Malware Analysis Report

2024-07-28 08:36

Sample ID 240610-s8gq5asekp
Target sample
SHA256 a634c2139a4a82f18fd4b01428c363c70ad26c80be0a12b1891747efb72e18ac
Tags
microsoft discovery evasion persistence phishing trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

a634c2139a4a82f18fd4b01428c363c70ad26c80be0a12b1891747efb72e18ac

Threat Level: Likely malicious

The file sample was found to be: Likely malicious.

Malicious Activity Summary

microsoft discovery evasion persistence phishing trojan

Sets file execution options in registry

Downloads MZ/PE file

Loads dropped DLL

Executes dropped EXE

Registers COM server for autorun

Checks whether UAC is enabled

Checks installed software on the system

Checks system information in the registry

Suspicious use of NtCreateThreadExHideFromDebugger

Detected potential entity reuse from brand microsoft.

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Modifies data under HKEY_USERS

Modifies registry class

Suspicious use of WriteProcessMemory

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Modifies Internet Explorer settings

Suspicious use of AdjustPrivilegeToken

Suspicious behavior: EnumeratesProcesses

Suspicious use of UnmapMainImage

Enumerates system info in registry

NTFS ADS

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
Persistence
TA0003
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Privilege Escalation
TA0004
Boot or Logon Autostart Execution
T1547
Registry Run Keys / Startup Folder
T1547.001
Defense Evasion
TA0005
Modify Registry
T1112
Credential Access
TA0006
Discovery
TA0007
Query Registry
T1012
System Information Discovery
T1082
Lateral Movement
TA0008
Collection
TA0009
Exfiltration
TA0010
Command and Control
TA0011
Impact
TA0040
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-06-10 15:47

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 15:47

Reported

2024-06-10 16:05

Platform

win11-20240426-en

Max time kernel

1049s

Max time network

1051s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html

Signatures

Downloads MZ/PE file

Sets file execution options in registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\MicrosoftEdge_X64_125.0.2535.92.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{7DECDD2D-E849-42EF-A073-44D041D995A6}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.187.41\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A

Detected potential entity reuse from brand microsoft.

phishing microsoft

Suspicious use of NtCreateThreadExHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\MaterialGenerator\Materials\Brick.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Menu\buttonActive.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\125.0.2535.92\Locales\fa.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\ExtraContent\textures\ui\LuaChat\graphic\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\fonts\TwemojiMozilla.ttf C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\MaterialGenerator\Materials\Plastic.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\StudioToolbox\AssetConfig\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Controls\PlayStationController\PS5\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\125.0.2535.92\VisualElements\Logo.png C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\MenuBar\icon__backpack.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\StudioSharedUI\grid.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\LegacyRbxGui\Aluminium.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\ExtraContent\textures\ui\LuaChat\graphic\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_af.dll C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\CollisionGroupsEditor\delete.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\SelfView\SelfView_icon_indicator_on.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\PlayerList\FriendIcon.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Settings\Radial\BottomSelected.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\msedgeupdateres_ug.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{7DECDD2D-E849-42EF-A073-44D041D995A6}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\models\ViewSelector\ViewSelector.rbxm C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\9SliceEditor\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\125.0.2535.92\Locales\ja.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\125.0.2535.92\WidevineCdm\manifest.json C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\AnimationEditor\image_keyframe_bounce_unselected.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\StudioSharedUI\pending-dark.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Controls\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Lobby\Buttons\scroll_button.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Gear.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Chat\ToggleChatDown.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\ExtraContent\textures\ui\LuaApp\graphic\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\msedgeupdateres_sv.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{7DECDD2D-E849-42EF-A073-44D041D995A6}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\LayeredClothingEditor\Icon_Preview_Animation.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Settings\MenuBarAssets\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_mr.dll C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\Locales\nb.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\TopBar\iconBase.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\Locales\kok.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\AnimationEditor\menu_shadow_top.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Controls\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\InspectMenu\x.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\VoiceChat\SpeakerLight\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\ExtraContent\textures\ui\LuaApp\ExternalSite\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\ExtraContent\textures\ui\LuaChat\graphic\gr-indicator-ingame-10x10.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\ExtraContent\textures\ui\LuaChat\graphic\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\fonts\ComicNeue-Angular-Bold.ttf C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\PathEditor\Tangent_Handle.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\StudioToolbox\AssetConfig\version.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\VoiceChat\Unmuted0.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\VoiceChat\Misc\MuteAllSpeaker.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\ExtraContent\textures\ui\LuaApp\graphic\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\models\RigBuilder\AnthroRigs.rbxm C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\explosion.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\SelfView\SelfView_icon_mic_enabled.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\TopBar\dropshadow.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\VoiceChat\MicDark\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\125.0.2535.92\VisualElements\SmallLogo.png C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\v8_context_snapshot.bin C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\AnimationEditor\button_radio_innercircle.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\AnimationEditor\img_dark_scalebar_bar.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\content\textures\ui\Emotes\Large\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe N/A

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ = "IGoogleUpdateCore" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachine.1.0\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\LocalizedString = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\msedgeupdate.dll,-3000" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ = "IPolicyStatus2" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{82CCB536-D2EE-4F19-9067-40531F08D1D4}\InprocHandler32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ = "IPolicyStatus4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods\ = "7" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F09CD6C-5964-4573-82E3-EBFF7702865B}\VersionIndependentProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebSvc.1.0\ = "Microsoft Edge Update Update3Web" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine.1.0 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods\ = "7" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass.1 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ = "IAppCommand" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\CurVer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods\ = "43" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\RobloxStudioInstaller.exe" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ = "IAppBundleWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods\ = "9" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\CurVer\ = "MicrosoftEdgeUpdate.PolicyStatusMachineFallback.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\CurVer\ = "MicrosoftEdgeUpdate.PolicyStatusSvc.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ = "ICurrentState" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ = "IAppCommandWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\NumMethods\ = "43" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{82CCB536-D2EE-4F19-9067-40531F08D1D4} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ = "IAppCommand" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods\ = "5" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\Elevation\Enabled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ = "IPolicyStatus3" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 115415.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 999187.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1088 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4880 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 1848 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4636 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4636 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1088 wrote to memory of 4300 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe07e33cb8,0x7ffe07e33cc8,0x7ffe07e33cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1932 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2588 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5192 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5000 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4880 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3760 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3244 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3996 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2292 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2576 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5980 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004C8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2904 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaService --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=3424 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1240 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7368 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7476 /prefetch:8

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MEMwMEZCQTUtRENFMi00MTVCLTk5RTYtNzgzMkUwRjhEMTlCfSIgdXNlcmlkPSJ7OUM0OTkxNjctNjBFMC00REYzLUI0NEMtRDE2OUIwN0M1NzlEfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntGRTU2REJGRS01MEIwLTQxQTQtQjVBNS1FQ0NERkZBNTM0N0Z9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjkxOTE2MzQ3OTciIGluc3RhbGxfdGltZV9tcz0iNzEzIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{0C00FBA5-DCE2-415B-99E6-7832E0F8D19B}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MEMwMEZCQTUtRENFMi00MTVCLTk5RTYtNzgzMkUwRjhEMTlCfSIgdXNlcmlkPSJ7OUM0OTkxNjctNjBFMC00REYzLUI0NEMtRDE2OUIwN0M1NzlEfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins2MUQ0MzA5Ny1FM0M2LTRBOTMtODU3Mi0wRDhEMTU4MTJDQkV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjkxOTU4ODQ2NTAiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\MicrosoftEdge_X64_125.0.2535.92.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\MicrosoftEdge_X64_125.0.2535.92.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\MicrosoftEdge_X64_125.0.2535.92.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=125.0.6422.142 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0A25AD57-9612-4D2A-8FDA-80F9EDD3E47A}\EDGEMITMP_91185.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=125.0.2535.92 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff6a4304b18,0x7ff6a4304b24,0x7ff6a4304b30

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MEMwMEZCQTUtRENFMi00MTVCLTk5RTYtNzgzMkUwRjhEMTlCfSIgdXNlcmlkPSJ7OUM0OTkxNjctNjBFMC00REYzLUI0NEMtRDE2OUIwN0M1NzlEfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins5QzZBNEIxMS1GNzBCLTRGNUUtQThCOC1GNjEyMkMwOUIxRUZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjUuMC4yNTM1LjkyIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI5MjA0NTM0NjI2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iOTQzMzUwNDU5OSIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjE5Njc1NyIgc3lzdGVtX3VwdGltZV90aWNrcz0iOTg3NzE5NDcwMyIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjQwMyIgZG93bmxvYWRfdGltZV9tcz0iMjE0MTkiIGRvd25sb2FkZWQ9IjE3MzgxMDc1MiIgdG90YWw9IjE3MzgxMDc1MiIgcGFja2FnZV9jYWNoZV9yZXN1bHQ9IjAiIGluc3RhbGxfdGltZV9tcz0iNDQzNjQiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:x6ZpwHSD1KeAky4jpXexamlnsnOa4xKCDsnvfho4uSPdVQD07xUYp-zqMsiOHnYy5gm6OwV2xeSkp35j92E0VihjjmZch7OufSdJsfRsW1yCdVz4x_TUDAnq20SHMWgqZqezGRGghmZheiu9PH0PFKg4yLk4OD-hY3lNsSTPbO-42EIg3yht5coRL1jcN_hzHkDZmY6Wg0UC9sdRhIk2d9zgBJNMbCtzaJAn6J8NVbI+launchtime:1718035043945+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1718034746911004%26placeId%3D9872472334%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3D85fb8466-75c6-40bb-ac94-8c59c92914e1%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1718034746911004+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6176 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:947vj6zVBN8FypybE_M1o9S9Vv1WUVGKWaH19sdm1yq0QAkynRwvH1QLJbTZuCJI0S29Rj279UMVQsZNUzb6Dt187G9k4tyA5J8GrQ7NNNW3gh2kwekZy0wuFRS0cDMJEnk4Q6tHP5k8TPrfUWAl4V2VsXrqOFg548EdbR32rgfrANPfXv6JbhVRdyVWUclzWQZcSYnodx1pG1yvVgpYoSw5jUnoj5tTHoP-IHl9zgA+launchtime:1718035077365+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1718034746911004%26placeId%3D9872472334%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3D0b6c3342-8aa1-4aec-a5d8-fba4b3df8e0a%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1718034746911004+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7448 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:eUHodnBTVpo7lNggOPiAXjrEdVBo7aJlm1uuFru1zJZhkEB5QvU-WIFIOoXOdJTcA9KYsOA-ei8gkf09oTk7Ok9z6OqlrmpFhnE3lI6ApH2EACtGA0qLJCaZocRU2DUXca9z31YrVrpzq89oyZtI_xlK2PjjaEtAW1M9MdNA3JUmmGBzBWI47vv1DnKUg11WunqHY3wMdpwA9szQ9L1hcCMuOAmGOsFyu64MB8YfJDA+launchtime:1718035210479+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1718034746911004%26placeId%3D7180042682%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3D5a0d4d99-e45b-4f51-b764-8878ef902240%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1718034746911004+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7704 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7552 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:Oc1LAsH25-mesqgBGcIsTfbIl20Si-rfk956Lv8f9Rx0oIbBIfSl2CsPNmOvS2w8hUkvepi-rJoB1ONqVTp5qgj1HkTTsvwEYQbgVFh1DnraQWu-D6wVNf2ufzUF1yFxA0tOzkYt8vIuFaLF-dkh_VQ3pXY_DhDzx5_3A1U6d9BNMYxyv96NMnoABxd93XDv23OsRltqfcEZAD9jtJstMjh-Vnwq9wifQXG0Vts-2ts+launchtime:1718035210479+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1718034746911004%26placeId%3D7180042682%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3D5a0d4d99-e45b-4f51-b764-8878ef902240%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1718034746911004+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6236 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:ua9gO6_Rhea8rNQRKv0OchAkaRZeRpbaNcA5BlDgwq8vm2lj9txpMHz3dySaGBp_a4UiMMG_iDgO8XQp4R-eK4WATYYoM7HbiA-qB2p6qwxzwtWUSPd91sMmSsJFWH9XBeQe3R2wBXqYi9y-wVg_JZl0fhWtMGOVm0uwYCikrNn53meHIiypHPLWgEl7NDAV06oiPVBly5PBQeKJuZuI1bfrevZqxD2VbZC04IUg2vk+launchtime:1718035210479+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1718034746911004%26placeId%3D7180042682%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3D5a0d4d99-e45b-4f51-b764-8878ef902240%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1718034746911004+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6276 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7452 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7620 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1652 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004C8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7812 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8112 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7880 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7780 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8328 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{7DECDD2D-E849-42EF-A073-44D041D995A6}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{7DECDD2D-E849-42EF-A073-44D041D995A6}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe" /update /sessionid "{8F7ECB37-2E19-4607-80CB-330B07D178AA}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7OEY3RUNCMzctMkUxOS00NjA3LTgwQ0ItMzMwQjA3RDE3OEFBfSIgdXNlcmlkPSJ7OUM0OTkxNjctNjBFMC00REYzLUI0NEMtRDE2OUIwN0M1NzlEfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntENkM3OTU4QS04QzI4LTQ5OEItQUVCRS1CREI1OUYwRDc5MDR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4Ny40MSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyNjY5MzA4MzU0IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyNjY5MzM4NDM3IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDA5MTA4OTY0IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy80YWQ5Y2I2ZS04MjQ1LTRlNDctYjI5OC0xZmY0YjA0MjU2ZTE_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-PC9hcHA-PGFwcCBhcHBpZD0iezU2RUIxOEY4LUIwMDgtNENCRC1CNkQyLThDOTdGRTdFOTA2Mn0iIHZlcnNpb249IjkwLjAuODE4LjY2IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzYyNTA4MDcyODU2NDY5MCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjEiIGE9Ii0xIiByPSItMSIgYWQ9Ii0xIiByZD0iLTEiLz48L2FwcD48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iMTI1LjAuMjUzNS45MiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIHVwZGF0ZV9jb3VudD0iMSI-PHVwZGF0ZWNoZWNrLz48cGluZyByPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0ie0Q5ODk0OTY0LThFNTMtNDkxNS04NTZELUJCNThEOTY1QTA1MX0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU62F1.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{8F7ECB37-2E19-4607-80CB-330B07D178AA}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8744 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaService --field-trial-handle=1920,11149491450629324771,7544424734839051457,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=9024 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
NL 23.62.61.129:443 r.bing.com tcp
NL 23.62.61.129:443 r.bing.com tcp
NL 23.62.61.129:443 r.bing.com tcp
NL 23.62.61.113:443 th.bing.com tcp
NL 23.62.61.113:443 th.bing.com tcp
NL 104.97.15.59:443 aefd.nelreports.net tcp
NL 104.97.15.59:443 aefd.nelreports.net udp
FR 20.190.177.22:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 104.18.20.94:443 www.epicgames.com tcp
US 104.18.20.94:443 www.epicgames.com tcp
IE 2.18.24.8:80 apps.identrust.com tcp
US 8.8.8.8:53 94.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 8.24.18.2.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 104.18.2.64:443 store.epicgames.com tcp
US 8.8.8.8:53 epic-social-social-modules-prod.ol.epicgames.com udp
PL 18.66.233.98:443 epic-social-social-modules-prod.ol.epicgames.com tcp
PL 18.244.146.119:443 components.unrealengine.com tcp
PL 18.244.146.119:443 components.unrealengine.com tcp
GB 2.21.189.91:443 cdn2.epicgames.com tcp
GB 2.21.189.91:443 cdn2.epicgames.com tcp
GB 2.21.189.91:443 cdn2.epicgames.com tcp
GB 2.21.189.91:443 cdn2.epicgames.com tcp
GB 2.21.189.91:443 cdn2.epicgames.com tcp
GB 2.21.189.91:443 cdn2.epicgames.com tcp
US 44.198.218.247:443 tracking.epicgames.com tcp
US 8.8.8.8:53 247.218.198.44.in-addr.arpa udp
US 151.101.2.133:443 media.graphassets.com tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 104.19.178.52:443 cdn.cookielaw.org tcp
US 104.18.2.64:443 store.epicgames.com tcp
US 172.64.155.119:443 epicgames-privacy.my.onetrust.com tcp
NL 23.62.61.75:443 www.bing.com tcp
US 13.107.21.200:443 bing.com tcp
PL 18.244.102.48:443 now.gg tcp
PL 18.244.102.48:443 now.gg tcp
FR 92.122.166.32:443 cdn.now.gg tcp
FR 92.122.166.32:443 cdn.now.gg tcp
PL 18.66.233.73:443 css.rbxcdn.com tcp
FR 92.122.166.32:443 cdn.now.gg tcp
FR 92.122.166.32:443 cdn.now.gg udp
FR 92.122.166.32:443 cdn.now.gg udp
US 35.190.88.7:443 sessions.bugsnag.com tcp
US 35.190.88.7:443 sessions.bugsnag.com tcp
US 35.190.88.7:443 sessions.bugsnag.com udp
US 18.245.199.26:443 dn0qt3r0xannq.cloudfront.net tcp
US 172.67.10.132:443 edge.aditude.io tcp
US 172.67.10.132:443 edge.aditude.io tcp
US 104.18.166.224:443 pub.doubleverify.com tcp
US 104.22.34.123:443 static.kueezrtb.com tcp
US 104.18.23.145:443 cadmus.script.ac tcp
US 104.18.33.178:443 static.vidazoo.com tcp
US 104.18.52.27:443 polyfill.io tcp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 8.8.8.8:53 178.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 27.52.18.104.in-addr.arpa udp
DE 18.157.128.118:443 api.cmp.inmobi.com tcp
GB 216.58.212.226:443 www.googletagservices.com tcp
US 34.95.69.49:443 i.clean.gg tcp
PL 18.66.233.128:443 geo-location.prebid.cloud tcp
US 34.95.69.49:443 i.clean.gg udp
PL 108.138.51.38:443 production-cloudcontrol-cache-cdn.infra.aditude.cloud tcp
PL 108.138.51.106:443 production-raven.infra.aditude.cloud tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
PL 18.244.149.66:443 c.amazon-adsystem.com tcp
PL 18.66.233.117:443 config.aps.amazon-adsystem.com tcp
GB 23.49.161.153:443 secure.cdn.fastclick.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
PL 18.244.146.21:443 tags.crwdcntrl.net tcp
IE 34.253.110.95:443 bcp.crwdcntrl.net tcp
NL 142.250.27.84:443 accounts.google.com tcp
US 52.22.168.1:443 fixnlntptgvuwqeaqv7ij3bgoy0fyiho.lambda-url.us-east-1.on.aws tcp
US 52.22.168.1:443 fixnlntptgvuwqeaqv7ij3bgoy0fyiho.lambda-url.us-east-1.on.aws tcp
PL 18.244.102.48:443 now.gg tcp
NL 142.250.27.84:443 accounts.google.com udp
NL 142.250.27.84:443 accounts.google.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 2.22.144.11:443 aefd.nelreports.net udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
PL 18.66.233.73:443 css.rbxcdn.com tcp
PL 18.66.233.73:443 css.rbxcdn.com tcp
PL 18.66.233.73:443 css.rbxcdn.com tcp
PL 18.66.233.73:443 css.rbxcdn.com tcp
PL 18.66.233.73:443 css.rbxcdn.com tcp
PL 18.66.233.73:443 css.rbxcdn.com tcp
PL 18.66.233.54:443 js.rbxcdn.com tcp
PL 18.66.233.54:443 js.rbxcdn.com tcp
PL 18.66.233.54:443 js.rbxcdn.com tcp
PL 18.66.233.54:443 js.rbxcdn.com tcp
PL 18.66.233.54:443 js.rbxcdn.com tcp
PL 18.66.233.54:443 js.rbxcdn.com tcp
PL 18.244.146.81:443 static.rbxcdn.com tcp
PL 18.244.146.81:443 static.rbxcdn.com tcp
GB 128.116.119.3:443 roblox.com tcp
PL 18.66.233.73:443 css.rbxcdn.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
PL 18.244.102.64:443 images.rbxcdn.com tcp
PL 18.244.102.64:443 images.rbxcdn.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com udp
DE 128.116.44.4:443 www.roblox.com udp
IE 2.18.24.24:443 apis.rbxcdn.com tcp
DE 128.116.44.4:443 www.roblox.com udp
US 8.8.8.8:53 fra4-128-116-44-3.roblox.com udp
US 8.8.8.8:53 lax4-128-116-63-3.roblox.com udp
US 8.8.8.8:53 fra2-128-116-123-3.roblox.com udp
US 8.8.8.8:53 cdg1-128-116-122-3.roblox.com udp
US 8.8.8.8:53 sin2-128-116-97-3.roblox.com udp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
BE 2.17.107.186:443 c0ak.rbxcdn.com tcp
GB 128.116.119.3:443 roblox.com tcp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
DE 128.116.44.3:443 fra4-128-116-44-3.roblox.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
US 128.116.63.3:443 lax4-128-116-63-3.roblox.com tcp
FR 128.116.122.3:443 cdg1-128-116-122-3.roblox.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
FR 92.122.166.16:443 tr.rbxcdn.com tcp
FR 92.122.166.16:443 tr.rbxcdn.com tcp
FR 92.122.166.16:443 tr.rbxcdn.com tcp
FR 92.122.166.16:443 tr.rbxcdn.com tcp
FR 92.122.166.16:443 tr.rbxcdn.com tcp
FR 92.122.166.16:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
NL 128.116.21.3:443 ams2-128-116-21-3.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 54.215.216.30:443 aws-us-west-1a-lms.rbx.com tcp
US 54.189.254.207:443 aws-us-west-2b-lms.rbx.com tcp
PL 18.66.233.85:443 c0aws.rbxcdn.com tcp
DE 3.64.151.237:443 aws-eu-central-1c-lms.rbx.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com udp
US 151.101.0.176:443 js.stripe.com tcp
PL 18.244.146.98:443 static.rbxcdn.com tcp
US 128.116.32.3:443 lga2-128-116-32-3.roblox.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
US 128.116.95.3:443 dfw2-128-116-95-3.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com udp
US 52.9.10.202:443 aws-us-west-1c-lms.rbx.com tcp
HK 18.166.161.212:443 aws-ap-east-1c-lms.rbx.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
HK 18.166.161.212:443 aws-ap-east-1c-lms.rbx.com tcp
DE 18.193.195.191:443 b.ns1p.net tcp
DE 18.193.195.191:443 b.ns1p.net tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
US 54.213.45.60:443 m.stripe.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
US 128.116.101.3:443 ord2-128-116-101-3.roblox.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
PL 18.244.146.115:443 setup.rbxcdn.com tcp
DE 128.116.44.3:443 fra4-128-116-44-3.roblox.com tcp
N/A 127.0.0.1:52312 tcp
N/A 127.0.0.1:52334 tcp
DE 128.116.44.4:443 apis.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:52337 tcp
N/A 127.0.0.1:52340 tcp
PL 18.244.146.115:443 setup.rbxcdn.com tcp
PL 18.244.146.115:443 setup.rbxcdn.com tcp
PL 18.244.146.115:443 setup.rbxcdn.com tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
FR 92.122.166.31:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
N/A 127.0.0.1:52800 tcp
DE 128.116.44.3:443 fra4-128-116-44-3.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com udp
PL 18.66.233.6:443 css.rbxcdn.com tcp
PL 18.244.146.6:443 static.rbxcdn.com tcp
PL 18.66.233.67:443 js.rbxcdn.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
US 8.8.8.8:53 6.146.244.18.in-addr.arpa udp
US 8.8.8.8:53 67.233.66.18.in-addr.arpa udp
FR 92.122.166.16:443 tr.rbxcdn.com tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
US 128.116.95.3:443 dfw2-128-116-95-3.roblox.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
US 8.8.8.8:53 aws-us-east-1c-lms.rbx.com udp
US 128.116.32.3:443 lga2-128-116-32-3.roblox.com tcp
US 8.8.8.8:53 aws-us-east-2a-lms.rbx.com udp
US 8.8.8.8:53 chat.roblox.com udp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
US 128.116.127.3:443 mia2-128-116-127-3.roblox.com tcp
US 34.205.21.180:443 aws-us-east-1c-lms.rbx.com tcp
DE 128.116.44.3:443 gold.roblox.com tcp
US 13.58.53.14:443 aws-us-east-2a-lms.rbx.com tcp
DE 128.116.44.4:443 chat.roblox.com udp
DE 128.116.44.4:443 chat.roblox.com udp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
DE 128.116.44.4:443 chat.roblox.com udp
DE 128.116.44.4:443 chat.roblox.com udp
DE 128.116.44.4:443 chat.roblox.com udp
DE 128.116.44.4:443 chat.roblox.com tcp
PL 18.66.233.28:443 c0aws.rbxcdn.com tcp
DE 128.116.44.4:443 chat.roblox.com udp
DE 128.116.44.4:443 chat.roblox.com udp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
US 128.116.63.3:443 lax4-128-116-63-3.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
US 8.8.8.8:53 contacts.roblox.com udp
US 8.8.8.8:53 accountsettings.roblox.com udp
US 8.8.8.8:53 economy.roblox.com udp
US 128.116.102.3:443 iad4-128-116-102-3.roblox.com tcp
US 128.116.99.3:443 atl1-128-116-99-3.roblox.com tcp
JP 18.178.250.12:443 aws-ap-northeast-1a-lms.rbx.com tcp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
JP 18.178.250.12:443 aws-ap-northeast-1a-lms.rbx.com tcp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
US 54.218.138.227:443 m.stripe.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com udp
DE 128.116.44.4:443 economy.roblox.com udp
NL 23.62.61.72:443 www.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
NL 23.62.61.75:443 www.bing.com tcp
NL 23.62.61.75:443 www.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
US 52.167.30.171:443 fpt2.microsoft.com tcp
GB 2.21.188.60:443 assets-www.xbox.com tcp
GB 2.21.188.60:443 assets-www.xbox.com tcp
GB 2.21.188.60:443 assets-www.xbox.com tcp
GB 2.21.188.60:443 assets-www.xbox.com tcp
GB 2.21.188.60:443 assets-www.xbox.com tcp
GB 2.21.188.60:443 assets-www.xbox.com tcp
GB 2.21.188.60:443 assets-www.xbox.com tcp
GB 2.21.188.60:443 assets-www.xbox.com tcp
GB 2.21.189.233:443 www.microsoft.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
DE 184.25.218.240:443 res.public.onecdn.static.microsoft tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 8.8.8.8:53 167.154.64.172.in-addr.arpa udp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
SE 40.126.53.18:443 login.microsoftonline.com tcp
SE 40.126.53.18:443 login.microsoftonline.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
GB 2.21.189.233:443 www.microsoft.com tcp
US 104.208.16.95:443 browser.events.data.microsoft.com tcp
US 104.208.16.95:443 browser.events.data.microsoft.com tcp
FR 92.122.166.12:443 catalog.gamepass.com tcp
US 104.208.16.95:443 browser.events.data.microsoft.com tcp
NL 23.62.61.72:443 www.bing.com tcp
FR 92.122.166.12:443 catalog.gamepass.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
FR 92.122.166.16:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
NL 23.62.61.72:443 www.bing.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
NL 23.62.61.75:443 www.bing.com tcp
NL 23.62.61.75:443 www.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
GB 142.250.187.229:80 mail.google.com tcp
GB 142.250.187.229:80 mail.google.com tcp
GB 142.250.187.229:443 mail.google.com tcp
NL 142.250.27.84:443 accounts.google.com udp
GB 142.250.187.196:443 www.google.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
GB 142.250.187.229:443 mail.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
DE 128.116.44.4:443 economy.roblox.com tcp
NL 23.62.61.160:443 www.bing.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 104.208.16.95:443 browser.events.data.microsoft.com tcp
US 13.107.42.22:443 signup.live.com tcp
US 13.107.42.22:443 signup.live.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 52.167.30.171:443 fpt.microsoft.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 13.107.42.22:443 signup.live.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 13.107.42.22:443 signup.live.com tcp
US 13.107.246.64:443 mem.gfx.ms tcp
US 52.168.112.67:443 browser.events.data.microsoft.com tcp
US 52.168.112.67:443 browser.events.data.microsoft.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 13.107.42.22:443 signup.live.com tcp
US 52.168.112.67:443 browser.events.data.microsoft.com tcp
US 52.168.112.67:443 browser.events.data.microsoft.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 13.107.42.22:443 signup.live.com tcp
US 52.168.112.67:443 browser.events.data.microsoft.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 13.107.42.22:443 signup.live.com tcp
US 104.18.33.170:443 client-api.arkoselabs.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 52.168.112.67:443 browser.events.data.microsoft.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 104.18.33.170:443 client-api.arkoselabs.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 20.44.10.123:443 browser.events.data.microsoft.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 104.18.33.170:443 client-api.arkoselabs.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 104.18.33.170:443 client-api.arkoselabs.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 172.64.154.86:443 client-api.arkoselabs.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp
US 172.64.154.86:443 client-api.arkoselabs.com tcp
DE 128.116.44.4:443 economy.roblox.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 34d22039bc7833a3a27231b8eb834f70
SHA1 79c4290a2894b0e973d3c4b297fad74ef45607bb
SHA256 402defe561006133623c2a4791b2baf90b92d5708151c2bcac6d02d2771cd3d6
SHA512 c69ee22d8c52a61e59969aa757d58ab4f32492854fc7116975efc7c6174f5d998cc236bbf15bce330d81e39a026b18e29683b6d69c93d21fea6d14e21460a0a7

\??\pipe\LOCAL\crashpad_1088_YTQKWBGUUOJONNBW

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 046d49efac191159051a8b2dea884f79
SHA1 d0cf8dc3bc6a23bf2395940cefcaad1565234a3a
SHA256 00dfb1705076450a45319666801a3a7032fc672675343434cb3d68baccb8e1f7
SHA512 46961e0f0e4d7f82b4417e4aac4434e86f2130e92b492b53a194255bd3bba0855069524cd645f910754d4d2dbf3f1dc467bcc997f01dc6b1d8d6028e2d957236

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 871fd8ec448a78c6e514c6436387d3b5
SHA1 d9a848d9d92f4b11f5d68154d367640369c37d35
SHA256 79b1a3ce582aa5309b14b129ce730845b1138e2c996242755afa14f6139f299c
SHA512 832f3208e4b981b6e8ec10aad53f5aafbf5d817a7c2dda895de2d4dad417bc3c5133d962d4ded9f094f1eec0bbac504d06e8715137fe277835b35fab5f58c966

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f07546d65d57a3174f5cf1efec2c1fec
SHA1 8f10dc5477180d7bb7ca7ae6a102ef7fa994610b
SHA256 0adb5649cd29b36b45ef47d64dc0951c0fee43b0d7c3a82971543c5e6035a5fe
SHA512 b473582b1292f184191449ef748f69484dd01163d884883958acf754adcd824076417168c6404d3665ff6cdcc16fd69037594ad5ff77ae6d0cf42e10888f1716

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RFe5794dd.TMP

MD5 381cbd0fafec66a05113c3d3c751d540
SHA1 47d404a191fba783d93c6aed4237f75c4419fec5
SHA256 f8f872c422e48f17f67dbdd405d07f0e20c3c56de8ea97a2b9f71833ea17a664
SHA512 73663595e04cd2286dec674204ca096a7aba34f11015c2f4c0608942285bee24c6d832be580fdc9dc3f29937aea7a3873e927e08a7c5ea39d73f3843a37fde8a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7273608d1682c91bf6436b07795e10bc
SHA1 6bae662de489627d596dff807d30dc15e240fa73
SHA256 cc82119944baf8b75348807150c158a11a3c504475da66c2a2c0e01f161149e0
SHA512 e9190e0da21622bd8189b1a6ae5fc9509d14fa695ab6704e09c624dac6ea070a6823725785cf2ad2e6ce42f862d6ae0e3adc11e8e3dad737a97a10b0364abeae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3042afeb446609002904e0fd84b5cb55
SHA1 7ea9e8d824fe88ce99f58dab3974a7ec04c480e4
SHA256 ae2cde001621fbd688e38c35062e8438d53e27572ed89f68c025579b78eeec3c
SHA512 242b9fd84b08bac43e6fcde9585418d4aa62150446ebcdff40fb3409b876e8ce21e6e186e64cd0078264655f595c76db45843e02247dfc3ddcaba5a8cb202fba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt

MD5 062c28fc69d2b69a975955dfc70ac268
SHA1 a664e7338ba6f79fc9dd569e913fa09921ba23f7
SHA256 ba628a56b581378adfb6dc8b413a6f9f7f61118ee71dd0d2f58b95fe55b97c0d
SHA512 b6d683f99acf8dfefb745b08d1f1150e4e768081abaa4c4ce0e3619743f070669995525b067b80199849168d1880acc2300899dcc5f0fcade76c3b1b23857961

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt~RFe57e167.TMP

MD5 715e93a0895e5d1765e1c78b1f8479ad
SHA1 971176878279df1af186bc8d0f7784383c2a1835
SHA256 5171d9b71b667a2ba4b3ec26aaa76deb1c0dd6cc71669b6b195133c5d2682542
SHA512 7460bb977168fea28ce85602ec6cc34f91ed148e0946cc269287275683d14567238c66ead8f82a8f411773e26a6c8cd17e040dcc7b82ab9968c0d4f676dba941

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fa0a2ddc5ec9dee568e73674a79f048c
SHA1 157b0dd96a944b9018e22e62fb70060dc8a08298
SHA256 05e9e679d236c690ad34b88b4cf33fb9160abc1d1580c94dbb4496047597da1b
SHA512 34ba2f3a2143c7baa32d3bc58974a678b09cca4a4d69aed56df90f5cd3f38c0c53d14186bb1b07f8d0d8d1732a4a0b5ef9f9e178d620b6ce5d568fe860951b95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bd416b0ee2a4398df2f88c2974da59f3
SHA1 c2e047f3788ae4c594750f370a32da576549a631
SHA256 280c7123c62cf3603f37c6ba7134cc40ee5f0e1a3fa932ccd86eb805a83aa0aa
SHA512 715f184306943fe4bf6d6721be7bbae6d93143661067aea9c3d7f8c2aaf279f40d0ecf6fd385c877dff9e394689e6a05c04c4754c38c9ca6f58d011efac62a23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580981.TMP

MD5 7a8734c83e53a07f38154e50dd7084fc
SHA1 55f7336481c9a59f6b9a6cbacaa1c8bf5aefaac9
SHA256 8621fd311a9ed98cfecf7dac51f591b38283de17574069651e8042b742482f23
SHA512 7841c50793ef12fda6e75007a22c99292bf969d8f2e1d0ed16153dbcb6eb7e940170f8579bfdca101dbe92a6cfeb09ea530b5dc5d93295698b0421245e9f0d8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cbcce966195d35f4627518e10798e7fd
SHA1 e4b963e2ab33f33f448ea55ea8196d1fdf41cb87
SHA256 dda93c44cf68c954b4c3286b53a4a9d0e574eb7eb6664dd05a2110ddeed97a84
SHA512 18d117da33b8124b8f38c11e885d9a7a9f81fd542f09c5196567e00f36325fc6148b40c879ad26b16e369e6be52e6546a849b40bae22dd55069182b6b18c3a45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 2049f82ab1e400c93992eb9d876d4fc8
SHA1 e44335acfb0d107b48a2bf1392ac49a19964b063
SHA256 95684dc473428bf5aa9857a9862352515cb5c18bdaa37f01fa4bc615a9031afe
SHA512 f196c8f9786690b1ed8aa0677bf52330027be8d6836bf7fa716069229363887cb1699b769ccab2ff85852568db23e2438593de78a3d84f7b265f56c161705997

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe582f87.TMP

MD5 584becda2fc91a12ec46193154a7b061
SHA1 3f7e6b7dd337509df600f1e4cbca585bc5f476cd
SHA256 1d9a06e21db1591d193d307afe10e8424f256483cf6457de416f781530889535
SHA512 8650f6c19185b083b9671326601da3f090555909fe4b8d6a264e959634f5b49533559f3627ad02d32c8b55870d3fa62d4a50c5537676a2efded245cbf37b115d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\10c18ebb-401a-478f-adb7-c8519e3af779\index-dir\the-real-index~RFe583340.TMP

MD5 a96ea3aa31055e0bc044b2b3e52b902b
SHA1 0a4cbc2bb9ba54338f7fbc9f9cd9ebbcab9f35e3
SHA256 e4b7dc04cfbeec9370ffb9a074d245665d6ba5f5e74c0703c95345934ccb2b94
SHA512 05d3fdbbbf3506b98b3ad8fc68ae7909868c53127b3eb98cac06bd374ed59172aaed76a9cb7e1593e7456dadaf2023dc0c122bee417043f5b025a0cd8416edc5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\10c18ebb-401a-478f-adb7-c8519e3af779\index-dir\the-real-index

MD5 8568640f00976948b146963eadd1ed24
SHA1 fee66e0916098d179be149e446f9ffb8ac9326fe
SHA256 3f38cf032d9fd564e4d89c800914cebb4d8f1b9c5def6d59a8b9857d8cc4f245
SHA512 49d09d704758c2750ef5cde1473b84c54fb0567e8d2868c49375262f43378f0ae59b1cf0817b4608dc604b9a23b0749df6bbe239089d2247b3d0a7fe78b3006d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\bef0c00a-3d75-4e89-9efa-a995ae00f8ca\index-dir\the-real-index~RFe583f46.TMP

MD5 1cc4f5ce8b4ef14754e3551f0fa1aae2
SHA1 329f5fd29057e6a3e39e179daefd2ef8e6d032ae
SHA256 09f3fd66c903e4474bb6941ed0083ac76296444540d4f04dfc8b162d01e3ae1c
SHA512 a868c2dfbe55ae9992e3c6d4e45bdaab49f20c89716d3de2ae8ec9decf99a268068c735ecfc5ac651e02a191c5241bfe84de5abc69e8ca3fec5df5677f1a31f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\bef0c00a-3d75-4e89-9efa-a995ae00f8ca\index-dir\the-real-index

MD5 d96fbc740a027fdcb81720b6c0bb6f61
SHA1 c72be7c45e1d2a2a09eb3523f6d14d0fcaf4fe00
SHA256 2ee4124615999c9073995fa0e012d3af27a44966ba694e2b02e30ac5ef2b4689
SHA512 580e8999d0cf1333ebfca8cd34392abe66fea4d953843ad73647bc2d2bdec5afefbc9154177bde3226ddceb36f30e1f1f948fc02996c4c6e0525b5aec5c2eee3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt

MD5 b89514f3265de9c1e4eab1c4573aa3db
SHA1 e1b7df66c41b2799403cb8bfd1a8c65a6aa8ed6b
SHA256 1d0b3c1f99987891d71e8c3108099bf0df64ee48a193b08a30d9f2809259ec6f
SHA512 f30d1f781ae29ffcec512f81169a702828fb4471326a31fc496ca981d0fd711d0bebea4b63734d627e10a2ec00b0c502a86a2885d3c5f9644ce31b2e92b5bc1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1a5fdce4a3d907bcbcb6372342ab38cf
SHA1 ed72a94944ac6d4a9231672fa097999e3817bf6a
SHA256 95184ae153b6cfef9eb535e87bcfcb196a0c6e924127db4d1e00edf9bc077fe7
SHA512 613cd48c2fdb5f69bc29602e30310d723bb9487b306cfe5f1d286a87f029b3206acb0c905a78afa736414397819de9f5d85007999c10ac8a2fa8cf1beb6e4c0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 b4c704defb3d2eac1fdbf30b9d045593
SHA1 fe3462f90ca2c82f9fde330b012aeac53d270b09
SHA256 efa785debaa8c2faee86bf701df7206b0602670b0e15b8156b51b667fb899c86
SHA512 4fcaaa096b8668f2ab47d8b5a8ff9549026a9312d28d643c59f4d7bc4c8fbe126b6c053de05c0d63cd01c7830ec941a66290af44db7907778a14651659f06439

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 aac57f6f587f163486628b8860aa3637
SHA1 b1b51e14672caae2361f0e2c54b72d1107cfce54
SHA256 0cda72f2d9b6f196897f58d5de1fe1b43424ce55701eac625e591a0fd4ce7486
SHA512 0622796aab85764434e30cbe78b4e80e129443744dd13bc376f7a124ed04863c86bb1dcd5222bb1814f6599accbd45c9ee2b983da6c461b68670ae59141a6c1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 423885818d67bfcf00e21be13f6f3a71
SHA1 a79144758af1204bb161fcd79e74c1f692afb7a5
SHA256 5bb552beb00af20a3a39660decabba8520cf53ff43594d1cd923f9217081d169
SHA512 99343f25ec96fe803d57a1787ceff649a5350de6e5624990214d604cdd6cb3a4c5a8c069a024712c83e70ab91424ac1ac1f7d3c7e16f9fd498342c46ded593a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 08ec6693d4a37081294566d20db7bf02
SHA1 198b01aa40d39aea01e50f38e7f40ce068a2e9f8
SHA256 25fb4b75a3c0bcbbbe2f5face339ac48d0abef8400b9aaaf41f70b777c61d16b
SHA512 27deda106c50a7a700f9284799e4a7520ccde2c95812fb7728446438f83fc720f103ad4ddf09e0345d12b790df92f2a60484518a5d7ec52b20ee7679d939600f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 b48e876e91ec89fbaaef68677fac8058
SHA1 90d1ec84f062ed577f423c44dc8bf04bde44d514
SHA256 41b601617afa569c0a42d592341bdbc062b2480bc61f6ab89d85c43c1b2987ac
SHA512 2d07f78ffdb9ed12e560c9ebf64fdccc4ddf89b7866d28f5c8ccb862ddd56977d2aed1e82158f6f7f444664b4417e96a7923994c51052acc8ca1d6739f7ab5d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3d8ca9417b73579a404c1c55a0d64629
SHA1 ed011fcba0febf131011da99b2ea134446600ebd
SHA256 33b70d1652e0cdf034079173bcd3292c3cd2e0fcd254ab380569cf6a7c244f14
SHA512 f0b56a79ec03291b554a660859a7a84995e4be381bcaed6f45f9272d87a49407ca6bc82d4d3b8f71883b70a24ab604df7a347979fa8b9fdaf6bdfd0fe47d93b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6051b6441b1a531c7688ad152a1e5832
SHA1 e24ae812f53245b9e503fa6fca1a93aab2555459
SHA256 432453b6d4676ddeba0b1c51dac7ad9be55446f3ef9ef91e17d114ef7c96bba6
SHA512 75b6411357386e553ee0a072db505d67f556557ba8222ed72064e1e27204b63fd40cb2d016a182b9166fb4ac9c6028d6bd36e219e7fb6579d2b4642403693452

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 06875b9bdc6dcf8ec668a83ef16d3a38
SHA1 676aa227bc05859f992bfffb1006477e5857827b
SHA256 c62d0e44c107cbaa8a50da5f1c164478208f8b3e80db15cae464d47d7d4f1da5
SHA512 8234ba5cb57f60f02499942d3cbc81f1e93540e529d5a18cb28a6fdb1b3fa68c11b57301bfd9e6a7dc0a3489f47ffcf8d84e87b2d92fa40dab4eb725ac57fa43

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 3870606797907136f41187553dce5085
SHA1 923fe3974fd460f2db7a0114cddc912d6e06ac36
SHA256 4a1874acfac409dcb9059fe5603b18f1a63beea0cd8daae71d0541a477294adc
SHA512 24893a769c2f0f4de0ef2deba17204ae25e2e90fadce7247ffae654a6ff8e6ba4a9bfd5da786ed4cb2771a38fd955aad15eec5bbc745ee5d5b48f4d2693991f5

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 da1aaeb72af5e18066e5f09d709af35a
SHA1 6e862ad3cf4189f3e1b88ec5d505d3ac5c87abaf
SHA256 325cc8b017bfbbc22201127e7ab0c035242984d2c8dbb816de6a646a8148c381
SHA512 3943e2438dda41b13a03e3621e9dedf1f5ff9f7eb82decbdb5acd63cfefd4185585dcaa31ef643258cf8feb9a860041436d2aa922ea1aad6adbc1d43da944c1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 11fab239a13b796340e7af3111ba7ec6
SHA1 1dff6c75a296c169bbb6e7ece979c229aeceb03e
SHA256 5166af6f6ef71d257fd9d57c422e826fb5a5b72b5d5b679e391f1854c1647476
SHA512 4bf1e8207f31820719912398ecc7da28138c2bdfd53b6912ec6ec9d8f3861d162705f08d601aecdc7b939f18c0b30ca52ab68f4b4aeca5ccb07fca1b7f945d0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 37b4d2fb8103ba8deb6267242d6657c3
SHA1 705ea830b31bfe177c1a9f9f6694a690ad472008
SHA256 214a6ad14e39354009a61bc8ad3ed3b5e637816409402b928f343731aee3ff57
SHA512 cbab165c65b765cb2d5b8b2bdd14181442a5399d1f8b19a65bb278cf0a763f6c3f3a5c80f7197de4d3b22f7ba8945bc79dde3ce689c556984674944d07a90cc4

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 b3573801d8b869e593548fa62766a447
SHA1 e35cebf4f85af2888373d2e1ad0662d09ba72b43
SHA256 569490ebba3d045f5eedb5ff9c21bcd4a5c09bc24c216b67704140bdc55662fd
SHA512 14ad642a6b3e0c8d73f5db8198b8e1449017e40669c83bad25bf1994b39fe7b7dd10124a258d33c7f51199bf7ebcdff98248bd6b8a03baf6242197ed04261432

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 2f5c2637f1ff31462c2ed387a4134978
SHA1 a16dd0b672292c392f0979c8fc3c54c30b685360
SHA256 47e751e43cc2cb4d1773f180f7289dcc9fe6009fde779da3bdf04180dda10ee2
SHA512 d27be077bae1eefa6210b7718a47c415e379711b113a2e4d2d15fbcdef1aee26a1d662f076e3e8323c850280dd85880a014b740f4cc5caab3a0667c9c59b47c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 5a350e7f57f826759a217067145640ea
SHA1 4abbc89bbc62dbbb518560750ae06a9f08f906ff
SHA256 217a2510fbec0378e0c8aac7a03804a00aa7cd76105e9f65e9c63345ddac8db8
SHA512 4cc3670297ab0dde4fe5a6c21a67096cea0f1252e06bc5b86e924094d666ccd3748e1572717a6143d9f00c46c3bbad966ed69369e79a6ae3674ed556407f09a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 840f9a4cce56265ed4a7d66271b261c3
SHA1 41d6be48cc14a71c884d2592a6047a3071645a61
SHA256 028e91d76aaf7297716903dab41f096ffbd7d3190aff2696e2e7e5e92b65c583
SHA512 97727b266ebfb62acf8917aa7bc89a864fe6577a82affaba3b3270258bac42afd9f48fc3fbb14364c13abf21065f7911acc545665cf598698ca63e797a9fa210

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 bc9faa8bb6aae687766b2db2e055a494
SHA1 34b2395d1b6908afcd60f92cdd8e7153939191e4
SHA256 4a725d21a3c98f0b9c5763b0a0796818d341579817af762448e1be522bc574ed
SHA512 621386935230595c3a00b9c53ea25daa78c2823d32085e22363dc438150f1cb6b3d50be5c58665886fac2286ae63bf1f62c8803cb38a0cac201c82ee2db975c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 bbc7e5859c0d0757b3b1b15e1b11929d
SHA1 59df2c56b3c79ac1de9b400ddf3c5a693fa76c2d
SHA256 851c67fbabfda5b3151a6f73f283f7f0634cd1163719135a8de25c0518234fc2
SHA512 f1fecb77f4cdfe7165cc1f2da042048fd94033ca4e648e50ebc4171c806c3c174666bb321c6dda53f2f175dc310ad2459e8f01778acaee6e7c7606497c0a1dea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 68f0a51fa86985999964ee43de12cdd5
SHA1 bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256 f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA512 3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 3051c1e179d84292d3f84a1a0a112c80
SHA1 c11a63236373abfe574f2935a0e7024688b71ccb
SHA256 992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512 df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e1aecae684508ae6772b184db71b5f3d
SHA1 e793801bab16cf1a09d98085a9aa8526aeca40c5
SHA256 9a25677e94766dbbb733610f6bb89f9fb6c35c36abfdc784a7904e764f2fba73
SHA512 c7da60b8d245669426df16f9acaf440b0bb6a973f31bff812e56c1cb7d7db89c3b50503370efbb714482a55f6ffb38ab195b1b5397002024b71475620cd30fc5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e518cd4f5de3bedc9f402b2cb34fdd55
SHA1 15cac47f8a8674fd70d17811e49102e5ea6db3bb
SHA256 c69f0d059658b851844f0682b6c3e04b182fcaf98dbcd3fbae7c98afa5f0a6f6
SHA512 7d3f9d643f86b3274bef3e1fb4f4de89c9cc6350579b7106221e575273ec79cf4069d76d8ecdeda26254926f6e5e61d6ddf31950f09dd2ffd0c4efea940816c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b2bb7b593528382b89cb3f6ca9be3425
SHA1 e37ace13fa5d2318039707d7fe7e2e35d31f4da7
SHA256 64a7c92ad52ee887f3ae6450fdf43dfbcc8c3b1ba1f6bd1404a6a9a923130c47
SHA512 7f2e3917510c8e5146470cb449822af1bd517ee671dd42654d005f392deb82c2151d30f39993553005fb8715159f84dac5169a53a81c2388409eecb6ba2ae693

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 75e3386709a6095146d660ff473af8b7
SHA1 a09bea6ec6858de8d3ccc76508a88eaee9a8f6dd
SHA256 803c4eb5977e63850b0f0537638a460a897f9f0311f70c5732a249a81f75b56f
SHA512 8cc44368ea74ae5eda342fd3299bcb90144a42c0c30d430653282349d7aee9741f84bb268e16dfce3dbef43f7dcd8f821e29c4343c5b397dbe01eb74f0cfe9fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c33eae035c754e2160d9a62b61bde638
SHA1 717aaf9364728e8f3bc63f85c1db6722b777a3f5
SHA256 06326e78c06f40563385248d4f7186ac1a51a82f55cdc8b72a4b775fc33ae2bf
SHA512 9d0859f46b95234fd7a35db8eac5243c8e8ad3f45dcb253a30674a22b119f39263d93d44df0bb2201fcb998b8b05257a696a2fd56b6357febeafa9620f5a16c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 be5471d1e826af7df82d6fa8bab3971d
SHA1 9a251148f6e3cb30dc24b9365a418af4326804df
SHA256 e894c3c32ff12e749bcafd8955a614245942e941c9235bf722a6ea6a1643077f
SHA512 6eeb8ff2e450aa530c213217af543fb3625db437c395c68d59953d5d490a226f78c462ebc001147a7ebcf855a67ac4159a2178b77cb37f8683e1a6a04fb9522a

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 22c01fbba4c95e0f66336eb12830f8c9
SHA1 e437d75549f42129f2bfce8fcb1fb6bfd5e879f3
SHA256 41072d7d28082496e2aabea36a736b94c9b3ba8ad801e5d7ce0191e2f6783bb5
SHA512 243d58ad4e787dc6e9486e4306ce0bb30b403136c7df8e2072e224fe708a294fca878e97b99270ffa1e2b89d4494a907996bbab9252c5cbf4a3157da2fd3aaf9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 770d320644036be0745145c72be3b210
SHA1 573978651c6c7a5abb571ad7309629b3acd97ea4
SHA256 381c040e13c75ced3f64f0fe409466d9483e0656913001b0031ffff8aa671fe6
SHA512 ba2697f5fede945b439d3a057b6a552b14abd72ee254995a5493cd36a1d7f0e75bb954c88774ffc4098d4dc2decb7dfa79b2df147fa2c330abb585c734841da9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f9bffc08286968c3a12ef04c88d22ff0
SHA1 3016ec4a988204e6c544415f786d7aafff0ae2c0
SHA256 04ad1aaa878dda90e545d61b7f326c8c72029c36bfb25f63d94083e727572f74
SHA512 9d041ad9d5f59be23ae6b378f1b8c6f2093061674fcac425f8456238b8c62251df0016ed57cc6d4ad894e5b7b27b8b88b7ce0decb6a515024bde65d24b43a3dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7e2dcaf7c75fefb3497245b354e1c295
SHA1 076d438ad8f223afae1b77874ca4d0d2322ae49e
SHA256 ec8ccb7aeb1e16121b56f97b3db2bb348af8b7b0c66854f769dc2c45ac4887f9
SHA512 b7e62b79a075e1b275d4a5d212875d4ef487ec030f3e90c0b99448ab554c4b56c1f4380a283ec90eaaa5c50948022a2b82392f0422de6b79b539dca52520c438

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f21ecb228002aaf5fb6a67096b1c3415
SHA1 90225b0212755e2616737eae7948bfcdd61bbf3d
SHA256 100c13ec90ce62c814018d5f6054b9a8bd92456fe733d84e012558627cd207dc
SHA512 b7fc7389d44f174d6e6c3fa6b166cc9156a82565d8d0ad503462818cc5d0e4698797bb072ab3b4905cab036c645f9120d87cd8824014fceeebfe9890fe043678

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9519999461637144f6723f66cb0fbaf6
SHA1 359c822c0af5b9483d557d35e593ab98d862ccd6
SHA256 fff08311f89754ffbcb7d8fd1f9d64bd899485e6db8d05a3f2f839be96282977
SHA512 c269b2d0416dae040d79e26a974f5cb8ee3853d3ff44b47e4b8ad2adbf9ee74c9d0064334d64eca5fc638b8e83fc417bfc1f207014d9c460e101da1f90160185

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fc9819195ecd20775225551dad1f07da
SHA1 c93f5cef3752940f06e15592df60b742fb9d5288
SHA256 1e914e696e19cf886e0a9e5416e1bbc9cc363a3c8e163d5ff5ee00b8017aecab
SHA512 ccceb4456f9415ab2a48d4c5ff5945aa6dcd1b88d12c6a21c170ddb5d79fac3881bbe16684ffb3d635b025faae77fbc871d3fdc03b506b60726baf4f7d02d08e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000062

MD5 d2895d96341b1d0c1eefec5fb110bbbd
SHA1 3e8cfcf221da48d743936a5acce94851d0a3a3b2
SHA256 d389e6eb3728840e524e4aa67ea2e0cda842ba753df9390539fb3768651d27bd
SHA512 15623935d525a08f663296543a43483551b4d888367147d7def69d5752b88a169ebfd96ef425a5cde9c1263a35c8059390ace0f94c79c390a936bf52e1e84c38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000090

MD5 588ee33c26fe83cb97ca65e3c66b2e87
SHA1 842429b803132c3e7827af42fe4dc7a66e736b37
SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
SHA512 6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 277eef84a7766b0bd571c98ac821d857
SHA1 d7b7699ecb523c2688a433a9f7979ef663de424c
SHA256 6a5ec8b19054219a964b091c286089c70c38d1634af0026fc88ea9c7f7d63d55
SHA512 97a7241e58812d07d3ac3f7f5fabcf6b57d0e5b846b72d24754587fd223131df560aba122496aed2a2f7d689b3ec18059e1b8fb46a9cdf3ad93f1c608870446c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b4c36531ec045ad922bfdc927a9c5252
SHA1 9d7fc3c5300e01d77669d86a725848544b23f8c4
SHA256 0bae56adba4ee8ae790531ff899a78c38128007e1cd6bcb6116c8e7348503632
SHA512 8e9e60ba5e0e43f5141e56d9c5dd7cc24964b5b99e6192653d41a61078f4378d4db3e1a68beef7d24836a79d902a3fbec07061f8e619316d158005001cbf0576

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c76a0b2fc393d1d7972624f81d3aa873
SHA1 a3a37ec106b5907f425de57a039f757a0f08a438
SHA256 86deb9132f94671c1775299d7b609888681c62ccc8be61287b6070532d0a9264
SHA512 225d0d06a14350ee7c58fc20d3d16ca6570107b799a414cc10f517e06a47da4f5374f035b641cefa55cf2752123b1ef1bbd074a6b667cc0a36e3d5a2d32fe75a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c32651723128e1428c9d0eff462a4365
SHA1 ef228be1b6fc30e7ef1b17a695984b0f330b02a6
SHA256 f426f3724a6e00c57bf338cad8c28842580eb4734360b1c00de773d33e4895cb
SHA512 af8c465c9a9c7308090160f9394038d80dca1e4a7eb3be19d9be508a6245478cef7a32dc73b4e2dca4c7bff6844a5403314a79b8045024d4206dbd5fe720b428

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6b51a13bd794e8a4b74d04f432edddc5
SHA1 20ac939ea9b7c533fd8c0e0f80aab5adc5eb6fec
SHA256 fdb4682665c1cfbe831c7d22440edfe137eca16212614d3cfc2366a267f0525a
SHA512 61d097b6ecf140d607de16a53855e44e2a4a12ce49daace66c7424c5de75348b068933463f0b95c3043464e1c447900a3f7d88f2717702475c6a151b996e0588

C:\Users\Admin\Downloads\Unconfirmed 115415.crdownload

MD5 84e67989f7ccd11c2b7db38f3d3443b8
SHA1 c3e821de715aa7508b3273de16c9156014d81922
SHA256 5eac06573fb9289a5ad1dfa8b88d2d7b79f1bd89e61c53247f8cae50143e7a2c
SHA512 d0ea7235f591f31edeb7183c91fb0bb1347a9386c170c43b21e2c5fd93b7040e73e1a1a9f3ef6f83d097b1af0f9e2a9938dd59ae47588940491da25248eb7d99

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5b13dd46fecfcacb8510c3d2b05ebe5f
SHA1 0eaf0fc9226560b321b99d759fe36ae98d0ee41c
SHA256 3ec96d603edb6d490800cd9800294bf64896b61c7519c21e1fa68caadeab4ab1
SHA512 ec595e61b6d7fa7d6c72713345ae0853805ebe418aa0c34afc84a71043292233b83a9043ae1a1e5f57129ae01e8ee120d2c2fc4290ec432aa25003e71f1fe389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 58d6af6614fe5c0d4e17bac61e4d4f27
SHA1 91172a314edbc1e18759b73357d5d50897eb8c00
SHA256 79e25cc7d8ee940fcdffc0683a3140b958a44e2e1e77c58d9998b4937e63bf40
SHA512 3792ed4abcdb74c8789bfb4d3dec4faab8e018147c536d8947b3ddc84e0f8331866515e4f1f094d814b8f7a4e91d9c7267dd28ddd46c5289749655f35cbb8f1d

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 08f4f3e9ad43fe8c92a0eb740c69805f
SHA1 a6193795963e505fdbddeca8c69f2f31816fae4d
SHA256 43ef77293be8d8bf216e2d7cdfcfd0cad39ac8561ff1f82a572422618bc41ce5
SHA512 b9c97ab5fb2b9ce69563cc5610f8d60cdd3fadc3ae76e2f513e185bc264c2f2999bbc64db051da34a7f1d476bf5d88ef4b8166e6861435c843633f280f83cd71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 45c9d1f99468e9e0d11c2e202e7eb34d
SHA1 20e7db0e38ee1c186480ba16a5f75d638ed40633
SHA256 d620b6abe4cc0a2a21504a8feae06a409700c4deb6afdb16db26439d66e46616
SHA512 7872ea5fc2296f2fbfef2cccdc580429a9422372354fda2359fc0b69ebb275200d470c81b8981aa9a5c6c0710ece324de8a22e26c5b79010af248cf473270cef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c210def43cc86da9f7ae4a028366e04b
SHA1 d467a4f4377e5baffd017f4732ae9a4343700784
SHA256 4f5d39d0c5d020b9e7aa052a0e3e86b7d032faec5e4388d0c8663e6f8c54390e
SHA512 0dba8c75c53d9cad5bf444bb962978c294491e0f1829fb1d4470c3dfe4068fe8a070d17b04366183c25a855d10c47807c53d2db4f46ddaa8e4cd55c8753df2a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\14283229-1d2a-4a3f-bb27-ca85c9e6892b.tmp

MD5 50f56c913a1263bf099703358337e985
SHA1 459e2f3c7cee04dc699db836cda59f6b5fafcae0
SHA256 32cec3a7cca35ae285fca89166a9a0fe54148475663ec5c31e72195604526909
SHA512 fbe46d2fee8ed9df64fdd4ae472990f101b9b878a236eae656672bf6c6386389a74064cf7e6a3b5f9e5f0be07eaa8b72c3c2e60d6474c9707c8578f75ed71918

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8ffe21c04134ae2cd5387ff251ecc5ca
SHA1 6ba60f370b7595bb979048dda031522e95718a10
SHA256 135c7c32e49bf8a57c2e8d3ce7960fa6cb5205eee78cb0a55327fb2625d97617
SHA512 1985b2d2d41afb3a81654a803126dfab96dec2faeb3c725a8f379e663a6e2dbc6075aeda3d11758ba612bc2524c55425f8923d8a27e2fdae2b199aa1167450c3

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

MD5 d6ec3ffe6c3b16f94d459947f56cab5f
SHA1 f6a05ce1e412ac4273ad362ab9ff8c314bb80747
SHA256 87eb356a07a15634ab05fd847c70f26fcd9ff745dc62afaa4404d6fc5206eaf9
SHA512 9a3c46f18b8527bdc02e5a0a442b9bd08326e2f59e40e80e555f3193dac5e649526e27259f1dee7260b9b66642a0aefeac9d7854a2024451db398cb078ffa484

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b6dbff87c1c592555157ed0a500c3821
SHA1 d0861473a24bad1d53adb56ccf60f92d922f6f94
SHA256 fa9c645689fba76f976cf63b43194501b2b3e5b677a1607d91811fefa74b924f
SHA512 5c3359ab0d981a37b0eab961578b223ea5b395ed057a2f98bc9c785ef04b8361dace4aeff5474f50b500c5e3d9a0e11ba9369b17482f59672674b7ba6974d43b

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\d711fadf1919a05ac8eccb48c397156c

MD5 d711fadf1919a05ac8eccb48c397156c
SHA1 d316ed33dda1b7170d56e086e53d280854f301ec
SHA256 b17555f65d11b29752665637a871d3cc2ad874076d2bee06a8dabd3520e34834
SHA512 dd5ec72eeb0e5fc28f122e46deb8a6c8464cbc2d8c74f545b27296b14c8b133fe009b38eace44e76af07a3db3fedbc6069b638348e550dffce84314674a01282

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 41a67e6382491008a7086e02f776bff7
SHA1 bcb00c55e77b0ac5ed20606e23aba010e441c557
SHA256 261d5f76930c2bab31a05a5ee64d35713fbe546ad1a8f390cb51f58de4503dbe
SHA512 62fdf0440686492c7638dd484e89f2a8a3eb7649abb4dac8bb9ae3f216f9d44c137190169c35ffc6df3904fc63fdf10d2bec41f4a36d4a177029c0deb7e1e03c

C:\Program Files (x86)\Roblox\Versions\version-2f99b302154c4478\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EU8858.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 58ee6f3e78c460e41f39c3b98a6ab33c
SHA1 a405327986cb2f47cd8a501177ec35cb9fb687f7
SHA256 cea377b0ca70d17c5b8b532ec9c626e0da800c9d9fa17fc2227e4ce30cd5df90
SHA512 6ec94d500b588238141b85eb55954c3da710d4f3649a0f203c590738b108c47710887b9cbc97e721732da325a627561ff162dd4b8581aaab8fc009ad8eff8c65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6826c70287681760aca478f8ebf2a4fc
SHA1 9d3862b140cfbfa205d2b5e153480c2e61012d63
SHA256 daaface67a2d538a605cb11ead7ffd4ae25bafdb656f0decac7562ec3fd3b701
SHA512 d9eb071992fa51cfb7c81abc1951252aaf39adbeb8b62bcb073e1f272c82f3350f767b71da4a000cc3c28281c8a0030b5c2eed4b36f1d85b86fc9666d0a1057d

memory/3256-2664-0x00000000003B0000-0x00000000003E5000-memory.dmp

memory/3256-2665-0x0000000073720000-0x0000000073930000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 10b7346fb429b04ddea744c3627f76c2
SHA1 f5315290f650ab4932352e70f0bd1a06cf0b2179
SHA256 4d06400765d11d60b3485afb71ea933896ebf9dd6bb4d2a6605b743d6095a48a
SHA512 7cd3c428b2d446606c2895cf09cef9e511c71270c0b56d3a10273efd17787f94393faa163ee914c8c228786070e16e7776f8b390f734146ef3e95ad57c17535f

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 a195a2471b2aa60011bbaf50d0a866cf
SHA1 74886aa6a44f46dd815724a10d43345779b45bd0
SHA256 daecc012dc5cb4b932e73edd8b02382a7ce7ec4e4006ac3097cacfa05ff7513e
SHA512 53473773c7cd10d87ea9a6f615db37e8e7dde4d6d7d76f172fe22c1095380421c2cf91f6de496e83d213432f03e84469b5d97b89fa1a1c564fbccb247bd2e1cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 35a24abd164e8952b6aef77248cd1832
SHA1 cb4d5b28d95e836d4f6cc30d1ce7567c19a1e2b0
SHA256 9a4cf3100fa1b4b97f8762c2ec79f6c7583d83a6176e827d0b8d7c84b4f40717
SHA512 d686f68e4e7cce1f111bfcf5f49b240c221f08f37624bb38b2ccc777ad397157f950a79de19e266e20acaa1eec209d5578a75d30efc8c9dd07d983cfca7008a0

memory/3256-2711-0x0000000073720000-0x0000000073930000-memory.dmp

C:\Program Files (x86)\Microsoft\EdgeCore\125.0.2535.92\Installer\setup.exe

MD5 d42926508ba6626be0143a2aa5275ba9
SHA1 ca2b45426611211dcd47fe66c9255ab81b843943
SHA256 9595008f51be8ca7c82618c84d30f0a7fdac9fe7433b806af504da0d38aef10a
SHA512 53aabfbf20389f4d28746c41109b5a194ed5d21521fa67042bd5a0fb38407e877bed5481a7502bec848a54d0fd4e33b09e3c6bc47a576f8e14a4458c64bc14e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c61dec76c1183509da23b5fb8e382181
SHA1 a6edbe6bd38b57275dc2c8fec96d9fa852689ce0
SHA256 2caaae323fbfffd72f3dabfd4df3e84bc693fafcaa933ccbe35261401ce4ff19
SHA512 3c964ef32735458407cbb30a0807b4997c94ce465f85096640a04646f7cfb2fe6227c5ddc0325d76b0896256fa3c79a931020a9d11dcbf5820c81b6ec1b3d8f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dc039e53593e168e8ecf024f18bceb79
SHA1 218d8bd2412fe2d5016f31c53f7eacc00c8a8b20
SHA256 94110a1218458c4ac63d82897f28e450b6e0e0fb8c809a62230d831b86402a9f
SHA512 a2a36a66188adf431865fda0805758a944b039988c7c548dc0d057df6b9b5717a808b79a4ff2aaa709b44f69a5c07dae56f3633ddad26b0733395d0f4e2496c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ee5d29627dc1c30b0ed874ed13e37874
SHA1 785d4ee7c8b7f46f226641af415dc7669c5c4494
SHA256 dd35112aef6bbf5fc0515a365e18662c77f91cb653e0862bc4bdd24f52769de0
SHA512 583e45ad952bea5573fa55eb7bf98425bb5173995c4a36d45c0fb06d9008dbdf8e6495bc4918953606bff8ff59a3dde875c94e33eca18617f31be9fabd89f155

memory/3256-2763-0x00000000003B0000-0x00000000003E5000-memory.dmp

memory/1068-2768-0x00007FFE16C60000-0x00007FFE16C70000-memory.dmp

memory/1068-2777-0x00007FFE16E60000-0x00007FFE16E69000-memory.dmp

memory/1068-2776-0x00007FFE16DD0000-0x00007FFE16E00000-memory.dmp

memory/1068-2775-0x00007FFE16DD0000-0x00007FFE16E00000-memory.dmp

memory/1068-2774-0x00007FFE16DD0000-0x00007FFE16E00000-memory.dmp

memory/1068-2773-0x00007FFE16DD0000-0x00007FFE16E00000-memory.dmp

memory/1068-2772-0x00007FFE16DD0000-0x00007FFE16E00000-memory.dmp

memory/1068-2771-0x00007FFE16D80000-0x00007FFE16D90000-memory.dmp

memory/1068-2770-0x00007FFE16D80000-0x00007FFE16D90000-memory.dmp

memory/1068-2769-0x00007FFE16C60000-0x00007FFE16C70000-memory.dmp

memory/1068-2785-0x00007FFE15490000-0x00007FFE154B0000-memory.dmp

memory/1068-2787-0x00007FFE15580000-0x00007FFE1558C000-memory.dmp

memory/1068-2797-0x00007FFE14670000-0x00007FFE14680000-memory.dmp

memory/1068-2796-0x00007FFE14670000-0x00007FFE14680000-memory.dmp

memory/1068-2795-0x00007FFE14670000-0x00007FFE14680000-memory.dmp

memory/1068-2794-0x00007FFE14650000-0x00007FFE14660000-memory.dmp

memory/1068-2793-0x00007FFE14650000-0x00007FFE14660000-memory.dmp

memory/1068-2792-0x00007FFE14650000-0x00007FFE14660000-memory.dmp

memory/1068-2791-0x00007FFE144A0000-0x00007FFE144B0000-memory.dmp

memory/1068-2790-0x00007FFE144A0000-0x00007FFE144B0000-memory.dmp

memory/1068-2789-0x00007FFE14330000-0x00007FFE14340000-memory.dmp

memory/1068-2788-0x00007FFE14330000-0x00007FFE14340000-memory.dmp

memory/1068-2784-0x00007FFE15490000-0x00007FFE154B0000-memory.dmp

memory/1068-2783-0x00007FFE15490000-0x00007FFE154B0000-memory.dmp

memory/1068-2782-0x00007FFE15490000-0x00007FFE154B0000-memory.dmp

memory/1068-2781-0x00007FFE15470000-0x00007FFE15480000-memory.dmp

memory/1068-2780-0x00007FFE15470000-0x00007FFE15480000-memory.dmp

memory/1068-2779-0x00007FFE153E0000-0x00007FFE153F0000-memory.dmp

memory/1068-2778-0x00007FFE153E0000-0x00007FFE153F0000-memory.dmp

memory/1068-2786-0x00007FFE15490000-0x00007FFE154B0000-memory.dmp

memory/1068-2818-0x00007FFE14980000-0x00007FFE14990000-memory.dmp

memory/1068-2817-0x00007FFE14980000-0x00007FFE14990000-memory.dmp

memory/1068-2816-0x00007FFE14870000-0x00007FFE14880000-memory.dmp

memory/1068-2815-0x00007FFE14870000-0x00007FFE14880000-memory.dmp

memory/1068-2814-0x00007FFE15870000-0x00007FFE15879000-memory.dmp

memory/1068-2813-0x00007FFE15870000-0x00007FFE15879000-memory.dmp

memory/1068-2812-0x00007FFE15870000-0x00007FFE15879000-memory.dmp

memory/1068-2811-0x00007FFE15870000-0x00007FFE15879000-memory.dmp

memory/1068-2810-0x00007FFE15870000-0x00007FFE15879000-memory.dmp

memory/1068-2809-0x00007FFE15850000-0x00007FFE15860000-memory.dmp

memory/1068-2808-0x00007FFE15850000-0x00007FFE15860000-memory.dmp

memory/1068-2807-0x00007FFE15850000-0x00007FFE15860000-memory.dmp

memory/1068-2806-0x00007FFE15D30000-0x00007FFE15D3D000-memory.dmp

memory/1068-2805-0x00007FFE15D30000-0x00007FFE15D3D000-memory.dmp

memory/1068-2804-0x00007FFE15D30000-0x00007FFE15D3D000-memory.dmp

memory/1068-2803-0x00007FFE15D30000-0x00007FFE15D3D000-memory.dmp

memory/1068-2802-0x00007FFE15D30000-0x00007FFE15D3D000-memory.dmp

memory/1068-2801-0x00007FFE15CF0000-0x00007FFE15D00000-memory.dmp

memory/1068-2800-0x00007FFE15CF0000-0x00007FFE15D00000-memory.dmp

memory/1068-2799-0x00007FFE15C80000-0x00007FFE15C90000-memory.dmp

memory/1068-2798-0x00007FFE15C80000-0x00007FFE15C90000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e2f9fb9e2a4c95db950997cf0a83b036
SHA1 3f2b95f126cf56393201da5e788ec2c6f29cb0fe
SHA256 f5d2bea18761a24d2bbe8de3a93bbceed21360c221a1ab62a8a535e5369a7acc
SHA512 807d109551ea493d83fb0ed3da0801c2ebdbd7bc4f334de1b756727425c78531f56a3e2f64b52daadd97b741f7aa3933542393a85c8f034cc2d56ed906f7d900

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cc2b8f44321a0bcad140c4006caeeab2
SHA1 c15cdd555f87d3e9e40a1ebd085f06410763b3ae
SHA256 011f4808ff9a8079db9680b254e2aa9362469e440365d7a345c11ef1ea3d8aca
SHA512 d0c9cd3a3d7f89cb92088b4f6d955184b8bea26e1403f126f9eab9d78b89e0ebddb95fbf9c1c60ad5f5a2df643d4ea5836ba674575118c0d7fce236325d938fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a7f40d32114b0aec20f5950f5d4b57d2
SHA1 3c91dbbd6034993e125da079c3b1a7a0750faa8d
SHA256 6558c48c1510d044a119fc55c855718f05dee788674546b567fa0c7ebc6c5d69
SHA512 bb202beb1a9f0dd28f5ab9c7e10dd774ee45414161dba46ffbbae9591451daa1f4b888dab35689f5595d15776f2e76ae9b54c4ecd9d62cb45b977c2c02ec62d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 25417e5557ba820af5eaf8c066cb62e6
SHA1 e95ab17768fa7fd378288b7c954dd00b0b8c6006
SHA256 ba724990360aa0ea351fe5581a188177995c094b2f3acc4009c063ecce428f07
SHA512 6205e8d01a6a5527b40b865c14a6821d8ca0d463ac31bdfc12729781ca955a4ced3c2ef99521e8230e9ca0436f159649c1f4b4621fd893e10d89b8c6ba778bac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1ea070cbee95c490cbd2ddd886e6d778
SHA1 20da7a76564d28ec7cc6e57d6d718c5b6fa62177
SHA256 220b70f44e88ae96a397e8e8c361c2592b498f7e7446d43cc6b1536e7b0fbd90
SHA512 3722e6b0c910e26a1bfdfb0554ad453a004a4f56522660da8d0170a27bff4611a936305773a68509a666d14601c33d58928baf275200d10fa3610f8bbb75478a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a50d9821a1fff94d0090f33bfd37109a
SHA1 a94acada35c5b7c65846658340bbadbbe8e3b1c5
SHA256 6982c994de129faef860ef7dbf83f6974bf8bf264c6b5a5c5db9b74788ab2382
SHA512 b13691635682674159c65ffafc7509d26bc08fbd996a94dbe5b7171749ee9b5f21d0020edd4888d7302eb03dbe937c7d0143b515676a93d93389fee7a468805d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 55f084badce6e91ab5b2164027a470e6
SHA1 1c9a1d395d960f9f59340cac6debaa2a50619a7f
SHA256 da3059a84bb2078e442bef9ebdddec4a4dc71578865db412d59e9c4243746b13
SHA512 350b06b163e6b1366a3a39d65ba414fa8842bdff8a675c646c91e30d869657e915a80db2775f88a4ad4e75bbf46479d2b6dd61f14547a552fdd3d1c8291ec816

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f53711c9b93b8473410410a9acdb7669
SHA1 2b6e0df5fa412d0113c023775c9c8a0cc7883e9b
SHA256 b6407b41468875ec093e1289b2757c8a54b0aa7f1ad4b6ae63ead6693ef34837
SHA512 382d15ff7dee7f7c8d5f0545dcff1c55d5c6592e9cc807dd0ed1fd36ff09af8946069dcb2bf08efa71c52fcf1b0858c64441ab968ebefcf230d0e95deece4525

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fc81754e731b8efa7ae7c75616f917bf
SHA1 db86349dab866e176490c65313f65318a87b5988
SHA256 86469da29f20661809ec4670a7fcd8c1b090530cb4f548d5cee577946959d359
SHA512 50fdf3afba280a5a6fc55507e4c684c0de6ff6f2c64d78ea9cfdb9e99e1dd64d97a5e0fd58968eac52914752a4dabe81c848f2a803c3eae41805805f56a9bc45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 4f014a5e28b42f6e2b192ea554c8f636
SHA1 c2902f7eec0314e30a2e8f8ddc628b528446ccad
SHA256 86303583426d783126647fa833f1ec8036126b61ea687fa3ddd4ea58367fed1c
SHA512 9bf0c332f5d364997df28df3390f23d2773e70a3a6ee4cc2dc4cdbb85f0c5b05959b9ccd03bcf388cd071969ac4ce966b806e31a8fb7198952d8148678fd4338

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 07bb21d6086b47d4c1b718b94bee1a3e
SHA1 25ac58e494172f47113d0bf40ad8418840eee175
SHA256 8720276a5bf135b576f49762a655d97fcfe1b06a719d9ed0136081908eaad88c
SHA512 b1274f10f3ae81d3378022fb0a8d734ba24a93fee979000cc28d67fe7aaf101d306d1dda3ee069b233bf6110d8c7f6fe7904a77ec6c09debd92f5be8699955fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e4641a3175398fe170b694d4ad9ddc92
SHA1 7fa57619e3b6968aac7f7d26255eee82f2972d8f
SHA256 5c0bddb7aa3af4cb06e8ca18cfeb31445245e0e08565f6e9736476a9bae1c9ec
SHA512 249dc9e19c5086fdf1777988e8c0f3f63f3d41c7e00a50cd11fe03919b59982de87f4fa7df10bef91aab3a1ce95ea7a6f541283d2b3a2f45797e6a446ee732b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c1dd83be0f1ec2186f041c787c79a3ab
SHA1 1f51f83b896043ac493be540bf49c5773ef9fb3b
SHA256 991839ce0edd20bd327e7007b9c4e40ce8f59c3c2c29b7cd0a98e0c6965369b1
SHA512 eac26c3ee0db33631488b0976a8328b6fa5191de12faeb4ae7db16b4d9c3e8a91bf5b0695fa4fb791c0685b9e356e1b890f7b673607977ddf8ef3401fcdd4f4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 19e62b32fd5f9401522a7e317caf2636
SHA1 2abbded07c50e28bca534457792567270d595e76
SHA256 9db7f6669f979fc073f3864503de697ee31f4b8780490c0da22e406a8b1e8acc
SHA512 f6b6fb2d7e795d1579b35747208b6c722342ea70e007eb2cb5b1439beae058a853d1ff975580a182394c7e4dde83fa0e4a5ee80df4d124353c220aafa8c158e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 51982afb6f0069a12fa0cf420bfcae44
SHA1 feef026cd0a1fdb9cc15e45dbfabe41a2951a848
SHA256 f2e7b92202f3a5704f01b5fe73ba269808aecba480448caeda934b994556a641
SHA512 8a8b77f621557d6a385c0dd883b8d47224382cf5dbcefeb017b01da058c6e04376e1b003d53ea2bdd99466e809f4617db9e96f2646e92a3f15d3c8e42127e675

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aa25b9edfcc28ef54270a6835ac4855a
SHA1 36f477724e31593b9b8c6729ab66a349a285b632
SHA256 5d6511cfb0207b04a332179ef9eec5ae812419aa42c6deca401dbf5855940f2a
SHA512 bda96cdf86ecbc57e40056bab711d773e36405515f602ad5b7226c938ed55262d22b1a077cd9a3f275d2ddcee47d7fac60cf42ca1462c9848a802d7f3ccf6aa9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2eba1cf-30e7-4622-a40c-eef1449a1fee.tmp

MD5 da87aef8a27c159b64659f259f60707b
SHA1 b9de02f2c3be8228b42dc711ecaa011b29783b3a
SHA256 6d1fa1ee2a8fec3e5b12920743da6f4dee82d97edbf8a435a40680cc58794795
SHA512 3036ebc78ac68f318b2d6186a7c0d991827365558a28717b99b907f465c08e3d499a832a20e2d02ab1c6bb3a6f2cb09026531926fe854185c5b81882e820d34e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a3db60107536a8ee00175f78786878da
SHA1 00cf61dbdf407ad423d83ca2ae412c14d12d06a4
SHA256 4f4be9e8afd4d90b8b12e29a4baefef57c5ca9531751cd58c4e415ac440530cd
SHA512 48db8e49c8aa167a0503c38b9bb68d608cd5b401189dcd8d6427e7368879c9b6b95260e6dbedf56c5267c55843ed56fbaa310ba505570580e24d7241c6035396

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0401b64e8e2829a357de978dface8349
SHA1 89ad63edaf2291dcaeb7825337439366c143257d
SHA256 a222d8b4f08a0684ccfbc8886d5e471c5e362ec1ca26b32d927110a7e911e6be
SHA512 ea5be270568e39fd29518c7c7d506e89993011a670c3c31e3a00647ee5fd9d926a6e144433cb7ce23bcc0e2a515097f429053af97bda3c2f7a2d0c01b2afe3c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 27e3361810557d31550300a52e4ecfe2
SHA1 dd17a68db23e9e00e1aaad28605901873875825d
SHA256 9908b9843ef22d3ab2022215c8d42f9ba57de2caf491f7df19a0d06fb164c857
SHA512 7ab0ea9096597ccd0a5300710798e7c5997e2525d2c2483c071948b1710847f93e9c7a102286600187137ae4b641da6143d5ed1e5fd474bfb0f2b28fa9a0ca9c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe628e6f.TMP

MD5 7787b57e95399d982e26593b6cd4ba57
SHA1 0b4a3dbb093e06cf6515e801470b30dc4822c111
SHA256 abbb07ce0cb80f3f97f4b79f673195dae038f168fd0316b6b93bd882c6e50932
SHA512 86de7ab13192b9f273a977a18a8602947046ee4e653bddf85fbc123b96e10b75639006311080dfaef386dd551060cc84e269766c52eae605e68c7c4f392ae550

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9f090819f7eaf5190bb4cd543cfabf22
SHA1 dcf937d72f08a6e99cc9aaac4ebb85e5664c8f01
SHA256 735299b34b068fa8699b4a24b3b396032c339a82f31fd0cda79c3ffc769b00be
SHA512 ec360b5a11ec4082688ec3d26835605775f523f850c3770917a1d14caa9ae2a7b87cecd335497577f0733975905b2c056f82f5d6a95e9d8a5cd3b6d5fca73de5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2edef46386890c1546776c8019ecac91
SHA1 b08490cbf3cd831fe994842fd2f67a679c96ab50
SHA256 e00c524ae31306053accfca3f43c36b3974b01e1791acb5f0675bea18f156a1c
SHA512 d55244a3636fae1e5b0b8f98cb754a8d9a350619c62d9a80ac96a23300b3962d3cc90d58bb2e3880df60753d91e2a933301c70cbe8a4a52e036f99c733e687c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 26e2355d7795d7df799c0affbc1e8fac
SHA1 6e4430f2d7dcf80585d18bdfea4720063cdc3c6f
SHA256 b0aa1317c78bc4de627e0d07cd491254235bb31c0cf49e08f43ed05b25ac02a0
SHA512 a976266a169625c36b126fc1d1170043ab1c4302ae86666fb8ac3df244fe4b509ffcc330fcaf54644551f404bd367bd79d6e4e5b8418afcec3aadc5c7291b5cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 070167af133fedab14125d2a70e74e22
SHA1 5c62a56d27720f3bca92189811964313277dcbca
SHA256 0cdab1781853da48d133bcf806fb2619133d5c7d8c2b168c35a743b898619cb4
SHA512 e1fb40edce62df697be3d85aabcfbf115284f3d012bbbac9c6a9ab6e3200374b56661f3555efb77d88eb51137fdcd68bb6172ea114eecf71082e4e1163a006ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 958168de8774e6a66d2a75e3c7ef1cc7
SHA1 881d66691216b628e126f9723d3760fac121a31e
SHA256 c71ccf45f0cce97731a564eabef3aa2d9b7978e25f435a9d868a801557eeda09
SHA512 d64a6f562c04676157b766710c67fbbf411e7cf5baa742e3791ffd76d27b8c22ccfd85156ad995ee4ab7f5cc242fb941f80ce77ec001fc0309d4e019b3914a37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 75c631e122e87a82c764fc98c4e68506
SHA1 37b6d35120a02597cd21a3120fb36b3368e446ce
SHA256 4956bd03a55f78741586f59ea110ee7f6d24feda34a088bbde2968c443a6d83a
SHA512 d101f6ce828d252b614b53b4e05fbc6602121490de946e5fb820e3e4dbf589bf3a72190ba93822b8eb18da9ec4413dae94a5b9c71a3885c9b18de12a4a81b444

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a4503ffe35e305d3493b7f2e950a4e9f
SHA1 2718920298db7e9339fae134d39784d8abe78c87
SHA256 ee5e0434b9e2dd4c47d4920c94c8a5199bfe4abd19c1c2d337180d701c95e3f3
SHA512 1f994fda67bddd6a826a6be0a364bd0c2f78e73629825b9bb3cbe37533686083109f72579e6a7fae1ed56820d6844011cfb238199e517ca512d43b58c2c3387c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fb3ec0d6b136112fa4fa25fa08bc2841
SHA1 1e2b8c426f34800a121c61815221d728922095d5
SHA256 cde5f7b4e5abe3b0bb1f2e352f9937af6c1c08c2055e053206afa42a5f083e94
SHA512 ca519d2d93bc1f31749babd6682018aa3ca6e914de1c9da6472a22617f17fc0634f8e4ef270e48a6ed52a6a77dc84cb3883779304a1ce5b980241cc5a661c49c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4a8caac4c903f495c6c014a1a9a5081e
SHA1 1da14cd8e93c490a823e6cec472d547177cf525c
SHA256 a81d45337565c280738b8104a27975c09e2315507238e84b82d41461fd86ce2a
SHA512 7470e8c172d7cf011e3abd29378e47e570608ac85a636a9d06bc2d92ae75404d9265ae82038e370f8ec2730eb7ca54395d1192ab308bcee5b2e9f57ef5af1d47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 97a657f86855cc3523d47ec6ab2b8a66
SHA1 b6d158b2e1a640b2d608f1bddb13cbfe98fc03fb
SHA256 6502d60a8ae570ab1eec4b68421071c929b25001b944299fc97f2ee492c0d72f
SHA512 ca378e47739df44d2b2c9dfde50999f07e7c7ef7a853666f06d2a314f54b53280189282b488f835242e9d72bcc3c824d1a5e2fb32f9e3d56ff0263704b24ea35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 efd19f855c2430d2810eac55e583f490
SHA1 452678a69f7275fc5d9309eff108116005079859
SHA256 8942bc4e1e333159ea142ea0311acdc62cb2fab9a524c97eed98260920ae5d57
SHA512 0a04af9f62d308606428e7f5575e047f028f46e3a5bbf2451cd27ede67a87fa4f4d96ab5ef036e9c4d65c1655c118e90968fbb02130dbe5c39e0e750f0655632

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 65cda6fffa5cc0000a760ded989fd87e
SHA1 4e5b1963629ff18f7528fe6feda0cba889a57a67
SHA256 943e10a3c67fab9a1ea1f6bf8497b616e51dbb5e2e41339d4ed9d4d588bbb4c7
SHA512 80fc26ebcb12d9f95eddc243abca3acce90c06a4eb3e45b667a0c3962e91d310071cc16ee1a79b920ac342c5c9fb7678058ab758c78276a0610c611bbd331ca8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\695c42f61090a800_0

MD5 0bd28856bab8d6cd649879a57abc658f
SHA1 7d725f59d9e00420318a1add05dd76e56fa1a085
SHA256 15739776ef604dcaf53a2ffb4556daf9e208be9d0d575716a7ecbe4d1f8e22b2
SHA512 e4ddb0f6b5d96f61834478ece26d6d0e7d183c64cf7300bb97cbbd5cece497262d657ba714cbaa4540ff3e4e522e1732ba3dbc26caf1d5082f7607c470fcd88b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94ebe1630900d094_0

MD5 2c3e5128f077a93997dea98d5e188a43
SHA1 190b26163dbc5570ab688e8a324460f8339de8e5
SHA256 2a6806889e658d3fe24a2546a946d62f1bd8ec580738c9b9b664e1c42bcda697
SHA512 0c51510f7d1067b322d196567afec15ec8ad8b6f5ae170513cf429ce8fef21cda75aec2dda9338c07f4afe5a45afc7492a37632dfb4f152add61b5b23d673d94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfd9b5c29c5c8524_0

MD5 29031b3d6d42777c7413dc31be11b3e4
SHA1 4b6faaf76ecf8edad5dc62dc894109b91857ed9c
SHA256 cb8d31e1ec0932f01e6e41bc615d439662f44a88021f032c421459805105d73d
SHA512 78ae6fee227cda93035aa76a2f73feb25ffece1b2c1b309ae222cf9978cab8ca5517481466fcaa7cdc6b76be8e3f8f3ba1382d7628203647ea97ff6a6f28af0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\87e1ffb07d850b0f_0

MD5 af087316c1d126a467ac3642dc36f214
SHA1 4ef76ad7725859a40ed74f98193f2140c9706a29
SHA256 0824870e47c921e990d48773d2b7627e07faeb3e5f93f1e240bfd0ba66e65f3a
SHA512 051c545445fecddbf683fec00bd5095bf1e95587e72938b7e5aa0489ffc91d07215afb23824f0697763fffa9f90db0f8f84b07511e2326f2c812443a0a1cef97

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a93a5af80c0c9ac_0

MD5 4f3fc014bd79a77a8f40fe4de248f985
SHA1 1097ced6b71e4e8c2befd7e37602c30c84a10917
SHA256 11e17cdeaeec25842c00ad611828b1ddcaaf5bfa4479f4e2574a8c658686e425
SHA512 bf41c1c93d8a276a8d3f15a2531abf474090b500823926d4b21ffa7fa9dd1a2b5edb918e7baffab52789b7afaf2bdeeb8bfbe6ce1c50b1343bfcc81650cd0f74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cc2f0fedd3e9608a_0

MD5 0be7dfb40ebc6ab7cc0acd879ccaea8c
SHA1 1bde4c0879014d7c49b8c1028a3a809a69d303e3
SHA256 4d668e1f91e3b10232db925379b349486a9102a666bccd9481daf364ced9dbac
SHA512 d086b89eb0f649c553b585acc84737f72fa7cc85d64c10052dc14f1563b5a376310e30e851017034541c0b7cdb407314d0b18dbbc8e637f72b17415aceaf12a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 82b4c40036729541930b86e93caf9468
SHA1 f73674e1512bee2f5426289069b4842216ea0145
SHA256 9dab6b260e43bcd7967ce1acf775e9b8516561b44a5b873f1617fc21c245ef41
SHA512 90a979d5af36cd2a5a34d17b3cea42ae0286e710842574f162db5fd180c9b95f0fb579bd3f0cc4f94897cf2ea3b02494c816d65018e5cccd48c6c2278534ab79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cae5ea91f6efd8965079cd0e2375c90b
SHA1 c993ecb7a4f3ec1dbe1bd1cd0024006d9bc9d86c
SHA256 9ad15d73aeab9072d0b04ec1547ff0a201757cbbcd94fe7d366da32a086e60b4
SHA512 c4ed3a1df9ee5bdb699db1057bde6b604824ffb35f85596a74ffe362efcc479f4193ff0dbc30586f176de61f4ef853b9371556c9ef07d933c6b306a1539d120b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d759c8273e3235cdf4e7cdb00d0608b3
SHA1 9820fada0a036b0ad67627553ed6b5f1107e4320
SHA256 9d7248dcdaa3ef1273b1080ffae50faedcf090be6dcdc623e98d97b416378f2a
SHA512 e75704dff0d4a084284bd53381b59dee6fc66578d33385ca6142033769488e1974dd2e7f7db4dfce36eb469067cf7fb785f3e8d83183e571b9dd089bcbf8bd03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 668515b7184bb40452f878b7c064e326
SHA1 2ce6a3a2214d536446a3ab92430ae08d0bba2f47
SHA256 ad7b812bc11e56796c5343c6dd8a09bebbf567f91c3502979ecf52604412008d
SHA512 ba2f8e396a5f432bc2c8d05763c96ebb0c3e163036dddc836d559aa91be1fc99310fab5fdba80f26092f5a4c6bbfa5a7724584937865889040de6cd3bc24ef9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 b05350b3d474e3578e37c5e83d9ebd9e
SHA1 9c14c6b2890a07a931b9d5f57d098031aeb8eefb
SHA256 e36f8f5ccc440d1041d135d7052788664728e160152461e10a0537795400d4e0
SHA512 9fa102fdb672c749755fbf47eabfb90faebf933f8793bd72f7f9a9faa6a19297d916dda6bb0d2bc05572963e92b016c4eb6a08072e5485304f31ced014703841

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\efc4a544-fe43-4e18-8b79-8f889c9fa39e.tmp

MD5 9b899b01b50842c836df087239ad567f
SHA1 555c799455f07eca65310bbb3f35927e9c3d54b7
SHA256 7f15ea03dcf1d51f1f382a37e3df5baab4746c99f2db9cf5a933f5b49b3a2053
SHA512 02a46bcd262c183f30aa63f1399f1692660b696d30113d16f4e6e8998242ac34c29dfe6b2e84f54e70eda88dc6732a7e01bcda3227c0bdc2fad4ed5bf4540130

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cfbd2ad10730714981fabd8567205110
SHA1 3ee763987415d6363800f49b83aefd5b3ef81c37
SHA256 126d9bdf59b090988ced3e1e35f3c641c798445a5440eb33e1f476ac50597eec
SHA512 9c73e2d09cdd6022936a560c5f9db69e05e8f4aad3527dbc004a58b0b3614d7928421544e1828efecaf5bc6a82fb7ac306c151899a7db73d623eb8b1146800ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5032715d5d104169_0

MD5 a99a826c6694ef27ad922445a30da454
SHA1 925d1934dcac9bd4e85389df2b25d8c6a427800b
SHA256 f3fd26acb629c945802846e2f4f59467e276c8139d4bd8ca5b3ee7349a5dab33
SHA512 e059a0b110752a0aa24650fb62d437dc24721f20ead5e7d92cd567515884883ef24e4649b1472317b19802a11619b836afe568a5e6ae7e637572a52ee7636388

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b55d03180926b54a_0

MD5 b5dedf9b40ccc83f667931f8cbdc7ca4
SHA1 cd5a071dd206d5b0acb8e5a9a906c55c0078837d
SHA256 b8f7f745b5f8fc16623c16a8a9fcde8bb767b01c9d7e33d87e1ea53686b7b7d9
SHA512 bb96f7852c8f6c81bd7b1fe88082df49cc2d054545124124baf7166369ec12d4673bf27eb3781e2d02a5e9d5aa1a8c8aea61dbc1b35c59f2c23dce8b7c7dba3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\75dc68a2f24cc570_0

MD5 cfae23e724735aceebf4a0abb736670d
SHA1 cb464d45f0349ebd2c418fab24a5fa178d6ba1e6
SHA256 d210c57784baf7cedff5f0a6d232b48f3b3ece4ecad06292b5461d3ee25657b2
SHA512 6df23704c6e30a24a829843dbb9830cfc714a0440c6124345423d46e54de060e997918d94d4d9b42a6583f6390d0e96c751addf4bb1900eb1b0595e35c5baad9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\295f5e2112efe00a_0

MD5 65e64d1f44212c410bead31bdc9a968e
SHA1 e4d1f556c04810de14b95f24419830edd2f5f316
SHA256 1af4d20a9ca8e444bdb487a2442e1b43d90b331ca1f658202f37237737767058
SHA512 709ea2d91795c9e9df719c2f98979e67fb0c5a90b709a3decd1c3abc0a844f1604aa3437938808bff802c2b96c1e52289d5987182282626b165eb9bacedab06b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0580a8e1646d7bcd_0

MD5 d5f986d690bd63be133a1de34a01a157
SHA1 d102fef1a003d5e0af4cb7e7ab440d12c2612e48
SHA256 dee19def208319b26e89617d4207adf7e47f842bd485fdc2f4ab289827288c6f
SHA512 b4bb28fa58d33e62899d56ee22edf7bc54c00907798884e6730baea90a5b050739740f9328c55bc7f0353b7148b697ff2fbab7abed634944c38ce8e4e35f1012

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af48edbd3578ee3b_0

MD5 613e436a070f3b3e0b0fa443545e6003
SHA1 e4e9923682d10ef8faba3c6137fe6abf3f71e332
SHA256 8fc9a97d1f1765ee44ff54edc966f5570f78cdb9bfe0b4a4c3b28421dde1c198
SHA512 a388a6e103ca118b2a5324c3b91fe5f9c52f82d693e2070c7b11ba8bb24018bf44f233aabedc48a372087f755f9964ba83cc31beef373618eee9fc3c1d8f50c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ab6098cef35c9edb_0

MD5 5ecae7c41a3d7f292a95a923abd80143
SHA1 3a8a5cba298e4081998057c167754f6d7d006c81
SHA256 03205384e546a26a96de9f820ab806b5b8dd636404c99fbf3e28015b815e759d
SHA512 b96a3f7aa8e2ffb9fcbdd6d0d3904117f3c3e79d9d20c9b7bf8279ae308728b6dc3fe8a6cadc7a0dc3d814378740c696761f707499f2525fd883ece6018bfca1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 7cabe48f7b3d42d11a5dcae787d830be
SHA1 e6ed245106c6812d6a53c282c28c5de2273ca0b0
SHA256 ea2dfc9a19aaa4ea52ec543afd6236d29d78b39c6dad57873df4e40fa2bc7999
SHA512 08ec573be030991b319704ed168ba513ffafc999e42df3b74ed0fe8118fc888bac1614f95904633eb29a76e0d1cd5f70908ba77d72bf1b12a7619615e44eb4f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7f05d59e6df9a390_0

MD5 574288b176e534864e3e5094e6370ddf
SHA1 ab452ddb84f4bc1668e4b19761ee6a54181607e9
SHA256 619e1e3475f7120a784cf2fe09427dd310f67492ba36fe52bbedb629f26d1c0d
SHA512 2c133f032445745f9a9d04d04db7fd55b45a93bf1fc1962addb2390392f04ac4319168f11d00a80f01bc19c6858151e08216dfb90a345a3ffeb7861c78778145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d871d756e529eeaa_0

MD5 fd4cd3c695fb70f9bd79519b037ea478
SHA1 bd2de979f96ea17c4d477f0cff412e0a53b80b0a
SHA256 a8ae0e4b35ad69794f3c4894331bef896d522a8b100133bb450a26aef1ba724a
SHA512 436f55ba4c3064d79d47450592b9d1eb758061a00a4b90b0e16a6a249e3c97a30d332fad08fad2f45350ba2674c4a510dd93d46d1be57860773397be9c3790a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8febe6deab79669b_0

MD5 ce6b560974a4098ec83f2dd7efb976b2
SHA1 b037e23ed69640321b4f3f41861b25defd2f600a
SHA256 32b1c0821bf2d0bf5890e181c03ac8b02d6143769068be8b7d881665fa00afe0
SHA512 e3bbac1b2d35685c1bc9d31ce5039e5c9922c135b8c1d44279c31369562a195235231e6b0a5d5d89afae0b24567811f120c08cd823034db077fb9d24a7a8aeb4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 1d912d4b0c13999287857f9a62fddf54
SHA1 e1e2a339d50f08b8b1806f233c0fdaab5405635f
SHA256 1ad45b98a3548ac69da092d341df20ffbcc2e58d6997f8eed8951468e37d4a9d
SHA512 03fc5c7615146160b8f44cbf4701a9bd9d8eac441ad5c665f75e05a5ce17f9bfab2c5e6b8afe91f59089403128df290b6302113740ffffbf7458bc92d633c157

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 cebf7c1e1e7362d88efdc1c1a16d5987
SHA1 f1b0510d384ab031a3a50cab1cbab5dfa691ba51
SHA256 971fd1ce86cd4b29636ec7edb4a25f8d170e3dfc933e3d04477c2211c284e932
SHA512 2ed9b2ca41e9c207816f93050d669e3c72bc851d2346e51771399a4f324f44924295cd792e11c42ea40bc8792e063339e61153c55b894b2a7da97521c181ee9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 a82ec1ddf4b7c31c2d2958c24b0e9a20
SHA1 ef882fe2ec647b8c9d024ab79b7064d5298f9253
SHA256 9b5d0741f5de76da1255d4b3e26c902fb297df6939b96a266066bf70c4ec77fd
SHA512 c4f498797f05a194a13207f33ac1799e86c7b811f4c4a474cd709057d3822d568cafccb22d2c3b7d82ee39f81c2aa91cb4666e8cea268827d88dd40fab011bee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 5f65afca96e81fb041f8b3faac6c40e8
SHA1 190472a138ba3f774e0c6cd4d74b53b389d2f592
SHA256 331a108886e8db06497474918bbb4f2dd40d30d03c9e8e7e56682297f9c20a3e
SHA512 9f249bf653ae1221c6e1e7a62740d9562087c5786386b9e3a73f38a6655bde0d953c20f6a1229d6040f8274d2c0beb3696b1d8502274f928ddd28a3df82190b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 e15a3757e15a0cc10c9d9fafaaf6da08
SHA1 887b92e7ebd391578abb77c505a821b25018e8ee
SHA256 c841bbf8eec93d6045a69cccd925e0adaefaaa18d00e2bd77c99ef6cc574f5a8
SHA512 9ec078eb9609a77b6bf8c3f4dce387726ec4d0fb5be2dc7a855aeebfb8be9be10c1d2049178696aebc90c0d48685a68583508b88e0a96280e2099f838d5aa269

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c035c55e661cf4e0_0

MD5 a81f578c6982c28a4eccccea5ff91c16
SHA1 0ea6ab586768c1467c145209da79a5251bcb35c6
SHA256 80f143178a23f217b9b437c3583b7cbb20dc736a2efd812e6966202a2a146b68
SHA512 a2e912df950c3a69d9c4cdf52fa6ec885bf2b35c03adb216261672b06b96b4b6579c365565c34b2e76e3f4f6e47b6e7dd71389a9b63158089c5dacb2e6670e29

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\eafdef011b18f148_0

MD5 ac5cafc8cecb79c5453b36f56313c146
SHA1 dfbf7a25fbd6191c2b836714a8491c67d23f9c31
SHA256 7e082089f3d25bd179c437cfb927d79a018c3720f9233d3a863c982fa47c0323
SHA512 339f1d5a9b68ae428b5e39968d52e5d2d1dfd49fa6cd03f8cfc96e0772d90ca12017945c33c89b22a83325eae93d0929cd3843615328a8fc0ce4d1f194d33001

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 86cb7d02503978398538470dec8fe445
SHA1 7a063f778467c1afc3d1e631e933c560739d0489
SHA256 4375434680cfa697ee23e667187c838b11a0f81d0c3ed56db478f904699a7b84
SHA512 b63ee38ecc1e585b74dd509cc61cb1513ca742ca2649e5803808d0f829efc5a3b9208ec1085602650f4de85f9a271bec8cd6fa3dc773e1fcce1bf06b8ecc7f0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 96fb500334b9404915bf76a69f34747b
SHA1 5000dac3566e979ca0c6df506c434f1cdc40e7f7
SHA256 297968a6e93bfed397a524dc10804663b7edd868339b4539c561a3eac5bb7ef7
SHA512 53a4a561a2bcfeecd136d2feb3285bda7640ed92f44806bca5ad1ebe3c514364457255ab6b7f66e408f29dbdedf02bfd16b07a0e8465980fdc26ed40311da69d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 527debac67c69fdf73267b2ae8b16292
SHA1 b653b6ea1c64434e18d1019e19b811fd408742b0
SHA256 45491cf0cf729ef821e2a2a84fa0da759247ecf087157e24cbe1a08103e3e3ee
SHA512 32b6ebb33f971f2edd69b787a39eef261f8d9632c457f0c86fe15d415a8775a39de77bb98ee54d51d87ec8d7cd23d3157ae38058b2efb6c7c829725bc16de52d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 bad8ce0cbd0bacce649817f0a00eecb1
SHA1 8dfb8c35bf6e405d3dc6ee271e723878f20de343
SHA256 e4cd8c51e35334df45b24b8c1a960a86a594cf2a86aca7a356e1aa1b11ce77c1
SHA512 43766d78e05e60f88ab153aa2246130ddedf3a120ce2370fcfdf5a071ddc4dacd81924a35711b4d957132ea8325a7f375afec9d612c356a33a01b14f4902c40a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\07e28b456b404a60_0

MD5 7b07279ecff968c084083b52897a7487
SHA1 44090baa496a705795274590d02887d4dfdb1e0a
SHA256 0fdf0f24b694e27c1deb83367f12c78af0ec8720c2af0620715b2a45b1ae86b3
SHA512 cdb7027dbafe92dfa0e244c44cd99edad38c2d994f12b0cbb7607466d52188766159b938536b9f0f0e18a05bba16ab781563df7d5df4b20e0639a838dca6f3f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

MD5 5045f4f1317dfd4097eac4c956f2b985
SHA1 ca7e8459cd953e5ca0f890c2726d480cfa526a2a
SHA256 4c1b988ffe49f74daee87424ec62f3a3e0cae0fbbba3faf917442a8d80c3827b
SHA512 2a645e42918f91bd6df2b4d4c2f136c0c311d87024b5b0ee6acbc6dabf3b1983d20a9c005dd59928779d32b176b9fe223720e7d0ebe2b81d061d735f63f67af1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 ba134655f23119c067fac0e9caeb5592
SHA1 85e7cf6ce3779ad28380ff3eee80da029428fb0b
SHA256 8eb6b4b929dbb363389870533e1dfad93e1dcd7b27157b4bcd447cdf1edcba2e
SHA512 8e72aa3c1d5f350536675862433241337c63c5a180fcc8822298619ca73bd597689e15cc56acf633cde36649f0430a777400df0baba9225bec750d638d9c6cae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9aee5cd509922cea_0

MD5 636fd2c77e20ff55c2a33f8cf1ef7329
SHA1 e4637a26f58fc19522b52ac094ed9c4bd4b382c0
SHA256 ae261ee9897839f9a3027ca85378c2d69546686ef709b0bba85c1d3106b0a534
SHA512 6bc42059bd37d966beae66d8bcc1cf6e815af4034cb07a1b85544031d83338afb49c8e1a59554b08473f28ea47cd449df09a26c55d017fc416a5de51d19dd91e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b64a062e7f1399e1_0

MD5 0049a32a316d4fd5460adb83cc68cd77
SHA1 c0d09eb8aff67eb803ecb7d0a38f4ebede2e4440
SHA256 bc7b4cf6be1f5a476b5b5a7817ebf67de85eb028219ac9de2eddf8f2cfacee92
SHA512 60ec551f07d93fc75e7c9d83a8188851258bae50bb2ec273ee5a9557c2467ec27063ca5294c7774372d24127f5b5a518aa482a397356fbbd3e25a98053a07c7d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

MD5 b2ef416024552772e1f5d8cb37c9f6d4
SHA1 3ca84ef5560e10f751ca522e71f504c1b139e218
SHA256 b722826ddc22259ece98a9301b72386d78d496c0b5e2736360341ea60616b7e1
SHA512 50f9658681c83fbbe97f5b68f71dc4ea8906cc44ee786d4addb7779a14ac91614ac0a7f588243e9b5ef2a490d2e6d6fb800d6389a3e72bbb42e2b6f4ba0fecbb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7ad8760711f2bb72_0

MD5 e0911182ad07e427a2eeeadb03557320
SHA1 25ca9dc36dfeff3a3a80c5ed58adc9189f328f3b
SHA256 43d5be37dac28973cdc13849107dc5dbd9a6a2e07767aba31a32d63e37d96a5d
SHA512 2bcd6c12b5d4ff699d387631eb02774051fbabcccdcc851e16c6354d0f8ddada9d05f82ebd43477bac7fb1f9a939500615dd1820786bbd7301bb85415c4fd051

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b32c1d1bb1b11b78_0

MD5 d16c095c482cc0e6b2e935922568955d
SHA1 17a404b0876bf7886f67c6c9f39d2a48295f72ac
SHA256 49c2558e04c5def8e72f1525fa8721320c3c6f0e54800d9699c7a7893a5095e1
SHA512 368d86179f06997c6ace0f376682d52918f2ab7bb28aa21b9ba1e92055e96c094517013f8f52949d7bfe6a0449ffd738ca8ecc9a3eeecc95cbafc787e5d0b753

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\deb6de7f847d3fbe_0

MD5 397e63aacb2ea22a8a6e7df9fb85a30c
SHA1 476619cf849bb35cf3261e29257f1b5536fe3891
SHA256 a06802e1117a421856db19a478a7d05f8cb38e1e5a12ee47e5b9cda345e18a94
SHA512 459876c28f175dc1d1874dbb75b954020e1b7b70be0bac47d6a0f4b42547bd4fc05ba7020341094d25931216ffd979e38c1803b58135ce79a95aef6ebaa78f48

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

MD5 2471bde22bac5a2e6ea39496f330b1b7
SHA1 bd6a14ba200f77e2ad824e040b1971f751b50039
SHA256 26d3968818df047b314cafe5eca8aa2acde0d35c5c993722c074c7ab6f9329de
SHA512 cb7bf4b4ee624c2ecb07ce6f7c3ff066371d83a7e485ea2bbc49e416a0c515362490a6fdfd6235125d7099dbe93cdfa52355eaff5fd40692a2672a4e00a845f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7b8d7762831ec70b_0

MD5 5dbef94dd2d767c4e7a9d2b924fee5c1
SHA1 a2c0df4b22ecab49ccb499170f5c859db87f0d20
SHA256 06c33aa002fe89850ef3b93b815475af7811d5bfaadaec9bc48f08321ab483a1
SHA512 8d17daa168ffed537d46a0f3cc102a0a2d1c89f1ef2f72dc01323e74ff61f0c55f1c16d37ff407edca0e963b353e9200be68854ad32ab378592fcda148b61ab6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 6c6a4d63cca80ec6608301bacc08bd82
SHA1 40e732333b26fc5ff8145ab7fa4d673b74a18d34
SHA256 8badbd041c22f8acc9a963f423a5f63d4be7aaadc5a68aed094aa1aa986a29a3
SHA512 b6434e7df3d4260f0db3c1e7b785909d2d8cbfd61a810627a92f6157e3cc2d062caedc53ab187b6c7186bee6250c3ee1fe601b594e681a53d1612dd970d61a44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa20c296787a3f88_0

MD5 31c5d16b9c6a149ebd838d2652fe02b6
SHA1 1b155ba8c3319cd9d7a608b3d4440d7aeb237f1a
SHA256 21c5b2e681bd146906e3405a0d60c1dc4aac8fb86c99676685c6f112dedf52e5
SHA512 c7cd93c1e1efbfd077b7146249c0f708f0652307fa42b8c51f32d65adeca2239ff2e84878377002849cc4a3e8b019b8b5745d14a07be28d6214b497a4c2460be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5b2f11f3f15a5775_0

MD5 eb1c1d1347431ddf036e781acd63802c
SHA1 382cd7ad582cd853d9ca073e9f20ca9530de6473
SHA256 663ff8b116989ca8072216a9f8bb581e82f50bba431feb29230cad8770611483
SHA512 b9481c8e1eee5688b8cb3fbffdb4f1b95a0fb6c4d4407d7060bb30acac0f4e27981a59a2eb73d47f355024038004d4a5f32dc4b552f4e3f4311c8cc3473e348d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d7d09e2437e8ee_0

MD5 4dfe3744540d41cc49d3d2de1c9be44a
SHA1 8a28acf1aa3c9673a45c9452eeb30504b9adf662
SHA256 136ca5c023b5b812749f73e4c70e041c8ab279ec66b12d9df166c0d2d71b1692
SHA512 f73cb8334cdd335abee2c323a2fa9b7229f8664acca7357520d735413efb28f9ef7c888231fe40909557f3f6c5ad9ceb5dead4e98588b2f8ea1e888391b3fdac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2c55eb8382350e55_0

MD5 c20b31ca4c16a8c6e7c871a21964a5a6
SHA1 a5603c9c1906bdd53303d5afa39d08afe116426f
SHA256 ee2a15d040467604c1459726479bd0100fce81eeedbb1e3ed33736479107f57d
SHA512 f2bae06e18e4ca4ff523b42a533d58fb71c88cbe13c0035a3beffae9238e6bfab95ed274a540787c17dc77283b6affc982cd7887dc55d2493137bf237f32b5fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

MD5 3791dbc3bc40d2ab2eb3f1a5e44bca11
SHA1 fe30024fe730581d593b9e7a3d75e0421c87d40d
SHA256 a8c8a3168c4f5ef94bb5cee9db16a51abaf061555dffe6f39ae05666ecbe5605
SHA512 00af9e8206cbef4821b5a0c9f0f8ab38bab62db7502adf070dc46e75fd886ec452bc8b6942b7883a0108cae6379ed4464947c4dc6f19aa5306bb48dfa5c57712

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

MD5 7f36c57ca534f4748a22ac04c3c7eed8
SHA1 64b451ebc9b8f482654e0490fb1ae19993b5174b
SHA256 c2fdb7b225c16cad988364de402f38a37cc0f54aea9dff52e493caa85bc0a4d2
SHA512 6347821cedee6183df55ee546129303c6da0d82bda5b76af687ba6f66f77d3f10af8b41716368e76731e943c2ee14407944ebb391d6b0c52ead187c98140ff18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d00019f29c31fea5_0

MD5 834d0b4e44b98413cedda00cddb57907
SHA1 a941731108eef9bf125b05340d96957240a78303
SHA256 ff339ff0de14442ff3b4f2b31acb3d7c0fa7d3629010f4563325fd8f0a2bd4e6
SHA512 e30c764779bc5899cc402733537ab04e96747b59f57f71e7441de926b6b7adacbe07fd60af53451d47c6a7d3aacbdca9db406a9611aadf21a85fc7cf3ec651e5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b13e0855b24740be_0

MD5 5e73a34a2ee24c9a748c9cdfc95e23ed
SHA1 3e57ed37042e3444458a4295f81d688a3a962b10
SHA256 bccbee4c9e869acf84209a938619ae941f95c70e061b9c5b4992a874b1a2908a
SHA512 67c404f023b2b626165ca93ec8b3d4248c3eefcc9a9e4fd6b1dc576ae783f35ef8e906816bf0625c74b6d147197215b08e7cae30b755d22643a9a6a4fcae65fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e52ae3fb759a78f0_0

MD5 33740d70c6aca2f99ddc4056c568224d
SHA1 633ec97cae96a2c473dfc77e06895066c8e0c834
SHA256 57cba4cf309e0fcef024ff78bfb30975e4d6477b626c78c3d065a3d5b40b217b
SHA512 bff47463004311b1362b0ccd89deed2fdec5c0588a729a748c900bcabddbe7769cab6a00796c6ff721b5c6ecff797756cae2505ea41bf664aa4289e71c678860

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a4b2b2b56079137_0

MD5 a6002f5518a9443a7994260c56881ba3
SHA1 720dedb072dfdffccc36a94a55b54d3e349a2c12
SHA256 ffd766432bd0b10ded98bd05fc179da3d14f620077a82da4ecfd9344d261c096
SHA512 1e21e53c001014ad3651d8c37d0b86bcb1d7597ee37e99319e57f03a0630256a7e8e50167ecd123e46fe617309d957c1040a958c75544f5c8a2ab2145893601d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9eb49b832d016644_0

MD5 79f3d9a047615c8601dd38254f354651
SHA1 e8bd69bcbc3520ac94956637f09c1a231a7e6b84
SHA256 2e396cd4308f17dbc8fdace3de14114ec9c756aab1d7e97c422b0229660d273e
SHA512 be3e095fea0d8d6a9e8aaee7a690fc1d26257481519681820012c00314c434688b01110248bfdc5a4d9da83d642383d738395618a5289b451a5c83a24100bf26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 d1c575039ea85b9a76cb448c8ebef155
SHA1 6e81af2359313d021b8e59cef5abc78ecfde053f
SHA256 863c9f82d6192294719b6db0626c3b1e3f25892c649d864f0717d84e2d4b2089
SHA512 91e6f45a0ee8c7eefce98ff31b5e013c88cf257ebf46c0b88c098f6de216c32c5dd107c6163c61ed634edf042399453b36df750a8ac2f121ef3ba552904f6a8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81764cdb356c9506_0

MD5 bc25bf311846f8ce6bdf14d2a996ea57
SHA1 60b7477c619fd4fd7765da88cd2a45efff2591d5
SHA256 d05f5830274bf60e7af232d5aaf44c53c7f61858b9e28e2d8483eea11d9fa527
SHA512 ad87469457e427da8de80c8340fa7f8aa632fccf0c669a7d08b8aa9b4b0dcd7502e9019131cc94cb89c7192055c1ae201734b2c1f3a6a88aaa8ec6c047763a09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

MD5 50f9bffa005891a83d7ff8346c3c4358
SHA1 d0601f9aefc2414b564df9c1e2b4afb855e5a20b
SHA256 ec15d254a241c2dc3e13d9a6b66d7e795ef814d0bb7185c8955d284beec7ec5d
SHA512 ddf42eed4426f4509a93f154a6802c44da6f2f402f073d18a5afd4e3275417c3244601480c83803a34b0ccce4126563eea45849847a082a422a456c12c7911d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fbbc3b076556d40d_0

MD5 0a38295d6f1ffef984848080262e8005
SHA1 eafab27a6eedb53cee19ceba49307fb820a7aecc
SHA256 80e55dfe40fc42ec81fc5d489570cc26058a13d3141f17ecda3ac74d1d861fe8
SHA512 5a7fa112867713c9dfa506f9cafee7a983eb0565f987f9407867cc529f43e32ff2dd7092c82eaf55aefa8687eb0f77e092cf728bedd0199ff0f57235596cdb12

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\edb3b6840a8ddc0a_0

MD5 8346b14bd9da1944a7fc113cb7635121
SHA1 b7fa7d99d655b56de8fb6506839459e46e392226
SHA256 7eecc66f3b14bd7504be187a7c9ac1510439ce8275a2b9ddc065d9996b14e9c5
SHA512 2b4dba62297e3bbc09e0533f0ec784f1a3e9859aefce5bcfac54e4d976523a1a51a2894b00a3f0f987e34b7ae02a1a025775f7910fdcad124ff94fa999bed492

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8f6640eef188435_0

MD5 17fbc76a86da979638b0ce528dfae6ca
SHA1 c5cc02287e8dbd25e3e32c51e3cb4180e9d5bc44
SHA256 14ce2e159d85dcbbd1f9b5d6b439b87e7b77f5d173380b0c3ce5aa84b9e0d001
SHA512 f8995079db5cbfad549151959b1add8a1d0d9bd97939330b0eb58f9d9e222ec9006a2ea27d32fe8a361f9314a8fa7a3af6d28bf15cad8a6f2030638565cfd38e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\90baabe8c48de89a_0

MD5 09168b4d85c399accf395a48d842f583
SHA1 9078ad03bc53a65dcb4d479a343f1ae59428f045
SHA256 da0f918aec4f1386ae1757ef6f3ad19d8b8551a20d7c2a59ab0a9833cb0f2c0e
SHA512 a900f9a534debc8ffe4cb9a61002b4430f3cb9aa0444d6db3ed6142f97c6bbb3f5d0bf47c1b83a7c6dfa200f55e3778321eaba4e2356a3415d635e71abe00cac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6537dab24e365f9_0

MD5 bb8a9e5bec71521e61e807c4a0f8433a
SHA1 121027b324a10ee89efa80d509dc89bf21f9596b
SHA256 e75d471950db95d078e78ae877aeab904de240031e6c067abc8b2da1802f3822
SHA512 505e3e9a15f68139f4eaa775a9b7a40705300525d8c3cbb7e29da16f6eb454184472591bb2a5c4a8f6a3f845907a080e675d3a26aab64afcf3f74d61f33c9c50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d72e185424f47bbf_0

MD5 bcafa8d1741da20b3747a756efcdda97
SHA1 f475086f81b40f9922b764ab9785189969f6d20f
SHA256 606c1198de4922613efd2be1c56d018ebb789bf7d68502262449a53b474a3960
SHA512 041a291c910a62897c1303f4b50dfd8118c219af9c390b3fa57beafaf3e6ca2767f9dc9993342aaedd3cada77ba8936c19c007731e97d2b4ef67eee9c5cc9d50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1927a26afb9a8b4a_0

MD5 e500264f75282f3628783ebc68a3c9c0
SHA1 c66dac39665fede9eb7dc87cd61ad1128a39c0cf
SHA256 d45817bfd7b83c0aa93c75716bb78bdb39f9710101dbaa8b47d18d548ff7aa1e
SHA512 f2117764592b1228d072a5158e901a9005fe8f92bcfee335d6b254e3f82a9cbb5f48f311edc1ce2117f336ec54285d95de543f846c81fb086581cddc1fe587f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53205359a4035ca2_0

MD5 a31f95b1757043477333f67a4f1d73f8
SHA1 ea248ea4dbccb27d4935e7a241828a1dae4a0aec
SHA256 a16c7ef29c30a56c4101fadbe31ee03bd623287baefa873841362c56e143783b
SHA512 9361b6ad42ade07c4d0575272ebb694e62a1f5b71113d28edff5a08d5d8bdf070ac21ac1390b4b67adb9054c1a8307482429a40f6efe5c1fa9e1117100ecc333

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

MD5 935d31b64f3f343bbad6486acff40aaa
SHA1 999e77e6cf82c3cecfab5268c9c833ccaedd3996
SHA256 c46b13944a4bc2248c0c4e734fb5424a8761c7f61a9ba160e67b4a12fec66054
SHA512 40d1846e16ac65b7316663c15a42efc51e0adb584cea7585cf4ae81c965b06a9b53764baa30cdb25b767c4741f49ccfa0e04602ae22c116f2d75c7476db2e7f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b9c1eb04784ce0c1_0

MD5 7bb631760a89dd54dd2c3a22ce02984f
SHA1 0de56b5553c8f5bfd263b6d1cbf7f3c7d13d7e22
SHA256 06bd1660d09259cf7fa929aca6ed9c00c3384d9f5541a134815e13bd49f1e22c
SHA512 8b5172c0e8d5c209beb7b49f21c4f2220f48562611c8153cb0ffa33e2b20cf03bbe1940f6ee783f478bc57ab8ff11c6d87ae95b5814466ed314a92f9d6e16426

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\10c6494adcdcc0b3_0

MD5 fec47ef527e3cda2e209ba3f3ea98d05
SHA1 b7e320107e074ecfebd8e8d242f9c9265e60f4cb
SHA256 da1ec9afa105a3611c6a0d1e9ef1b6961d1ac1f0bd544706ef1784f539cd00c9
SHA512 ada0a20659de76d96cac37f13c78d5051886888fde2351a003ad7081b271d9b60b1962582c58d8e73fe0b37d4d4f9b42f1f6b537d70ae19b2fb96066d2a4dac2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 a37aba816ede8e94a4f94bed4946ec2d
SHA1 8e625cc5373e894ca64dc5e75fe532124a551d48
SHA256 e493a80395a983c8591b2cd7589b54334aba551d5cc0c5d232832bdfb06ff70d
SHA512 092dc4152d4e4483508ddc355e39ff372788fee30b115c7cd308556aa8f38f137c0d7047df27e0db63259f3a6caa39260ff1df9bbdfe174753a077babbcb1075

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af2cfcaf6d9b18bc_0

MD5 f332fbe839e0466bcb89eea99354f0bb
SHA1 3d262395610b79af1b6fec7ca3b6da072d8d1a17
SHA256 845c03ac38fb93bb2eba6c3a8f44ece13d7dc15530f30f2546f78a8d9dd79dda
SHA512 52cca2931e17581433ff2cb783852bd644e07413973e4a0fa94cc80d4dd275dcef0c1bc284d7840013ddade2d8ffec147ca720bf7481994af0f074f1d61fd7ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 6bb613c31256bc16023597107506d75d
SHA1 1120aa3a6eb0ee9161f5841bc64a7a800cb1ce38
SHA256 b845ee3a3aa7cf05ed6a5e3cc505b82d678a01630f60e46fdc4762ca8dfddbf7
SHA512 49b0e187b4c7646cbd8391a640e08249131a01dd488e201218c55beaac5919438eae0df725ca88fd3e8ce7c1bd75ecbe479ba806a635d4d5b96ea0b5b9859cac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 839d08b160699e1ddbf463f5be2b68ef
SHA1 1d2ca66a00bd1d5aa3948b55e52e89802119a4c1
SHA256 7f9c915884028b2086de322569beb468322eea860946b67be60429c5ee24634f
SHA512 cc28f5ce180d3bc8443563f3a8c31c947611429df6bf70ad2f1e81a66cf2cfed37a5f3c61aebdc866751a25d5beb133010ef5fa742d686d08eef8a698387c029

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2856fb641af54f280ac1bb18bd293c2d
SHA1 f2ea02eb694d1aead6ffaeee87624a5814699b3d
SHA256 5cfef749f1f6196a5f22c6a2c422d9ec0715b3a8166cd8158b4164b646c498d1
SHA512 2a757dd3f479290f4fad705145aff0c0dea18788ebe83852d383d5c4527f3d9bec9e5cf1e9da01bd5057c96a1b7ef6550ad2aa023ffa2edd5e12039c3dabd9bf

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.187.41\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe

MD5 a9ad77a4111f44c157a1a37bb29fd2b9
SHA1 f1348bcbc950532ac2b48b18acd91533f3ac0be2
SHA256 200a59abdeb32cc4d2cec4079be205f18b5f45bae42acb7940151f9780569889
SHA512 68f58a15ef5ba5d49d8476bee4a488e9a721f703a645ddd29148915d555ca2eb451635c3b762e5a0f786d69bb5cba9bffac3eeee196f1ec7ad669e2d729fe898

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 13b67812808b6b08f80e6b8ec529e3bc
SHA1 49fd1ddaf54f20c57d4f2ae2669fb506fa16af96
SHA256 8233ae51acc3b96757bbdf0f73b42fe4b80a833fa715893cb25fb76868f28289
SHA512 07eaab4e1e2d823cedad3fbdd45f6d405e5c96d11288f1e06155004cf57df2b5ec5b548c8745bd8ca9d715d00ed1409783c72c8368e0af3a69d2d4361e939997

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 64ef530c440a1ae3ee660ee248bd635e
SHA1 9cece0fbbde652537d800c03b058edd54a7fceba
SHA256 c884550adb67afcb65b446ff658882f2e22089f5cbe4aa3c70b6d55064a81be9
SHA512 e7d9c370eb0923f6b59b9c02347660ffbd409f171f41e74987f0d3b13be185332eaa5fb9b56de65f5a40839815509b71643b3b5f475ee51a6e0e6b5481b63c99

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d173f1506a06478b045779b5dca94a75
SHA1 24d2c6ee3af9616bd9782ccbe4aa8b4e8886edf4
SHA256 a7d5d84fb4971d12ce22c6965b82812d402895a61c111bac7d2585ddd22d74b7
SHA512 9a51ce19c42d922f932854061fdddaf5867044a5ecf199084cf7718abf86c1be93462c4a660fe303d31a281b2fd653e77559074ddf111eb411390cefc64a75bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0001a9

MD5 12e3dac858061d088023b2bd48e2fa96
SHA1 e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5
SHA256 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
SHA512 c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6fb564a7af3c1d113284ae840850d6f1
SHA1 2f280a8872e44c2558958ebadfc2e8c7cab50d58
SHA256 74808f56eeba4e56f2aa279ba0873a5af025b21c1b2d1220aa814817e67e0e84
SHA512 a2c244611d138bbaa30c783078c3102b30f497f7a37200bcac8d32483091fd0a91539c1405fd54f40e3401a6353b3e4eabeebb6d00d7f03bd276b75500dbb919

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cb3beb4013ce8adeecf8aece4cc14624
SHA1 063ec2747d0b5c26355174faf3e5f898691cc706
SHA256 4673a40bc4166a0819432ab2ec98b8568d8d8f5ebd4ba5a5032ff25e7270253f
SHA512 05e53cd707eab7cf764e24faf3a122f916cbca90d6130a7a018425ff6d6186fdf1ebbcb01f1abb1e243e349f6a05c18588449f093ac390dfd441afa47a5918a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b7e873867421bab3ef03479352f06905
SHA1 e78061dd0973242dafdf8659a743155617c6bf6f
SHA256 2ab20aa4aa60a7da2455317fc92f1315500ae87022fb057f694bf3916019f770
SHA512 294f231f1360fa9f55ce0093193364ff537a2428421506b956531833b825ef9e429e2b48041cdd0eafeac8700c770fc0c6a257d7865e8b77584cdb8aba4cae5e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 290b6851790eb13a3faa3a7c8e40f12b
SHA1 18605846d6ce7a3cbf77fd1cb05a0864e23523cd
SHA256 352e14259f620840ea4b62a8f2ce6be92b095447a063bec7bd94f1db5d2b118c
SHA512 6039364ec7a80aafcb3e37894172c0e544be6903f137a03d72a417913696e28333f9ff8cff7d2a8af17f880ce92beebd8ea528b2f52b92647590810d32afd80e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 18ba831dc151b81c1bbb403cb39a4928
SHA1 26380aac221a97927e5602abf4cb0773dc1e5534
SHA256 a9fb5bd99899546a8fb99a4c87f90912eb4d088c660c8908799dc7b90f1ae745
SHA512 1f018b52faa379d962cdd99b414e17e6609224c513775be064f8c3666bfeca8aeea8a1093c9ed546d58f0dd4a65128622031d4fc754adb28b85a95dd801c252c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b4fae532110c218cd7ff052b7bb7636f
SHA1 d404daf21996cc753369b49eceb9e07ea54be081
SHA256 74255806a34d975620a7f1f100aed4010c103c0973c50c7796ee1885c4cd1fc0
SHA512 5bfec3be975be7e8b0d65b76c8a3d03f19cf891bed0be523e9c18db39e6981098aca3e399ea41f4f1f6408d70ecbaca2ee64754753f76fd7cff01bf08a51be67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4c22aca97820ef3ededb36404c0c2cd5
SHA1 8e8cb8c17f7fe5eece35358cb01c89d56e61c523
SHA256 5e7db8f696eab35760310cc2037525c6ecbfe99b2ef4234bbcbebe62f9f0e0e7
SHA512 f4a7a0d0df09a1cc69c26e499206486d2e59ad2e5a34d80482f10bda2bddb687a9a13f69174739b5740b25850145b136ae50eed71b7569979b37fb1262f09282

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dfdc391f00c270b86fde01323d5dde2e
SHA1 d5aa3f4c951197c22a457ff6886b5951c7faf041
SHA256 260e344ef72fa9e9d1e7ad69aef68dccede090061271809e71ff061b6823a1ed
SHA512 114b08045b9056785cd1eb2e7e6ab92cade3ba900e0c90f573ec9a3cf4198fe2ffe603aef6d7d378438860fa64e7d3dddcf9d99af3abac20bee5a65ce9e8606d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6775138cc9dd42ed27d582add9e99bf2
SHA1 27b44dc008fd920ea378bd56c1f4af4ef9371339
SHA256 d17b0cc6c7a93a993d20590fd984063b281b1fac0fb9e64e992f2730c9102675
SHA512 8b54b9331dc5c237a638ff3c641ecb906ce205394bcad9b2822d16257a2b3989afa6b1381f6713b18745a38f0796e62af86a9f99248f7a76f87ddf6ad3219de4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0a7c61154a8562197a78543adc0ea119
SHA1 971dea23639bb1aaf51289f66278670f8b59405b
SHA256 2dad724c54549d67ed5e28ac22201b369d263ecd2545c2f127e9aecab08611eb
SHA512 4683a26c56b840f437fadbc1e27d0e6b365410f088b000d87e767bdc7f486f3c708c7b75ca1841873c8f996ba2dc9aed255aeecf8edbbf3cf2f949be87538df5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e80133b02420baed2d0064c46c2f2c02
SHA1 6d6d19e2c006e8dd58e3fe8c0388012270147a7a
SHA256 7ca3972948235dcdca5f1306df7aa2773fe809cef709ab2074c376455bb22132
SHA512 69effd624b53ed86d07a36a2bba603434baf59b3c356af68803768a3aae4b5ce75038a969b80e88fbda15d80630183b33d2d3be43d2e0026d85fe171372f5c69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 12adbb3725f3fc3531c908a60cd30d52
SHA1 8788a4f13dd4c9ad7b5d84e4f5d2e46b89eb8289
SHA256 b973e5ba38123b94b0c920b58c279352622a15b33837edd3e97ead092095a921
SHA512 ada2c55f4e09cf625e2bcf893bf698a24b51e1a7fd2faa5bb15a9141109952da641c84acc5b5a4e920cf7c983e3b7f0cfc2bfff3ab2278c5d9a60b13844cb7e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bfb97a76e766a44b09a99291281ec1bc
SHA1 114a2a18106973ef40a0bb1bbe94be45940ba1a9
SHA256 96d1a7dd858be784026d92df6d92204ee17b2c0baefbef306dd455ac5a638019
SHA512 04206bccfb6d4180ab41973eb8f83917047f67d35ab640375dc9766e69c1df7f0da93d2c7ce296cb551996dc333758a2964fab570068e69a9da9c9029254c6c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b3d004b84f4cef7d06edefee81bf2aeb
SHA1 be5dfe5d39847d4491ede49fc14df6d2c17bcc3d
SHA256 5b249f10c485f6edee663e1a83a03bdcd0d110f96d2ab5c3b231287281eb57bb
SHA512 ccd550b59756d55e693ab788e20ecaeeb070b52c27edccd4fe6050cb83b002696131ee29bd825486dfd1c2b4dbec310f0aef10e1dc798fb6674b34b31d92c089

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0ef8caf7949db904bbce59ebb5255e3d
SHA1 04fd030cc0f32c2b241f39e3b1e8d95fb8442922
SHA256 74f3689fd547d129ce0bb196ce1a30aaabd331a22542e74b005cf8e931ff0c93
SHA512 4a44c730a5f56a555e3315d1e8ef0cf7127d3365772eea68f50b8d886e8fa0bbe8cefb548c68f843d05d1690ade0dc21c40deeba737d218a9580fc6fa118434b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9a728a22f36bd53749213361d05062fa
SHA1 75f98a6336428aed66cdf32c09163040a6168272
SHA256 d48d066768958281222656a83c6f5d436511084b54c4eb257c696930fe9e7430
SHA512 8bb074e4861d64b7872bea0dbfdd6200ba72a41d121b8cdcc5f72d75c52003a0464231ac1455d2d5e7c5766978d47ecc42114d79c887d9fdb765298177176158

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 be9d45ce7f6fb5e0074238d810b87f17
SHA1 eded4422c2090819ba9b61e05cb770610049f783
SHA256 4476e6d7741bcbef542eeab311ddc51e0d509674bd8e3a99b6af9f66d7011d12
SHA512 05c860e5c220f424504e8b88e1f1c960f6ace0531521bfa2d8010e1b1673f2645d0474d84613e4e48232175fddeb59e51098183131e3a62f314c9a40c47c8564

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6715e8f0b2c92b835291eb9f48493ca7
SHA1 91b63084bbf46b45a7c5272143d1162aa9de71f0
SHA256 2e8520dc8b342e2180548b710383f06285a45b10feb074d5cca34eee968d0aa9
SHA512 885a11564457e38e6e17699f46a97f9473c7a2060684579430d2ff5dee8e22defe9ced411d266af3814b3333ec0fed1adc19654764c8f7d61ca11c110efced1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c6cc1c831f71e9fcb125bb4f8cbe7bd6
SHA1 240d46d697af7883e73fa90b8594af494f3f352a
SHA256 5f1f788c9dd7e4b76315e747a040449ceb7ebbc20d2f6f3ce97f44a701abf98f
SHA512 1f9971d9e501be330af38988b8fb60d4b77fd15b03fd428b2aa0c2692881063000315aa4d10cf58b15743b8b6df21680e3cb2c66542b7d082633fea1be2638d0