196635653520cd79f3f345fc1c698b6d5a308753d74b87815f30448ec77a23b72a02246f54932a37c27946802d59b4b90

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ea423ea6b856b74723d1c88c9296b83d

MD5 db4502ce828ad9ff03af8a08bbcedf9a
SHA1 c7b2874aff229ba114fdc954de22f9ae4ec1cf56
SHA256 8909d59bf7e744106135208a2f9cf9126d6386fc84ef425230de10a7767482af
SHA512 84e5cba485dce4b26f4d6492f35d3aa38534ef47326852e7a80513122f061ff61a972cd8b340f41de96e6122e24c4fd6d0863edd6cbb90960e5e8bdb3fe2dda9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\29fe3ee32bd8896b773925cd5dfe25b5

MD5 8959ff62a12b9237081508eef14913a3
SHA1 08fc65bee12cb085d7878373bf4ef65c4b7e9c43
SHA256 9be01d68b796887a4afe31ce22a638d3d134386e8c34c94ff5a4c57afc83a29c
SHA512 1b51c0cf13f69b115e3e882b5c9b94d86d860a7aaf7e8a84ef9744e80f4383420851b41696ac53a704cb06f789f8f56fd89e914f1538d764cde7da036204f5ca

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d71ae520c5189701ab4cf68a236c52f7

MD5 f2ff2cb3a7644fc893472d124ec7ddbe
SHA1 dfa3575ab791566aba08ac81391da5b33ea7d093
SHA256 2a978cbc92299de6a96e99442948d491461802aa7bf6f59ed5f321825ffd145f
SHA512 985c52c677158269fddc5926f0f79e9c4bf409af597557a154b06dc838541d58463558acffec9a71594a4c88e48ab7be1923382594bd31ff54a8a90e33c36739

C:\Users\Admin\AppData\Local\Temp\Roblox\http\50ee868bdf9e1077fa9dc14fca3a321c

MD5 b0f90bdebde14f45e81989716c173a3c
SHA1 0afe133a395d6f3d1b0a3f9314cde0f1ccf2fb79
SHA256 e861b18da5ce9d69368462c205808b719c2cdee0577210f73d559436421826ee
SHA512 a9d2b9cb49241f39b730c414d0853c4a17b56add33457bb24dd9dd09edee9b2feaa3f7dc7ae999791c20d80057aa185b9fdeb95cff1203f87100db985d670c16

C:\Users\Admin\AppData\Local\Temp\Roblox\http\49fd766b568b4434b4eb3841c56de450

MD5 1b4993c247894f704b28d1e951d0ec08
SHA1 2eb5c3ff615e96be831dbb02691669bb4cec8132
SHA256 3574f11bc022c37abe49121d67f35f2fd38a77c623fcfc3e379981de827d37ce
SHA512 6861c5e78d35cf68fd4da68fdde97e7c7626d8680cea50bfd602abe789ecc651663e9584ccc5c534b24039f7c6bb43a3d07de8d6bd706f13f858f9a62abf4e71

C:\Users\Admin\AppData\Local\Temp\Roblox\http\055ed88a8a6428f8d0c31c09840f00da

MD5 1416a3f17aa6aa0b0111ea8b3abe1c60
SHA1 8ec41699a7dc5e7317b444ce8d875435f59f6406
SHA256 de8db48c38e86046a16450d70af7082505eedb6df6732a13e49ce3353149c8aa
SHA512 7fadb3636c3a38dfa81ed9718b3d90bf4776c0aa958c493f8bebebcdbb7ab93384691d389d8a1bb166a0aa81261844787dd0f7c884b37c52e12ea52caaee2c14

C:\Users\Admin\AppData\Local\Temp\Roblox\http\98331f6aef109b8146007f4a965dc137

MD5 ce29b9b1380dccb8bbe3e0de919d495f
SHA1 5e81758d6127c7e7f1b4f79727e799ccb176d8a7
SHA256 d9e9c49562d042024622a762f7f2bfe796d9f150a5b245b05a6df693272d6cd8
SHA512 5575c27f07f026eac52acad41cf2f7bd294fa311125a967777d4f0d8c5b089ec76666edd7e9e64eb41211a132ebc2d52f8a65aa7d87652764ad0920795492b49

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5949228ceccc5438b7539255bf7b4c34

MD5 2fee3b8e7b4e01e9c60e824967ce576e
SHA1 5e701d4cd85f040db2f7719a3afbfd4c2a8602f6
SHA256 7cfa0dfb985cfca4d4a1d1fd3c575edba2af58e0939ea984bc09b5a114ef4822
SHA512 7c33d3cfeee61ad8b743a315417e75d5bfa67131a239abdb450a22b5cc3b5cc8b301d49a3b318cfe9db6638d0cce29a7f718aed4590e4deb6746ea36088740be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 df0a0840cdb716ccae65aba2eca28956
SHA1 2969a143bbb48d99f554cfc9d632e5b8a2ac492b
SHA256 dc53e299da870b722f4c161b9d69a801301eaee4407d93b00073287c1b1ab171
SHA512 596e3bfd79f7d0a2455503c3b95cc80d93808ddcf36d406e4c0d05c1f1f9b5286f638358deccfef7d5ea84b7b70fdbd0e33168bea7efdb16faebcb95f830fb5a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 75c39f1ad733a86eb9eb66c8f474e3b6
SHA1 0991c49bd31e4ff744053a0dc03a142fd8071fc5
SHA256 81e4005bb1b361244cb5bf718b91641c735340d2e818ddfc419ac6b454ca4100
SHA512 32df750f2f49db30230566b2ee836540ee4aa089b042ddcfda64b47c93553e862b5b66abb2289bae767753426adbc795648f820f2761f33ff8dcfc9eabac088d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 363f7ee564516f7655bc617136c7707d
SHA1 843f4aa2b324944bf39b52137ed2125ebff0e2e6
SHA256 84595e1c532ecdb77edeecd886934cbb01c255eebdda0bdf345c874f1522f41c
SHA512 266b6ef07a774b5ec761a96c8b65f531fbd59a3bcc5eac18bbdc751a126589a111704a061b1fd21b7987cdb7ad58448acb97d40c418af278eab45f1d00002824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8d08270a67961e5a4c11693a47ae0070
SHA1 2795cc118e64a03dc8fafc6799c3c173b365fe96
SHA256 701ff4cb8ac8c4e51c18a9fff96c333588e86631c63f0396463a5efaef067ff7
SHA512 9d84984b3b8f5b7fcd74a89ee5cc58013e4e21297260673a4c549f51d4cf8d25c10937379bee9855f8c21c08848e6ab6a49e6f346a1228fc06ab7bcfef5d489a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 40d864107ab1ab1cfcdc765a57cd9319
SHA1 b1ef542a4c69ca1f1ee9a8fabcc486551822bc25
SHA256 ec3dec92bea4d572242edacb6ed5a3eba8dd3c670a8bde431a03ecc0a3e0b0d0
SHA512 04429ed1d928bb64cfe7a007e94cb357489ff849c5c4c301f2c0216ca10c4c70331067940760bafd8d0d330d465ab873612efa6b84a614bd662dd18ece537b2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2982f690ca131a49bd80d2aca141a7a3
SHA1 704e2665261c65d522a7a68783b7610958a6eb47
SHA256 7013308cb582232ab2288a72cec68aea535aceb92f345f06cfa64aeabc992f98
SHA512 cf80a0b24817a996a5f4a8cfa43b0603553d805619d293ab5389b65a611e57cd99fe036677cb77469b307d57206cba26855f2da11cedfbd4fa70ea284ced991c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 334fc0d3075f627b8425a5062677d8e0
SHA1 6a1e3a2cb9bdb75502f772530a034cfb8f172f34
SHA256 ca49242bcf59ed9e2089a4e2720c2af133eb30b33ac23d16fc4151978810fea3
SHA512 31f5ebe11052f67530de8f03921efaff737d643a3b1e1a77c8df170c59f5041307d71d290d125c3e7cac2cf09f5a92a03bc0a4aff5868290fafb82c7e46bdeb4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1b80eed5883c47b7e929dece05b53f2b
SHA1 60888b58247d6ffd546317d1796c7bc574cb3b9e
SHA256 523649c7d906ec52755422dae20003fd2c78a138f5a715c710123735760c2ab3
SHA512 94317dee5eb426986120b0525162281e290139d6b8c67d8d2d584ac77cf1ebfda415c22bf841f9c416872a247324dab1c97162a878f8ba91d13d8ff3611cacab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 74e0036c9f18f61d83b07bebf05de1e7
SHA1 51697c0f15358d50c6e19787743a8fcecc8660c6
SHA256 7cbab22d910e2423e2f8cd0eda0e955c98cf72046ccd315f4b8c8f7c711ede05
SHA512 3450ebe8b7a80193a51c9e0054afdc35589d57b6833206117d1eb123070fe286eefc341ad160966fc1b88efe45dab7fa8a1662f4d2f9a4f4c5d7ac99b8fb144c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8a85a3e0d40c12f7683a7e4a6383ee9f
SHA1 60bd879eacfa46dc312a991fcdae70c9cff3cdab
SHA256 b32373ff083160c8b5e2765b479e798944dfac919e787d135199b3376a2a2e30
SHA512 9e41d600b76fe72d019dc0f1ad1e509fdeb481e42cb76ffef1f429fd0485c8e124953f9a182b20d00755a348c7346e3325156099f67aaf1daaeef707f603ba04

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 c7a760baa8dfcdf78560f14eadf49993
SHA1 cca2b79a5a792530c70f8b53990264da854e0501
SHA256 6dc0d143d60d718db3a5d6a3c694b460f7a970bc92c5c03cd0ffc9a5f780804c
SHA512 e63eb59c7fe8236e6e2fa05390ccaef54d9f4c7d311c02393a646f98027bc7e8fa76243608ee5cf9e113f9398e32db4434be9a406cddb947c214bff3d3d59c67

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 7e8db4694b1a1dace7f8876d8ed250c0
SHA1 3e25b6dfb25684dc841759e538cec00b5933cd87
SHA256 837a315dea6a51f1e70b840c00eef32d2f4bd8e6f2192778acf51a7fb15e0081
SHA512 4b911a9e3e1110e849dc5736f1ce507b1728b11fc4db6d559616145c8bf5ee5645aa08e813e58ee739245801ec20d0da5662343cbe9f9fe80e7c9c3e9d0f902b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4d2079dd6e51630b590139101942ec9d
SHA1 1052c83e012ea08fbc2a5fb9907bac5cefd6e382
SHA256 cb1f97d1e000ca86dab180612f32a536639c475a7a0ff4798d7cad606b0c348d
SHA512 4ef8b299a2bcd64032fb7739ff770ab698889581a84502d470581339d9affad4b482d7a971e24735067d98c3804138a25b1d5d42bb3eaad191ecec20dc475008

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 ec86132d1077f735c84de97d0f7fb4c9
SHA1 284670877e8b425136deb3ad883e8d18562589c8
SHA256 83a0940d489ca6756af49b69f79df360ec363ee8395bb342188b6b479c1f6d9e
SHA512 c58a414eeecc422f7c3065e1a5cd46740f81d542e4c2c73050f12d7d07c0361f0dda87a26e57cd36ff9f752aadb70c449c81484e970c091260c21181b198361a

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\208a99a4-919d-4edf-93a6-f2d046e33caa.tmp

MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 422e7a8e0517e1c48f0f6d734250560c
SHA1 1d94b5aa6fb7d6f642024adc728639fceab922cc
SHA256 f9710a9d0a7c49fd1f315d27b33e4d80db8c1c1534d1f9460f088dc6ad1c63fd
SHA512 2883cde3455cafbac1b341c11fe848916279c38c2f3df8441d4e3ca029ce77244b957fb984459d05e3d8e6852a882ffc6fd7fb661f3df1730c439e209a70aad8

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 cf1cbe9251b074196611e55b97e57172
SHA1 85d49c0c83fb8269a3966cf5864c53a816f81df3
SHA256 07ba44403e5c9b023286acf6f1cb99c9cfcdf5a2910d57e1fbfa132a5d20708a
SHA512 8ec91cddc0b0a2e3a0f59526b0f17585b9953f9fe6e2cbe11920bbe338818197f23b017f134c1044b8d6cec623cbeb46c5c3b29e139a63df691c6b9f13cf3c0f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 d94dad9065a0c251823b89d15b6682c5
SHA1 de22e13ae5560ca6e1191eae0db5591d10dc4596
SHA256 4b53e1435f506c4ab993471045f1b783237ae3a489dd6bd72c8c3765eaae5153
SHA512 7ac5ab388694bcb754899f51283ab4917c4f5f56e58531351861fefa7b58d6498ba593257d9241de47a92129af9f0ce1aa0e5e175f8404970fac842308d719cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 65209b887a42f3f082ebca64510038a9
SHA1 61125532a17d8773641dd5d6990bc0398fc659d4
SHA256 ab117f6d4e5fef379eb0d144e125ddfca04b0b8ec1ae60b3c8c32892822f0eaa
SHA512 d8bb1576244da86bc1e37cd2c826704adfd9aa7bb8bbf4997c73865edb0665fec4952ab4210471f50777757d8b21e6661aed2f86494f5a3fe0b780c245a30add

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 2fbbd3fd68a1a1bf802f78845690aa27
SHA1 3895854ec93ab1618074209d3181dbc6b538a206
SHA256 c9a72df13bf5061bec6104047ecade35eca5334fa020c981bb115978b3bcd9f6
SHA512 b84525a03a2ea14c6ad3a2e7c4e2481f06dd5593dc9002ea560a20a097f8ee3de06a01772dadf70dd444aff1dfe5bc824c459b6cc5eec78dc0998440b5107210

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 79c0aa2ccefdc40f8cb476d2394d5392
SHA1 7cde8d9120655265c206994a0d016683da681ab7
SHA256 848968daa4d9d7a9f9d49af04636cc4b9d352b4671e74f993f2a3e3adec6c225
SHA512 23404f09af69d41c1daeb84091cb36652bdb4df1c9b783cedc4945822471516b96c588bc1554419a87849917f524922867eff0cef52b8b5499ba98d5982283e1

C:\Users\Admin\AppData\Local\Temp\{B589E380-F032-4560-B36E-4F8B844F0197}-BGAUpdate.exe

MD5 3f208f4e0dacb8661d7659d2a030f36e
SHA1 07fe69fd12637b63f6ae44e60fdf80e5e3e933ff
SHA256 d3c12e642d4b032e2592c2ba6e0ed703a7e43fb424b7c3ab5b2e51b53d1d433b
SHA512 6c8fce43d04dd7e7f5c8bf275ba01e24a76531e89cc02f4b2f23ab2086f7cf70f485c4240c5ea41bf61cb7ceee471df7e7bdc1b17dfdd54c22e4b02ff4e14740

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0e0b42b4b7e5278f91176dd41ec76e27
SHA1 25b085859a48cf66808a4166803bb50dc3072d7a
SHA256 654374b753f48a007af50178377812d75993036b43468ec8e02dd4bb2817a277
SHA512 c42043f316c1e5e40e8d9790ced3ebd2fab4ed4ca9a970ffd635df61c85441da020af27e793828731961497008d5dc7364981c32e4c94d9fdbf589b63fccef5b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 5b139e353758a9873814cdcf4d3b6878
SHA1 4f13096e006057bce27562732696d7b4ce55e5e5
SHA256 251292da8b59a922f5d5272547e9a1455ba3b21bcd01aba7043a1e62580ed5ef
SHA512 aa1434c211793e7589f77067016897737e5d2fbc8b5e618cacd38225801aba11953bd47d65887b12265363bb78c91dce920a6a7bf75ed24ae2d9b6727d4e0593

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f1b6f4098d7acbe02fec63e68dd30c65
SHA1 9ce090c467f14caf55fe57d92d9bdab063fa7808
SHA256 ae0f9547c5c09e5df2c73ed369a7c068b2bacfe0cb4c1d29af67ab045e2c6efd
SHA512 8c39ccc325d41b1ccd794d3ec5e580edf479ee5bfe62d20fb261fccf7d1d6a91b3f9c5650954e3441e53e258de81f81918ebce53cd4abd654a122fc0b7ca4b5f

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

MD5 28f5cf3c1d590016d7e5ecb1843571f5
SHA1 406f6637234211764c4e13753272caf704ffec2a
SHA256 a975a3a4ee010fbcc6a60c8c1798a19a1dd795655b4b629d20053bac9c5a3da2
SHA512 0e1fe3d1cbc9eb36c41a534b26ae95603bfad4e2f593fe1a8df9570209924772a0668d3c4a20006fdb700fed1decaffaebb189f34b8474eae0346ae924c6e938

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 3844107d4f8311f48eb4567191af3530
SHA1 b81f8a48c16c5937aff197667daae0146ce58a31
SHA256 95f9fe50b214d58afd76d16c6a5a72f03413e448f312a6749b771eab41aa2a86
SHA512 798e64f3d5f0477684731a03ddfaf192544d79676a7b0d532acfc056b92ae7b58d096c3af4047b057595a44e341868b93915020a7224a666f1f8cacb1d1d1130

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 542901987b60c36cc53c38a1951838e8
SHA1 ce5546a34f9286d6954b040d32e69f8fa5f56aee
SHA256 cb7a5f1bcd87d20293f56521e72691b32ade95a22abdaa168f319df42c232071
SHA512 7045ce02448c1f0e718945eb4f1346276f1a12b8710f45c565ae7cef3cfbaaf513098c1bfb1745772d70e39527add9750c9efb01e0ae242a1146c8cef22c14e0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3ef4e553ecdc4886bbeae66f6e4e466b
SHA1 ab040775740107558da01350fa879588760f0f16
SHA256 2db9ce2050ebd27c2d38307db51578d5e33d1dd2d1915ca926fdd29369c663b6
SHA512 c84497540cff3bee860468e1c55d31e1de1ade4688f4057fa75c94e4bb20e6779a07faa29e9821f4aa05dec4ab5a1f6891a9393b78983e9f5383423fbf4d6f87

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 11b51b708937afefdb822ebc7263cf6e
SHA1 0551743abe664a3535a429750357d7140a09dace
SHA256 8b0544138bab7208e794d1e6ad73bd41c6ec30c5bab43bdcc12b04416bf95743
SHA512 3d498030521d2c387f431a96bb9a40e3e93f964a644109dba33f33f0bccb323e0a39aeca2fc2c5d61665095c80dec29a0fd7265f32819188d7bdc962a538ded8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 24b1f2d4b77bc61d1fbbd08bfed3d8ec
SHA1 42e824e8efda699d0676ac4ea8b4bc6e3e48110d
SHA256 f3cc4f750a4a75c6b934f436b351f1e7dc96a30f1fc4188f857dd226ecb56464
SHA512 a7475fd7cc6cdb1efbefb2cabdd56eac627b80bc7ba5745c097becb6a1720318310ddf71d32f60b760b67ad3e0ec6c138fd6d8ee979db8b374e180a6ca5dd50e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6f8d455c1234858d8536cda39ff3953a
SHA1 2c5f8e41bf2fe5c358fd3db0f1d88f56f83f1dc2
SHA256 2e617fa12a86617aa9ef671001a5d87eef9b4e39d60be26cf3d64bc2250cdd97
SHA512 038f747cee32d5e19503f738f63bfd164d0d0f4aa59314364aeeaa637613e9ba70dba8d657c541d7d1f378b05779baa8b39af90cb33cae993d7a02a747b9e0f2

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 434cfe870a155badef04e1547c04fd89
SHA1 8cebe3bb1114edeb4a9f66ea532f98f85fd0e766
SHA256 ea6b6672a3043718d171c11e50bdccbc3316a4113cf5d3647411fc73010831e4
SHA512 0d3e6c557188f45862d3a7bb80476088976613572c7a40abec7b5cbf9984f34b3fc01de0bb6426fc985074fd7df3ec10ed25b2e2434dc115e320657badd3b751

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1f3230b09bc31f17b048a998f7a863a0
SHA1 df7bfa28ea072b542ec468ead2ccf8ac243ebc0c
SHA256 3624eccc08cfedfb03b20392f69f46243d7ea915d6fee1efccad67f8f379ed73
SHA512 e5736a87240b006d6ea1c8949866e73575cdf9bd6d6d28a9865b0ce3946b6e121db65ca4e006dd756bf50f3e3cd7eeb93875eff1226069392fd67a8c7443359b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3f0ff55749678a4a7831db03c91a7f50
SHA1 1aa991af36d8bb6f4ced2c52992853522c754837
SHA256 7583cb803259c5bcb9341509956f977d75c3ca7cf24b3917a32909bbfe2480a0
SHA512 d0bf0f8e8b98725ab7c2286811c6bf1d1c3d491ef0d45c06a946140a13c589a5ffe9ec1fb63bc68ca424982be635aa3c1018b1a8840860987ad2735f60e7e676

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1f133cd33fabe3df4c0605b1a9f78e78
SHA1 a62f1c3e0767f7cc192b135fc2ab57808c792557
SHA256 cfd2ba2b241e6c3a7c90f11cdbfa09c5561586827612a70b950fa6465b64e726
SHA512 c9f7ef791bf9634777fb51071aeb0a09347e09480b53e7f636cf53b780f12a3d20bbdd3801bf0b63df33e93ddc7f5a04a616c4fbb5f16be411897dd01b606291

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e2532512d2dffcbf3b59978f168ae6d8
SHA1 03aa12f74ec3b3e8b4b6ae4b3e310d7659cce68d
SHA256 546842f356f598bd03165fbacc8fdf0e312dfa7c0fb8312ef649f33337883a06
SHA512 d2b15c6420cefa7ddfed9edb3a60b5e5dd342dad893ca064ecddc3846be37eff7cb7601d5b40224f20093bb033759d3f855c3b11fbdc16383dd192866598ccdc