Malware Analysis Report

2025-05-05 21:13

Sample ID 240626-wbahbsxhnm
Target Versatools.exe
SHA256 b3ce37ea3d136782dc85e8b6cec7842969eaa9564ecc409676271e27a812f551
Tags
pyinstaller discovery evasion persistence privilege_escalation trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

b3ce37ea3d136782dc85e8b6cec7842969eaa9564ecc409676271e27a812f551

Threat Level: Likely malicious

The file Versatools.exe was found to be: Likely malicious.

Malicious Activity Summary

pyinstaller discovery evasion persistence privilege_escalation trojan

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection

Loads dropped DLL

Event Triggered Execution: Component Object Model Hijacking

Executes dropped EXE

Checks installed software on the system

Checks whether UAC is enabled

Checks system information in the registry

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtCreateThreadExHideFromDebugger

Drops file in System32 directory

Drops file in Windows directory

Drops file in Program Files directory

Unsigned PE

Enumerates physical storage devices

Detects Pyinstaller

Modifies registry class

Suspicious use of UnmapMainImage

Checks processor information in registry

Enumerates system info in registry

Checks SCSI registry key(s)

Uses Task Scheduler COM API

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Modifies Internet Explorer settings

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

Modifies data under HKEY_USERS

NTFS ADS

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-26 17:44

Signatures

Detects Pyinstaller

pyinstaller
Description Indicator Process Target
N/A N/A N/A N/A

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-26 17:44

Reported

2024-06-26 17:58

Platform

win10-20240404-en

Max time kernel

780s

Max time network

783s

Command Line

"C:\Users\Admin\AppData\Local\Temp\Versatools.exe"

Signatures

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\MicrosoftEdge_X64_126.0.2592.68.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{56C7B662-92B9-43C7-AE4A-C84F01FBD999}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\counters2.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\R15Migrator\Icon_Checkmark.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\StudioToolbox\AssetConfig\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Locales\qu.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\ExtraContent\textures\ui\Controls\DesignSystem\ButtonY.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\identity_proxy\win11\identity_helper.Sparse.Stable.msix C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\MaterialGenerator\Materials\Ice.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\ExtraContent\textures\ui\Controls\DesignSystem\ButtonStart.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\fonts\families\LegacyArimo.json C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\ExtraContent\textures\ui\LuaApp\graphic\Auth\DoraemonCompact.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Settings\Players\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\ExtraContent\textures\ui\LuaChat\graphic\gr-profile-border-48x48-dotted.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Trust Protection Lists\Sigma\Social C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\avatar\meshes\leftleg.mesh C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\AnimationEditor\menu_shadow_bottom.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\AvatarEditorImages\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\SingleButton.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Emotes\Large\SelectedGradient.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Trust Protection Lists\Mu\Advertising C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\DraftsWidget\deletedSource.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Chat\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\ExtraContent\textures\ui\LuaApp\ExternalSite\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\ExtraContent\textures\ui\LuaApp\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Locales\bg.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\msedgeupdateres_or.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{56C7B662-92B9-43C7-AE4A-C84F01FBD999}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\avatar\scripts\humanoidAnimateR15Moods.rbxm C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\fonts\families\Michroma.json C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\ScreenshotHud\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Locales\te.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\126.0.2592.68\Locales\nb.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\InGameMenu\CircleCutout.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Settings\Radial\BottomLeftSelected.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\fonts\families\Balthazar.json C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\AnimationEditor\button_control_next.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\DeveloperInspector\Inspect.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\SelfView\SelfView_icon_camera_disabled.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\StudioSharedUI\RoundedRightBackground.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\StudioSharedUI\preview_expand.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\TextureViewer\arrowleft_black_16.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Settings\MenuBarAssets\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\AvatarImporter\img_dark_custom.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Controls\XboxController\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\PurchasePrompt\RightButtonDown.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\ExtraContent\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\GameSettings\CenterPlus.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\InGameMenu\BackgroundGlow.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\msedgeupdateres_sl.dll C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Locales\bs.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\msedgewebview2.exe.sig C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\MaterialManager\chevrons-left.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\msedgeupdateres_quz.dll C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\GameSettings\ScrollBarBottom.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\TerrainTools\mtrl_concrete.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Chat\ToggleChatFlip.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\configs\DateTimeLocaleConfigs\en-nz.json C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\AnimationEditor\ic-checkbox-active.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\CollisionGroupsEditor\delete.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\mouseLock_off.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\Cursors\CrossMouseIcon.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ui\Controls\DefaultController\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\content\textures\ViewSelector\back.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\msedge.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\rescache\_merged\4183903823\2290032291.pri C:\Windows\system32\taskmgr.exe N/A
File created C:\Windows\rescache\_merged\1601268389\715946058.pri C:\Windows\system32\taskmgr.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1a\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\CurVer\ = "MicrosoftEdgeUpdate.PolicyStatusMachineFallback.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EA92A799-267E-4DF5-A6ED-6A7E0684BB8A} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ = "IGoogleUpdate3" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreMachineClass\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachineFallback\CLSID\ = "{E421557C-0628-43FB-BF2B-7C9F8A4D067C}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CredentialDialogMachine\CLSID\ = "{5F6A18BB-6231-424B-8242-19E5BB94F8ED}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods\ = "12" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\LOCALSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods\ = "12" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\Elevation\Enabled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EA92A799-267E-4DF5-A6ED-6A7E0684BB8A}\ = "Microsoft Edge Update Update3Web" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassSvc.1.0\CLSID\ = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods\ = "7" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ = "IApp2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback\CurVer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ = "IRegistrationUpdateHook" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ = "IAppBundleWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\ELEVATION C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB}\ = "IPolicyStatus5" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ = "IGoogleUpdateCore" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\NumMethods\ = "6" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ = "IJobObserver2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32\ = "{0DD41A78-E3D4-44A8-9EAE-697BCF1781A3}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods\ = "9" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\ProgID\ = "MicrosoftEdgeUpdate.OnDemandCOMClassMachine.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: 33 N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2208 wrote to memory of 4200 N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe C:\Users\Admin\AppData\Local\Temp\Versatools.exe
PID 2208 wrote to memory of 4200 N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe C:\Users\Admin\AppData\Local\Temp\Versatools.exe
PID 4200 wrote to memory of 2772 N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe C:\Windows\system32\cmd.exe
PID 4200 wrote to memory of 2772 N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe C:\Windows\system32\cmd.exe
PID 4200 wrote to memory of 4972 N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe C:\Windows\system32\cmd.exe
PID 4200 wrote to memory of 4972 N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe C:\Windows\system32\cmd.exe
PID 4200 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe C:\Windows\system32\cmd.exe
PID 4200 wrote to memory of 1160 N/A C:\Users\Admin\AppData\Local\Temp\Versatools.exe C:\Windows\system32\cmd.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1860 wrote to memory of 4640 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 1872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 1872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4640 wrote to memory of 872 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\Versatools.exe

"C:\Users\Admin\AppData\Local\Temp\Versatools.exe"

C:\Users\Admin\AppData\Local\Temp\Versatools.exe

"C:\Users\Admin\AppData\Local\Temp\Versatools.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.0.1403997252\421083315" -parentBuildID 20221007134813 -prefsHandle 1700 -prefMapHandle 1692 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {857dcf67-12df-46ba-9218-652fa5418afc} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 1780 26ea17f2b58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.1.331859180\395379118" -parentBuildID 20221007134813 -prefsHandle 2108 -prefMapHandle 2104 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5ef1cc81-f8d7-4fa9-b688-30f0c4caf9d0} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 2136 26ea1332658 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.2.785882555\516299876" -childID 1 -isForBrowser -prefsHandle 2892 -prefMapHandle 2688 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1e4cdc72-7922-43a7-a25b-2c94d2b61efc} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 2692 26ea5b9ca58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.3.1541555504\1173092553" -childID 2 -isForBrowser -prefsHandle 3480 -prefMapHandle 3484 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {130d61d1-7677-45a7-92bc-23c8fc2730ce} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 3496 26e96762b58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.4.2004908401\2059266850" -childID 3 -isForBrowser -prefsHandle 3784 -prefMapHandle 3780 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d0234d21-4458-4398-a040-b7ca99a25f84} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 3796 26ea6e78958 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.5.1289414639\6574689" -childID 4 -isForBrowser -prefsHandle 4936 -prefMapHandle 4940 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1be8d028-2110-4bc2-8270-a60e3daf75bb} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 4928 26ea80f2758 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.6.1920064176\476615392" -childID 5 -isForBrowser -prefsHandle 5076 -prefMapHandle 5080 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c1f1443e-5934-48cc-9b24-86856ad47d60} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 4812 26ea80f2158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.7.102979080\66544950" -childID 6 -isForBrowser -prefsHandle 4792 -prefMapHandle 5068 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {5f39f024-9b65-417f-8249-4a5644862230} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 4468 26ea80f2458 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.8.246097724\1220824878" -childID 7 -isForBrowser -prefsHandle 5584 -prefMapHandle 5580 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b7ce841c-73be-46eb-b2a2-7ee3c30eef84} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 5592 26ea9b60e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.9.2142362533\865603358" -childID 8 -isForBrowser -prefsHandle 5292 -prefMapHandle 5288 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9489852e-2f24-4169-943b-1d59069d60ea} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 3908 26e96762e58 tab

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU8A6A.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QzZDMjJCNTktRTNCQS00RDU0LUE5NDMtQ0UxMDZBNEU1QUM2fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins4REJBODE0Mi1CMjQ2LTQ1MDEtODNBRi0xQUQ0NDgxMEVCQ0F9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxLjMuMTcxLjM5IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI3MzY3OTcyMjk3IiBpbnN0YWxsX3RpbWVfbXM9IjM3NCIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{C6C22B59-E3BA-4D54-A943-CE106A4E5AC6}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QzZDMjJCNTktRTNCQS00RDU0LUE5NDMtQ0UxMDZBNEU1QUM2fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntFOEFCODVFOC0wN0JBLTRFQjAtOTM3Ny0xQkRENzNFNEY0RTN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMDYuMC41MjQ5LjExOSIgbmV4dHZlcnNpb249IjEwNi4wLjUyNDkuMTE5IiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMyIgc3lzdGVtX3VwdGltZV90aWNrcz0iNzM3MTU2MTI4MyIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\MicrosoftEdge_X64_126.0.2592.68.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\MicrosoftEdge_X64_126.0.2592.68.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\MicrosoftEdge_X64_126.0.2592.68.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files\MsEdgeCrashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=126.0.6478.114 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{CEDCA0CD-558B-46C3-AFBC-56B48FAD5066}\EDGEMITMP_C0C5E.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=126.0.2592.68 --initial-client-data=0x210,0x214,0x218,0x1ec,0x21c,0x7ff7f510aa40,0x7ff7f510aa4c,0x7ff7f510aa58

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QzZDMjJCNTktRTNCQS00RDU0LUE5NDMtQ0UxMDZBNEU1QUM2fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins4RjE0RTUyQy01RTRBLTQ2MjQtQTI1OC0yOTUxN0Q4ODczMDd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O1ZQUW9QMUYrZnExNXdSemgxa1BMNFBNcFdoOE9STUI1aXp2ck9DL2NoalE9JnF1b3Q7Ii8-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-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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.10.137966183\1770496879" -childID 9 -isForBrowser -prefsHandle 10708 -prefMapHandle 5520 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {fe06ed86-02cc-410d-ab5d-ff53d5db2b7e} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 10700 26eac75af58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.11.1225258116\837489463" -childID 10 -isForBrowser -prefsHandle 1536 -prefMapHandle 5092 -prefsLen 26873 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c7c5020-82d8-4039-8a30-9cf5f4d2b1e4} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 2672 26eac75be58 tab

C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-6b63ea89d2e54fd7\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:hwZTUpPyjzzm72kmjhklqHzwck5LY_hu79eZ8srmPYYqIJOelzmuXE-SrJXv_jmsddxIcSEAOcL-ddbZSGAd3gI2aCaRlSs6hHxTP9AlkG9YFrxOF6gjPbWex3AJUrFBTxKUFmv5fPGmBlvALlUe_XjvzfmeVWPVNa-C2K2naUPhqHRtXqnsFoZuqsWXH5Yj7ZVY7m1Xnb84BzzNiqV795QIKv4fmyaEcex1lbHzhvA+launchtime:1719424310157+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1719424129474005%26placeId%3D7041939546%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3Dc9ac99a1-b5d0-458e-a046-82fddc0bcc25%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1719424129474005+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.12.127462326\1463429769" -childID 11 -isForBrowser -prefsHandle 6492 -prefMapHandle 3616 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {44a1a247-9a84-4cf8-af1e-d2463a4a6c0f} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 6896 26ea410ad58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.13.570638244\2124315378" -childID 12 -isForBrowser -prefsHandle 6944 -prefMapHandle 6524 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {08c57c50-8331-4e32-b377-9329bc8efae0} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 10784 26ea410b058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4640.14.361228926\1984041860" -childID 13 -isForBrowser -prefsHandle 8980 -prefMapHandle 8976 -prefsLen 26882 -prefMapSize 233444 -jsInitHandle 1232 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9fff8744-7df9-48e0-a0bc-ada6dba4285d} 4640 "\\.\pipe\gecko-crash-server-pipe.4640" 3848 26ea54dc058 tab

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c cls

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{56C7B662-92B9-43C7-AE4A-C84F01FBD999}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{56C7B662-92B9-43C7-AE4A-C84F01FBD999}\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe" /update /sessionid "{5A318D85-9294-41B8-BF7E-928EBC8E42F0}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NUEzMThEODUtOTI5NC00MUI4LUJGN0UtOTI4RUJDOEU0MkYwfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntCNEI4RkZFNS1GQTc4LTQ2NEItOTJFRS02NzE4RkJBQjU2RTh9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE1MDYzLjAiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iUUVNVSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O3I0NTJ0MStrMlRncS9IWHpqdkZOQlJob3BCV1I5c2JqWHhxZVVESDl1WDA9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzEuMzkiIG5leHR2ZXJzaW9uPSIxLjMuMTg3LjQxIiBsYW5nPSIiIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwNzA3MDQ0MTg3IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwNzA3MDQ0MTg3IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwOTQyMTY1ODM5IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy80YWQ5Y2I2ZS04MjQ1LTRlNDctYjI5OC0xZmY0YjA0MjU2ZTE_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-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNi4wLjI1OTIuNjgiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iMCIgaW5zdGFsbGRhdGU9IjYzODQiPjx1cGRhdGVjaGVjay8-PHBpbmcgcj0iLTEiIHJkPSItMSIgcGluZ19mcmVzaG5lc3M9IntFRkJGOEJCMS1GMDBDLTREMkQtODU2My05Q0REMkZDMzJCMDZ9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU5DB.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{5A318D85-9294-41B8-BF7E-928EBC8E42F0}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.187.41\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4Ny40MSIgbGFuZz0iIiBicmFuZD0iR0dMUyIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiIGluc3RhbGxkYXRlPSI2Mzg0IiBpbnN0YWxsZGF0ZXRpbWU9IjE3MTk0MjQxNjkiPjxldmVudCBldmVudHR5cGU9IjMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwOTg4NDEzNTYxIi8-PC9hcHA-PC9yZXF1ZXN0Pg

Network

Country Destination Domain Proto
US 8.8.8.8:53 friends.roblox.com udp
PL 128.116.124.3:443 friends.roblox.com tcp
US 8.8.8.8:53 3.124.116.128.in-addr.arpa udp
US 8.8.8.8:53 209.143.182.52.in-addr.arpa udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 52.25.243.81:443 shavar.services.mozilla.com tcp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
N/A 127.0.0.1:49986 tcp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 81.243.25.52.in-addr.arpa udp
N/A 127.0.0.1:49992 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 138.91.171.81:80 tcp
US 8.8.8.8:53 167.57.26.184.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 roblox.com udp
GB 128.116.119.3:80 roblox.com tcp
GB 128.116.119.3:80 roblox.com tcp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
GB 128.116.119.3:443 roblox.com tcp
US 8.8.8.8:53 3.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 www.roblox.com udp
PL 128.116.124.3:443 www.roblox.com tcp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 18.245.199.73:443 css.rbxcdn.com tcp
US 18.245.199.73:443 css.rbxcdn.com tcp
US 18.245.199.73:443 css.rbxcdn.com tcp
US 18.245.199.73:443 css.rbxcdn.com tcp
US 18.245.199.73:443 css.rbxcdn.com tcp
US 18.245.199.73:443 css.rbxcdn.com tcp
US 8.8.8.8:53 d1kpbbfl4rco16.cloudfront.net udp
US 8.8.8.8:53 d1kpbbfl4rco16.cloudfront.net udp
FR 3.162.38.66:443 static.rbxcdn.com tcp
US 8.8.8.8:53 d143j4fdqe1jki.cloudfront.net udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 d143j4fdqe1jki.cloudfront.net udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
FR 18.155.129.16:443 d2w650xp5tniea.cloudfront.net tcp
FR 18.244.28.58:443 js.rbxcdn.com tcp
FR 18.244.28.58:443 js.rbxcdn.com tcp
FR 18.244.28.58:443 js.rbxcdn.com tcp
FR 18.244.28.58:443 js.rbxcdn.com tcp
FR 18.244.28.58:443 js.rbxcdn.com tcp
FR 18.244.28.58:443 js.rbxcdn.com tcp
US 8.8.8.8:53 dw04ej0wrfjel.cloudfront.net udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 dw04ej0wrfjel.cloudfront.net udp
GB 128.116.119.3:443 roblox.com udp
FR 18.155.129.16:443 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 73.199.245.18.in-addr.arpa udp
US 8.8.8.8:53 66.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 16.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 58.28.244.18.in-addr.arpa udp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
PL 128.116.124.3:443 apis.roblox.com tcp
PL 128.116.124.3:443 apis.roblox.com tcp
PL 128.116.124.3:443 apis.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
BE 23.14.90.81:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 a1818.b.akamai.net udp
PL 128.116.124.3:443 apis.roblox.com udp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 locale.roblox.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
PL 128.116.124.3:443 locale.roblox.com tcp
US 8.8.8.8:53 81.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 dapx4swc8lj69.cloudfront.net udp
US 8.8.8.8:53 auth.roblox.com udp
FR 13.32.145.6:443 dapx4swc8lj69.cloudfront.net tcp
FR 13.32.145.6:443 dapx4swc8lj69.cloudfront.net tcp
FR 13.32.145.6:443 dapx4swc8lj69.cloudfront.net tcp
PL 128.116.124.3:443 auth.roblox.com udp
FR 13.32.145.6:443 dapx4swc8lj69.cloudfront.net tcp
FR 13.32.145.6:443 dapx4swc8lj69.cloudfront.net tcp
FR 13.32.145.6:443 dapx4swc8lj69.cloudfront.net tcp
US 8.8.8.8:53 dapx4swc8lj69.cloudfront.net udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 6.145.32.13.in-addr.arpa udp
US 8.8.8.8:53 ecsv2.roblox.com udp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com udp
US 8.8.8.8:53 setup.rbxcdn.com udp
FR 3.162.38.113:443 setup.rbxcdn.com tcp
US 8.8.8.8:53 d19ha9ylcjiuiu.cloudfront.net udp
US 8.8.8.8:53 d19ha9ylcjiuiu.cloudfront.net udp
US 8.8.8.8:53 113.38.162.3.in-addr.arpa udp
US 8.8.8.8:53 client-telemetry.roblox.com udp
PL 128.116.124.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:50647 tcp
N/A 127.0.0.1:50651 tcp
PL 128.116.124.3:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
FR 3.162.38.113:443 d19ha9ylcjiuiu.cloudfront.net tcp
US 8.8.8.8:53 233.69.68.104.in-addr.arpa udp
N/A 127.0.0.1:50655 tcp
N/A 127.0.0.1:50658 tcp
FR 3.162.38.113:443 d19ha9ylcjiuiu.cloudfront.net tcp
FR 3.162.38.113:443 d19ha9ylcjiuiu.cloudfront.net tcp
US 8.8.8.8:53 28.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
US 20.114.58.89:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 89.58.114.20.in-addr.arpa udp
US 8.8.8.8:53 msedge.f.tlu.dl.delivery.mp.microsoft.com udp
US 2.20.12.74:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
US 2.20.12.74:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.8.8:53 74.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 d1kpbbfl4rco16.cloudfront.net udp
US 8.8.8.8:53 d143j4fdqe1jki.cloudfront.net udp
US 8.8.8.8:53 dw04ej0wrfjel.cloudfront.net udp
US 8.8.8.8:53 roblox.com udp
GB 128.116.119.3:443 roblox.com udp
FR 18.155.129.16:443 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 a1818.b.akamai.net udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 d1kpbbfl4rco16.cloudfront.net udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 d1kpbbfl4rco16.cloudfront.net udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 d143j4fdqe1jki.cloudfront.net udp
US 8.8.8.8:53 dapx4swc8lj69.cloudfront.net udp
US 8.8.8.8:53 d2w650xp5tniea.cloudfront.net udp
US 8.8.8.8:53 d143j4fdqe1jki.cloudfront.net udp
US 8.8.8.8:53 dapx4swc8lj69.cloudfront.net udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 dw04ej0wrfjel.cloudfront.net udp
US 8.8.8.8:53 dw04ej0wrfjel.cloudfront.net udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 assetgame.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
PL 128.116.124.3:443 assetgame.roblox.com tcp
PL 128.116.124.3:443 assetgame.roblox.com tcp
PL 128.116.124.3:443 assetgame.roblox.com tcp
PL 128.116.124.3:443 assetgame.roblox.com tcp
PL 128.116.124.3:443 assetgame.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
GB 128.116.119.3:443 roblox.com udp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
PL 128.116.124.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 accountsettings.roblox.com udp
PL 128.116.124.3:443 accountsettings.roblox.com tcp
PL 128.116.124.3:443 accountsettings.roblox.com tcp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 privatemessages.roblox.com udp
US 8.8.8.8:53 trades.roblox.com udp
PL 128.116.124.3:443 trades.roblox.com tcp
PL 128.116.124.3:443 trades.roblox.com tcp
PL 128.116.124.3:443 trades.roblox.com tcp
PL 128.116.124.3:443 trades.roblox.com tcp
PL 128.116.124.3:443 trades.roblox.com tcp
PL 128.116.124.3:443 trades.roblox.com tcp
US 8.8.8.8:53 cs.ns1p.net udp
PL 128.116.124.3:443 trades.roblox.com udp
DE 18.192.193.131:443 cs.ns1p.net tcp
US 8.8.8.8:53 a4c9427a-pulsar-pweb-4287-639546627.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 lms.roblox.com udp
PL 128.116.124.3:443 trades.roblox.com udp
PL 128.116.124.3:443 trades.roblox.com udp
US 8.8.8.8:53 thumbnails.roblox.com udp
PL 128.116.124.3:443 thumbnails.roblox.com udp
PL 128.116.124.3:443 thumbnails.roblox.com udp
US 8.8.8.8:53 contacts.roblox.com udp
US 8.8.8.8:53 a4c9427a-pulsar-pweb-4287-639546627.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 notifications.roblox.com udp
US 8.8.8.8:53 us-central-default-px.roblox.com udp
PL 128.116.124.4:443 us-central-default-px.roblox.com tcp
PL 128.116.124.3:443 notifications.roblox.com tcp
PL 128.116.124.3:443 notifications.roblox.com tcp
PL 128.116.124.3:443 notifications.roblox.com tcp
PL 128.116.124.3:443 notifications.roblox.com tcp
PL 128.116.124.3:443 notifications.roblox.com tcp
US 8.8.8.8:53 us-central-default-px.roblox.com udp
PL 128.116.124.3:443 notifications.roblox.com tcp
PL 128.116.124.3:443 notifications.roblox.com udp
PL 128.116.124.3:443 notifications.roblox.com udp
US 8.8.8.8:53 131.193.192.18.in-addr.arpa udp
US 8.8.8.8:53 4.124.116.128.in-addr.arpa udp
US 8.8.8.8:53 s.ns1p.net udp
PL 128.116.124.3:443 notifications.roblox.com udp
DE 35.157.253.183:443 s.ns1p.net tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
PL 128.116.124.4:443 us-central-default-px.roblox.com udp
US 8.8.8.8:53 c0ak.rbxcdn.com udp
US 8.8.8.8:53 ams2-128-116-21-3.roblox.com udp
US 8.8.8.8:53 aws-eu-central-1c-lms.rbx.com udp
US 8.8.8.8:53 cdg1-128-116-122-3.roblox.com udp
US 8.8.8.8:53 aws-us-west-1c-lms.rbx.com udp
US 8.8.8.8:53 sea1-128-116-115-3.roblox.com udp
US 8.8.8.8:53 gold.roblox.com udp
US 8.8.8.8:53 aws-ap-east-1a-lms.rbx.com udp
US 2.20.12.94:443 tr.rbxcdn.com tcp
NL 128.116.21.3:443 ams2-128-116-21-3.roblox.com tcp
US 8.8.8.8:53 syd1-128-116-51-3.roblox.com udp
BE 23.14.90.80:443 c0ak.rbxcdn.com tcp
DE 54.93.173.118:443 aws-eu-central-1c-lms.rbx.com tcp
US 8.8.8.8:53 sin2-128-116-97-3.roblox.com udp
US 54.153.68.191:443 aws-us-west-1c-lms.rbx.com tcp
US 8.8.8.8:53 a1831.dscd.akamai.net udp
US 8.8.8.8:53 ams2-128-116-21-3.roblox.com udp
US 8.8.8.8:53 a1913.dscw27.akamai.net udp
FR 128.116.122.3:443 cdg1-128-116-122-3.roblox.com tcp
US 128.116.115.3:443 sea1-128-116-115-3.roblox.com tcp
PL 128.116.124.3:443 gold.roblox.com tcp
US 8.8.8.8:53 c0.rbxcdn.com udp
HK 43.198.125.158:443 aws-ap-east-1a-lms.rbx.com tcp
US 8.8.8.8:53 a1831.dscd.akamai.net udp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 8.8.8.8:53 ams2-128-116-21-3.roblox.com udp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
US 8.8.8.8:53 a1913.dscw27.akamai.net udp
FR 18.155.129.56:443 c0.rbxcdn.com tcp
US 8.8.8.8:53 nfd-prod-c-1057709867.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 nfd-prod-c-1057709867.eu-central-1.elb.amazonaws.com udp
US 8.8.8.8:53 nfd-prod-c-142502592.us-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 cdg1-128-116-122-3.roblox.com udp
US 8.8.8.8:53 sea1-128-116-115-3.roblox.com udp
US 8.8.8.8:53 cdg1-128-116-122-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-c-142502592.us-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 sea1-128-116-115-3.roblox.com udp
HK 43.198.125.158:443 aws-ap-east-1a-lms.rbx.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
US 8.8.8.8:53 us-central-origin-px.roblox.com udp
US 8.8.8.8:53 nfd-prod-a-1858695030.ap-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 syd1-128-116-51-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-a-1858695030.ap-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 us-central-origin-px.roblox.com udp
US 8.8.8.8:53 syd1-128-116-51-3.roblox.com udp
US 8.8.8.8:53 183.253.157.35.in-addr.arpa udp
US 8.8.8.8:53 sin2-128-116-97-3.roblox.com udp
US 8.8.8.8:53 d13im6y9zsyqh9.cloudfront.net udp
US 8.8.8.8:53 sin2-128-116-97-3.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 d13im6y9zsyqh9.cloudfront.net udp
US 8.8.8.8:53 94.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 3.21.116.128.in-addr.arpa udp
US 8.8.8.8:53 80.90.14.23.in-addr.arpa udp
US 8.8.8.8:53 3.122.116.128.in-addr.arpa udp
US 8.8.8.8:53 118.173.93.54.in-addr.arpa udp
US 8.8.8.8:53 56.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 191.68.153.54.in-addr.arpa udp
US 8.8.8.8:53 3.115.116.128.in-addr.arpa udp
US 8.8.8.8:53 158.125.198.43.in-addr.arpa udp
US 8.8.8.8:53 3.51.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.97.116.128.in-addr.arpa udp
US 8.8.8.8:53 presence.roblox.com udp
PL 128.116.124.4:443 us-central-default-px.roblox.com udp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
US 8.8.8.8:53 ord2-128-116-101-3.roblox.com udp
US 8.8.8.8:53 ord2-128-116-101-3.roblox.com udp
US 128.116.101.3:443 ord2-128-116-101-3.roblox.com tcp
US 8.8.8.8:53 ord2-128-116-101-3.roblox.com udp
PL 128.116.124.4:443 us-central-default-px.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com udp
US 8.8.8.8:53 3.101.116.128.in-addr.arpa udp
US 8.8.8.8:53 lax4-128-116-63-3.roblox.com udp
US 8.8.8.8:53 lax4-128-116-63-3.roblox.com udp
US 128.116.63.3:443 lax4-128-116-63-3.roblox.com tcp
US 8.8.8.8:53 lax4-128-116-63-3.roblox.com udp
US 8.8.8.8:53 3.63.116.128.in-addr.arpa udp
US 8.8.8.8:53 b.ns1p.net udp
DE 18.192.193.131:443 b.ns1p.net tcp
US 8.8.8.8:53 28.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 dapx4swc8lj69.cloudfront.net udp
US 8.8.8.8:53 dapx4swc8lj69.cloudfront.net udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 d1kpbbfl4rco16.cloudfront.net udp
US 8.8.8.8:53 d1kpbbfl4rco16.cloudfront.net udp
US 8.8.8.8:53 dw04ej0wrfjel.cloudfront.net udp
US 8.8.8.8:53 dw04ej0wrfjel.cloudfront.net udp
US 8.8.8.8:53 roblox.com udp
GB 128.116.119.4:443 roblox.com udp
US 8.8.8.8:53 d143j4fdqe1jki.cloudfront.net udp
US 8.8.8.8:53 d143j4fdqe1jki.cloudfront.net udp
US 8.8.8.8:53 4.119.116.128.in-addr.arpa udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 js.stripe.com udp
US 151.101.64.176:443 js.stripe.com tcp
US 8.8.8.8:53 stripecdn.map.fastly.net udp
US 8.8.8.8:53 followings.roblox.com udp
US 8.8.8.8:53 stripecdn.map.fastly.net udp
PL 128.116.124.3:443 followings.roblox.com tcp
US 8.8.8.8:53 games.roblox.com udp
PL 128.116.124.3:443 games.roblox.com tcp
PL 128.116.124.3:443 games.roblox.com tcp
PL 128.116.124.3:443 games.roblox.com tcp
PL 128.116.124.3:443 games.roblox.com tcp
US 8.8.8.8:53 voice.roblox.com udp
PL 128.116.124.3:443 voice.roblox.com tcp
PL 128.116.124.3:443 voice.roblox.com tcp
US 8.8.8.8:53 badges.roblox.com udp
PL 128.116.124.3:443 badges.roblox.com udp
PL 128.116.124.3:443 badges.roblox.com tcp
PL 128.116.124.3:443 badges.roblox.com tcp
PL 128.116.124.3:443 badges.roblox.com tcp
US 8.8.8.8:53 176.64.101.151.in-addr.arpa udp
PL 128.116.124.3:443 badges.roblox.com udp
PL 128.116.124.3:443 badges.roblox.com udp
PL 128.116.124.3:443 badges.roblox.com udp
PL 128.116.124.4:443 us-central-default-px.roblox.com udp
US 151.101.64.176:443 stripecdn.map.fastly.net tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
US 8.8.8.8:53 a1831.dscd.akamai.net udp
US 151.101.64.176:443 stripecdn.map.fastly.net tcp
US 8.8.8.8:53 a1831.dscd.akamai.net udp
US 8.8.8.8:53 m.stripe.com udp
US 35.161.232.56:443 m.stripe.com tcp
US 8.8.8.8:53 m.stripe.com udp
US 8.8.8.8:53 m.stripe.com udp
US 8.8.8.8:53 56.232.161.35.in-addr.arpa udp
US 8.8.8.8:53 waw1-128-116-124-3.roblox.com udp
US 8.8.8.8:53 aws-us-east-1c-lms.rbx.com udp
US 8.8.8.8:53 c0aws.rbxcdn.com udp
US 8.8.8.8:53 nrt1-128-116-120-3.roblox.com udp
US 8.8.8.8:53 aws-us-east-1a-lms.rbx.com udp
US 8.8.8.8:53 aws-us-west-1c-lms.rbx.com udp
US 8.8.8.8:53 dfw2-128-116-95-3.roblox.com udp
US 8.8.8.8:53 pulsar.roblox.com udp
US 8.8.8.8:53 aws-us-east-2c-lms.rbx.com udp
PL 128.116.124.3:443 pulsar.roblox.com tcp
US 107.23.211.225:443 aws-us-east-1c-lms.rbx.com tcp
US 8.8.8.8:53 waw1-128-116-124-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-c-873282076.us-east-1.elb.amazonaws.com udp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
US 54.86.22.107:443 aws-us-east-1a-lms.rbx.com tcp
US 128.116.95.3:443 dfw2-128-116-95-3.roblox.com tcp
FR 18.155.129.94:443 c0aws.rbxcdn.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
US 8.8.8.8:53 waw1-128-116-124-3.roblox.com udp
US 3.135.78.101:443 aws-us-east-2c-lms.rbx.com tcp
US 8.8.8.8:53 nfd-prod-c-873282076.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 nrt1-128-116-120-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-a-519385656.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 nfd-prod-c-142502592.us-west-1.elb.amazonaws.com udp
US 8.8.8.8:53 dfw2-128-116-95-3.roblox.com udp
US 8.8.8.8:53 nfd-prod-a-519385656.us-east-1.elb.amazonaws.com udp
US 8.8.8.8:53 nfd-prod-c-142502592.us-west-1.elb.amazonaws.com udp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
US 8.8.8.8:53 d13im6y9zsyqh9.cloudfront.net udp
US 3.135.78.101:443 aws-us-east-2c-lms.rbx.com tcp
US 8.8.8.8:53 d13im6y9zsyqh9.cloudfront.net udp
US 8.8.8.8:53 pulsar.roblox.com udp
US 8.8.8.8:53 m.stripe.com udp
US 8.8.8.8:53 nfd-prod-c-777829764.us-east-2.elb.amazonaws.com udp
US 8.8.8.8:53 pulsar.roblox.com udp
US 8.8.8.8:53 nfd-prod-c-777829764.us-east-2.elb.amazonaws.com udp
US 8.8.8.8:53 94.129.155.18.in-addr.arpa udp
US 8.8.8.8:53 107.22.86.54.in-addr.arpa udp
US 8.8.8.8:53 225.211.23.107.in-addr.arpa udp
US 8.8.8.8:53 3.95.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.120.116.128.in-addr.arpa udp
US 8.8.8.8:53 101.78.135.3.in-addr.arpa udp
PL 128.116.124.4:443 us-central-default-px.roblox.com udp
US 8.8.8.8:53 us-central-default-px.roblox.com udp
US 8.8.8.8:53 lms.roblox.com udp
PL 128.116.124.4:443 lms.roblox.com tcp
PL 128.116.124.3:443 pulsar.roblox.com tcp
PL 128.116.124.4:443 lms.roblox.com tcp
US 8.8.8.8:53 dfw2-128-116-95-3.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
PL 128.116.124.3:443 www.roblox.com tcp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 contile.services.mozilla.com udp
PL 128.116.124.3:443 www.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 aus5.mozilla.org udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 35.244.181.201:443 prod.balrog.prod.cloudops.mozgcp.net tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
NL 2.18.121.79:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
GB 142.250.187.206:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 79.121.18.2.in-addr.arpa udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
GB 142.250.187.206:443 redirector.gvt1.com udp
US 8.8.8.8:53 r3---sn-5hnednsz.gvt1.com udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
NL 74.125.8.232:443 r3---sn-5hnednsz.gvt1.com tcp
US 8.8.8.8:53 r3.sn-5hnednsz.gvt1.com udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 r3.sn-5hnednsz.gvt1.com udp
NL 74.125.8.232:443 r3.sn-5hnednsz.gvt1.com udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 232.8.125.74.in-addr.arpa udp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
PL 128.116.124.3:443 edge-term4-waw1.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 msedge.api.cdp.microsoft.com udp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 4.26.95.13.in-addr.arpa udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 msedge.b.tlu.dl.delivery.mp.microsoft.com udp
GB 217.20.56.43:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 43.56.20.217.in-addr.arpa udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 26.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 205.201.50.20.in-addr.arpa udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 aus5.mozilla.org udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
US 8.8.8.8:53 presence.roblox.com udp
US 8.8.8.8:53 edge-term4-waw1.roblox.com udp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
PL 128.116.124.3:443 presence.roblox.com tcp
US 8.8.8.8:53 auth.roblox.com udp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp
PL 128.116.124.3:443 auth.roblox.com tcp

Files

C:\Users\Admin\AppData\Local\Temp\_MEI22082\ucrtbase.dll

MD5 d40325e6c994228a3403f8ba8f24601f
SHA1 6266b5dc2001ffd75da3588dd7c43027a706589d
SHA256 a2ab58e44828009f6dafe54dd5ed57edfa6b09641e3c8eaa473b37e5b0e2b862
SHA512 59e712713d6492fa1b002da34bc9db82a85e19d13b694b77b57db1030681432c41705d56e9f75031ed9522d43a344d1475c745af7c8c92f70f7fc78e8b8895f9

C:\Users\Admin\AppData\Local\Temp\_MEI22082\python311.dll

MD5 5a5dd7cad8028097842b0afef45bfbcf
SHA1 e247a2e460687c607253949c52ae2801ff35dc4a
SHA256 a811c7516f531f1515d10743ae78004dd627eba0dc2d3bc0d2e033b2722043ce
SHA512 e6268e4fad2ce3ef16b68298a57498e16f0262bf3531539ad013a66f72df471569f94c6fcc48154b7c3049a3ad15cbfcbb6345dacb4f4ed7d528c74d589c9858

C:\Users\Admin\AppData\Local\Temp\_MEI22082\VCRUNTIME140.dll

MD5 4585a96cc4eef6aafd5e27ea09147dc6
SHA1 489cfff1b19abbec98fda26ac8958005e88dd0cb
SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
SHA512 d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286

C:\Users\Admin\AppData\Local\Temp\_MEI22082\base_library.zip

MD5 e17ce7183e682de459eec1a5ac9cbbff
SHA1 722968ca6eb123730ebc30ff2d498f9a5dad4cc1
SHA256 ff6a37c49ee4bb07a763866d4163126165038296c1fb7b730928297c25cfbe6d
SHA512 fab76b59dcd3570695fa260f56e277f8d714048f3d89f6e9f69ea700fca7c097d0db5f5294beab4e6409570408f1d680e8220851fededb981acb129a415358d1

C:\Users\Admin\AppData\Local\Temp\_MEI22082\_ctypes.pyd

MD5 bd36f7d64660d120c6fb98c8f536d369
SHA1 6829c9ce6091cb2b085eb3d5469337ac4782f927
SHA256 ee543453ac1a2b9b52e80dc66207d3767012ca24ce2b44206804767f37443902
SHA512 bd15f6d4492ddbc89fcbadba07fc10aa6698b13030dd301340b5f1b02b74191faf9b3dcf66b72ecf96084656084b531034ea5cadc1dd333ef64afb69a1d1fd56

C:\Users\Admin\AppData\Local\Temp\_MEI22082\python3.DLL

MD5 b711598fc3ed0fe4cf2c7f3e0877979e
SHA1 299c799e5d697834aa2447d8a313588ab5c5e433
SHA256 520169aa6cf49d7ee724d1178de1be0e809e4bdcf671e06f3d422a0dd5fd294a
SHA512 b3d59eff5e38cef651c9603971bde77be7231ea8b7bdb444259390a8a9e452e107a0b6cb9cc93e37fd3b40afb2ba9e67217d648bfca52f7cdc4b60c7493b6b84

\Users\Admin\AppData\Local\Temp\_MEI22082\libffi-8.dll

MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

C:\Users\Admin\AppData\Local\Temp\_MEI22082\_bz2.pyd

MD5 3859239ced9a45399b967ebce5a6ba23
SHA1 6f8ff3df90ac833c1eb69208db462cda8ca3f8d6
SHA256 a4dd883257a7ace84f96bcc6cd59e22d843d0db080606defae32923fc712c75a
SHA512 030e5ce81e36bd55f69d55cbb8385820eb7c1f95342c1a32058f49abeabb485b1c4a30877c07a56c9d909228e45a4196872e14ded4f87adaa8b6ad97463e5c69

C:\Users\Admin\AppData\Local\Temp\_MEI22082\_lzma.pyd

MD5 e5abc3a72996f8fde0bcf709e6577d9d
SHA1 15770bdcd06e171f0b868c803b8cf33a8581edd3
SHA256 1796038480754a680f33a4e37c8b5673cc86c49281a287dc0c5cae984d0cb4bb
SHA512 b347474dc071f2857e1e16965b43db6518e35915b8168bdeff1ead4dff710a1cc9f04ca0ced23a6de40d717eea375eedb0bf3714daf35de6a77f071db33dfae6

C:\Users\Admin\AppData\Local\Temp\_MEI22082\pyexpat.pyd

MD5 9c21a5540fc572f75901820cf97245ec
SHA1 09296f032a50de7b398018f28ee8086da915aebd
SHA256 2ff8cd82e7cc255e219e7734498d2dea0c65a5ab29dc8581240d40eb81246045
SHA512 4217268db87eec2f0a14b5881edb3fdb8efe7ea27d6dcbee7602ca4997416c1130420f11167dac7e781553f3611409fa37650b7c2b2d09f19dc190b17b410ba5

C:\Users\Admin\AppData\Local\Temp\_MEI22082\_socket.pyd

MD5 1eea9568d6fdef29b9963783827f5867
SHA1 a17760365094966220661ad87e57efe09cd85b84
SHA256 74181072392a3727049ea3681fe9e59516373809ced53e08f6da7c496b76e117
SHA512 d9443b70fcdc4d0ea1cb93a88325012d3f99db88c36393a7ded6d04f590e582f7f1640d8b153fe3c5342fa93802a8374f03f6cd37dd40cdbb5ade2e07fad1e09

\Users\Admin\AppData\Local\Temp\_MEI22082\select.pyd

MD5 c97a587e19227d03a85e90a04d7937f6
SHA1 463703cf1cac4e2297b442654fc6169b70cfb9bf
SHA256 c4aa9a106381835cfb5f9badfb9d77df74338bc66e69183757a5a3774ccdaccf
SHA512 97784363f3b0b794d2f9fd6a2c862d64910c71591006a34eedff989ecca669ac245b3dfe68eaa6da621209a3ab61d36e9118ebb4be4c0e72ce80fab7b43bde12

\Users\Admin\AppData\Local\Temp\_MEI22082\_queue.pyd

MD5 f00133f7758627a15f2d98c034cf1657
SHA1 2f5f54eda4634052f5be24c560154af6647eee05
SHA256 35609869edc57d806925ec52cca9bc5a035e30d5f40549647d4da6d7983f8659
SHA512 1c77dd811d2184beedf3c553c3f4da2144b75c6518543f98c630c59cd597fcbf6fd22cfbb0a7b9ea2fdb7983ff69d0d99e8201f4e84a0629bc5733aa09ffc201

C:\Users\Admin\AppData\Local\Temp\_MEI22082\pywin32_system32\pywintypes311.dll

MD5 90b786dc6795d8ad0870e290349b5b52
SHA1 592c54e67cf5d2d884339e7a8d7a21e003e6482f
SHA256 89f2a5c6be1e70b3d895318fdd618506b8c0e9a63b6a1a4055dff4abdc89f18a
SHA512 c6e1dbf25d260c723a26c88ec027d40d47f5e28fc9eb2dbc72a88813a1d05c7f75616b31836b68b87df45c65eef6f3eaed2a9f9767f9e2f12c45f672c2116e72

C:\Users\Admin\AppData\Local\Temp\_MEI22082\VCRUNTIME140_1.dll

MD5 7e668ab8a78bd0118b94978d154c85bc
SHA1 dbac42a02a8d50639805174afd21d45f3c56e3a0
SHA256 e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f
SHA512 72bb41db17256141b06e2eaeb8fc65ad4abdb65e4b5f604c82b9e7e7f60050734137d602e0f853f1a38201515655b6982f2761ee0fa77c531aa58591c95f0032

C:\Users\Admin\AppData\Local\Temp\_MEI22082\pywin32_system32\pythoncom311.dll

MD5 f98264f2dacfc8e299391ed1180ab493
SHA1 849551b6d9142bf983e816fef4c05e639d2c1018
SHA256 0fe49ec1143a0efe168809c9d48fe3e857e2ac39b19db3fd8718c56a4056696b
SHA512 6bb3dbd9f4d3e6b7bd294f3cb8b2ef4c29b9eff85c0cfd5e2d2465be909014a7b2ecd3dc06265b1b58196892bb04d3e6b0aa4b2ccbf3a716e0ff950eb28db11c

C:\Users\Admin\AppData\Local\Temp\_MEI22082\win32\win32api.pyd

MD5 1d6762b494dc9e60ca95f7238ae1fb14
SHA1 aa0397d96a0ed41b2f03352049dafe040d59ad5d
SHA256 fae5323e2119a8f678055f4244177b5806c7b6b171b1945168f685631b913664
SHA512 0b561f651161a34c37ff8d115f154c52202f573d049681f8cdd7bba2e966bb8203780c19ba824b4a693ef12ef1eeef6aeeef96eb369e4b6129f1deb6b26aaa00

C:\Users\Admin\AppData\Local\Temp\_MEI22082\tls_client\dependencies\tls-client-64.dll

MD5 6b0b5bb89d4fab802687372d828321b4
SHA1 a6681bee8702f7abbca891ac64f8c4fb7b35fbb5
SHA256 ec4f40c5f1ac709313b027c16face4d83e0dafdbc466cff2ff5d029d00600a20
SHA512 50c857f4a141ad7db8b6d519277033976bf97c9a7b490186a283403c05cb83b559a596efaf87ca46bc66bdf6b80636f4622324551c9de2c26bebfdbb02209d34

\Users\Admin\AppData\Local\Temp\_MEI22082\_hashlib.pyd

MD5 4255c44dc64f11f32c961bf275aab3a2
SHA1 c1631b2821a7e8a1783ecfe9a14db453be54c30a
SHA256 e557873d5ad59fd6bd29d0f801ad0651dbb8d9ac21545defe508089e92a15e29
SHA512 7d3a306755a123b246f31994cd812e7922943cdbbc9db5a6e4d3372ea434a635ffd3945b5d2046de669e7983ef2845bd007a441d09cfe05cf346523c12bdad52

C:\Users\Admin\AppData\Local\Temp\_MEI22082\libcrypto-1_1.dll

MD5 e94733523bcd9a1fb6ac47e10a267287
SHA1 94033b405386d04c75ffe6a424b9814b75c608ac
SHA256 f20eb4efd8647b5273fdaafceb8ccb2b8ba5329665878e01986cbfc1e6832c44
SHA512 07dd0eb86498497e693da0f9dd08de5b7b09052a2d6754cfbc2aa260e7f56790e6c0a968875f7803cb735609b1e9b9c91a91b84913059c561bffed5ab2cbb29f

C:\Users\Admin\AppData\Local\Temp\_MEI22082\_ssl.pyd

MD5 208b0108172e59542260934a2e7cfa85
SHA1 1d7ffb1b1754b97448eb41e686c0c79194d2ab3a
SHA256 5160500474ec95d4f3af7e467cc70cb37bec1d12545f0299aab6d69cea106c69
SHA512 41abf6deab0f6c048967ca6060c337067f9f8125529925971be86681ec0d3592c72b9cc85dd8bdee5dd3e4e69e3bb629710d2d641078d5618b4f55b8a60cc69d

C:\Users\Admin\AppData\Local\Temp\_MEI22082\libssl-1_1.dll

MD5 25bde25d332383d1228b2e66a4cb9f3e
SHA1 cd5b9c3dd6aab470d445e3956708a324e93a9160
SHA256 c8f7237e7040a73c2bea567acc9cec373aadd48654aaac6122416e160f08ca13
SHA512 ca2f2139bb456799c9f98ef8d89fd7c09d1972fa5dd8fc01b14b7af00bf8d2c2175fb2c0c41e49a6daf540e67943aad338e33c1556fd6040ef06e0f25bfa88fa

C:\Users\Admin\AppData\Local\Temp\_MEI22082\_uuid.pyd

MD5 46e9d7b5d9668c9db5caa48782ca71ba
SHA1 6bbc83a542053991b57f431dd377940418848131
SHA256 f6063622c0a0a34468679413d1b18d1f3be67e747696ab972361faed4b8d6735
SHA512 c5b171ebdb51b1755281c3180b30e88796db8aa96073489613dab96b6959a205846711187266a0ba30782102ce14fbfa4d9f413a2c018494597600482329ebf7

C:\Users\Admin\AppData\Local\Temp\_MEI22082\unicodedata.pyd

MD5 aa13ee6770452af73828b55af5cd1a32
SHA1 c01ece61c7623e36a834d8b3c660e7f28c91177e
SHA256 8fbed20e9225ff82132e97b4fefbb5ddbc10c062d9e3f920a6616ab27bb5b0fb
SHA512 b2eeb9a7d4a32e91084fdae302953aac57388a5390f9404d8dfe5c4a8f66ca2ab73253cf5ba4cc55350d8306230dd1114a61e22c23f42fbcc5c0098046e97e0f

\Users\Admin\AppData\Local\Temp\_MEI22082\_decimal.pyd

MD5 65b4ab77d6c6231c145d3e20e7073f51
SHA1 23d5ce68ed6aa8eaabe3366d2dd04e89d248328e
SHA256 93eb9d1859edca1c29594491863bf3d72af70b9a4240e0d9dd171f668f4f8614
SHA512 28023446e5ac90e9e618673c879ca46f598a62fbb9e69ef925db334ad9cb1544916caf81e2ecdc26b75964dcedba4ad4de1ba2c42fb838d0df504d963fcf17ee

\Users\Admin\AppData\Local\Temp\_MEI22082\simplejson\_speedups.cp311-win_amd64.pyd

MD5 c4a494509bf44e06447788b24881c16d
SHA1 e01a29b8e2af102ec2f8c88f9b580f004411f9b3
SHA256 bc15b60da221f8656cdb201198ab7fa2575ad8d41c357b67b8678f9bbf3961af
SHA512 2dec6757e4580657fc1a42d1d83fbfa144570508172990d8f2268292542a93ffe498881bd7fdd26ca83b61e5a861a8a1c692c133c599028f23c1878a746f691e

\Users\Admin\AppData\Local\Temp\_MEI22082\psutil\_psutil_windows.pyd

MD5 2c62184e46ecc1641b8e09690f820405
SHA1 953db2789d5eeab981558388a727bd4d42364dd6
SHA256 43e09408673687a787415912336ac13fcca9a7d7945b73d0c84ac4bb071e9106
SHA512 2df440a9bf87345a5a0727cf4ae68592b32324a3a4d4611d047fbca7984a9b8e55487d89e83e80df8e0580c2a1db26db9722dbf18d4b2c8fd2770a55309e573e

C:\Users\Admin\AppData\Local\Temp\_MEI22082\_asyncio.pyd

MD5 79f71c92c850b2d0f5e39128a59054f1
SHA1 a773e62fa5df1373f08feaa1fb8fa1b6d5246252
SHA256 0237739399db629fdd94de209f19ac3c8cd74d48bebe40ad8ea6ac7556a51980
SHA512 3fdef4c04e7d89d923182e3e48d4f3d866204e878abcaacff657256f054aeafafdd352b5a55ea3864a090d01169ec67b52c7f944e02247592417d78532cc5171

\Users\Admin\AppData\Local\Temp\_MEI22082\_overlapped.pyd

MD5 e5aceaf21e82253e300c0b78793887a8
SHA1 c58f78fbbe8713cb00ccdfeb1d8d7359f58ebfde
SHA256 d950342686c959056ff43c9e5127554760fa20669d97166927dd6aae5494e02a
SHA512 517c29928d6623cf3b2bcdcd68551070d2894874893c0d115a0172d749b6fe102af6261c0fd1b65664f742fa96abbce2f8111a72e1a3c2f574b58b909205937f

C:\Users\Admin\AppData\Local\Temp\files\config.json

MD5 6e97a7cd285cd52f4a0e44075a834554
SHA1 203d7a18b4b1e2d28f92798500b5829f8096e555
SHA256 d9241e48094f28b176a4400a9729b5f3c611611e8d07c68598d324f59cf3fb44
SHA512 5d214680465a3c17b647aa1e7ff011662d4bc017d097938867c3dd843214b1e2e9bbb8b5f7e11ab20de2b16c3284a101c2d720ce81f30df5f70051e1b87002ee

\Users\Admin\AppData\Local\Temp\_MEI22082\win32\win32event.pyd

MD5 8dbff4033a854974ca7a368c89a5e9d6
SHA1 f856f1e6d574a0397e516442a090d5c400f7b7d3
SHA256 e800152568bb46f4a0a3417eb749ef45f2e5cc0b33fb9dea55e1a1cd012b54c9
SHA512 f39174ede2a8c1c03db05c6e408adca8855a9c6a90c9aa039a16ad08c9e65acc21f61bdc18239aadbe7266236fa7d54a1d315056e4a45c422f98e5e84abe6ed4

\Users\Admin\AppData\Local\Temp\_MEI22082\PIL\_imaging.cp311-win_amd64.pyd

MD5 dc83cb57b9cabcb1e19650e7a82697de
SHA1 f62d681c02c48453ae03733b830c05020f6ba971
SHA256 f82bd3cf95e02749ff1adff76725e3645e17c2780954bd724ed63ef6827633f5
SHA512 54ab930f2309a87e956a7a59a14fb50e16f8d341809e368c0817b9ea54f81b12d96e6975df81b54dfc0ae1372dd7798a1150cf8a62980168727f04d844a50d43

memory/4200-200-0x00007FFA85410000-0x00007FFA8639C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\_MEI22082\certifi\cacert.pem

MD5 302b49c5f476c0ae35571430bb2e4aa0
SHA1 35a7837a3f1b960807bf46b1c95ec22792262846
SHA256 cf9d37fa81407afe11dcc0d70fe602561422aa2344708c324e4504db8c6c5748
SHA512 1345af52984b570b1ff223032575feb36cdfb4f38e75e0bd3b998bc46e9c646f7ac5c583d23a70460219299b9c04875ef672bf5a0d614618731df9b7a5637d0a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\pending_pings\43e29321-136a-45ef-9862-ee0c116a88ab

MD5 ebc126a451fd30db47b585db967136ea
SHA1 1754af6fb3a160201a1b6044c92d9353f2d0d85c
SHA256 99e2a48ab7e32f8b4188c1fe1c2e99bb667270fd757dd0a31a266f17a079c0c8
SHA512 d7e38c66995b4096a5072bb5f2cd70f64b780e7d0f269d3bb1d63ed660fe68347a1dfde8c6ba8886120c43920030a2fbcc1277b93ad2d1828b8467b9e7375782

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\pending_pings\ccb3884e-b848-4d21-8754-9c034ce9ac74

MD5 6960deb30c73dfff278f6e1507bfed2f
SHA1 6e6d10516ae4a0e3f7aabcb025a21b35635cfe51
SHA256 fb2cbceda6ebc04b4da6322a3fa87131a82fec9057b6452ce5a40d0780ee5ea5
SHA512 840bed5f08c919f3b86d813e3c3ced36feddd50c38b621ed1b1c7822a646011f67bf789653833eb428d11cdeb29cb1e67301efa95a94483da9f6cb7ac990d6c2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\db\data.safe.bin

MD5 66e255572c008bc54abe1cc234ead114
SHA1 36f5f064f9334801723cea2bd50c0a8e259663af
SHA256 ffc4bb00a42dc12bb60bbbace7b7e04438f91d9dd3efd8895199b0ea641582dc
SHA512 fc32f135608498afe1d2b48f3e30245597ae012a600a387e45eaf0aaa662a167a8f25b423fdb827fb5fb767104a48c2f2491878507aff435fae4b079fa978726

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs.js

MD5 58f60148e4d61828b777e75506e53689
SHA1 13ff6ee6a19740da3401a1419803f54c3e773a16
SHA256 7b28cdd32011be8a96b2b74611838ce659e810aa65f57b01a5771bd118a88ff1
SHA512 003fb201160c1661225201c0d0889a89ea560bb56ee013ec289a4eb992dde69c96369706d46994dce0e1d568e1c4f42e1ca20df75b675c2667210e3fb0f88f6a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 0d0013d9708d9fef539adc917f5b87f6
SHA1 5e071e6b4d8abf007c8bb78ee948caf5bb0439e1
SHA256 f416d29cdbaa66b7d04483831d2a593a735316fafb643414a12df78da0ab054b
SHA512 851e9965a0fed9e0f5195ce655635cf13687d18678e4a9df807ab22cbc53c02cd2006fd65d93cd80b2a06d709e59122ea9933ba5cec551c6d51f5e9b4c175388

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\BC0DEF32A0157EF46FE3978BA10BDBC89D00D071

MD5 e9ab2e8154e7fbdbf6ecdbe5585f4367
SHA1 9c83c72f69817173988ac989fcd3aa224abde2bf
SHA256 477fa3680436a020018013ea17ba49c57854c06a7ccd2011f44e70ab99f68576
SHA512 123269c9282fb1b486275eed2647fc233b3010519727549beb1e367380a28a396b6f990e159d64486ea4ee5d37569991cbd66e1ebd025921a58ad9745a15c7e4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs-1.js

MD5 2f23cb724cd5c93b2f48128783b4d86e
SHA1 2853d5edaf57a92d26d51e01a2e77c03ffe9249d
SHA256 caa1e059a34df8d5336ea27850cb126adc94e6756c5ef2a66966c0aa7ba1c0f7
SHA512 455ff87fb1ab4ae1dfa6b5d08fed8917c4c61b22a1bf84f6a47da3bedad1f7f6b11704bfe056f953cd932e3982ab2172ef631fbc6f93ea5825f19271a985c758

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 a7472897d75be1e790b9c299bcff8653
SHA1 b070d09799bfe75c1be8e1d784646e4a8f72975d
SHA256 192533b7dc029af872a601f9e12c4ef502f6007a8134e99b5643855b8134a35b
SHA512 61aba7c999daadecf134b6646b6eef4ef15cc1b276c156bd0b1210a511ea1b0642189f2c5e44e2bafc23558bd4dad1ca733822ee834af15b4c363b3cfe59a338

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 de6ea5668857f1d2b2d7ca8cd4261825
SHA1 14b3944d4343e63693992c863ef1e50a39a842de
SHA256 29d341915e040d6184ecd2ec956f558c4c24851f735a6bbd32fe4c05778fa208
SHA512 cc0214406fdecb980a83ad8141c0c9fd190c1d3836f56336c13539f78c5c6acd9a862c5dea7e82004e71ce6a7c374c8c1228e9249e11895e6a567c09e71f3f46

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs.js

MD5 583a40164764650d5e82ee5da3b6a7b4
SHA1 04b8b38a69622411458b216ad6a1daacab8add01
SHA256 aa13e927761e87ad52db91ff5025becbd24b6e26575bb89afad075b5339ec228
SHA512 a486811fccc070ea00775bf37bf6f384d0341fdc636355dd94faa3d6deff43d1fc69e907d16ba9ab2ba1dc495dd8e002f2afc16f91980926d6a44acebbddb709

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 fda24065f393731d4851ca565997e2f6
SHA1 0c3e4b6b2069611d6845f501f86ced4ad46e06d3
SHA256 9c8cf11effbb6e48904e88561ca0da73d79fd84a05e17c759dee4542e9a6bca5
SHA512 a907a1a2395f002aced8183851160027de7806499b477688003ff45448a75288f2093a82109233fb1013fe21e810095e2b3573abf908873458822cac21a0c879

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\16964

MD5 1df83026f64a4f6f29ce0e8dad4af655
SHA1 5cb468be963832605eaba6b813e1d6bd7879d1d8
SHA256 fc70fdd94550993047a9dd4ede77e016f5702c7c77a9b6d79d1bd65afcdd8b36
SHA512 5d1abf1e3b8ac1a0e9db7ff54eb17dbf1f14cd43c48104ec93755a7382efb005a1816540ebc0f83fcf8ca8d9731b2d2f37cb62e130ca596b975c9767a43a8099

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\13138

MD5 fa49c93a28437645e2b6e55a89e2dae4
SHA1 92e94ec4e1203c160d13517135144809121eccfa
SHA256 b872ece9e5578852a1a2dcc3169d5129ba2774d8f1f9838abd20a25e47b4a672
SHA512 1e57fc60b36078e3074489ad5e60bddcae96c70ff81e833431a09e484c2476c75d83d5366a91ac409c378a0ac45e93de9dd8c5457d6209a7f3e096e004b7d125

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\17537

MD5 43d26a01f9157849f2e52ccc215cf19d
SHA1 4faef817f576cdb21b0888aee091e95442ead0f2
SHA256 1a8e6fabc78b6d3a16b3d34a7b2b2b1fa16e99da5b3568315e760f8faae3d8d7
SHA512 3b9165c307fb94781f396520afa17ca933726f79c2f9f59b7e97e0dceeca401e0629fb9ab2eac09c40734976e1978f5f53214e97fb3ea21be3f6a01f15d0ce99

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 ac5e7bdc838cac9031032f0f95193c94
SHA1 4455eae77b67b70feb1f6f73491b44944bae104a
SHA256 a007eda06e44a406c7576758cbf8622e55ab8de0aec1f27adfd8e5516697fea7
SHA512 9381303b994fe6bad4d426c1bebaff8360c6c7f0efab4efd374860d6620dd5f9acba33beff151b4b8029a94c3c9f5fe78d2bd0d3a411359891ac6424d26ff325

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

MD5 27469372591b14ff1c57654facb5e020
SHA1 492c166cd0e6c8d122ca4687659bf047cd48afd7
SHA256 3b8fcd52686095049b1563fbb6ba0bf73113a01b13c303bebcb36d8339a1519f
SHA512 0cfa845de57acf6f17f295f0771c2a61cd846efdee79da012def474bcaa91d9e99d3d528cf5698e6112a310c4f97e98ae74b6cfc601b2988c51e92270ebf92a2

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

MD5 087672ef1f8a03c6fcea3dc8ffdd2a24
SHA1 2b01ce0e333d858c24b785584d52ade38cf679a3
SHA256 595b1052c954a7e68abcfc53df39db3ec77ac8ec66d187cb39150cd70e3cf601
SHA512 54ec51d1e50b0e39a14099da13f1adda591719b58bc6f17a727c6a47461505c4d122fa2100b59029b17a755362f9c435966ad75f5a1df62c6703ab8dd5a2de90

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\071a86a82f51e91c9a47bb2db7499e0c

MD5 071a86a82f51e91c9a47bb2db7499e0c
SHA1 d583e6fc19ddf59a70b7f3898fb1b1933504cfeb
SHA256 15ce1bdd1a117d0a755f8f77e5a789ccf171cfd0c56bb7532ac8cad8c35de692
SHA512 1345b189bfc4c5a7eb9c6397efb2d9d19a6498b6e4da03e5b2fee3904c2ce914b3d4ea7f80958dfd5946fb92ab1c45b262f81a029a7302237b96575c94160dbe

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 d5527c12c25d8c909d934ba90b312d0e
SHA1 ed124f3fc3a317beec7778f9ff14e2e0ab83c3e1
SHA256 3097b135b177b50ad2b46ce1051517f9b79844050a6fbb1c822fa944dce16e4a
SHA512 b7f00c42e62440f8a05a35a9fd4e623868ad2995800ccf2a4546f1cf1952cd08031ab17ae8baae9e5450aa6d574012118f2f778edec09dda03da2a103d7495a0

memory/5068-1070-0x0000000072670000-0x0000000072880000-memory.dmp

memory/5068-1069-0x00000000000E0000-0x0000000000115000-memory.dmp

memory/3144-1071-0x0000000072670000-0x0000000072880000-memory.dmp

memory/2196-1072-0x0000000072670000-0x0000000072880000-memory.dmp

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\27882

MD5 2f3b4ea9ad6fccaa75c0fa2450dcedc9
SHA1 98696d333852c4b6c7e4f0e063898c4ce80fed52
SHA256 008a7c5bf8e02f1fc813f09c5bcd383da957695c9cf46b475a91d087dbaeed57
SHA512 6487f4509ceb3b8daa978bc59c86d6518b731b968a86902842c94c8c2a0d76ea25ad365513025a3f9d329fcdfd4ac9337a1038403bbd6c0895d1865cedb7d82e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\23540

MD5 f04dad0e2e5266547ebc6edcf363774f
SHA1 67a61845650fa11259bc7793fc690e6e6329bfe3
SHA256 445a650936fcd2eab2cf6e1ec42c20be2ad7b1b5a765b3fa546ea97350de3808
SHA512 7c2d28f232b9d8e53ad71b0a961d833c890d3061a9063286de6850e5bb366beba14784e31e3e6a616c59fc56ddf2c287138925a786e9868871cbde76193ca4f6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\28052

MD5 5b86306627b3fbcc97ddd45c8c2f47d1
SHA1 aacf6660daf05f884cd91857d9d8d341896a4f9f
SHA256 7bb547aff484f4d92bbdfb1df01cfd06cec700b7f8485608b6dc00418fef5e40
SHA512 46496be2b80eadb34ea12b4d111d85ef06a180619849546942b402b571f28bf0f039ae1e5c408b2126c0f77a1c97d25ebb77d2e909664def6865851feabf6a4b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\24786

MD5 ba7d25b43c8649abf9c013da186dd3cd
SHA1 5d69fe1dee54eb74a3dedeefd01953cd920923c8
SHA256 cf5a85a0b16543381837f118d232f634350c91693298b8b7d374025b0e1928f8
SHA512 90b5f66f0dd2c3c2016bb2ebe8b88aafc9818cb76fb7c42353d882fe6bc0cc441cfcce2f8ddf5e8bb932ea2b49ee3657ad9a3cc1e9c885d2b1eac29ed86c4560

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\30644

MD5 12b8ec0189896f40473966585fa2e1ad
SHA1 afb4448fca66854d412098410fab845dec9d6dff
SHA256 1eb678c682fac47dae79e5eee2584fdb85fc13960e645da4f558de0a44cf7f45
SHA512 770e2e1321702b2d3492e524253e91619a008c6c16d8d36b788e81dd36d12a9ea32441a5d932914cb7b9385c9c0624724ac7ccae9118c571ef30ac7f9f9bc145

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\17357

MD5 34ea29c8156881278a05e12abfbf9766
SHA1 6e04be1a60accf566726ab6cb31c035d1769d7a5
SHA256 e5e8c7132f433537a29062d746d06d6186d932ac550ba5366a07abf21a3090d8
SHA512 50f733092f24059c2941f3af3190f78b90a43658a00a0e0c45000d4a3610d97301fd2cef81349cc46be840598ce30d66189afe770410cb9ce520605d31948676

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\20399

MD5 999d21d99afa7a34d70c4e72444e29a6
SHA1 6a67282093ffda5b4f536916791fef069cc0305d
SHA256 fedb471c60b788fac92301bd2ba539a0f34844499807c4a31b960ed2416ba123
SHA512 eb65ef745f70201f3ea5ebcd96f18121908681923a266d6a48452c513eec2c74db2baa907131c8cc1eab87c0c797271ac7c8981302bd7628175bb2e231b557e9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\23451

MD5 516372ad0e556e74a12b7205680581d2
SHA1 62a697402c18a6cea45a5bebd2e2f757c12c0d72
SHA256 70dffd78ad4e8b20d1debc82ba769b00fc8b945174be3063aa995046a12df0a1
SHA512 6d5fa8c56b1452be292c1cf0a47c610232626bdb758c18b5af0eb92ea458caf13bf050bd52322d3de8c258f4f79b4075dfbb3262d28bd03be19321f65383a0ca

memory/2196-1254-0x0000000072670000-0x0000000072880000-memory.dmp

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\A876C8AF86717633E6E46572013B957E820A5E24

MD5 886c54083bed4f2a4463638ca82126be
SHA1 67676a97f35c2b0216300c89e7ebfdd7a0f89d0f
SHA256 58c73ba15a66845c2bdccb3c5529826679b567fe8dcb481556ab2e72a5dfb0ce
SHA512 5b8c20dcaaab9a65f779b3e9659ed1b8524b38a4f8459d2b201a2858ef12074f2df123bd5a92e09f974d2663de59a3fb3b1c29817d3f6f88afc1b629dc7b0a66

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\1AB33D663B69F4F748A08F27D06DE9DC07B327E9

MD5 8cac3bcb5ae0fc7a500c799de57879e3
SHA1 51f19671552afcfa63ba31337cb26ef703742cb5
SHA256 21acfcbf5a3b725466d6dff59f2bb521a0e39a2abf1f8237f84bd87bdc162fd1
SHA512 5ecbee8356dc1b9d81043f8cf288bd8f1aaf349e00bfc6aec14143abb9935a43530bfd7f4e7dda4467e3d84d8f8970851ece7dd498655a376038353f8f1575c9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\55E5E6FB4DA0D621CA2B27FEAF7A867987DF935E

MD5 708f5cc1eb1fcac3d41554c6ef27b0ad
SHA1 bc0a89756e9a6e45de1e84644bfe1b3e9d11d718
SHA256 705e202e45bbf4ddf58a60d779d2fbcf913bab7f55238ed02a45dec24b86534d
SHA512 5759b1dc166bfb247c5eb12075de530de9deed65ca4c3accfa1cee1e34a4a753ed7399bf4e34a53c9e23231274c02c0795d55fce5268e26d61e6efd3d5f8dd2f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\3CD97724EBF47B50AE59221DC942CCA5EE96ED82

MD5 b05c7b3a7f048cda82c349dbe8e6250a
SHA1 2cfd905ab74041b2cc11e0632449733b209a513d
SHA256 f099ba937921ca04a540f9b1c00c9c34909f701b2c8e506511a6560772943737
SHA512 553c3381df958d2b90c4879e5f110912f7e0fd1ee4c82beaffd10ce24bd16d42ae76e9d486c8076c7cd36e7413fc973e57dafb293afba326d9ae7201ed61209f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\11993EA3BF3D355927605B079BF182BDF694A9FC

MD5 d553dd07b8c43515bc6cefb949803992
SHA1 6d55443bbd6442a06203c4c4ed3002c139c58809
SHA256 d124d1d130dfb5e56d53cfe1c6b3dbb777c1c4c66c9e8a4de4fe536a6f1251cf
SHA512 359b26c51654f59c6cd038152b6cd3c44238470bf0a9e07e10475971c2085533200b0298ad2c602731d85544a05f8cc7d8dd3ac622a4fdbd88fc080574df35a2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\26588

MD5 9ac6732f53d2e425cffa0279779199eb
SHA1 fef962d669f210bf169c112331a4948236192a2b
SHA256 70cc562952d56c31d88c2d9859bd99d4f9254109349bb21480f430ad32c55afd
SHA512 6369bb453d29567a5595fd4747b60b42a6b5e9cd67d8bb444f4c0c93f8ced47b60dcb010274a8656678a12bb7e9b973d16e83465e7f72daff7e0d66db827c12e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\050DB43D78BBC79DCD9ADCBAE96500FE04597F1B

MD5 21d9cba0d511eb6ec94bfa348a5b08ae
SHA1 4d9eac13a0ad37e35048dfca4842fc71ae3fda69
SHA256 5ed60cb983a478329e88dd946c366dd8cc24b4037bc812108a8b81c0b0b2c3f6
SHA512 9ec42382d70961d97d092f4646a5dad1b05484c98dcf49e7d5b48c3666d894b6aae530bf45fa2b7ffac5219e77b841ccf5a9443d8b350ac1ac9ba6a54f5b115b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\E1E5F90C5D42E8AAF6267CF5C1D4F4D7211B2A50

MD5 78a6c909dd0da7b63e8c229223d8f6f8
SHA1 3b96382a34fac2ad4cfce0023a463741b033d2f0
SHA256 15c1d993e4745daced61fda721418c91671e6de85b94960491f71970e5902af1
SHA512 0591a8030ed0bf22041e99775917f638f6b3a2fd8546247be2799115463bc3fa01d33d7f2697a1015e814bc398501778a8fa4b57a7a78c98f46eac580cca3c6d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\C8346BE2A3CB54E99C43B824ABAC5F037264A4D4

MD5 355e8f11541b43640f039e3d33149ee7
SHA1 ee3c703c8db1cf6ea49e89fab8523c43c4acaee9
SHA256 d8944a65e469847b1e13d3dd04cf3454bbb99d4127368bd7e12489575b6871f9
SHA512 431970dd5ff278d806988910987f60ee76a19b1dfb401f1f3b48d836235b3a31a5d49d7b0af291a63ee6dd359a806c0439463d5271001230d28aa8c9e82ec46a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\37AAE6F2172EBB8F25AAB227C7FE49403DC4BEA7

MD5 9a8bfcea888727d337d0cd3cdec88a3a
SHA1 676b043106e851550b18759caa4ca2e6cba2bec7
SHA256 80bde4ef20c6f033665eb3f65d6855f24570b13ee929022dd7c3174909e09ca1
SHA512 db7078fb5c40a8aa1f6d92305e6561f9e38341e9c29092007f0817eb2ab7bef12916a38e9e8eb5d8734ba30fc58b32e3911f2e1f28aaea3d4d5993e0a45c54b6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\5759696408CC362AAD43661B4E32560E15A7872C

MD5 6cfdb11b9539a13446ee740c43864198
SHA1 da2b1496e240d4db73c0b842a1aa8412454792b5
SHA256 1a2490124b1ba89f4385a752a66e543997773568c23355670c477fb6ed798bc4
SHA512 1e99864ce9ee4e715f7fd6bf412e51cbbb1202ddfae464b9fe340155c6849549bdb778bee6504c5d759ae7a30f07e285c0878b3f8fa03f959d6b3144c7dfaa32

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\B3348424017CBDB45DC17E1577E7AF671BEBE82D

MD5 8c4080c9423b207a24c53ff6a1bea951
SHA1 4602eef13ac0e4216339985514418664a0206e71
SHA256 b4d7005841dc61b010d3040fb70d6a83cb344fa0fc57aaf3796986741bc59712
SHA512 5f0775f26a013b137ae91ee15eee4578d0966f072a5e5b73553e1467c00905f92f6c0e3f64156549d02292d36fd185dbbd0f438b034f7c227bb37abd0fd30847

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\9C29916B899C579DE3BA8409A772D155B031D381

MD5 e89ad1fa854dece25b6f08fed5cf9104
SHA1 957eb7338aa7efd239a9aa0c748eb31d99de1dae
SHA256 24aa3bf442827caa921a880b112c676b47c693d6fa4664a2d8c4e4c07e3718d7
SHA512 d27b78b2fa0e804fbe117b26a25dcf93bd662b108575015cadf40978eb886b95155cc3b9ba860ad993ca51195b442047c0a6e25f5940f96af149a4b4f78e0f44

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\4E3562C55341939E493011A1EC297C2A4CAF51DB

MD5 4d83db9e59bc05a9138ce9a37096b4bc
SHA1 84496914ae1b7b1a4ec0880b3a8ca87f19b34250
SHA256 a853e5796f22dd5ec38f4a6c17e91845b6c0b7a55293c3e903692e2052931bac
SHA512 7893b1570dac594818fdbfa9a4358bdccb5b7fbf2a97857e32a978c412544933604d32e7ca06cbd8264839939c2e8021406773144f6197f385ca4d013daf7f53

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\96A0D2F1C4ECD10450EA183542E05ADB3BBB4257

MD5 9c5398081c646b1c2ceb1cdb1ea850c0
SHA1 550591d53d8d4ed74181784966ade7497a9400b3
SHA256 4f089646245d93ca047e8da2df351f5eb479a75abfdbf3cd64167929936744cb
SHA512 548a1231a320f319a108f6739d20c8b9eba82a72a6f87e3fcac9ecd31625244c9a13942a8ace51fa2e9b29e8d49eb8f266e46b56f1eb581c8ccd1c86a0cfe48d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\DA784CCDD74E697C1B9356166222C06487BCEA54

MD5 f40bef120c8940b5dcd97fc9c94b3cca
SHA1 b720708894d9d60fa97f8877ae528ff52303eb6a
SHA256 c75bc0bfa38b962142a367c0d62a78df5e8fe8fb3f652bc0e64f10e5f9536a4d
SHA512 58da04bf8fb7653da50291f68178193c03051cc7b4101272b1491e9f1756c3d5f603acecfa879126ce139c198b1ee8c603f6c4ff1839c5a57f2f7a7f77789874

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\4C11E373FD9A73A5E61FCB5291518B290C3C15DF

MD5 c9b966dfdbb384c85a0890f52a8972e9
SHA1 36719dc3882c2d690bef6259d5b6725aed24414b
SHA256 050b338612fea5ac6cd3f5de67e0351760feda84d6b78e9204ce1d9518698d29
SHA512 d47ea307f1966debf1cbc6dfd76eadaf6595970231323bc5788dcf81f2286a8dba9375a7bc52367c1af3d1e7758da5d5435342dd282b3477695e49c073d69a4a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\36BCFA23A4D04A528CE70EF12214E3995E132134

MD5 3a0e08a8d3325a5ab21cfb33347beb20
SHA1 ae2460e360c7877cf0a09604f18c9e415092b3ce
SHA256 bb0ec2d3c2a250eb763fd5be2d89da129650d61b426bbb849fd7dfd3049c95f7
SHA512 de3a6ebc7572e260c826c4582961cae8bb53ba92c121619d59d83ccf343c61458bee2a0b450be830644af8680e13dd914bd1f079ea27ba143986969781f86fc2

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\F27E0CDCD1C7E6F6CED7F2BE71ED722173C6CCAB

MD5 1a450a2414267b891760e04348fa87f3
SHA1 0a23fe0bc3d1bf4d6d28f43226d276f3548d9577
SHA256 798abed939ff86e3c1ecbb6da3c38d3d4145343106009cb585ddc7c37e898712
SHA512 e96b83cf9f93cb4b3fb4820c2468f3d0a9b2a48d7e14fa691e499c037cf7bc7b8b9480de76f4a74125370dfb38b9cbead362ba31edb218ab96f0cc6d90531945

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\10307

MD5 947ee06f7ceb0c18dd659aa8f581d8fe
SHA1 fd81ebde59a3a309fe62ca991af6fb23bf40ec80
SHA256 38f9084b2c640eca54dec482c432c23e557ca1327ea576a15ca16b25ecd4f953
SHA512 2dd19c137e7e4350d3da89a68fdcf726e094f6c2c3977199004616d33bf368c03f0b361e928c64e610928312d189d3b834f39b5cc17c69cb6405c8ca48069c42

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\7389

MD5 1d6422c361832127af6d7741dce7f7f9
SHA1 01dd96601fec3299fc19d3e475613c2bc5c99b12
SHA256 b54c505483bd9b6c909b5cd4b19a830ecb1f8aea930444ab7efc6d7a8f71d738
SHA512 98126e181e28febdc864a09ab0fa8413e353020786973ba3b2f2f009bb97bc28135e417b9892acbf53746a52fb32ed072ec385b38d53b3d3a32daaabd7e92745

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\23953

MD5 4ef9df44e5d6468341c69e764fcd16ad
SHA1 370104a3cbeeced17294311898793548b344a327
SHA256 167b80647fbcf71e8657151c1fd08fd167dabd99951b25f3e20d85e349614548
SHA512 7965a6eaa28f172c12f004445956be2c638400aacd939243d1e27c9e1e81cd30ec2530afa2d37cf74737179c3eb79df73f64d567b932334b5fa975d99eebbeaf

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\AC5B4849CAB26A6FF5E0D69715FFD2D5203EA01F

MD5 e4206ffc92a1ce12abff30956d7e0052
SHA1 a9a0d9d729bf4f825ead58b6d4e731dace051848
SHA256 019de699129b7390c3a02ff75674590013c2a6b48df9f3eeef802e8f01daad39
SHA512 b1c1ec92d89c1ee39689671d9367604e8ddedda47615e66e69d9d76ef8494d1382a0f57661b8acdd85b34750ee6013d78ed8a2f4fb9165c05c90e2112bda4469

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\C20E036239CAF315DF30D2CDAAC4F746820BB89D

MD5 fd8fda59112f1b2c7c98e7e955d1bb9a
SHA1 e11240a61c27cafec53764a570f313a4563fff3d
SHA256 ca78810d2284d78ad2c3aa28a953dc2a36c52ec1319532b7511106d7def18870
SHA512 f2c5ff11729b57782c4b42bd1c823704481dae98857d2bf146699c72bd5338b9bc56bf7cfac0eb522a077c0db6bcc1324271c50522086147d0b7f26940121218

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\9B652E5D4286B393D5A4026D505B06DED703EF99

MD5 d9b26716b0f318732e012729c05593a0
SHA1 01d8198498b7fc7d80a7ad99ec8d22a49d5e1dea
SHA256 e0fbf2e4b028b523cc4ed254b187622b50f67e43a97ff9f92cc2cbbf9c8cf484
SHA512 071439cb36759d102bddc8cb780e8b69f2f442e090574e7af27100c8d368066f9e01c368c752387af61878e9291a6e0d31cf775f6aa53a66dfc00a94c582f73d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\924F5866CE4620DF03DE95789845BD5455DB2BCB

MD5 74dd36369911ae8dba78f36ebc200fc0
SHA1 0dd8bc541e573780afe92e3968eff38f29bfa38a
SHA256 d60f9f6dc6de9154cec2d9239036cf056d8d7441ebb35a6579cb96d9a0fcc12b
SHA512 b00ec683a7e810fe8f1a9a58ca3e0b85532dc18ac0279fd29d2328f066b5c8a043cfcd0feee8ff23a7a2aed0f6ac810712202814bff059d7021b8ead94ca2c46

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\BE2D3D60C4D6C94AEDAA7868122CCB76EF5AA608

MD5 92882c8a4942f2db8474a7a9d4666d21
SHA1 bb415171bced9c4c0f4f40fa71411d64f8c08187
SHA256 ed534ae716cd23a11a7108b2bf5ecc1158a578bd38dca93a6a5ea487de9a260d
SHA512 c60d118f028a215e84f21fe295065e9bdca31021b51842f9bad9bfd6551d07a1cdd04694059df1baf0c3b3951e26ed80cb079c958551295955cd917b6bfad025

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\7505C2B294EFEF808B30D034AFB6A215F17E6F38

MD5 9e8d53b55ed68bcf32b1d91486b8d78b
SHA1 47fb37500ffa9657f9cf7a08a6a35fd92ba1bd2e
SHA256 23d8b706eba8355576b6bf91f26854d15eb7b191cfcd183e69ce2f85568bc60d
SHA512 0441c3d5602718355be4f180fca5d971c52ff1147028505e3c93abc1aea6a6b51fd131ea93df1266fbfba8e680e6ceb7e66c0a19eed4b927ded7a0b33210c856

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\CF5FBA70D7243048D4F0F4EAE7DB9D1742EB1D64

MD5 a0e50aa5769623e92bc62de5e21d153f
SHA1 3d4de759db429fecc0108c9505272951c088e98c
SHA256 51421cc537afb9b9e63118f8cdc21b84793fe47afb44295a226001c31adb6142
SHA512 bf80d8a7d19f252745b2befb9b59c588ea2d9a7adc3516ca66e097a871114f7fa938f1743b4f834bbbafda820d8daa00c6c6a0ba97287a35d45b3685ab04366a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\2241F205D64ECA1B98C5FF7640EE620A715AC9D3

MD5 af77e01d34d55a8a64f51b0a646b6ee1
SHA1 a4b76ed92ebe24174403156cc0d430e853d33a19
SHA256 49cfe7c7d937a49ac8f308036d0655a13d4b6684afae7ca9456afce29fbe66b1
SHA512 120f1d3987b7690202a30ff76fba663f4de94d7732715b294ab71780c49db41b8211e07492f4d069d84b7727bf32928895292f888ebfa1ed6ef24f5ad5bd8ffa

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\B5141334764A8AEF9D288548CE29C471E602A16A

MD5 05b724c69ef805f4de246016c9173122
SHA1 3479ee1401a8d30d0c2945e3173a07b3b2b49275
SHA256 75ca92d7bf73a6fa6df2dca4f344f396a2f917a3806263cf053780741c1871db
SHA512 6dfd295157e62c2a1f478d855598c14f7fe1871a56595835b70ae70ae06c4367b94a8ad575e316e703b803ed3d5109a12d49813f8a696045fd2598cfa517e13b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\6C3E98A33DC9184060AAD2B595620A00C6B0F8DA

MD5 dcd8bc8cffb176768839c2c59d193e49
SHA1 e3fccf9d5b394221fedf6df66ae373b72c8cfacb
SHA256 3478e26cc01a62769e1ccc2d09747bd413a4ca83633b87740f2dbcb99ff3fbdf
SHA512 c8658aac7a1bf1371d44248d2c3e1ebe52b404d556be5a85d7cda2e3f66eb437127e10dc1957bdf5573fcfcf42c87c24defc8146aebc9e8f2ddb6c0a5bdcc64b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\6B995C7CA46FC5BA0EFF9F15DA86A8CAE4C276DF

MD5 6ffbc91e632691e5fcb437e1b46a7953
SHA1 78f6e69911c458fa0c3e348a37267cc6946d3947
SHA256 2585f43ac763cdf757e7b9436102b97c6f73b9aea58d303a99cf0e25513d0c9f
SHA512 70073866b96c64db1a607c720d62d92b929fbc4dc66f8ed7b2ca7e0f89bd014bbe340ba7c87a8de2e6b576c3191b68d241b67369d83106744b744b37b26c29d9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\574CA2D1FC75772817A27B20A0F129C386A0113D

MD5 8c93cae71b8d7667b9454e46d4de3dd8
SHA1 b637a85b3ac48922765a04e8ae3d6e31fe8ac900
SHA256 0b698d8f0430a1fdfd9cfb8b09ca6953a0f0f97e2fe48f115d078a3e8c24f7fe
SHA512 9a99d46bbef6bb8858524f3b94a366782bd118717748fb5e20f9753926f5ec2a255a507e296028597db52b2cc4ce9fe7b1fcc271ba3036c47940fadd2fc2e744

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\05EB7F6F7BD0BA633716511CCCAD442933622565

MD5 0cdc2cb91e935647797fbf964fe8babe
SHA1 2e0e2724072a3826ffd95539842d1ebd521c60e2
SHA256 c101b05e197a6474cf774203e3cee867bb46f56330d1dc89c7756253ab243c04
SHA512 49d1b9af445c02167a3ca997070546a8f5b72570ed6e9e4eb5b915a4e3337befff076756d16d2872bb2dfc2bfd9f983bb3749e72c9969ac144464e2f1129dd8a

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\8BF307C8C2D564CDB14E394B9AE3785A272FD7E3

MD5 9ed76af115b8cdd4de5d2efff5821be1
SHA1 57cf3a62f820404024020dcdfe69227cf816ba24
SHA256 323ba769a4398b7977a0cf7a285d503b8cf85749cb1793178a8afa7a5ffab208
SHA512 71b08438be26ee7d6081758a86a990fe7589476aad10e15810d2e4f010141d2f764e078d48b4248e1fe766eb4983990d45f12ad6c2c5854b3125283ac057897e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\E049536DEABDF445A5A39B7D6289FDA9A6F2C5AF

MD5 3f411378020bc1504ba2748755bb061f
SHA1 a7579fd532770cd9fad6fceedfc32402fc76b4d9
SHA256 e55c737114c5957be280decade15233c2b9f2374363a60125b058677db2aa677
SHA512 49475c4496e83e8d0c94629ac866b1d6d185a6b5565ce115138d32e1d896d7c486fef605debacec21e75a84641e29398d010f6b329862a5081ae97ad31d33571

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\B5D9B00549A67C5E8FDA11F8BBFCECEDD00925E6

MD5 5df83f0fd9dd4bb070b526a25ae921f6
SHA1 433eb503db77b134f3df132efe07be4b1c131e6e
SHA256 8387f2a54843361bffa7df6e6f54a4e6be5c7b7580c0b0ff4563c2377d6cffd6
SHA512 d5fb1b5f1d861f529b8041eed224ea8c4a4d48ecd87c5fc7a778aedd9e3b8d76f0aa6ff2938e53560d14bbb6c36adc68f7556e24b44af5482c30715fddfd1f06

C:\Program Files\MsEdgeCrashpad\settings.dat

MD5 7d3f9d12b3e8a599e5be2ffd6d4ea86a
SHA1 a1ee3e08bd7d045def616b63a358439332ef14ee
SHA256 47fd792b031241257f7fe7b6daefa59c32039e07f6141763e49d066d896c1f94
SHA512 070b80f9ab45a4781e66cd505bf7233c3718a54ae33f299f31a32f6b8f2bafdf395220ac65c30f9129c229283d9f14a0275ed184781fea2c326aaec595f51382

memory/5068-1615-0x0000000072670000-0x0000000072880000-memory.dmp

memory/2196-1617-0x0000000072670000-0x0000000072880000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 1a1d26037436b29ca8894ff9ecb9088e
SHA1 14daf9f22ff3423b3764a23c07d6755b19f6eaaa
SHA256 66e3d3741dd5495e1343645174db0773d24a4ee577426d32fa7e70d7493c81ae
SHA512 8df42e9fc71a001531a4e5e1e9d93df34e24bec6a4dd06562acc868f257bd218faee641987a9ca63446a3398394b396a6497aac58917151d860819678f627d06

C:\Program Files (x86)\Microsoft\EdgeCore\126.0.2592.68\Installer\setup.exe

MD5 05e320ae544022adea3f8c441646765d
SHA1 3c6266b8a8c0132a97b2785bcb9ae7546ac02cc9
SHA256 e1618f31f476932871871ebc6e63d57aad643b74ea892d3d305e4125df1e6f10
SHA512 c1cf5c001ddd6b3b3c68b697f8ec9f1cbd48b5881f9fc805d74eb14a13eedcdf71e958ca1b790353a4edc64008558295741cfb785e0a3824a8f3a62bc985d387

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\default\https+++www.roblox.com\idb\3140325527hBbDa.sqlite

MD5 5b5a967e9f6aa371f78300a1c4a413b1
SHA1 e5c7bd7cf7536ce3b35255072738c926c66f74c0
SHA256 40a8ca0396936fd49931fffa5d58138165ed9cf672ef8ec748ce6193c3af9776
SHA512 8ca7c02be42fd466bade7e13dbe719ca968d4aa1884dd51241dda0a1a5f8bfc07a8977b20af2366d6267f8efcc0c120c72e82e688a85ce47c0b091c80688508c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\739025F062E977A263D0043D9E01EE529DEBBEB9

MD5 16e2aa8709307b81c54d8b0d12cc362d
SHA1 b61312db767bfd3e2b5de431564612e47819a5e4
SHA256 7f1b8f25d80a78da90c05021166fab3ac64b771ab24f012e1cbde8bcb3feda93
SHA512 f5c17830d3b26c7878c8e383c4daec5e0bd6b75a8bc300115362e930f363519cfbc21eb17f57fd02f0e946dfb0fe99f79ff9f689e585b17dfd5324b9ac8c9b28

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\E9E87308CA3AC77251CA0797216D9655871509E8

MD5 32215558c3b68bb856e922e21636907d
SHA1 afa6c0c11f52d1ec5e918560009838e9b46efc16
SHA256 b4666ff02747416719c965a86c3f62aa9cace71bb234dfd2db3303a5ce6e4afb
SHA512 61f0849bbbcc9faa761b41c50658d41d7666089856d7f3f8e837ff9287abb0f026ed63a432478dda68b94694f52e1bc013da4a1750f2ffd5341ebdd7e0a9c9b3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\3CC64668187C540A26A18501F41B51C0CD662225

MD5 f140653ef8df1b27ac9bad353c263d54
SHA1 c4f9edf7b669470057330bd8ab3e44fa741208d6
SHA256 b301ec3d76a29c7067fa8cfb8d825333de80c234a857144b29ab05808ca565a7
SHA512 9ea7c0be6df7cc9df8e48dfda465cf7bba503ff8d58dec7fdb6b106805fa4ec5433b36f13f72e838b4a67322e77b682aaf5df05895228b80dfe16a934abda224

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\D5A45803566EEF6989E7F7EAF6526855DA36DCC9

MD5 74b5e185334d4c79e330671a714bf3aa
SHA1 92ebfc93896c8fa14c4599a8239bd991a8023dff
SHA256 b445058cb2e7b9a34ac4ef5046f52d22d604ba2538a06ddb1cff4ec7b9839631
SHA512 a8ab41ed1372c7d00e4cfb9a7bd3ddcdde1266b46a9a61a4918b96b1c8d52b340115a7a7de1696b29e2dd6a70bbb21398a742f8752967cf15c45c12444df5479

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\B25EED0F7E2D35621FB92703D732C076E3B83BAA

MD5 2ad632095d4bf7b64d1a56069448ce23
SHA1 1a671b67a438870952b0f797af517837ca996c2a
SHA256 d49e0e5a6811b0059d50b2c037e0ddfa6d7dd9490e097e3f3f9df7f6d25c2ba8
SHA512 87014b04966d7253f09e647c0fbe66f66a88cedba534af99cca6c341af3201d5c6e77e839a1685447c7d139291d4db12872280c65cca8fd924f18d2dec3a6b18

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\26615

MD5 0359293ff2991fa8b6e8f312b261671b
SHA1 a461f63a25521f1bcba809ab38db5cbb379138d8
SHA256 b96f41ee07f90e51a57b078f89275a8be4bd8a9878a8f85e9161f984f7415089
SHA512 44a056c997714833ed9e02f61bbad3b581147ca68c4f26125141a834609ec3d2d0ca0af2a5b8c4b5e806900545d01d7054ae82736949162aff15d8b61c456edd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\32260

MD5 66c7ca34d1ca36a81d67043d9dd3a3f2
SHA1 2b01cff21b2cdefeb3974a17625fbeb92f0fb4db
SHA256 dd530a80ce5d3b70bb076e9fcc75bd0db9538f762f9bb183facae8a8ee9f7113
SHA512 b0099cd82770de33f87e2db557d53a2e756e855acae97cc62828e5d9e94b64e43941a727f42fd86d0cfd254b13d09a5e86883010cd3a7c0ad5824ba2f2b067f5

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\898714A1436B6A8AFDFE851F1A4ED5202520A811

MD5 c75e96111487b5b67c3ba55c20e6e13a
SHA1 81297322355db79af406a1927734d230d0b101e1
SHA256 992d449452f306f728f6907084bc61ec73a58cbbf3501425e85c74c4f595ac4a
SHA512 626f833c1394c3ccd6f7faf1fd7b1528d748cd8560ce57c114622129686204d40fdbb6848925ca262db3c2991664527dedecb3fb0f1dacad3b04c9a73c093cac

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\20904

MD5 f48797b066dc48e9bd77f165a9c272aa
SHA1 8391206d58f65aa589cf873d7290a1c28505a486
SHA256 cdb77d3234ab2c9aa5505d3947c815a01ac7216bdca96cd618f91d0e816b5d7c
SHA512 036363d75b6b0155ee03461ae6a878e16900a9b0647291e4528a229394ceca6ec236e505c66eabf2d7a6882c39a889eadafdfb950e0b632fb116fce68c7c2392

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 f0640639e2e4ca46c7c986357b57e487
SHA1 d73ce675480235e76474e64013a1dc92366daea6
SHA256 cf577e7b7ba6072ab8785f2dc1445862bec661e9b0f3ab5b515c8a240da25064
SHA512 dab9a1f7e3bcdf9713d69d90104b6a84df344b6fa7b8c78cb2079e36c5a6bd343dbb07d1cbd2c72f2ddd6114f1b13d9ceea02fffc482a7d0c01e147f47bd2187

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\0D0C8B41B123A60A76177A339C5D673D74E526C6

MD5 6aa5d656fd5b3e58258a4a3e20b28fcc
SHA1 d620a6615349ba2b3d654bdd9402103aa5d185cc
SHA256 63b60e8ca6a703790514955c952832138d4e60ec53dd4d0d9e6b28bc36555849
SHA512 fc42b45c9c0b206c834ef9179e7b5165657fe7e7da8799be944f74dee98a9ea6dee4892a5c983c7f0da9311a5f3a101808b1db067d795ffde4b4258864f74c98

memory/2196-2298-0x0000000072670000-0x0000000072880000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 952a0734ea6232bb4f79933910988d58
SHA1 776f302b2b05dcc6ec76b6594ff537877b9655f9
SHA256 93200821f52f10ebe6ca5b5c9436f0ace7a5f81eb220ae091c5e819d6b1ac69d
SHA512 6a5503b17ecd0d3050e0493a4e1b1149bb58a5bdc518bc6ded0e34b853af17a6bb8747deb22e79fa21ff5f5cfd3a701a5b4d50087cfd944eea0197e52f2f290b

memory/5068-2330-0x00000000000E0000-0x0000000000115000-memory.dmp

memory/5728-2338-0x00007FFAA39E0000-0x00007FFAA39F0000-memory.dmp

memory/5728-2337-0x00007FFAA39E0000-0x00007FFAA39F0000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\default\https+++www.roblox.com\ls\usage

MD5 7d6520424dcadaa1ff758d3b99cf7c8e
SHA1 4c51fad1368ae83b7cb954f1bd07292818d27c87
SHA256 ac25b24be46df916b1e8180b5c12045469d9b3753b8db50cd01e64848c346ef9
SHA512 cc054671ab3af9f98babcd644c181ae09565d894dc8aa4813749658e82025fddd6fded8fe594213a054184d8632eda80369928dae709f6cdef4c07c30698b2a4

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\584

MD5 6270721d080551b3a22448ed8778c258
SHA1 53224eca439f671722d99def7c2500ac368a1cf8
SHA256 ebbbf80ef71bf4de545b9fd5d4289df2ba17aaceb3c88f6f6cadb564ceb4b080
SHA512 301855baf2ba9c6a8846ce8654bbf34a2bbb11dc2d317ed0750f42c98d9f4783e9a2f00429aaa3fdc3dcdb4c2e2467b9d2b865ee0713baed0b8a493b7969e3d6

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\29408

MD5 14fb832ab32ed4f8a31a9964a76bad4c
SHA1 c48829a9ac719dbc301a0286f74a959eb8032801
SHA256 02ddd700c992df67c78ffae954243b7cd74aba97ff1c5f43e6a4fc512081bcd3
SHA512 5e667cd3fa50424b82bc426c8edf56c4b5745b4cec554dacaa98660ab0ed25a01c78f630b60a13800ed789accf8725e55da33459c5953004265ab270e5fb9267

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\12856

MD5 d7069326b8dd5d968147690e0d960bfb
SHA1 d3c3975301c1a79fe61fcec342ac7d58af02471d
SHA256 11abb89b06bd88a57aa6b9ea01b5866804539a0cee8900f7c84939dc8531be9b
SHA512 462079eea8916955bd9f277507d307478be8d75f22ee9e991480228af692fc55ea2936b9571c71f6de7606dfe68d38baea88d894f3238009baab90a4d34fec74

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\15785

MD5 a51b3103e825fcd7803c52f5a9f25126
SHA1 1ce099f459266447a184a99449e7620a391bba00
SHA256 e0ee8e43006e4ceb91e37e203ad90e4b354c1e031fbc44c9b65d258a0fa24c7f
SHA512 06eb09dfa9b42c2fc959f6e65e203c51fbf18a27bd69dcd19ac7b0449ba9a24b679a919b7fcd9ddff982c3c6fca5c557f67380bca5224c81a7fa9163864d1f84

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\1736

MD5 d833a0d02cd3669c0efb78d7e5393228
SHA1 b763cc041d3be9e1c41b766aed3c3648eaafd79e
SHA256 d63e38deb1b0bc15753ae4ace8a890f734355a6423caeb97ace3793061fa8976
SHA512 e406ec7120b036af1ac6800d462b3e19274cd6b8bb11d8dc3109c31ea961e22a96ceea43c77508a33b79da45f1462aa867e798d7cbeb69fa79513aaa177d5c24

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\29555

MD5 a69b58664610f2146226fd9985960dc8
SHA1 ca145e367b486645fec5cb50b56bab9c39733411
SHA256 562ca62013d985ccd85d27ad583abf8c944f48b59cad6b460e00bae8cceb5136
SHA512 745952ac4e2690a5f24e4f7b6f474c4e21ae800ec4d042175d630208261ff82e459545cc8d41700935929f370f81107c6b143be2c924fe15d12a8303dfe68b40

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\2533

MD5 34b729378e2242eb3ee6d6bb6bbd439f
SHA1 9752ef75d4fa94fe3ab75e442e840a876e9408cf
SHA256 32161252e9b4ff1c62c348c26b90f4e9a63ea19d71981da280b4073fd3f9d0b0
SHA512 6e5fcb950bafc2d3816b8a539b3b892777099b339408dc48bf251ef2ed10369db848cb19455f30a1cc5f0ad69ae2f9ae01d621727fdea03562cb0990afef3e51

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\28433

MD5 8ea0d5142044a12f48746d8eaadc1e7d
SHA1 347fc6e5b930f1a4243967e81d4e689973c65a70
SHA256 63a3cfd698fcbbd2ab40fc00a2f3ca6fabd065e50051d06bbe648fded6412193
SHA512 dae626b09fd040e0da7f1d8dc663247368a0b441f4b96e152a8c658f689496127c73281dcea10ea47f18eab208783864177ee3c418bbb0d2bbe2da005d41b20b

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\24718

MD5 28d718e131e79eab358d555d28c28db5
SHA1 2776a41f6761a92d4ccfbd11bdc152ad1d4b9714
SHA256 5407becd5b1cbea33ce535ad931b38ee363524c632a3e89c6ac48ec48db465e2
SHA512 a6853fb5c6f7f91650faf8f5ab74a8d8cd386f59eaba180fefee8e6f56b99c3b3ce070725fd8b6541994354987163702625d1cb2dd6cd6a97a35e647b6e93e41

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\1747

MD5 579b841819e401796806785eeea92599
SHA1 4504c2d6798ea33f15bedb3c0fef0ac302ea5278
SHA256 256cc88c75aca7f54a191e1b9ce19ddd8da8ba1f55a54dfce81ab575e91c1839
SHA512 aee57cc8aacd374637b267c081ac72fec5d4d613cde221e8cd6a2aaed6917f2d9f2add294f68c3b15e41eb097e5f8b0161b205a09b6f0936af1ee510e72c48bd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\31137

MD5 c75bf17af955f8d4965d9869a5a4259b
SHA1 9d761b5d7d2575d2b1898081cf6a7b9cf797e56d
SHA256 9b31777a475f377c99e7d10097fc9584c4b021452a97743a1371fb723430e250
SHA512 7459350fe7e6787207b7d86d496f7dfe8d041c1e85f8ca145347a6857c9941fc54b1e9e2264c7b2878af6e81d95b8eb91be23e4f22462aa40650dc996fb57e5e

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\4227

MD5 f129ee45c809780026e782c29d3c2a1a
SHA1 1175c692cf07b26da1f4d1e2ca768cc4456f4327
SHA256 ac8e361afd2d0a8b28065f4b3374d109bbab60ba388f8eb72738886b53385770
SHA512 493f5426917357654307b21f819bfde55b53610115ccf4883e8f5bdebd60c9c8bd14993e45965d94858aa4a8344945be2b9f4f1da9c99a67e5105006dd3b0115

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\CFD0625EA95B720CE141809289E97B1CD2F16A45

MD5 6ac061a062033ccb103940945697efe2
SHA1 dcb70e2ec6bd29b970f67e3d41ef1dd3239d2fdc
SHA256 9935f2b952c24abf59e12d6078d80f4faeea89e56c8c718d29f70333b602f56e
SHA512 b79ffc47d8c0c594a2c51215f9b8328d86a875a0b8af41a811dbda46a7a777c246513fc61b3ac2c6d2b92fc8f499d8dfc2485103eea25d660d6c9fa6d9292938

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\15169

MD5 bb76447ea1c1bba1af05a78c302cb986
SHA1 30ccb5fb2d754ee59b1c2af1b86dcc3b8274b684
SHA256 9aa75bfcd312d8135f00ba76d009bf89505e77951ccd27c10f4d04ee12d00298
SHA512 7599ed7e35bdf6eb63658ee0b4aa0bd82f2db3d64313a62c486a17a9b1f8264121d080e665fc017e2daf4c4dbfb012f7e26f4a63c6a90f890ff01005facc0231

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\19568

MD5 ed491bd2b6ad100b048f08ec4f5cb292
SHA1 d657b6e59ca1b93fd6d3dbb7f11ddb518f31fc9b
SHA256 9e76fbb66550522265bad436eb11cdb03af1f4fc36e9b1e8c4a7418116d9db22
SHA512 899e98a7dfe9a169d77bfd34d5440b85c3c22cf8250a401ecb532dd160cf9d85a8ac925f32035c756e790d452fc3719baaf1df25a5c2e4a405f1f38f5d681093

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\13037

MD5 0c6d16dd589a0585f8173beb07b81f95
SHA1 eecd2bb8b16ddd51cb83083244815f94c6a5bffd
SHA256 e8792b497141212d15fc75da38be1fc1dfd82f46ece0c2481299400987515984
SHA512 c8ecfaca0ca36c0f9bcaa94ca28083ed8738bb93dbc0d0e9b8171878cd999e41210e8e18098a0d33756bf7038af9c67e8cd7c06095d5c5b0172846cf4038026f

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\8088

MD5 67bdfc87231e9580d6416502b3ff6d28
SHA1 101d587288fdde17032b8b4d8474af7ef3a89405
SHA256 1cd2115c3a8f267209e8fe23358d31f62175fa85ed33552d06f8b10cea5a0ff3
SHA512 afd37c32f9306bd292840e0eefff4e2609a3e0b37283aaae0b06cae58a05f921fbb340bc421bc7147c5aff9559cf7a8d7f217644ab193437c37bae5838fc6ca9

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\13621

MD5 ec53043d56d399e2d8612046e59194f9
SHA1 c08e6cc25f216a27afa862ce1bcf7ba65ff603be
SHA256 2fbb46f150d3916603c7a639354845c0f03133a4e8d75b5cca23884c1c008eed
SHA512 a2fe0faf8bb91248808025695318c52908b08756f4c3683a3477a2c749392df0d746379c2eb647b2734e5d26cd3487de96f17d9f2d756788937bd0a788fb59c0

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\10131

MD5 82033be2411029de96a7a6e16994dfbd
SHA1 53b12329442e8e6168990a8cc473147c34b09b5f
SHA256 bedf2c210aa59105782c0cf67f40686973df932a0f9129e2c040f229db760af0
SHA512 60b5e950f72ece5cb0736d84a2e598f1ac8d4e12b10721a3c58a1f51987c1c7a7ec724dc956b9179e6a10af915da048f7e85cca28c0eb64e3aead0f379e93e01

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\14755

MD5 1c278bdf4a410f9a435188f6d2f9c341
SHA1 eed3fc55d4ba02639552b0c2eaa653a28684ecad
SHA256 5d89a3fc44bb7c676609d363e8682b99afcdaeb71880b5a55d625d68ea48f074
SHA512 cbd81adc56cff9f1ed70a82a648df64b3e51bbd871b46786b9ac6ed509d0d23bc9ebc908998eacd79b4155eaca23af66765d7ce75d44bca8f93229781d9bcc77

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\13981

MD5 b767931176da2004f029f305ea973a05
SHA1 3ed2e52eaf1414d3abfdaaa6cd6e54b4fe6f2006
SHA256 1f67f556e7a8127f26861e912510367c675001714539c4bc8063f1c375cab853
SHA512 8d7271233284812f4a8432b135a088b431a1847afa4d2935e42c3cc0d4f2cf9374bb8e2394b9841065083ac966f28fc378acf3106c24d410fd2cc430f0d5e668

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\6889

MD5 072c5d86ef418d7d97e30081048c086d
SHA1 cbbdbf600d02c29067af9b390aae55c056b640cc
SHA256 5edb6c123664c2ebecc60d33c7528f7619b1021856a7adf4097063bb544257a1
SHA512 5bb13ceeb62a889ed591b6c2ec9f80a81751f015d915e7b1f95cf563b6b190998fb95fcbae11cb0b83ff9f7f752ea3300be8a3b5c21b2f6d1f5b0db534456dc3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\A14C26BA4DDEF07ECA3E158614497D4ED03032A2

MD5 9d46b55b0876ef3de4fb6a596620ebe5
SHA1 6c742371b61577534edd81283b2150ce3f3b2776
SHA256 aa66302e999881f3d7168808b29cdba82a46e522a1871c55f36c5586d47ad143
SHA512 a9551529427fe767b74f1415679dceda633788628f3faafa1aef8f6186d62a261a75507f50672b9506864e3e2080e9abd4d152d44fcaa63a3fc548f17ef1d8d1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 018ec22d61d3a6fa74533a902cdd809c
SHA1 1309e2f2638591f5a06d39576df4c666a3390265
SHA256 bd601416751407975abc7d592343f0424d3626a13013a1afaacde366b310da9d
SHA512 6a292c39d80ae6933bd6f8b6e79d2a1a358e1a4e702962d96c1cdec64efc7ea0f674ef07470fbb0fd06f9accb6dab16df9566ae38ed06eecf1d3b9f1e7b63211

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

MD5 39980490e46c8846b974274aa09dd820
SHA1 d1f1e555c64c8b57eccece02d2cdbda557c792f9
SHA256 3172044ab2bcfd45f4466d33304db23815bf68f856a0905158affbc53259a348
SHA512 2da770e43bb198be4c7bc4ce61d1d4f84beaf171006f61f58cc9bc5d2425bd00acea700e8f95051dfdb29b565e5a40245dfaa2fe2a1536c5499c1cce0dc8dc18

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\jumpListCache\fy39i_Zd6Lp6fwwfiM1Oew==.ico

MD5 b4f8f60bc7270b56ae3e6cff74b39d54
SHA1 30e8e3752e13a51cc26d89c0592b0bfd36934d38
SHA256 bcbff095e0e5ca2f74f0c26dc788c7c7cca8e87e2ab596ec9457448f1ec5d77c
SHA512 b3247daa5bdd9647e77e9303afc74f001cca6d24aa5ec81ab80cfaebf2f6fa0bdb720a74e78df8fca0c4ab3e8a79deedc989d22e695b59fd892e47482b1d20af

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\default\https+++www.roblox.com\ls\usage

MD5 5bca4987d925d4902ff4337482f7c3e3
SHA1 b3c3507022aeadb0668298d643148290a32cbf1d
SHA256 1e2ed8b04ad978e642fc0158ec8cac3bc4ccbc54bc32655c80f9c14e68887c30
SHA512 398c9b4064ac1ee188d99d1514e6382521ade928ac27ddc12926de8084e3d7726b28a29ca85d5d98014a37be00d6b2bc3e8a225099f57ae74b1e48de56cf053d

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\12609

MD5 516912065033dc9961c91a64bc6627c5
SHA1 1d5a80fda37a8257dc9c3777ad6261f0263add15
SHA256 a8e979308aeab0b0b8e9d051fb2e7f8d3668bb47fee12e7eefb821831fdb8d70
SHA512 454f9065da66d747bb28ef0d7c33bf62c76c94e1a1594fd33726cdc14a6f4153395b3b2ad4b9804b5e385ed46c0bf3a0ef90d6c5ab6ea31d229ea812193ac914

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 f6ee37d89dffedaa50c631670d9950db
SHA1 2f75c0efe807dadc71719e34da54bd2a70386bbd
SHA256 471afe28fb28a568b677d2dd03225c096756d76e040ada0dffeea14c104f385d
SHA512 3c9e65bf117fc67b2d05b866f0cddf66b25c08362c9f50d56d7891dd91db8ed0413e551f2d64b38ca2205a1905ad1c991487bc926e8e5e76c9ecbd8aecfb5ecb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs.js

MD5 c7b9550e908a7b84a05ba66fe14e1e38
SHA1 c333baf2db6b21b3bb454dc21a684464327c1626
SHA256 54307c2df62ae4042a47b1b499af85aa6ee942757334007b5c269fccee9b5ae6
SHA512 c72493ff0bd378a7e9aba596b14019a5cfb194a10d4cb8fc89607c06fb2e7fc693eb938361102d0037a8706ab3b3db3a4b55ecf12de6a3aef47a92c13eb5b0d4

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 85430baed3398695717b0263807cf97c
SHA1 fffbee923cea216f50fce5d54219a188a5100f41
SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA512 06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

MD5 fe3355639648c417e8307c6d051e3e37
SHA1 f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA512 8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

MD5 3d33cdc0b3d281e67dd52e14435dd04f
SHA1 4db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512 a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs.js

MD5 b01e790d8c4995de81afccea9605d3c0
SHA1 ef5a360160417c1f3ef22c3a4fcf201b91cbb664
SHA256 4e48be9df7f0b2395aa4b4d8f29b8ab5f77bff28a963784f36635e565ae3b81b
SHA512 ab61253fd2aaa9f507029ae6b85fe878e6bb6cf2d1718be00dd10c2216d6675562cbe5122c86918ef0f4858b33396dccee51037778d5e048ec23416b40354bd3

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 a01c5ecd6108350ae23d2cddf0e77c17
SHA1 c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256 345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512 b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

MD5 49ddb419d96dceb9069018535fb2e2fc
SHA1 62aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA512 48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

MD5 8be33af717bb1b67fbd61c3f4b807e9e
SHA1 7cf17656d174d951957ff36810e874a134dd49e0
SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA512 6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

MD5 937326fead5fd401f6cca9118bd9ade9
SHA1 4526a57d4ae14ed29b37632c72aef3c408189d91
SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512 b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

MD5 688bed3676d2104e7f17ae1cd2c59404
SHA1 952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA512 7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

MD5 33bf7b0439480effb9fb212efce87b13
SHA1 cee50f2745edc6dc291887b6075ca64d716f495a
SHA256 8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512 d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.187.41\MicrosoftEdgeUpdateSetup_X86_1.3.187.41.exe

MD5 a9ad77a4111f44c157a1a37bb29fd2b9
SHA1 f1348bcbc950532ac2b48b18acd91533f3ac0be2
SHA256 200a59abdeb32cc4d2cec4079be205f18b5f45bae42acb7940151f9780569889
SHA512 68f58a15ef5ba5d49d8476bee4a488e9a721f703a645ddd29148915d555ca2eb451635c3b762e5a0f786d69bb5cba9bffac3eeee196f1ec7ad669e2d729fe898

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs-1.js

MD5 89365e1d936458b99eb2910f1ecd029f
SHA1 d17f8f045a29c450645a9f39e2b327b4fa817c25
SHA256 3361dba4f935db68dcdbbde4b454b873c3893db9bf482101dac20dfe121d4758
SHA512 9e62c87e12f9316435636f28f13d284591798ce19f85310541343d26bb0b872e1ca13b7e1d761db7e94712b794962c11861ab9933ed4f77211131b155d6e6cbf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\broadcast-listeners.json

MD5 72c95709e1a3b27919e13d28bbe8e8a2
SHA1 00892decbee63d627057730bfc0c6a4f13099ee4
SHA256 9cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa
SHA512 613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\handlers.json

MD5 6744af7e249c7fe04774492eeb4a7c8c
SHA1 e1c21b64b2fb0181a5309c1bb2b5de477fc4bf28
SHA256 2cee6554a5acf4ae1a67cf258ca73443656828f7dda1a5f0004dcb7ab77fa680
SHA512 875661b98dbfd0c6bd574868f2511fbd56fa98cc8e1f3b901d8e41c60d93cb9de1bc8f48524043eae4a55ac5bc1090a58e3a9a5f0d6bac3aa16ddf5f29dbc050

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionCheckpoints.json

MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\targeting.snapshot.json

MD5 69934efca15a09de544eb88b7d38af76
SHA1 37278435577b9d78687d7f915d49f9bde26ce371
SHA256 6f723b8743f773ed8b38fa5c932bb75282824a42bcaffb686015d3a35b13fb65
SHA512 8f052d43117c3f05611b7cde8a13ef678e6104dc2f742919ae7f4c997ce5c9848469b274ea0a95fa7e5f917551457d12f4aef43598c9a228cf8ba9c0f4acf249

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\xulstore.json

MD5 1995825c748914809df775643764920f
SHA1 55c55d77bb712d2d831996344f0a1b3e0b7ff98a
SHA256 87835b1bd7d0934f997ef51c977349809551d47e32c3c9224899359ae0fce776
SHA512 c311970610d836550a07feb47bd0774fd728130d0660cbada2d2d68f2fcfbe84e85404d7f5b8ab0f71a6c947561dcffa95df2782a712f4dcb7230ea8ba01c34c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\default\https+++www.roblox.com\ls\usage

MD5 6702504c2fbd9a7f099d81a1057645cd
SHA1 2ff8d4ea0410dc3ddf639be37e533ea98007590d
SHA256 377970b8b002242a1f2d1710aeb1f1a03ee46b27b06fd54fa09e0ba78ab1a390
SHA512 04221aca3b8e282b1fc09b3e3246de434acfa40866bcb593bfb62e0309640a4eb318695e804ac0d38c52f6ccd5fa49b40252df4097274ddd5b1231c7cc77a593

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\bookmarkbackups\bookmarks-2024-06-26_11_ynjabA+xcPNHPZU1gEyrew==.jsonlz4

MD5 bc3030c50bf86982219a2ef0685a4342
SHA1 f5959d9850ba5f1b0e7ac71cfa35550c0dfb6c85
SHA256 5e38cdcb2dda5e8038815eb31f05ec6bf9d4db0718af6443aa4247fb70d888d6
SHA512 7970c02c7a335c3b1ae73f9363fd3282f495ddb8238947af59828eca4c52345e5ed2801e2b766b86d13f1fd784629ea86dba711711cc0760fcd579e11c0dae8b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\SiteSecurityServiceState.txt

MD5 95dd7fa8834f23a93b6073c2acbb3f6e
SHA1 c4c261160b5d322845fef39be4831003c59c3a82
SHA256 71179539a65703fabae442f472556227e10241e65b29505fe494bcacbec6a26c
SHA512 efb3887d615aa06cc99333329872bfb509a6a77004f03ddfddf0c729b276b114f91cc386d76be68adc3fe220aae6f3656bd26a864f6e71f91e108bd28c528bd9