Malware Analysis Report

2025-01-22 08:46

Sample ID 241027-t28rpsxmaz
Target https://www.roblox.com/home
Tags
adware defense_evasion discovery evasion motw persistence phishing privilege_escalation spyware stealer trojan upx
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://www.roblox.com/home was found to be: Likely malicious.

Malicious Activity Summary

adware defense_evasion discovery evasion motw persistence phishing privilege_escalation spyware stealer trojan upx

Modifies Windows Firewall

Boot or Logon Autostart Execution: Active Setup

Downloads MZ/PE file

Drops file in Drivers directory

Contacts a large (576) amount of remote hosts

Event Triggered Execution: Image File Execution Options Injection

Loads dropped DLL

Reads user/profile data of web browsers

Executes dropped EXE

Event Triggered Execution: Component Object Model Hijacking

Modifies file permissions

Network Service Discovery

Network Share Discovery

Legitimate hosting services abused for malware hosting/C2

Drops desktop.ini file(s)

Checks whether UAC is enabled

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Adds Run key to start application

Enumerates connected drives

Checks installed software on the system

Installs/modifies Browser Helper Object

UPX packed file

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtCreateThreadExHideFromDebugger

Checks system information in the registry

Drops file in System32 directory

Drops file in Windows directory

Drops file in Program Files directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Browser Information Discovery

Event Triggered Execution: Netsh Helper DLL

System Network Configuration Discovery: Internet Connection Discovery

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Modifies data under HKEY_USERS

Suspicious behavior: EnumeratesProcesses

Modifies Internet Explorer settings

Suspicious behavior: LoadsDriver

System policy modification

Suspicious use of UnmapMainImage

Suspicious behavior: AddClipboardFormatListener

Enumerates system info in registry

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Modifies Control Panel

Suspicious use of FindShellTrayWindow

Modifies registry class

NTFS ADS

Checks processor information in registry

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Checks SCSI registry key(s)

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Reported

2024-10-27 16:34

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-27 16:34

Reported

2024-10-27 17:23

Platform

win11-20241007-en

Max time kernel

2700s

Max time network

2706s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.roblox.com/home

Signatures

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\130.0.2849.56\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A

Contacts a large (576) amount of remote hosts

discovery

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\drivers\ViGEmBus.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\drivers\UMDF\AvicaVirtualDisplayDriver.dll C:\Windows\system32\DrvInst.exe N/A

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU9FAA.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU9FAA.tmp\MicrosoftEdgeUpdate.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Avica_setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
N/A N/A C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaWatch.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Users\Admin\Downloads\Waterfox Setup G6.0.20.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zS49BB3E98\setup.exe N/A
N/A N/A C:\Program Files\Waterfox\default-browser-agent.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\System32\icacls.exe N/A
N/A N/A C:\Windows\System32\icacls.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\Microsoft\Windows\CurrentVersion\Run\Avica = "C:\\Program Files (x86)\\Avica\\Avica.exe --autoRun 1" C:\Program Files (x86)\Avica\Avica.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\D: C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
File opened (read-only) \??\F: C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A camo.githubusercontent.com N/A N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Network Service Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\System32\GameBarPresenceWriter.exe N/A

Network Share Discovery

discovery

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU9FAA.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU9FAA.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\vigembus.inf_amd64_f92aab85c34952aa\vigembus.PNF C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\avicavirtualdisplaydriver.inf_amd64_afb4a5d0d8ce984e\AvicaVirtualDisplayDriver.dll C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\avicavirtualdisplaydriver.inf_amd64_afb4a5d0d8ce984e\avicavirtualdisplaydriver.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\vigembus.inf_amd64_f92aab85c34952aa\ViGEmBus.cat C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074} C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\SETD5D1.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\SETD5D1.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\SETD5BF.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\AvicaVirtualDisplayDriver.cat C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\SETD5BF.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\SETD5D0.tmp C:\Windows\system32\DrvInst.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\avicavirtualdisplaydriver.inf_amd64_afb4a5d0d8ce984e\avicavirtualdisplaydriver.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\SETD2B2.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\SETD2C4.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\AvicaVirtualDisplayDriver.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\SETD2B2.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\SETD2C4.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\avicavirtualdisplaydriver.inf_amd64_afb4a5d0d8ce984e\AvicaVirtualDisplayDriver.cat C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\SETD2C3.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\ViGEmBus.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\avicavirtualdisplaydriver.inf_amd64_afb4a5d0d8ce984e\AvicaVirtualDisplayDriver.dll C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\vigembus.inf_amd64_f92aab85c34952aa\vigembus.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\drvstore.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7} C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\SETD2C3.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\drvstore.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\vigembus.inf_amd64_f92aab85c34952aa\ViGEmBus.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\vigembus.inf_amd64_f92aab85c34952aa\ViGEmBus.sys C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\SETD5D0.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{ae3206b4-fb42-144c-842b-7aef49c499e7}\AvicaVirtualDisplayDriver.dll C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\avicavirtualdisplaydriver.inf_amd64_afb4a5d0d8ce984e\AvicaVirtualDisplayDriver.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\ViGEmBus.cat C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{1389eca7-e37e-f946-9516-45ae0fbd4074}\vigembus.inf C:\Windows\system32\DrvInst.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\ExtraContent\textures\ui\LuaApp\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Lua\Dialog\Dark\Standard\Spinner.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\scripts\CoreScripts\Modules\Feedback\Components\FeedbackApp.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\textures\TerrainTools\icon_regions_paste.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\JestSnapshot-31ab8d40-3.8.1\JestSnapshot\rotriever.toml C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-12e911c4-0c4b13ff\LuauPolyfill\console\.robloxrc C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\content\textures\DeveloperFramework\checkbox_unchecked_disabled_dark.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\configs\DateTimeLocaleConfigs\es-mx.json C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Lua\AssetManager\Dark\Standard\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\scripts\CoreScripts\Modules\Settings\Flags\GetFFlagFixIGMTabTransitions.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\DeveloperTools\DeveloperTools\Classes\PluginEventRouter.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\RoactGamepad\t.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Locales\gd.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\content\textures\ui\InGameMenu\ScrollMiddle.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Lua\PathEditor\Light\Large\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\scripts\PlayerScripts\StarterPlayerScripts\PlayerModule.module\CommonUtils\CharacterUtil.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\TextButton.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\vcruntime140_1.dll C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\utilities\common\maybeDeepFreeze.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\textures\ui\LuaApp\graphic\shimmer_lightTheme.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\TextString.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\ExtraContent\textures\ui\LuaChat\9-slice\chat-bubble2.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Lua\ActivityHistory\Light\Large\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\textures\ui\Controls\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\InsertableObjects\Dark\Large\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\textures\ui\VoiceChat\New\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\content\textures\particles\forcefield_glow_main.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\ExtraContent\textures\ui\LuaApp\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\textures\ui\VoiceChat\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\IAPExperience\IAPExperience\Locale\Locales\it-it.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\avatar\defaultPants.rbxm C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\Debugger\Dark\Standard\ConditionalBreakpoint.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\textures\ui\Settings\Help\LeaveIcon.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\getFFlagUGCValidateLCCagesQuality.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\Locales\lo.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU9FAA.tmp\msedgeupdateres_es.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3B9B11A-BF1A-437A-ACA4-6C37AD995D39}\MicrosoftEdgeUpdateSetup_X86_1.3.195.25.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\PlatformContent\pc\textures\sky\indoor512_lf.tex C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Lua\AssetManager\Dark\Large\ImagesFolder.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\scripts\CoreScripts\Modules\TopBar\GlobalConfig.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\JestEach-31ab8d40-2.4.1\LuauPolyfill.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\LuaRoactPolicyProvider\LuaRoactPolicyProvider\getPolicyImplementations\fromMemStorageService.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\content\textures\ui\Controls\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\Qml\QtQuick\Controls.2\designer\images\spinbox-icon.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\scripts\CoreScripts\Modules\FTUX\Features\EnableSafetyBubbleDummy.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\textures\ui\Slider_sel.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Flags\GetFFlagEnableLuobuInGameUpsell.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\content\textures\ui\LegacyRbxGui\CloseButton.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\CharacterMesh.png C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\FocusBehaviors\FocusBehaviors\composeFocusBehaviors.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\130.0.2849.56\Locales\kn.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\LuaRoactPolicyProvider\LuaRoactPolicyProvider\Provider.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-31ab8d40-0.4.2\LuauPolyfill\Array\some.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\130.0.2849.52\Trust Protection Lists\Sigma\Content C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\content\textures\ui\Settings\Help\RotateCameraGesture.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\scripts\CoreScripts\Modules\Emote\.robloxrc C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\cache\init.lua C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\Qml\QtQuick\Controls\Private\qmldir C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_598209306\LICENSE C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_217173638\crl-set C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_576067424\manifest.fingerprint C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-pa.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe N/A
File opened for modification C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-ta.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_889656417\kp_pinslist.pb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_268150618\manifest.json C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\msedge_installer.log C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-sl.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_576067424\adblock_snippet.js C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_598209306\manifest.json C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-hi.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-te.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File created C:\Windows\inf\oem4.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-hu.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_576067424\Part-IT C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_889656417\manifest.json C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-bn.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-und-ethi.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-en-us.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-et.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-hr.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-mn-cyrl.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-en-gb.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_576067424\Filtering Rules-CA C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_598209306\manifest.fingerprint C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\svchost.exe N/A
File created C:\Windows\SystemTemp\85664117-3f0c-462e-8675-268231c32757.tmp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\manifest.fingerprint C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_2052027102\Microsoft.CognitiveServices.Speech.core.dll C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_576067424\Part-FR C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-cy.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_217173638\manifest.json C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\Panther\UnattendGC\setuperr.log C:\Windows\System32\oobe\UserOOBEBroker.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-de-1901.hyb C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_576067424\Part-DE C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Avica_setup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Waterfox Setup G6.0.20.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\RBXIDLE.Setup.3.0.0.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zS49BB3E98\setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\Waterfox Setup G6.0.20.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\explorer.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3B9B11A-BF1A-437A-ACA4-6C37AD995D39}\MicrosoftEdgeUpdateSetup_X86_1.3.195.25.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\Temp\EU9FAA.tmp\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\DllHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\DllHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\DllHost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\SYSTEM32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\LowerFilters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Program Files (x86)\Avica\Avica.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\SYSTEM32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\SYSTEM32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Program Files (x86)\Avica\Avica.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Filters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\LowerFilters C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Filters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Filters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\UpperFilters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\UpperFilters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Service C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\SYSTEM32\pnputil.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LowerFilters C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Filters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Service C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Service C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Service C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Filters C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\SYSTEM32\pnputil.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString C:\Program Files (x86)\Avica\AvicaService.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Waterfox\waterfox.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1 C:\Program Files (x86)\Avica\AvicaService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Waterfox\waterfox.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Avica\AvicaService.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2 C:\Program Files (x86)\Avica\AvicaService.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Avica\AvicaService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz C:\Program Files (x86)\Avica\AvicaService.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Waterfox\waterfox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Avica\AvicaService.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Waterfox\waterfox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Waterfox\waterfox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A

Modifies Control Panel

evasion
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Control Panel\Colors C:\Program Files\Waterfox\waterfox.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Control Panel\Colors C:\Program Files\Waterfox\waterfox.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1" C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\130.0.2849.56\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\PROTOCOLEXECUTE\ROBLOX-STUDIO C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Windows\explorer.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1" C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\Microsoft\Internet Explorer\GPU C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\130.0.2849.56\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-556537508-2730415644-482548075-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1" C:\Windows\explorer.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Edge\InstallerPinned = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Windows\system32\DrvInst.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133745221962209998" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ = "IPolicyStatus3" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ = "IPolicyStatus2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ = "IBrowserHttpRequest2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ = "IPolicyStatus2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ProxyStubClsid32\ = "{B019EEF0-C45E-464D-81C8-23283376FB2C}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1D15A374-D691-4A48-8CF3-F162414FF70F} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.PolicyStatusMachine" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ = "ICredentialDialog" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-556537508-2730415644-482548075-1000\{2B3705A6-AA3C-4D83-815E-98776F8B27B8} C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib\Version = "1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods\ = "7" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\MSEdgePDF\shell\runas C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ = "ICurrentState" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.ProcessLauncher\ = "Microsoft Edge Update Process Launcher Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\LocalizedString = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.195.25\\msedgeupdate.dll,-3000" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ProgID\ = "ie_to_edge_bho.IEToEdgeBHO.1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods\ = "9" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\ = "ICoCreateAsyncStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebSvc.1.0 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ = "IApp2" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ProgID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.htm\OpenWithProgIds\MSEdgeHTM C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WaterfoxHTML-6F940AC27A98DD61\EditFlags = "2" C:\Users\Admin\AppData\Local\Temp\7zS49BB3E98\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1814CEEB-49E2-407F-AF99-FA755A7D2607}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.195.25\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\ = "ICoCreateAsyncStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO.1\CLSID\ = "{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\ServiceParameters = "/comsvc" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\AnimationReuploader.zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 729442.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Avica_setup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 183506.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Waterfox Setup G6.0.20.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\PROJECT TRANSFUR.rbxl:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\Avica Method1.yml.txt:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\RBXIDLE.Setup.3.0.0.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 33 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 34 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 35 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: 36 N/A C:\Windows\System32\Wbem\wmic.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 34 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 35 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Avica_setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe N/A
N/A N/A C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
N/A N/A C:\Program Files (x86)\Avica\drivers\devcon.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaService.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\AvicaCapturer.exe N/A
N/A N/A C:\Program Files (x86)\Avica\Avica.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Program Files\Waterfox\waterfox.exe N/A
N/A N/A C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A
N/A N/A C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 484 wrote to memory of 752 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 752 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3156 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3260 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 3260 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 484 wrote to memory of 1520 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe N/A

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.roblox.com/home

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffda3fc3cb8,0x7ffda3fc3cc8,0x7ffda3fc3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1964 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5576 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5784 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4696 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6272 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6240 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004F8 0x00000000000004F0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7156 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6448 /prefetch:8

C:\Users\Admin\Downloads\Avica_setup.exe

"C:\Users\Admin\Downloads\Avica_setup.exe"

C:\Windows\System32\Wbem\wmic.exe

wmic os get Caption

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe

"C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe" /d "C:\Program Files (x86)\Avica"

C:\Windows\SysWOW64\Wbem\wmic.exe

wmic os get Caption

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\Avica\firewall.bat""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ver

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall delete rule name="AvicaService"

C:\Windows\system32\netsh.exe

netsh advfirewall firewall delete rule name="AvicaService"

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=tcp enable=yes profile=public

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=tcp enable=yes profile=public

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=udp enable=yes profile=public

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=udp enable=yes profile=public

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=tcp enable=yes profile=domain

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=tcp enable=yes profile=domain

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=udp enable=yes profile=domain

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=udp enable=yes profile=domain

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=tcp enable=yes profile=private

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=tcp enable=yes profile=private

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=udp enable=yes profile=private

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaService" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaService.exe" protocol=udp enable=yes profile=private

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall delete rule name="Avica"

C:\Windows\system32\netsh.exe

netsh advfirewall firewall delete rule name="Avica"

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=tcp enable=yes profile=public

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=tcp enable=yes profile=public

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=udp enable=yes profile=public

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=udp enable=yes profile=public

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=tcp enable=yes profile=domain

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=tcp enable=yes profile=domain

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=udp enable=yes profile=domain

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=udp enable=yes profile=domain

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=tcp enable=yes profile=private

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=tcp enable=yes profile=private

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=udp enable=yes profile=private

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="Avica" dir=in action=allow program="C:\Program Files (x86)\Avica\Avica.exe" protocol=udp enable=yes profile=private

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall delete rule name="AvicaCapturer"

C:\Windows\system32\netsh.exe

netsh advfirewall firewall delete rule name="AvicaCapturer"

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=tcp enable=yes profile=public

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=tcp enable=yes profile=public

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=udp enable=yes profile=public

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=udp enable=yes profile=public

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=tcp enable=yes profile=domain

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=tcp enable=yes profile=domain

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=udp enable=yes profile=domain

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=udp enable=yes profile=domain

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=tcp enable=yes profile=private

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=tcp enable=yes profile=private

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=udp enable=yes profile=private

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaCapturer" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaCapturer.exe" protocol=udp enable=yes profile=private

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall delete rule name="AvicaWatch"

C:\Windows\system32\netsh.exe

netsh advfirewall firewall delete rule name="AvicaWatch"

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=tcp enable=yes profile=public

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=tcp enable=yes profile=public

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=udp enable=yes profile=public

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=udp enable=yes profile=public

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=tcp enable=yes profile=domain

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=tcp enable=yes profile=domain

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=udp enable=yes profile=domain

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=udp enable=yes profile=domain

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=tcp enable=yes profile=private

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=tcp enable=yes profile=private

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1

C:\Windows\system32\cmd.exe

cmd /c netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=udp enable=yes profile=private

C:\Windows\system32\netsh.exe

netsh advfirewall firewall add rule name="AvicaWatch" dir=in action=allow program="C:\Program Files (x86)\Avica\AvicaWatch.exe" protocol=udp enable=yes profile=private

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6632 /prefetch:1

C:\Windows\SYSTEM32\certutil.exe

certutil.exe -addstore Root "C:\Program Files (x86)\Avica\Go_Daddy.cer"

C:\Program Files (x86)\Avica\drivers\devcon.exe

"C:\Program Files (x86)\Avica\drivers\devcon.exe" remove nefarius\vigembus\gen1

C:\Program Files (x86)\Avica\drivers\devcon.exe

"C:\Program Files (x86)\Avica\drivers\devcon.exe" install "C:\Program Files (x86)\Avica\drivers\ViGEmBusSetup_x64\ViGEmBus.inf" nefarius\vigembus\gen1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3548 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{05c45f08-7dc6-7247-b64f-794afb1c29d5}\vigembus.inf" "9" "429a86e87" "0000000000000154" "WinSta0\Default" "0000000000000164" "208" "c:\program files (x86)\avica\drivers\vigembussetup_x64"

C:\Windows\system32\DrvInst.exe

DrvInst.exe "2" "211" "ROOT\SYSTEM\0001" "C:\Windows\INF\oem3.inf" "oem3.inf:c14ce88408607219:ViGEmBus_Device:1.17.333.0:nefarius\vigembus\gen1," "429a86e87" "0000000000000154" "78d9"

C:\Windows\SYSTEM32\pnputil.exe

pnputil /add-driver "C:\Program Files (x86)\Avica\drivers\AvicaVirtualDisplayDriver\AvicaVirtualDisplayDriver.inf" /install

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{8d429ad4-7248-6f41-aa9f-a968aa09ce40}\AvicaVirtualDisplayDriver.inf" "9" "4a9ef22b3" "000000000000016C" "WinSta0\Default" "000000000000017C" "208" "C:\Program Files (x86)\Avica\drivers\AvicaVirtualDisplayDriver"

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -o install

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe"

C:\Program Files (x86)\Avica\AvicaWatch.exe

./AvicaWatch.exe --port 51240

C:\Windows\system32\DrvInst.exe

DrvInst.exe "1" "0" "SWD\AvicaVirtualDisplayAdapter\AvicaVirtualDisplayAdapter" "" "" "4a1e769f7" "0000000000000000" "78d9"

C:\Program Files (x86)\Avica\AvicaCapturer.exe

AvicaCapturer.exe port1

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -s demand

C:\Program Files (x86)\Avica\AvicaCapturer.exe

AvicaCapturer.exe port2

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" --file 51240

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\SysWOW64\explorer.exe

"C:\Windows\System32\explorer.exe" /e,C:\Program Files (x86)\Avica\Avica.exe

C:\Windows\explorer.exe

C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding

C:\Program Files (x86)\Avica\Avica.exe

"C:\Program Files (x86)\Avica\Avica.exe"

C:\Windows\System32\Wbem\wmic.exe

wmic os get Caption

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Program Files (x86)\Avica\Avica.exe

Avica.exe --yuv444_check

C:\Windows\System32\icacls.exe

C:\Windows\System32\icacls.exe "C:\ProgramData\Avica/SDN/\id.sec" /inheritance:d /Q

C:\Windows\System32\icacls.exe

C:\Windows\System32\icacls.exe "C:\ProgramData\Avica/SDN/\id.sec" /remove *S-1-5-32-545 /Q

C:\Windows\System32\Wbem\wmic.exe

wmic os get Caption

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Avica\AvicaService.exe

"C:\Program Files (x86)\Avica\AvicaService.exe" -c wake

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8800 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9672 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaService --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=6148 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=8204 /prefetch:8

C:\Windows\system32\control.exe

"C:\Windows\system32\control.exe" SYSTEM

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Windows\explorer.exe

C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10992 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7864 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8472 /prefetch:8

C:\Users\Admin\Downloads\Waterfox Setup G6.0.20.exe

"C:\Users\Admin\Downloads\Waterfox Setup G6.0.20.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1

C:\Users\Admin\AppData\Local\Temp\7zS49BB3E98\setup.exe

.\setup.exe

C:\Windows\system32\regsvr32.exe

"C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\Waterfox\AccessibleMarshal.dll"

C:\Program Files\Waterfox\default-browser-agent.exe

"C:\Program Files\Waterfox\default-browser-agent.exe" register-task 6F940AC27A98DD61

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" --backgroundtask install

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" --backgroundtask install

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -first-startup

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -first-startup

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.0.1805624992\114646733" -parentBuildID 20241010090000 -prefsHandle 1916 -prefMapHandle 2204 -prefsLen 20238 -prefMapSize 268967 -appDir "C:\Program Files\Waterfox\browser" - {16a535b4-f910-46bd-a977-0f8abb0e06e7} 5712 gpu

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.1.500069573\1901971" -parentBuildID 20241010090000 -prefsHandle 2604 -prefMapHandle 2600 -prefsLen 20238 -prefMapSize 268967 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {ec78c077-dd27-48c1-95ec-64be7af136ec} 5712 socket

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.2.1552904602\1965624100" -childID 1 -isForBrowser -prefsHandle 3356 -prefMapHandle 3352 -prefsLen 20520 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {0d30f3e4-c9b5-4929-93a3-b86ba66ac285} 5712 tab

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.3.839507447\736220156" -childID 2 -isForBrowser -prefsHandle 4032 -prefMapHandle 4028 -prefsLen 21190 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {0a42609d-373a-47dc-8722-a4231c3407b4} 5712 tab

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.4.1124874496\1464921859" -childID 3 -isForBrowser -prefsHandle 4220 -prefMapHandle 4212 -prefsLen 21817 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {1ee45718-94c0-4083-aadc-6c15fc3d6b1e} 5712 tab

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.5.1740010019\1748991267" -parentBuildID 20241010090000 -prefsHandle 3932 -prefMapHandle 3784 -prefsLen 22624 -prefMapSize 268967 -appDir "C:\Program Files\Waterfox\browser" - {efa9c404-0464-42a8-9409-5dfefd3e699c} 5712 rdd

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.6.1609661174\1824842438" -childID 4 -isForBrowser -prefsHandle 3480 -prefMapHandle 3464 -prefsLen 22268 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {e5de0079-ef5d-4f8b-993f-c8ee206937ba} 5712 tab

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.7.542547655\707992119" -childID 5 -isForBrowser -prefsHandle 3528 -prefMapHandle 3396 -prefsLen 22268 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {6d22b70b-2a80-4b27-a737-dab20da4f0fa} 5712 tab

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.8.914330392\594844282" -childID 6 -isForBrowser -prefsHandle 4644 -prefMapHandle 4648 -prefsLen 22268 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {645a290e-9f63-401b-af81-15824c7a16d9} 5712 tab

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2520 /prefetch:1

C:\Windows\system32\compattelrunner.exe

C:\Windows\system32\compattelrunner.exe -m:aeinv.dll -f:UpdateSoftwareInventoryW

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7600 /prefetch:1

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.9.492460320\253744366" -childID 7 -isForBrowser -prefsHandle 4808 -prefMapHandle 1336 -prefsLen 27263 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {e6e9b1d5-4cea-427a-924d-48623c6dfebe} 5712 tab

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7808 /prefetch:8

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.10.706205667\253001588" -childID 8 -isForBrowser -prefsHandle 5748 -prefMapHandle 5764 -prefsLen 31855 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {e9de9392-a2e8-4a56-bb9e-110dd9c2eec9} 5712 tab

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.11.1955026618\812440741" -childID 9 -isForBrowser -prefsHandle 5876 -prefMapHandle 5812 -prefsLen 32293 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {dba41d0e-36ba-4880-9c89-457fe1d742b5} 5712 tab

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.12.1337257192\1771724967" -childID 10 -isForBrowser -prefsHandle 5908 -prefMapHandle 5904 -prefsLen 32293 -prefMapSize 268967 -jsInitHandle 936 -jsInitLen 240916 -parentBuildID 20241010090000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {7659137c-689e-4a6e-9473-7a559d83f9f0} 5712 tab

C:\Windows\system32\control.exe

"C:\Windows\system32\control.exe" SYSTEM

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Windows\explorer.exe

C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding

C:\Windows\System32\oobe\UserOOBEBroker.exe

C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe

C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding

C:\Program Files\Waterfox\waterfox.exe

"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel="5712.13.343405069\360162582" -parentBuildID 20241010090000 -sandboxingKind 1 -prefsHandle 1092 -prefMapHandle 5272 -prefsLen 36094 -prefMapSize 268967 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {f789019b-dfc0-4057-aca7-3fb72374a58b} 5712 utility

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9052 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --extension-process --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9356 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd8cd4cc40,0x7ffd8cd4cc4c,0x7ffd8cd4cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1716,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1712 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2024,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2080 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2160,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2200 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6840 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3060,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3096 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3336,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3348 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4464,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4316 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4600,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4620 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4592,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4744 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4588,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4936 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8612 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4700,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4664 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4676,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4916 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3188,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3200 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4760,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3992 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=3716,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4828 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=3376,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5244 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5436,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5444 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5396,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5560 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5276,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5216 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5132,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4408 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5044,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5124 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=872,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4992 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5712,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5008 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5488,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4996 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3460,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5708 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=1100,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1444 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=4968,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5444 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=5852,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5744 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6008,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5992 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6016,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6192 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004F8 0x00000000000004F0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6380,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6184 /prefetch:8

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=6140,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5592 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

"C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe" roblox-studio:1+launchtime:1730048879580+avatar+browsertrackerid:1730048583056002+robloxLocale:en-US+gameLocale:en-US+channel:zflag+browser:chrome+userId:7512663916+distributorType:Global+launchmode:edit+task:Default

C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU704B.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QzE1MUNEQUUtQkU5Ni00ODdCLUIxREEtRkJEMzJBODM0QTAyfSIgdXNlcmlkPSJ7Qjk5MjFFQ0MtMUUxQy00Njc4LTkwQTQtNjlENjFENTNGNDQ3fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntFMjE4RDAzNi02Q0M3LTRBRUQtOEJGRC1FNjk0QTdDMDE0NjV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjIyMjY3NTUyMzQyIiBpbnN0YWxsX3RpbWVfbXM9IjczNSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{C151CDAE-BE96-487B-B1DA-FBD32A834A02}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QzE1MUNEQUUtQkU5Ni00ODdCLUIxREEtRkJEMzJBODM0QTAyfSIgdXNlcmlkPSJ7Qjk5MjFFQ0MtMUUxQy00Njc4LTkwQTQtNjlENjFENTNGNDQ3fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsxMDQ4NzA1Qy0yNDIzLTRFODQtQjJGMi0zNzFGNkU2QkQ5QjR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMjMuMC42MzEyLjEyMyIgbmV4dHZlcnNpb249IjEyMy4wLjYzMTIuMTIzIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iNSIgc3lzdGVtX3VwdGltZV90aWNrcz0iMjIyNzE4MjYyODIiLz48L2FwcD48L3JlcXVlc3Q-

C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe

C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller_DE0E3\RobloxStudioInstaller.exe roblox-studio:1+launchtime:1730048879580+avatar+browsertrackerid:1730048583056002+robloxLocale:en-US+gameLocale:en-US+channel:zflag+browser:chrome+userId:7512663916+distributorType:Global+launchmode:edit+task:Default

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=5680,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6708 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=5428,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6124 /prefetch:1

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=7108,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7120 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=6548,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6772 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=6184,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6620 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\MicrosoftEdge_X64_130.0.2849.52.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\MicrosoftEdge_X64_130.0.2849.52.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\MicrosoftEdge_X64_130.0.2849.52.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=130.0.6723.59 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{3EFFC929-6E5A-45DC-8294-E95FBDA09903}\EDGEMITMP_B6C87.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=130.0.2849.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff7cfb4d730,0x7ff7cfb4d73c,0x7ff7cfb4d748

C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU8A6B.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /healthcheck

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Q0FDMEZGQTQtRUVERS00ODI0LUJGQzUtQjRENDUxMkRGOTQyfSIgdXNlcmlkPSJ7Qjk5MjFFQ0MtMUUxQy00Njc4LTkwQTQtNjlENjFENTNGNDQ3fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntCRkI5MkVBNi1BQUJFLTRENTYtOTQwOC1FNEIwRDg0MUQxQjN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE3MS4zOSIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMjQzMzk4NTA3MzUiIGluc3RhbGxfdGltZV9tcz0iNzMyIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{CAC0FFA4-EEDE-4824-BFC5-B4D4512DF942}" /silent

C:\Windows\system32\control.exe

"C:\Windows\system32\control.exe" SYSTEM

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Windows\explorer.exe

C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QzE1MUNEQUUtQkU5Ni00ODdCLUIxREEtRkJEMzJBODM0QTAyfSIgdXNlcmlkPSJ7Qjk5MjFFQ0MtMUUxQy00Njc4LTkwQTQtNjlENjFENTNGNDQ3fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins0QTcxMDREMy1EOTU4LTQyOEMtQjQ4NC0zNTBGMjZBRTNCNTh9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMzAuMC4yODQ5LjUyIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIyMjI3ODE2NjQwNyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjIyMjc4MjYwNTcwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMjQxNjYwMTkxMzciIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIyNDI1MzIzMzUyMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjE5Njc1NyIgc3lzdGVtX3VwdGltZV90aWNrcz0iMjU1MTgzMzgwNTgiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSIyNjMiIGRvd25sb2FkX3RpbWVfbXM9IjE4ODc2NiIgZG93bmxvYWRlZD0iMTc0OTI1OTA0IiB0b3RhbD0iMTc0OTI1OTA0IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSIxMjY1MDUiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe" -app -clientLaunchTimeEpochMs 0 -isInstallerLaunch 4472

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\MicrosoftEdge_X64_130.0.2849.52.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\MicrosoftEdge_X64_130.0.2849.52.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\MicrosoftEdge_X64_130.0.2849.52.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=130.0.6723.59 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=130.0.2849.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff78395d730,0x7ff78395d73c,0x7ff78395d748

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=5360,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3396 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-4ffdeb3e393e469e\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:gyD0oyR-VqU760SIqpE17u6cP0RrhIuG7mjPH9IyLd5e5oW_JxwtWoenKCZrlFjHklT70-6AloEk2HplW_4bXRmUyAXcEm64USiU_ilUShc_lPhu__3tFo4_ubtD-wg1krld89CNAcd-xxHDEgJfQkLioZWIoWzCAuu8pyMMtHMh9vTbnYLtZekst5zHehEvpXfPv23mNcmLcRNwzjtQZEcBdbqazJXPiuLdrgm6sFU+launchtime:1730049269290+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1730048583056002%26placeId%3D12931609417%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3Daccd025e-70ed-4f06-ae0d-624c6b44eec8%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1730048583056002+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Q0FDMEZGQTQtRUVERS00ODI0LUJGQzUtQjRENDUxMkRGOTQyfSIgdXNlcmlkPSJ7Qjk5MjFFQ0MtMUUxQy00Njc4LTkwQTQtNjlENjFENTNGNDQ3fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins0QjhFNzUzMy03OTg2LTQyQzctOUEyNS0wNzA4ODYxMzlGNjF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMzAuMC4yODQ5LjUyIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIyNDM2OTAzNzQzOSIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjI1NTE4NDE4ODgwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMjU1NDQ5OTc4NDciIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIyNTU3MzQ4NDUxOCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjE5Njc1NyIgc3lzdGVtX3VwdGltZV90aWNrcz0iMjYxMTIxNjY3OTIiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSI1NjEiIGRvd25sb2FkZWQ9IjE3NDkyNTkwNCIgdG90YWw9IjE3NDkyNTkwNCIgcGFja2FnZV9jYWNoZV9yZXN1bHQ9IjEiIGluc3RhbGxfdGltZV9tcz0iNTM4NjEiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1730048879580+avatar+browsertrackerid:1730048583056002+robloxLocale:en-US+gameLocale:en-US+channel:zflag+browser:chrome+userId:7512663916+distributorType:Global+launchmode:edit+task:Default -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch

C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxCrashHandler.exe

"C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --attachment=attachment_0.648.0.6480781_20241027T171439Z_Studio_9D5C0_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.648.0.6480781_20241027T171439Z_Studio_9D5C0_last.log --attachment=attachment_log_0.648.0.6480781_20241027T171439Z_Studio_9D5C0_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.648.0.6480781_20241027T171439Z_Studio_9D5C0_csg3.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://upload.crashes.rbxinfra.com/post?format=minidump --annotation=AppVersion=0.648.0.6480781 --annotation=Format=minidump --annotation=HardwareModel= --annotation=HasBootstrapper=true --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=58bb11c7e73f98e8de5937d727b602eec8fc3a40 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.648.0.6480781 --annotation=UniqueId=6033405086408028792 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.648.0.6480781 --annotation=host_arch=x86_64 --initial-client-data=0x5cc,0x5d0,0x5d4,0x5c8,0x5ec,0x7ff6e1992908,0x7ff6e1992920,0x7ff6e1992938

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=6804.3004.874699379538020620

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=130.0.6723.59 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=130.0.2849.52 --initial-client-data=0x164,0x168,0x16c,0x160,0x13c,0x7ffd8a6b4dc0,0x7ffd8a6b4dcc,0x7ffd8a6b4dd8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=gpu-process --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1908,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=1916 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=1872,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:11

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=2204,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:13

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=renderer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3724,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=renderer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4164,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=renderer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4144,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3B9B11A-BF1A-437A-ACA4-6C37AD995D39}\MicrosoftEdgeUpdateSetup_X86_1.3.195.25.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{E3B9B11A-BF1A-437A-ACA4-6C37AD995D39}\MicrosoftEdgeUpdateSetup_X86_1.3.195.25.exe" /update /sessionid "{5948F435-E20E-46E0-B86B-0FBF7A337952}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NTk0OEY0MzUtRTIwRS00NkUwLUI4NkItMEZCRjdBMzM3OTUyfSIgdXNlcmlkPSJ7Qjk5MjFFQ0MtMUUxQy00Njc4LTkwQTQtNjlENjFENTNGNDQ3fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InszNzNGNzE1RS05ODEwLTRDQTYtODM1NC00OTM0NTM0MUUzRDd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE5NS4yNSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjI1ODQxNTAyNTYxIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjI2MTEyMjUxMjI2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PC9hcHA-PGFwcCBhcHBpZD0iezU2RUIxOEY4LUIwMDgtNENCRC1CNkQyLThDOTdGRTdFOTA2Mn0iIHZlcnNpb249IjkwLjAuODE4LjY2IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzc0NTIwNzM5NzI3NDE4MCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjEiIGE9Ii0xIiByPSItMSIgYWQ9Ii0xIiByZD0iLTEiLz48L2FwcD48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iMTMwLjAuMjg0OS41MiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIHVwZGF0ZV9jb3VudD0iMSI-PHVwZGF0ZWNoZWNrLz48cGluZyByPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0ie0NGNjUyODJDLTFBMTAtNEIxRC1CQ0ZELTJBODU2QzQwQTREMX0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Temp\EU9FAA.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU9FAA.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{5948F435-E20E-46E0-B86B-0FBF7A337952}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.25\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTUuMjUiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NTk0OEY0MzUtRTIwRS00NkUwLUI4NkItMEZCRjdBMzM3OTUyfSIgdXNlcmlkPSJ7Qjk5MjFFQ0MtMUUxQy00Njc4LTkwQTQtNjlENjFENTNGNDQ3fSIgaW5zdGFsbHNvdXJjZT0ic2VsZnVwZGF0ZSIgcmVxdWVzdGlkPSJ7MkY0NjVERTgtQjM3OS00NEQyLUE1MjgtRjgxRjg5MUM0MjY4fSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE3MS4zOSIgbmV4dHZlcnNpb249IjEuMy4xOTUuMjUiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIiBpbnN0YWxsZGF0ZXRpbWU9IjE3MzAwNDg4OTIiPjxldmVudCBldmVudHR5cGU9IjMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjI2MzMwNjU0NTQ2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=4832,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:12

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=4852,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3908 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=5732,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7096 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=6844,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5792 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=7348,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5376 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=7308,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7424 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=7328,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7032 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=6776,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7444 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=7180,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7252 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=6708,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7396 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=7096,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7300 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=4380,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:14

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=5692,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7260 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=7588,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7076 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=7032,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7556 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5904,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6632 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=4780,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=5228,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:10

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7792 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10924 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=5188,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=5132,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=5392,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=5400,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:14

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=5472,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4332,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4860 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=6900,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4816 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=6136,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5688 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5728,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7444 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7636,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4408 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 648, 0, 6480781" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --field-trial-handle=5760,i,14424682226523510457,12346594871696128916,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=7752,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7188 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5636,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6616 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5956,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4912 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=6772,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6756 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6676,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7124 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7912 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=6784,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7092 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=5196,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4348 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7092,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7148 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7132,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5600 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=7740,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7640 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=5528,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7832 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=5868,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6928 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=6720,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7800 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=7264,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7248 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=7748,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7152 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=5176,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8068 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=8060,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8188 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=8320,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8348 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=8092,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8504 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=8632,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8656 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=8788,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8812 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=8912,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8928 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=9088,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9120 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=9140,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8096 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=8900,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9356 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=9516,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9520 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=9620,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9660 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=9792,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9796 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=9948,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9932 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=10076,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9960 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=10236,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10232 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=10352,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10364 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=10488,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10052 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=5628,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9424 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=9452,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7720 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=8856,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8832 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=8104,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8184 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=9628,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8112 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=9840,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9736 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=9052,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9680 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=10624,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10660 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=10808,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9972 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=10980,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10960 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=5668,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9864 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=10924,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9724 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=8160,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11328 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=11356,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11104 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=11492,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11628 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=11748,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11608 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=9460,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9448 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=11904,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12032 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=12048,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12192 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=12320,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12336 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=12452,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12440 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=12464,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12488 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=12588,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12712 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=12176,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12960 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=13060,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13104 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=13156,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13240 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=13316,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13336 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=13736,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12920 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=13812,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13604 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=13596,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=14000 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=13800,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13656 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=3908,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10064 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=14184,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=14276 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --field-trial-handle=12972,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13052 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=12212,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12964 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --field-trial-handle=12160,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12164 /prefetch:1

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Avica Method1.yml.txt

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --field-trial-handle=12944,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12208 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --field-trial-handle=13340,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12236 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --field-trial-handle=14300,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13272 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --field-trial-handle=11928,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8120 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --field-trial-handle=14284,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13296 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=13236,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11520 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --field-trial-handle=12500,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12512 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --field-trial-handle=12580,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10812 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=9828,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12544 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --field-trial-handle=11692,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --field-trial-handle=12556,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8864 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=8148,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7088 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=media.mojom.CdmServiceBroker --lang=en-US --service-sandbox-type=cdm --no-appcompat-clear --field-trial-handle=11260,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=10708 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=12460,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=9748 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --field-trial-handle=8396,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7808 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --field-trial-handle=13252,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13256 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --field-trial-handle=12316,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13264 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --field-trial-handle=12524,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13120 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --field-trial-handle=7584,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5644 /prefetch:1

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Avica Method1.yml.txt

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --field-trial-handle=11792,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11864 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --field-trial-handle=13844,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7408 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --field-trial-handle=12920,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7156 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7868 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\MicrosoftEdge_X64_130.0.2849.56.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\MicrosoftEdge_X64_130.0.2849.56.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\MicrosoftEdge_X64_130.0.2849.56.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=130.0.6723.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=130.0.2849.56 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff75a3dd730,0x7ff75a3dd73c,0x7ff75a3dd748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9944 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=130.0.6723.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{041A3969-AEC8-4316-AE39-A92439068170}\EDGEMITMP_2A658.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=130.0.2849.56 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff75a3dd730,0x7ff75a3dd73c,0x7ff75a3dd748

C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe" --msedge --channel=stable --remove-deprecated-packages --verbose-logging --system-level

C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe" --msedge --channel=stable --update-game-assist-package --verbose-logging --system-level

C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=130.0.6723.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=130.0.2849.56 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff6c315d730,0x7ff6c315d73c,0x7ff6c315d748

C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=130.0.6723.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\130.0.2849.56\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=130.0.2849.56 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff6c315d730,0x7ff6c315d73c,0x7ff6c315d748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10308 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --field-trial-handle=13164,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=11944 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --field-trial-handle=13152,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7444 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --field-trial-handle=13136,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7292 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --field-trial-handle=5232,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7732 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --field-trial-handle=12456,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6780 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --field-trial-handle=13072,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8464 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --field-trial-handle=11980,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7124 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --field-trial-handle=8468,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8424 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --field-trial-handle=14096,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7736 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --field-trial-handle=7124,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=8436 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6780,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=12912 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7800,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=13068 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1312,2792989902635647363,15942066730571712238,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10500 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTUuMjUiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NkQwRkM2NDgtMEVCOC00MkQ3LThBNEYtNEQzNTFFMUY5RTE0fSIgdXNlcmlkPSJ7Qjk5MjFFQ0MtMUUxQy00Njc4LTkwQTQtNjlENjFENTNGNDQ3fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntFQ0E3MDcyQi1GRjMwLTRFMDctOUU0Qi1GQ0VCMDRCMDlDNzZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTk1LjI1IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9IklzT25JbnRlcnZhbENvbW1hbmRzQWxsb3dlZD0lNUIlMjItdGFyZ2V0X2RldiUyMC1taW5fYnJvd3Nlcl92ZXJzaW9uX2NhbmFyeV9kZXYlMjAxMzEuMC4yODcxLjAlMjIlNUQiIGluc3RhbGxhZ2U9IjAiIGNvaG9ydD0icnJmQDAuMzQiPjx1cGRhdGVjaGVjay8-PHBpbmcgcmQ9IjY1MDkiIHBpbmdfZnJlc2huZXNzPSJ7NzdGMTIwREMtMDJCNi00RkRELTgwREUtOUUyMEM1MzUwRTFBfSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IjEzMC4wLjI4NDkuNTYiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaXNfcGlubmVkX3N5c3RlbT0idHJ1ZSIgbGFzdF9sYXVuY2hfY291bnQ9IjEiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzc0NTIwNzM5NzI3NDE4MCI-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-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjMwNjM2MzQ0NTk4IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy8zNDZhZDlkMS03NDZlLTQ1YzctOGZlMC1kNmM4N2E3M2EyNjE_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-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEzMC4wLjI4NDkuNTIiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgY29ob3J0PSJycmZAMC44MSIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF9jb3VudD0iMSIgbGFzdF9sYXVuY2hfdGltZT0iMTMzNzQ1MjI4ODgzMDc3MzcwIj48dXBkYXRlY2hlY2svPjxwaW5nIGFjdGl2ZT0iMSIgYT0iLTEiIGFkPSItMSIgcmQ9IjY1MDkiIHBpbmdfZnJlc2huZXNzPSJ7QzVEM0M5NkYtM0M1Ny00RUQwLThCRkEtNDdBRDlEOEQyNDc2fSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=13124,i,5190420895745561854,3271606315440519118,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6124 /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.roblox.com udp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
GB 2.18.190.70:443 static.rbxcdn.com tcp
GB 2.18.190.78:443 static.rbxcdn.com tcp
GB 2.18.190.78:443 static.rbxcdn.com tcp
GB 2.18.190.78:443 static.rbxcdn.com tcp
GB 2.18.190.78:443 static.rbxcdn.com tcp
GB 2.18.190.78:443 static.rbxcdn.com tcp
GB 2.18.190.78:443 static.rbxcdn.com tcp
N/A 224.0.0.251:5353 udp
GB 128.116.119.3:443 roblox.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
NL 18.239.94.64:443 images.rbxcdn.com tcp
NL 18.239.94.64:443 images.rbxcdn.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
GB 2.18.190.79:80 css.rbxcdn.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
GB 2.18.27.82:443 th.bing.com tcp
GB 2.18.27.82:443 th.bing.com tcp
GB 2.18.27.82:443 th.bing.com tcp
GB 2.18.27.82:443 th.bing.com tcp
GB 2.18.27.82:443 th.bing.com tcp
NL 13.227.219.91:443 www.avica.com tcp
NL 13.227.219.91:443 www.avica.com tcp
US 104.22.45.142:443 embed.tawk.to tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
US 13.107.246.64:443 www.clarity.ms tcp
IE 13.74.129.1:443 c.clarity.ms tcp
US 4.153.129.168:443 b.clarity.ms tcp
US 4.153.129.168:443 b.clarity.ms tcp
US 8.8.8.8:53 c.bing.com udp
US 13.107.21.237:443 c.bing.com tcp
US 104.22.44.142:443 va.tawk.to tcp
US 172.67.221.129:443 api.avica.com tcp
US 104.22.44.142:443 va.tawk.to tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 172.217.169.66:443 googleads.g.doubleclick.net tcp
GB 172.217.169.66:443 googleads.g.doubleclick.net tcp
GB 172.217.169.36:443 www.google.com tcp
GB 172.217.169.36:443 www.google.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
BE 74.125.133.157:443 stats.g.doubleclick.net tcp
GB 172.217.169.36:443 www.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 172.67.221.129:443 api.avica.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 172.217.169.66:443 googleads.g.doubleclick.net udp
BE 74.125.133.157:443 stats.g.doubleclick.net udp
US 104.22.45.142:443 vsa113.tawk.to tcp
US 4.153.129.168:443 b.clarity.ms tcp
US 172.67.169.19:443 api.avica.link tcp
GB 142.250.179.227:80 c.pki.goog tcp
US 172.67.169.19:443 api.avica.link tcp
NL 18.65.39.23:443 download.avica.link tcp
NL 18.65.39.58:443 download.avica.link tcp
US 67.216.213.169:443 www.landray.vip tcp
GB 163.181.154.238:443 download.raylink.live tcp
NL 18.65.39.23:443 download.avica.link tcp
NL 18.65.39.23:443 download.avica.link tcp
NL 18.65.39.23:443 download.avica.link tcp
NL 18.65.39.23:443 download.avica.link tcp
NL 18.65.39.23:443 download.avica.link tcp
NL 18.65.39.23:443 download.avica.link tcp
NL 18.65.39.23:443 download.avica.link tcp
US 172.67.169.19:443 api.avica.link tcp
US 172.67.169.19:443 api.avica.link tcp
US 4.153.129.168:443 b.clarity.ms tcp
US 8.8.8.8:53 ncs.roblox.com udp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
DE 128.116.44.4:443 auth.roblox.com tcp
US 8.8.8.8:53 js.rbxcdn.com udp
NL 18.239.83.105:443 css.rbxcdn.com tcp
NL 18.239.18.35:443 static.rbxcdn.com tcp
GB 2.18.190.78:443 js.rbxcdn.com tcp
NL 18.239.94.33:443 images.rbxcdn.com tcp
NL 18.239.83.105:443 css.rbxcdn.com tcp
GB 2.18.27.76:443 th.bing.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
NL 40.126.32.136:443 login.microsoftonline.com tcp
NL 18.239.94.25:443 ws.avica.link tcp
US 172.67.169.19:443 api.avica.link tcp
US 172.67.169.19:443 api.avica.link tcp
CN 39.108.111.158:3478 udp
CN 39.108.111.158:3478 udp
ES 65.20.101.87:32002 relay.avica.link udp
ES 65.20.101.87:32002 relay.avica.link udp
ES 65.20.101.87:32002 relay.avica.link udp
GB 13.41.111.204:32002 relay.avica.link udp
GB 13.41.111.204:32002 relay.avica.link udp
GB 13.41.111.204:32002 relay.avica.link udp
DE 3.76.94.171:32002 relay.avica.link udp
DE 3.76.94.171:32002 relay.avica.link udp
DE 3.76.94.171:32002 relay.avica.link udp
FR 13.39.53.136:32002 relay.avica.link udp
FR 13.39.53.136:32002 relay.avica.link udp
FR 13.39.53.136:32002 relay.avica.link udp
US 8.8.8.8:53 171.94.76.3.in-addr.arpa udp
US 8.8.8.8:53 136.53.39.13.in-addr.arpa udp
US 8.8.8.8:53 204.111.41.13.in-addr.arpa udp
US 172.67.169.19:443 api.avica.link tcp
US 172.67.169.19:443 api.avica.link tcp
DE 77.72.169.212:3478 stun.raylink.live udp
DE 77.72.169.213:3478 stun.raylink.live udp
DE 77.72.169.212:3478 stun.raylink.live udp
N/A 10.127.0.1:5351 udp
GB 2.18.190.140:443 aefd.nelreports.net tcp
US 4.153.129.168:443 b.clarity.ms tcp
N/A 172.26.32.1:57199 udp
N/A 172.26.32.1:57199 udp
N/A 172.26.32.1:57199 udp
N/A 192.168.56.1:57199 udp
N/A 192.168.56.1:57199 udp
N/A 192.168.56.1:57199 udp
N/A 172.22.64.1:57199 udp
N/A 172.22.64.1:57199 udp
N/A 172.22.64.1:57199 udp
N/A 172.19.160.1:57199 udp
N/A 172.19.160.1:57199 udp
N/A 172.19.160.1:57199 udp
N/A 10.5.0.2:57199 udp
N/A 10.5.0.2:57199 udp
N/A 10.5.0.2:57199 udp
N/A 192.168.0.102:57199 udp
N/A 192.168.0.102:57199 udp
N/A 192.168.0.102:57199 udp
N/A 172.26.32.1:43918 udp
N/A 172.26.32.1:43918 udp
N/A 172.26.32.1:43918 udp
N/A 192.168.56.1:43918 udp
N/A 192.168.56.1:43918 udp
N/A 192.168.56.1:43918 udp
US 8.8.8.8:53 1.64.22.172.in-addr.arpa udp
US 8.8.8.8:53 1.32.26.172.in-addr.arpa udp
US 8.8.8.8:53 2.0.5.10.in-addr.arpa udp
US 8.8.8.8:53 1.160.19.172.in-addr.arpa udp
US 8.8.8.8:53 102.0.168.192.in-addr.arpa udp
JP 194.180.179.71:61872 udp
JP 194.180.179.71:40022 udp
FR 51.210.116.145:443 static.robloxden.com tcp
FR 51.210.116.145:443 static.robloxden.com tcp
US 104.18.21.56:443 cdn.intergient.com tcp
US 104.18.24.242:443 cdn.intergi.com tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net tcp
US 104.18.25.111:443 fixedfold.com tcp
FR 51.210.116.145:443 static.robloxden.com tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net udp
BE 18.239.208.69:443 static.adsafeprotected.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
BE 18.239.208.69:443 static.adsafeprotected.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
BE 74.125.133.157:443 stats.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk udp
GB 142.250.178.14:443 fundingchoicesmessages.google.com tcp
US 104.18.10.207:443 config.playwire.com tcp
GB 184.26.57.221:443 px.moatads.com tcp
NL 18.239.36.22:443 impression-inferences-edge-prod.playwire.com tcp
US 104.22.74.216:443 btloader.com tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.18.25.111:443 fixedfold.com tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 230.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 203.70.239.18.in-addr.arpa udp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
DE 3.73.242.72:443 cd836371f1d.cdn.intergient.com tcp
NL 18.238.243.82:443 config.aps.amazon-adsystem.com tcp
US 3.82.234.17:443 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev tcp
NL 18.239.18.33:443 tags.crwdcntrl.net tcp
FR 23.51.100.75:443 secure.cdn.fastclick.net tcp
FR 23.51.100.75:443 secure.cdn.fastclick.net tcp
NL 18.239.50.46:443 cdn.playwire.com tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 104.22.52.173:443 cdn.hadronid.net tcp
NL 18.239.36.123:80 crt.rootg2.amazontrust.com tcp
NL 18.239.36.123:80 crt.rootg2.amazontrust.com tcp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 199.68.239.18.in-addr.arpa udp
US 8.8.8.8:53 33.18.239.18.in-addr.arpa udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 34.160.46.1:443 fid.agkn.com tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
NL 178.250.1.56:443 grid.bidswitch.net tcp
NL 178.250.1.4:443 grid-bidder.criteo.com tcp
IE 52.215.68.71:443 bcp.crwdcntrl.net tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 35.186.253.211:443 rtb.openx.net tcp
IE 34.252.59.230:443 rtb.gumgum.com tcp
IE 34.252.59.230:443 rtb.gumgum.com tcp
IE 34.252.59.230:443 rtb.gumgum.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
NL 18.239.50.10:443 hb.yellowblue.io tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 178.250.1.4:443 grid-bidder.criteo.com tcp
US 172.67.23.234:443 id.hadron.ad.gt tcp
NL 178.250.1.56:443 grid.bidswitch.net tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 18.239.50.10:443 hb.yellowblue.io tcp
US 35.186.253.211:443 rtb.openx.net tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 172.67.23.234:443 id.hadron.ad.gt tcp
IE 34.252.59.230:443 rtb.gumgum.com tcp
IE 34.252.59.230:443 rtb.gumgum.com tcp
IE 34.252.59.230:443 rtb.gumgum.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 56.1.250.178.in-addr.arpa udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
NL 63.215.202.146:443 proc.ad.cpe.dotomi.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 139.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 35.186.253.211:443 rtb.openx.net udp
US 104.22.4.69:443 pixels.ad.gt tcp
IE 34.249.219.89:443 pbs-cs.yellowblue.io tcp
GB 142.250.200.1:443 72594559ca048491c0a51300f89621fb.safeframe.googlesyndication.com tcp
IE 67.220.228.201:443 aax-eu.amazon-adsystem.com tcp
IE 67.220.228.201:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
DK 37.157.6.243:443 c1.adform.net tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
GB 142.250.187.194:443 cm.g.doubleclick.net tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
JP 124.146.153.169:443 tg.socdm.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
US 15.197.193.217:443 match.adsrvr.org tcp
JP 124.146.153.169:443 tg.socdm.com tcp
US 8.8.8.8:53 match.deepintent.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 bh.contextweb.com udp
IE 54.74.69.9:443 pr-bh.ybp.yahoo.com tcp
US 3.224.31.74:443 sync.srv.stackadapt.com tcp
US 34.228.205.35:443 sync.ipredictive.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 38.91.45.7:443 match.deepintent.com tcp
US 64.74.236.31:443 b1sync.zemanta.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
US 3.224.31.74:443 sync.srv.stackadapt.com tcp
IE 54.74.69.9:443 pr-bh.ybp.yahoo.com tcp
US 34.228.205.35:443 sync.ipredictive.com tcp
US 38.91.45.7:443 match.deepintent.com tcp
US 64.74.236.31:443 b1sync.zemanta.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
DE 37.252.171.149:443 secure.adnxs.com tcp
US 34.98.64.218:443 u.openx.net tcp
FR 149.202.238.101:443 ssbsync.smartadserver.com tcp
US 34.98.64.218:443 u.openx.net tcp
FR 149.202.238.101:443 ssbsync.smartadserver.com tcp
GB 142.250.187.194:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 4.153.129.168:443 b.clarity.ms tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
US 151.101.65.108:443 acdn.adnxs.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 34.98.64.218:443 u.openx.net tcp
US 34.98.64.218:443 u.openx.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 13.248.245.213:443 eb2.3lift.com tcp
US 34.160.46.1:443 fid.agkn.com tcp
NL 185.89.208.11:443 prebid.adnxs.com tcp
NL 185.89.208.11:443 prebid.adnxs.com tcp
NL 185.89.208.11:443 prebid.adnxs.com tcp
NL 185.89.208.11:443 prebid.adnxs.com tcp
GB 142.250.187.198:443 s0.2mdn.net tcp
GB 172.217.169.33:443 cdn.ampproject.org tcp
GB 172.217.169.33:443 cdn.ampproject.org tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
US 104.22.4.69:443 p.ad.gt tcp
GB 172.217.169.33:443 cdn.ampproject.org tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
US 104.22.4.69:443 p.ad.gt tcp
US 54.187.249.171:443 ids.ad.gt tcp
US 54.187.249.171:443 ids.ad.gt tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
US 34.98.64.218:443 u.openx.net udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com udp
US 104.22.4.69:443 p.ad.gt tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
GB 172.217.169.33:443 cdn.ampproject.org udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
IE 54.155.87.110:443 ad.360yield.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
IE 34.247.205.196:443 usersync.gumgum.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
IE 34.247.205.196:443 usersync.gumgum.com tcp
FR 51.178.195.216:443 sync.smartadserver.com tcp
FR 51.178.195.216:443 sync.smartadserver.com tcp
IE 34.240.136.106:443 pm.w55c.net tcp
US 47.253.61.56:443 gw-iad-bid.ymmobi.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 185.235.87.18:443 gem.gbc.criteo.com tcp
NL 185.235.87.50:443 ag.gbc.criteo.com tcp
FR 178.250.7.13:443 dnacdn.net tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 174.129.5.190:443 ads.celtra.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 174.129.5.190:443 ads.celtra.com tcp
DE 18.195.234.25:443 match.sharethrough.com tcp
US 104.22.5.69:443 p.ad.gt tcp
NL 18.239.36.48:443 cache-ssl.celtra.com tcp
DE 128.116.44.4:443 assetgame.roblox.com tcp
NL 18.239.36.48:443 cache-ssl.celtra.com tcp
GB 216.58.213.10:443 ajax.googleapis.com tcp
GB 2.18.27.76:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
US 52.55.58.100:443 track.celtra.com tcp
US 52.55.58.100:443 track.celtra.com tcp
US 52.55.58.100:443 track.celtra.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 178.250.1.56:443 grid.bidswitch.net tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
US 158.106.129.32:443 passwordsgenerator.net tcp
US 158.106.129.32:443 passwordsgenerator.net tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
NL 178.250.1.4:443 grid-bidder.criteo.com tcp
US 35.186.253.211:443 rtb.openx.net udp
DE 18.153.93.230:443 btlr.sharethrough.com tcp
GB 172.217.169.66:443 googleads.g.doubleclick.net udp
FR 51.210.116.145:443 static.robloxden.com tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
NL 178.250.1.25:443 csm.nl3.eu.criteo.net tcp
US 15.204.220.107:443 gifmaker.me tcp
GB 172.217.169.1:443 ep2.adtrafficquality.google tcp
GB 172.217.169.1:443 ep2.adtrafficquality.google udp
JP 194.180.179.71:3601 udp
N/A 127.0.0.1:51247 tcp
N/A 127.0.0.1:51240 tcp
GB 2.18.190.146:443 apis.rbxcdn.com tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
NL 18.239.50.13:443 arkoselabs.roblox.com tcp
US 4.153.129.168:443 b.clarity.ms tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
GB 2.18.27.76:443 www.bing.com tcp
GB 23.62.195.195:443 cxcs.microsoft.net tcp
N/A 127.0.0.1:51286 tcp
US 172.67.43.192:80 cdn1.waterfox.net tcp
US 172.67.43.192:80 cdn1.waterfox.net tcp
US 172.67.43.192:443 cdn1.waterfox.net tcp
US 104.22.39.229:443 cdn1.waterfox.net tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51264 tcp
N/A 127.0.0.1:51261 tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
US 204.79.197.237:443 rewards.bing.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
US 140.82.112.21:443 collector.github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 140.82.112.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
N/A 127.0.0.1:51240 tcp
US 172.64.42.2:443 dooh.cloudflare-dns.com tcp
US 35.190.72.216:443 location.services.mozilla.com tcp
GB 2.18.27.82:443 www.bing.com tcp
US 35.190.72.216:443 location.services.mozilla.com udp
US 204.79.197.200:443 bing.com tcp
N/A 127.0.0.1:51240 tcp
US 151.101.193.91:443 images.sftcdn.net tcp
US 151.101.193.91:443 images.sftcdn.net tcp
US 151.101.65.91:443 images.sftcdn.net tcp
US 151.101.65.91:443 images.sftcdn.net tcp
US 151.101.65.91:443 images.sftcdn.net tcp
US 151.101.65.91:443 images.sftcdn.net tcp
US 151.101.65.91:443 images.sftcdn.net tcp
US 151.101.65.91:443 images.sftcdn.net tcp
US 151.101.65.91:443 images.sftcdn.net tcp
US 151.101.65.91:443 images.sftcdn.net tcp
US 8.8.8.8:53 bat.bing.com udp
GB 142.250.187.226:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 rv-assets.softonic.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 www.google.com udp
BE 18.239.208.39:443 sdk.privacy-center.org tcp
US 13.107.246.64:443 www.clarity.ms tcp
US 151.101.193.91:443 rv-assets.softonic.com tcp
US 151.101.193.91:443 rv-assets.softonic.com tcp
GB 172.217.169.36:443 www.google.com udp
US 151.101.65.91:443 rv-assets.softonic.com udp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net udp
US 150.171.28.10:443 bat.bing.com tcp
US 150.171.28.10:443 bat.bing.com tcp
N/A 127.0.0.1:51240 tcp
US 151.101.65.91:443 rv-assets.softonic.com udp
GB 216.58.201.110:443 syndicatedsearch.goog tcp
N/A 127.0.0.1:51240 tcp
CN 39.108.111.158:3478 udp
US 151.101.193.91:443 rv-assets.softonic.com udp
US 4.153.129.168:443 b.clarity.ms tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
GB 142.250.187.251:443 storage.googleapis.com tcp
US 151.101.65.91:443 rv-assets.softonic.com udp
N/A 127.0.0.1:51240 tcp
US 130.211.23.194:443 api.btloader.com udp
US 104.26.6.141:443 cdn.btmessage.com tcp
US 104.26.6.141:443 cdn.btmessage.com tcp
GB 142.250.200.3:443 www.google.co.uk udp
N/A 10.127.0.1:5351 udp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 151.101.65.91:443 rv-assets.softonic.com tcp
US 172.67.43.192:443 cdn1.waterfox.net tcp
US 172.67.43.192:443 cdn1.waterfox.net tcp
US 104.22.38.229:443 cdn1.waterfox.net tcp
US 8.8.8.8:53 229.38.22.104.in-addr.arpa udp
US 172.67.43.192:443 cdn1.waterfox.net tcp
US 104.22.38.229:443 cdn1.waterfox.net tcp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 34.104.35.123:443 tcp
US 34.104.35.123:443 tcp
GB 88.221.134.209:80 ciscobinary.openh264.org tcp
US 34.104.35.123:443 udp
US 8.8.8.8:53 209.134.221.88.in-addr.arpa udp
US 104.22.38.229:443 cdn1.waterfox.net udp
US 104.22.38.229:443 cdn1.waterfox.net tcp
US 34.107.221.82:80 prod.detectportal.prod.cloudops.mozgcp.net tcp
US 8.8.8.8:53 ipv4only.arpa udp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 34.107.221.82:80 detectportal.firefox.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 34.120.158.37:443 tcp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 34.120.158.37:443 tcp
US 8.8.8.8:53 37.158.120.34.in-addr.arpa udp
US 34.120.158.37:443 tracking-protection.cdn.mozilla.net tcp
GB 104.86.110.129:443 tcp
US 8.8.8.8:53 tracking-protection.prod.mozaws.net udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
NL 128.116.21.3:443 tcp
GB 2.18.27.76:443 www.bing.com tcp
GB 23.62.195.195:443 cxcs.microsoft.net tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
GB 128.116.119.4:443 tcp
NL 128.116.21.4:443 tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
GB 128.116.119.4:443 tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
NL 18.239.83.69:443 d1kpbbfl4rco16.cloudfront.net tcp
US 151.101.67.52:443 dooh.waterfox.net tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
GB 88.221.134.25:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
GB 18.245.253.103:443 tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
GB 216.137.44.44:443 tcp
GB 216.137.44.124:443 tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
US 8.8.8.8:53 44.44.137.216.in-addr.arpa udp
US 8.8.8.8:53 124.44.137.216.in-addr.arpa udp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
US 34.120.158.37:443 tracking-protection.prod.mozaws.net tcp
GB 128.116.119.4:443 tcp
GB 128.116.119.4:443 tcp
GB 128.116.119.4:443 tcp
GB 128.116.119.4:443 tcp
GB 104.86.110.64:443 tcp
GB 104.86.110.64:443 tcp
GB 128.116.119.4:443 tcp
GB 128.116.119.4:443 tcp
GB 128.116.119.4:443 tcp
GB 23.52.177.198:443 cxcs.microsoft.net tcp
GB 2.18.27.76:443 r.bing.com tcp
US 140.82.114.21:443 collector.github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 128.116.119.4:443 tcp
GB 128.116.119.4:443 tcp
GB 128.116.119.4:443 tcp
GB 128.116.119.4:443 tcp
GB 18.244.140.29:443 tcp
US 8.8.8.8:53 static.rbxcdn.com udp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
GB 2.18.190.78:443 static.rbxcdn.com tcp
GB 2.18.190.70:443 static.rbxcdn.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
NL 18.239.94.64:443 images.rbxcdn.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
JP 194.180.179.71:59656 udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
GB 2.18.27.76:443 www.bing.com tcp
GB 2.18.27.76:443 www.bing.com tcp
US 104.26.1.132:80 nopecha.com tcp
US 104.26.1.132:80 nopecha.com tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 104.18.94.41:443 challenges.cloudflare.com tcp
US 104.26.1.132:80 nopecha.com tcp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 104.18.94.41:443 challenges.cloudflare.com tcp
US 104.26.1.132:80 nopecha.com tcp
GB 2.18.27.76:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.76:443 www.bing.com tcp
GB 172.217.169.78:443 chromewebstore.google.com tcp
GB 172.217.169.78:443 chromewebstore.google.com tcp
GB 172.217.169.78:443 chromewebstore.google.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com udp
GB 142.250.200.46:443 img.youtube.com tcp
GB 216.58.212.202:443 ogads-pa.googleapis.com tcp
GB 216.58.212.202:443 ogads-pa.googleapis.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.195:443 ssl.gstatic.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 142.250.200.46:443 img.youtube.com udp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.78:443 chromewebstore.google.com udp
GB 172.217.169.36:443 www.google.com tcp
GB 142.250.187.195:443 ssl.gstatic.com udp
US 52.167.30.171:443 fpt.microsoft.com tcp
GB 2.18.27.76:443 www.bing.com tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 13.107.6.203:443 microsoftedge.microsoft.com tcp
US 13.107.6.203:443 microsoftedge.microsoft.com tcp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 ajax.aspnetcdn.com udp
US 8.8.8.8:53 extensions-loader.azurewebsites.net udp
GB 184.25.193.234:443 www.microsoft.com tcp
US 152.199.19.160:443 ajax.aspnetcdn.com tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
GB 184.25.193.234:443 www.microsoft.com tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
US 20.189.173.13:443 browser.pipe.aria.microsoft.com tcp
US 152.199.21.175:443 lgincdnvzeuno.azureedge.net tcp
US 13.107.246.64:443 acctcdnmsftuswe2.azureedge.net tcp
US 152.199.21.175:443 lgincdnvzeuno.azureedge.net tcp
JP 13.78.111.199:443 browser.events.data.microsoft.com tcp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.36:443 www.google.com tcp
GB 128.116.119.4:443 roblox.com tcp
GB 128.116.119.4:443 roblox.com tcp
DE 128.116.44.4:443 followings.roblox.com tcp
GB 216.58.212.202:443 jnn-pa.googleapis.com udp
GB 216.58.212.202:443 jnn-pa.googleapis.com tcp
GB 142.250.200.46:443 apis.google.com udp
GB 2.18.190.79:443 c0ak.rbxcdn.com tcp
GB 2.18.190.79:443 c0ak.rbxcdn.com tcp
GB 2.18.190.79:443 c0ak.rbxcdn.com tcp
GB 2.18.190.79:443 c0ak.rbxcdn.com tcp
GB 2.18.190.79:443 c0ak.rbxcdn.com tcp
GB 2.18.190.79:443 c0ak.rbxcdn.com tcp
NL 18.65.39.50:443 js.rbxcdn.com tcp
NL 18.65.39.50:443 js.rbxcdn.com tcp
NL 18.65.39.50:443 js.rbxcdn.com tcp
NL 18.65.39.50:443 js.rbxcdn.com tcp
NL 18.65.39.50:443 js.rbxcdn.com tcp
NL 18.65.39.50:443 js.rbxcdn.com tcp
NL 18.239.18.116:443 static.rbxcdn.com tcp
DE 128.116.44.4:443 followings.roblox.com tcp
GB 142.250.200.17:443 csp.withgoogle.com tcp
GB 142.250.200.17:443 csp.withgoogle.com udp
GB 2.18.190.79:443 c0ak.rbxcdn.com tcp
GB 2.18.190.73:443 images.rbxcdn.com tcp
GB 2.18.190.73:443 images.rbxcdn.com tcp
GB 2.18.190.73:443 images.rbxcdn.com tcp
GB 2.18.190.73:443 images.rbxcdn.com tcp
GB 2.18.190.73:443 images.rbxcdn.com tcp
GB 2.18.190.73:443 images.rbxcdn.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 142.250.178.14:443 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com tcp
NL 18.239.50.32:443 arkoselabs.roblox.com tcp
NL 18.239.50.32:443 arkoselabs.roblox.com udp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 172.217.169.36:443 www.google.com udp
GB 216.58.212.202:443 jnn-pa.googleapis.com udp
GB 142.250.187.206:443 consent.google.com udp
GB 142.250.187.206:443 consent.google.com tcp
N/A 127.0.0.1:53738 tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.212.202:443 jnn-pa.googleapis.com tcp
GB 216.58.212.202:443 jnn-pa.googleapis.com udp
GB 142.250.187.206:443 consent.google.com tcp
N/A 127.0.0.1:53915 tcp
GB 172.217.169.78:443 chromewebstore.google.com tcp
GB 172.217.169.78:443 chromewebstore.google.com tcp
GB 172.217.169.78:443 chromewebstore.google.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com udp
CN 39.108.111.158:3478 udp
GB 142.250.200.46:443 apis.google.com tcp
N/A 127.0.0.1:53994 tcp
GB 142.250.187.206:443 consent.google.com udp
GB 142.250.187.206:443 consent.google.com udp
GB 142.250.200.46:443 apis.google.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 142.250.187.195:443 ssl.gstatic.com tcp
GB 172.217.169.78:443 chromewebstore.google.com udp
GB 142.250.179.225:443 lh3.googleusercontent.com udp
N/A 10.127.0.1:5351 udp
GB 142.250.187.238:443 google.com tcp
NL 18.239.50.32:443 arkoselabs.roblox.com udp
GB 142.250.187.238:443 google.com udp
JP 194.180.179.71:52754 udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 friends.roblox.com tcp
DE 128.116.44.4:443 friends.roblox.com tcp
DE 128.116.44.4:443 friends.roblox.com tcp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
NL 18.239.18.116:443 static.rbxcdn.com tcp
NL 18.239.94.33:443 images.rbxcdn.com tcp
NL 18.239.83.2:443 css.rbxcdn.com tcp
NL 18.239.83.2:443 css.rbxcdn.com tcp
US 8.8.8.8:53 trades.roblox.com udp
US 8.8.8.8:53 privatemessages.roblox.com udp
US 8.8.8.8:53 usermoderation.roblox.com udp
US 8.8.8.8:53 notifications.roblox.com udp
US 8.8.8.8:53 contacts.roblox.com udp
US 8.8.8.8:53 lax2-128-116-116-3.roblox.com udp
US 8.8.8.8:53 roblox-poc.global.ssl.fastly.net udp
US 8.8.8.8:53 bom1-128-116-104-4.roblox.com udp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
US 128.116.63.3:443 lax4-128-116-63-3.roblox.com tcp
US 128.116.127.3:443 mia2-128-116-127-3.roblox.com tcp
GB 128.116.119.3:443 lhr2-128-116-119-3.roblox.com tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
US 128.116.102.3:443 iad4-128-116-102-3.roblox.com tcp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
US 151.101.129.194:443 roblox-poc.global.ssl.fastly.net tcp
NL 108.156.60.110:443 c0aws.rbxcdn.com tcp
GB 2.18.190.77:443 tr.rbxcdn.com tcp
GB 216.58.212.202:443 content-autofill.googleapis.com udp
NL 18.239.94.12:443 create.roblox.com tcp
NL 18.239.94.12:443 create.roblox.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
NL 18.239.18.114:443 clientsettingscdn.roblox.com tcp
NL 18.239.50.69:443 webblox.roblox.com tcp
NL 18.239.50.69:443 webblox.roblox.com tcp
NL 18.239.50.69:443 webblox.roblox.com tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
US 216.239.32.36:443 region1.analytics.google.com udp
DE 128.116.44.3:443 fra4-128-116-44-3.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 128.116.45.3:443 mia4-128-116-45-3.roblox.com tcp
US 128.116.101.3:443 ord2-128-116-101-3.roblox.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
GB 142.250.200.14:443 www.youtube-nocookie.com tcp
GB 142.250.200.14:443 www.youtube-nocookie.com udp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
GB 142.250.179.238:443 www.youtube-nocookie.com tcp
GB 142.250.179.238:443 www.youtube-nocookie.com tcp
GB 142.250.179.238:443 www.youtube-nocookie.com udp
GB 172.217.169.54:443 i.ytimg.com tcp
GB 142.250.187.202:443 ogads-pa.googleapis.com tcp
GB 172.217.169.36:443 www.google.com tcp
GB 142.250.187.202:443 ogads-pa.googleapis.com udp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.54:443 i.ytimg.com udp
GB 142.250.180.1:443 yt3.ggpht.com tcp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com udp
DE 3.120.46.73:443 b.ns1p.net tcp
DE 3.120.46.73:443 b.ns1p.net tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
US 128.116.45.3:443 mia4-128-116-45-3.roblox.com tcp
NL 18.239.94.116:443 setup.rbxcdn.com tcp
GB 74.125.175.38:443 rr1---sn-aigzrnsr.googlevideo.com tcp
GB 142.250.180.1:443 yt3.ggpht.com udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
NL 18.239.18.53:443 clientsettingscdn.roblox.com tcp
NL 18.239.94.108:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:58666 tcp
N/A 127.0.0.1:58670 tcp
N/A 127.0.0.1:58682 tcp
N/A 127.0.0.1:58706 tcp
NL 18.239.94.108:443 setup.rbxcdn.com tcp
NL 18.239.94.108:443 setup.rbxcdn.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
GB 74.125.168.106:443 rr5---sn-aigl6nz7.googlevideo.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com tcp
N/A 127.0.0.1:58763 tcp
N/A 127.0.0.1:58769 tcp
NL 4.175.87.113:443 msedge.api.cdp.microsoft.com tcp
US 152.199.19.161:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
GB 172.217.16.238:443 lens.google.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
N/A 127.0.0.1:58983 tcp
NL 18.239.18.53:443 clientsettingscdn.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
N/A 127.0.0.1:58986 tcp
NL 18.239.94.108:443 setup.rbxcdn.com tcp
NL 18.239.94.108:443 setup.rbxcdn.com tcp
NL 18.239.94.108:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:58990 tcp
GB 172.217.169.35:443 beacons.gcp.gvt2.com tcp
GB 142.250.187.238:443 www.youtube-nocookie.com tcp
CN 39.108.111.158:3478 udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
N/A 10.127.0.1:5351 udp
GB 142.250.179.238:443 www.youtube-nocookie.com udp
GB 172.217.16.238:443 lens.google.com udp
GB 172.217.169.78:443 www.youtube-nocookie.com udp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.201.106:443 ogads-pa.googleapis.com udp
GB 142.250.187.206:443 play.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 142.250.200.14:443 www.youtube-nocookie.com tcp
GB 142.250.179.238:443 www.youtube-nocookie.com udp
GB 142.250.178.14:443 www.youtube-nocookie.com tcp
GB 172.217.169.22:443 i.ytimg.com tcp
GB 142.250.178.14:443 www.youtube-nocookie.com udp
US 130.39.4.29:443 networking.grok.lsu.edu tcp
US 130.39.4.29:443 networking.grok.lsu.edu tcp
US 130.39.6.220:443 lsu.edu tcp
US 130.39.6.220:443 lsu.edu tcp
US 8.8.8.8:53 220.6.39.130.in-addr.arpa tcp
US 8.8.8.8:53 infobar.uss.lsu.edu udp
US 130.39.4.30:443 infobar.uss.lsu.edu tcp
US 8.8.8.8:53 piwik.uss.lsu.edu udp
US 130.39.4.129:443 piwik.uss.lsu.edu tcp
US 8.8.8.8:53 30.4.39.130.in-addr.arpa udp
US 8.8.8.8:53 platform.twitter.com udp
US 8.8.8.8:53 www.facebook.com udp
GB 146.75.72.157:443 platform.twitter.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
US 130.39.4.30:443 infobar.uss.lsu.edu tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 104.244.42.72:443 syndication.twitter.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 142.250.179.238:443 www.youtube-nocookie.com udp
NL 4.175.87.113:443 msedge.api.cdp.microsoft.com tcp
US 34.86.82.41:443 e2c26.gcp.gvt2.com tcp
GB 23.52.177.198:443 cxcs.microsoft.net tcp
GB 2.18.27.76:443 www.bing.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
GB 172.217.169.35:443 beacons.gvt2.com tcp
QA 34.1.37.11:443 e2c75.gcp.gvt2.com tcp
GB 172.217.169.35:443 beacons.gvt2.com tcp
GB 142.250.179.238:443 www.youtube-nocookie.com udp
GB 142.250.179.238:443 www.youtube-nocookie.com udp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
N/A 127.0.0.1:60680 tcp
N/A 127.0.0.1:60683 tcp
NL 4.175.87.113:443 msedge.api.cdp.microsoft.com tcp
CN 39.108.111.158:3478 udp
N/A 10.127.0.1:5351 udp
GB 172.217.16.238:443 www.youtube-nocookie.com udp
GB 172.217.169.35:443 beacons.gvt2.com udp
GB 142.250.187.206:443 play.google.com udp
US 199.232.210.172:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
N/A 127.0.0.1:61231 tcp
NL 18.239.18.53:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:61239 tcp
N/A 127.0.0.1:61261 tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
DE 128.116.44.4:443 avatar.roblox.com tcp
N/A 127.0.0.1:61265 tcp
N/A 127.0.0.1:61278 tcp
N/A 127.0.0.1:61281 tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
DE 128.116.44.4:443 apis.roblox.com tcp
DE 128.116.44.4:443 apis.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
NL 18.239.18.72:443 static.rbxcdn.com tcp
NL 18.239.94.43:443 images.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.239.83.105:443 css.rbxcdn.com tcp
NL 18.239.83.105:443 css.rbxcdn.com tcp
NL 18.239.83.105:443 css.rbxcdn.com tcp
NL 18.239.83.105:443 css.rbxcdn.com tcp
NL 18.239.83.105:443 css.rbxcdn.com tcp
NL 18.239.83.105:443 css.rbxcdn.com tcp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 72.18.239.18.in-addr.arpa udp
NL 18.239.83.105:443 css.rbxcdn.com tcp
GB 128.116.119.3:443 roblox.com tcp
DE 128.116.44.4:443 friends.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
GB 2.18.190.146:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 128.116.63.3:443 lax4-128-116-63-3.roblox.com tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
IN 128.116.104.4:443 bom1-128-116-104-4.roblox.com tcp
NL 18.239.18.72:443 static.rbxcdn.com tcp
DE 128.116.44.3:443 fra4-128-116-44-3.roblox.com tcp
US 128.116.101.3:443 ord2-128-116-101-3.roblox.com tcp
US 128.116.45.3:443 mia4-128-116-45-3.roblox.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
NL 108.156.60.108:443 c0aws.rbxcdn.com tcp
NL 18.239.83.105:443 css.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
GB 172.217.169.42:443 content-autofill.googleapis.com udp
NL 18.239.94.14:443 images.rbxcdn.com tcp
GB 172.217.169.42:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 privatemessages.roblox.com udp
US 8.8.8.8:53 trades.roblox.com udp
US 8.8.8.8:53 notifications.roblox.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
DE 3.120.46.73:443 b.ns1p.net tcp
GB 2.18.190.73:443 c0ak.rbxcdn.com tcp
GB 128.116.119.3:443 roblox.com tcp
US 199.232.210.172:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 8.8.4.4:443 dns.google udp
DE 128.116.44.4:443 www.roblox.com tcp
NL 18.239.94.14:443 images.rbxcdn.com tcp
GB 2.18.190.80:443 c0ak.rbxcdn.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
NL 18.239.94.14:443 images.rbxcdn.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
NL 18.239.94.14:443 images.rbxcdn.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
NL 18.239.50.32:443 arkoselabs.roblox.com tcp
NL 18.239.50.32:443 arkoselabs.roblox.com udp
DE 128.116.44.4:443 www.roblox.com tcp
DE 128.116.44.4:443 www.roblox.com tcp
US 103.224.212.214:443 goofile.io tcp
US 103.224.212.214:443 goofile.io tcp
US 199.59.243.227:443 ww25.goofile.io tcp
US 199.59.243.227:443 ww25.goofile.io tcp
US 8.8.8.8:53 227.243.59.199.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 199.59.243.227:443 ww25.goofile.io tcp
GB 172.217.169.36:443 www.google.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 199.59.243.227:443 ww25.goofile.io tcp
GB 172.217.169.36:443 www.google.com tcp
GB 216.58.201.110:443 syndicatedsearch.goog tcp
GB 216.58.201.110:443 syndicatedsearch.goog tcp
GB 142.250.187.194:443 partner.googleadservices.com tcp
GB 216.58.201.110:443 syndicatedsearch.goog udp
US 199.59.243.227:443 ww25.goofile.io tcp
GB 142.250.200.1:443 afs.googleusercontent.com tcp
GB 142.250.200.1:443 afs.googleusercontent.com tcp
GB 216.58.201.110:443 syndicatedsearch.goog tcp
GB 216.58.201.110:443 syndicatedsearch.goog udp
N/A 127.0.0.1:62422 tcp
DE 128.116.44.4:443 premiumfeatures.roblox.com tcp
N/A 127.0.0.1:62425 tcp
DE 128.116.44.4:443 premiumfeatures.roblox.com tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 13.107.21.239:443 tcp
GB 87.248.205.0:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
FR 45.112.123.126:443 api.gofile.io tcp
FR 45.112.123.126:443 api.gofile.io tcp
FR 45.112.123.126:443 api.gofile.io tcp
FR 51.75.242.210:443 s.gofile.io tcp
GB 142.250.187.234:443 content-autofill.googleapis.com tcp
FR 51.75.242.210:443 s.gofile.io tcp
DE 148.251.152.47:443 ad.a-ads.com tcp
DE 136.243.4.18:443 static.a-ads.com tcp
FR 45.112.123.126:443 api.gofile.io tcp
FR 45.112.123.126:443 api.gofile.io tcp
FR 51.75.242.210:443 s.gofile.io tcp
DE 128.116.44.4:443 premiumfeatures.roblox.com tcp
US 206.168.190.239:443 store9.gofile.io tcp
US 206.168.190.239:443 store9.gofile.io tcp
US 13.107.21.239:443 tcp
US 8.8.4.4:443 dns.google udp
DE 128.116.44.4:443 premiumfeatures.roblox.com tcp
US 206.168.190.239:443 store9.gofile.io tcp
NL 18.239.50.85:443 arkoselabs.roblox.com udp
DE 128.116.44.4:443 premiumfeatures.roblox.com tcp
GB 172.217.16.238:443 www.youtube-nocookie.com udp
GB 172.217.16.238:443 www.youtube-nocookie.com tcp
US 13.107.21.239:443 tcp
NL 18.239.18.72:443 static.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
GB 2.18.190.79:443 css.rbxcdn.com tcp
NL 18.239.69.81:443 t7.rbxcdn.com tcp
GB 142.250.187.234:443 content-autofill.googleapis.com udp
GB 142.250.187.234:443 content-autofill.googleapis.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 128.116.101.3:443 ord2-128-116-101-3.roblox.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
US 128.116.95.3:443 dfw2-128-116-95-3.roblox.com tcp
US 128.116.45.3:443 mia4-128-116-45-3.roblox.com tcp
DE 128.116.44.4:443 premiumfeatures.roblox.com tcp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
US 8.8.8.8:53 accountinformation.roblox.com udp
US 8.8.8.8:53 users.roblox.com udp
US 128.116.127.3:443 mia2-128-116-127-3.roblox.com tcp
NL 108.156.60.42:443 c0.rbxcdn.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.3:443 gold.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
GB 2.18.190.78:443 tr.rbxcdn.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 8.8.8.8:53 3.95.116.128.in-addr.arpa udp
NL 18.239.94.43:443 images.rbxcdn.com tcp
GB 2.18.190.78:443 tr.rbxcdn.com tcp
DE 128.116.44.4:443 catalog.roblox.com tcp
DE 128.116.44.4:443 catalog.roblox.com tcp
DE 128.116.44.4:443 catalog.roblox.com tcp
DE 128.116.44.4:443 catalog.roblox.com tcp
DE 128.116.44.4:443 catalog.roblox.com tcp
US 8.8.8.8:443 dns.google udp
US 13.107.21.239:443 tcp
US 13.107.21.239:443 tcp
US 13.107.21.239:443 tcp
US 13.107.21.239:443 tcp
JP 194.180.179.71:31685 udp
DE 128.116.44.4:443 catalog.roblox.com tcp
GB 172.217.16.238:443 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
US 13.107.21.239:443 tcp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.36:443 www.google.com tcp
GB 216.58.212.202:443 ogads-pa.googleapis.com udp
GB 172.217.16.238:443 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
US 13.107.21.239:443 tcp
US 13.107.21.239:443 tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
GB 142.250.187.234:443 ogads-pa.googleapis.com tcp
US 140.82.112.22:443 collector.github.com tcp
US 140.82.112.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 140.82.112.22:443 collector.github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
GB 142.250.187.234:443 ogads-pa.googleapis.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
NL 18.239.50.67:443 github-api.arkoselabs.com tcp
NL 18.239.50.67:443 github-api.arkoselabs.com udp
CN 39.108.111.158:3478 udp
N/A 10.127.0.1:5351 udp
NL 18.239.50.67:443 github-api.arkoselabs.com tcp
NL 18.239.50.67:443 github-api.arkoselabs.com udp
NL 18.239.50.67:443 github-api.arkoselabs.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
GB 142.250.187.234:443 ogads-pa.googleapis.com udp
GB 142.250.187.234:443 ogads-pa.googleapis.com tcp
US 140.82.112.22:443 collector.github.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 151.101.66.137:443 code.jquery.com tcp
US 151.101.193.194:443 eod.global.ssl.fastly.net tcp
US 172.67.211.190:443 cmp.uniconsent.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 172.67.211.190:443 cmp.uniconsent.com udp
GB 142.250.187.234:443 ogads-pa.googleapis.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 172.67.211.190:443 cmp.uniconsent.com udp
GB 142.250.187.234:443 ogads-pa.googleapis.com udp
NL 4.175.87.113:443 msedge.api.cdp.microsoft.com tcp
NL 18.239.102.71:443 dsh7ky7308k4b.cloudfront.net tcp
US 172.67.41.60:443 btloader.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net tcp
US 79.127.243.248:443 ssc.33across.com tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
US 8.8.8.8:53 cdn.pbxai.com udp
NL 185.89.208.11:443 prebid.adnxs.com tcp
US 8.8.8.8:53 currency.prebid.org udp
US 8.8.8.8:53 floor.pbxai.com udp
IE 52.214.244.59:443 pbs.360yield.com tcp
US 54.209.171.54:443 ivt.pubgalaxy.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
GB 79.127.237.132:443 cdn.pbxai.com tcp
NL 18.239.18.101:443 edge.hyth.io tcp
BE 18.239.208.119:443 currency.prebid.org tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net udp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
GB 18.168.172.212:443 floor.pbxai.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
US 8.8.8.8:53 api.btloader.com udp
US 8.8.8.8:53 fastlane.rubiconproject.com udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 config.aps.amazon-adsystem.com udp
US 8.8.8.8:53 aax.amazon-adsystem.com udp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
NL 18.238.243.114:443 config.aps.amazon-adsystem.com tcp
US 172.67.23.234:443 id.hadron.ad.gt tcp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
IE 54.72.108.116:443 id.crwdcntrl.net tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
IE 63.33.110.92:443 go.affec.tv tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 8.8.8.8:53 bidder.criteo.com udp
IE 54.217.60.241:443 ice.360yield.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
IE 63.33.110.92:443 go.affec.tv tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 script.4dex.io udp
NL 178.250.1.56:443 bidder.criteo.com tcp
US 104.18.34.178:443 mp.4dex.io tcp
NL 13.227.219.24:443 ats.rlcdn.com tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
NL 18.239.18.78:443 tags.crwdcntrl.net tcp
CH 23.50.111.224:443 secure.cdn.fastclick.net tcp
US 104.26.8.169:443 script.4dex.io tcp
US 104.22.53.173:443 cdn.hadronid.net tcp
GB 172.217.169.36:443 www.google.com udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 119.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 212.172.168.18.in-addr.arpa udp
GB 216.58.212.202:443 ogads-pa.googleapis.com udp
GB 216.58.212.202:443 ogads-pa.googleapis.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
NL 18.238.243.2:443 connectid.analytics.yahoo.com tcp
GB 142.250.200.1:443 ba881f2f3bdd59aac4648971a40de8ca.safeframe.googlesyndication.com tcp
US 172.67.23.234:443 a.ad.gt tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
IE 52.95.126.160:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 120.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 2.243.238.18.in-addr.arpa udp
BE 18.239.208.120:443 geo.privacymanager.io tcp
GB 87.248.114.12:443 ups.analytics.yahoo.com tcp
GB 87.248.114.12:443 ups.analytics.yahoo.com tcp
NL 185.89.210.20:443 ib.adnxs.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
IE 52.49.180.15:443 map.go.affec.tv tcp
NL 35.214.239.83:443 csync.loopme.me tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 63.34.190.112:443 rtb.gumgum.com tcp
US 104.18.36.155:443 ssum-sec.casalemedia.com tcp
IE 52.210.135.134:443 ms-cookie-sync.presage.io tcp
GB 172.217.16.238:443 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
US 104.18.36.155:443 ssum-sec.casalemedia.com udp
US 80.77.87.163:443 cs.admanmedia.com tcp
US 20.33.55.12:443 sync.inmobi.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 52.208.224.133:443 match.prod.bidr.io tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 8.8.8.8:53 12.55.33.20.in-addr.arpa udp
DE 51.89.9.252:443 onetag-sys.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
IE 54.155.83.6:443 cs-tam.yellowblue.io tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 98.82.157.231:443 s.amazon-adsystem.com tcp
US 50.31.142.159:443 b1sync.zemanta.com tcp
US 98.82.157.231:443 s.amazon-adsystem.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
DK 37.157.6.233:443 c1.adform.net tcp
NL 35.214.136.108:443 x.bidswitch.net udp
GB 184.26.56.245:443 ads.pubmatic.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
US 15.197.193.217:443 match.adsrvr.org tcp
NL 188.42.196.115:443 ads.betweendigital.com tcp
US 34.98.64.218:443 us-u.openx.net tcp
JP 124.146.153.162:443 tg.socdm.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 34.98.64.218:443 us-u.openx.net udp
IE 52.210.15.1:443 usersync.gumgum.com tcp
FR 2.21.223.25:443 secure-assets.rubiconproject.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
NL 35.214.241.248:443 ads.creative-serving.com tcp
JP 124.146.153.162:443 tg.socdm.com tcp
US 54.209.158.6:443 sync.srv.stackadapt.com tcp
IE 54.154.51.126:443 pm.w55c.net tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
IE 52.214.244.59:443 pbs.360yield.com tcp
US 199.232.210.172:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
IE 52.95.126.160:443 aax-eu.amazon-adsystem.com tcp
NL 35.214.241.248:443 ads.creative-serving.com udp
IE 18.203.177.239:443 pr-bh.ybp.yahoo.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com udp
IE 52.208.224.133:443 match.prod.bidr.io tcp
IE 52.17.56.188:443 d.adroll.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
IE 108.129.27.230:443 ice.360yield.com tcp
IE 108.129.27.230:443 ice.360yield.com tcp
IE 108.129.27.230:443 ice.360yield.com tcp
IE 108.129.27.230:443 ice.360yield.com tcp
IE 108.129.27.230:443 ice.360yield.com tcp
US 34.228.205.35:443 sync.ipredictive.com tcp
NL 178.250.1.4:443 grid-bidder.criteo.com tcp
US 38.91.45.7:443 match.deepintent.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
US 104.18.34.178:443 mp.4dex.io tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 34.120.63.153:443 prebid.media.net tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
IE 34.251.68.42:443 fw.adsafeprotected.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
IE 52.49.180.15:443 map.go.affec.tv tcp
US 104.18.23.145:443 cadmus.script.ac tcp
GB 172.217.169.36:443 www.google.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 104.22.5.69:443 pixels.ad.gt tcp
GB 185.64.190.78:443 image6.pubmatic.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 42.68.251.34.in-addr.arpa udp
US 8.8.8.8:53 230.27.129.108.in-addr.arpa udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
IE 63.34.190.112:443 rtb.gumgum.com tcp
NL 89.149.192.76:443 ssbsync-global.smartadserver.com tcp
BE 18.239.208.25:443 static.adsafeprotected.com tcp
GB 142.250.187.198:443 s0.2mdn.net tcp
US 34.120.63.153:443 prebid.media.net udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 54.203.88.182:443 dt.adsafeprotected.com tcp
IE 18.202.187.23:443 sync.crwdcntrl.net tcp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
US 34.111.129.221:443 cr.frontend.weborama.fr udp
US 98.82.157.231:443 s.amazon-adsystem.com tcp
US 104.22.50.98:443 mwzeom.zeotap.com tcp
US 34.111.131.239:443 idsync.frontend.weborama.fr tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
DK 77.243.51.122:443 uipglob.semasio.net tcp
US 172.67.23.234:443 pixels.ad.gt tcp
US 44.235.81.238:443 ids.ad.gt tcp
US 8.8.8.8:53 239.131.111.34.in-addr.arpa udp
NL 185.89.208.11:443 prebid.adnxs.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
GB 185.64.191.210:443 image2.pubmatic.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 34.149.40.38:443 u.4dex.io tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
BE 35.206.140.87:443 pool.admedo.com tcp
US 34.160.55.127:443 navvy.media.net tcp
US 34.160.55.127:443 navvy.media.net tcp
NL 18.239.94.61:443 s.ad.smaato.net tcp
FR 163.5.194.30:443 sync.a-mo.net tcp
DE 91.228.74.244:443 cms.quantserve.com tcp
DK 37.157.6.233:443 c1.adform.net tcp
NL 34.91.62.186:443 um.simpli.fi tcp
GB 142.250.180.2:443 googleads4.g.doubleclick.net tcp
BE 35.206.140.87:443 pool.admedo.com udp
NL 89.207.16.201:443 casale-match.dotomi.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
US 47.253.61.56:443 gw-iad-bid.ymmobi.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
IE 54.195.132.218:443 ce.lijit.com tcp
US 34.111.113.62:443 pixel.tapad.com tcp
GB 87.248.114.12:443 pbs.yahoo.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 34.111.113.62:443 pixel.tapad.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
NL 185.184.8.90:443 creativecdn.com tcp
GB 185.64.191.210:443 image2.pubmatic.com tcp
US 172.64.151.101:443 dsum.casalemedia.com tcp
NL 89.207.16.140:443 equativ-match.dotomi.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
BE 18.239.208.23:443 live.primis.tech tcp
GB 142.250.200.34:443 cm.g.doubleclick.net tcp
US 172.64.146.152:443 capi.connatix.com tcp
GB 185.64.190.81:443 image4.pubmatic.com tcp
GB 185.64.190.81:443 image4.pubmatic.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
IE 54.229.50.82:443 dpm.demdex.net tcp
GB 185.64.190.81:443 image4.pubmatic.com tcp
NL 13.227.219.118:443 sync-gdpr.intentiq.com tcp
US 8.8.8.8:53 244.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 30.194.5.163.in-addr.arpa udp
US 8.8.8.8:53 201.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 186.62.91.34.in-addr.arpa udp
US 8.8.8.8:53 117.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 62.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 218.132.195.54.in-addr.arpa udp
US 8.8.8.8:53 140.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 23.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 152.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 81.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 130.160.0.193.in-addr.arpa udp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
US 34.149.40.38:443 u.4dex.io udp
IE 54.246.128.126:443 d.illuma-tech.com tcp
IE 54.217.60.241:443 euw-ice.360yield.com tcp
GB 2.18.190.133:443 cdn.doubleverify.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.241.34.106:443 c.4dex.io tcp
US 35.186.194.101:443 ad.sxp.smartclip.net tcp
GB 184.26.56.119:443 ad.yieldlab.net tcp
NL 18.238.243.76:443 rumcdn.geoedge.be tcp
US 35.186.194.101:443 ad.sxp.smartclip.net udp
US 54.209.158.6:443 sync.srv.stackadapt.com tcp
GB 172.217.169.36:443 www.google.com udp
IE 52.214.244.59:443 pbs.360yield.com tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net tcp
FR 51.178.195.216:443 sync.smartadserver.com tcp
GB 184.26.188.27:443 cs.media.net tcp
GB 184.26.188.27:443 cs.media.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 2.18.190.133:443 cdn.doubleverify.com tcp
GB 142.250.180.2:443 googleads4.g.doubleclick.net udp
DE 51.89.9.252:443 onetag-sys.com udp
DE 51.89.9.252:443 onetag-sys.com udp
NL 35.214.230.116:443 ghent-gce-nl.bidswitch.net tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 172.67.23.234:443 pixels.ad.gt tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com udp
NL 35.214.230.116:443 ghent-gce-nl.bidswitch.net tcp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
NL 198.47.127.20:443 simage4.pubmatic.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
US 104.22.4.69:443 pixels.ad.gt tcp
GB 216.58.212.226:443 adx.g.doubleclick.net tcp
US 198.199.105.242:443 emailondeck.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
GB 2.18.190.79:443 mnadshield-a.akamaihd.net tcp
GB 216.58.212.226:443 adx.g.doubleclick.net udp
US 80.77.87.163:443 cs.admanmedia.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
IE 54.246.128.126:443 d.illuma-tech.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
NL 81.17.55.108:443 ssbsync-global.smartadserver.com tcp
DE 91.228.74.244:443 pixel.quantserve.com tcp
GB 185.64.191.210:443 image2.pubmatic.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
US 54.209.158.6:443 sync.srv.stackadapt.com tcp
US 151.101.66.49:443 sync-tm.everesttech.net tcp
GB 185.64.190.78:443 image6.pubmatic.com tcp
DE 80.82.210.217:443 dsp-cookie.adfarm1.adition.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
NL 188.42.63.48:443 dsp-ap.eskimi.com tcp
US 54.209.158.6:443 sync.srv.stackadapt.com tcp
IE 52.208.224.133:443 match.prod.bidr.io tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
SE 13.53.196.230:443 d5p.de17a.com tcp
IE 52.214.176.63:443 dsp.360yield.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
GB 184.26.188.27:443 cs.media.net tcp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
NL 35.214.239.83:443 csync.loopme.me tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 35.214.174.141:443 a.sportradarserving.com tcp
SI 195.5.165.20:443 core.iprom.net tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
FR 141.95.172.216:443 green.erne.co tcp
US 172.64.150.63:443 s.tribalfusion.com tcp
IE 52.215.155.11:443 cm.adgrx.com tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
FR 54.38.113.3:443 pixel-eu.onaudience.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
IE 54.78.254.47:443 loada.exelator.com tcp
DE 23.88.86.2:443 matching.truffle.bid tcp
NL 46.228.164.11:443 ad.turn.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
NL 46.228.174.117:443 sync.1rx.io tcp
CA 148.113.153.93:443 pixel.onaudience.com tcp
NL 89.207.16.140:443 triplelift-match.dotomi.com tcp
DE 23.88.86.2:443 matching.truffle.bid tcp
NL 81.17.55.108:443 ssbsync-global.smartadserver.com tcp
GB 184.25.192.159:443 servedby.flashtalking.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
NL 18.239.36.121:443 gw.geoedge.be tcp
NL 193.3.178.3:443 ads.us.e-planning.net tcp
NL 35.214.174.141:443 a.sportradarserving.com udp
NL 18.239.36.84:443 ajs-assets.ftstatic.com tcp
US 23.22.211.121:443 ads.everesttech.net tcp
GB 184.25.192.27:443 contextual.media.net tcp
NL 134.122.57.34:443 match.adsby.bidtheatre.com tcp
DE 3.122.214.165:443 ps.eyeota.net tcp
NL 18.239.83.104:443 agen-assets.ftstatic.com tcp
IE 52.210.15.1:443 usersync.gumgum.com tcp
IE 52.214.244.59:443 pbs.360yield.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
GB 184.25.192.159:443 servedby.flashtalking.com tcp
IE 52.214.244.59:443 pbs.360yield.com tcp
IE 54.217.60.241:443 euw-ice.360yield.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
GB 184.25.192.27:443 contextual.media.net udp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 46.228.164.13:443 d.turn.com tcp
GB 184.26.188.27:443 cs.media.net tcp
DE 3.122.214.165:443 ps.eyeota.net tcp
US 143.244.215.221:443 file.io tcp
US 143.244.215.221:443 file.io tcp
NL 35.214.239.83:443 csync.loopme.me tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 151.101.66.49:443 sync-tm.everesttech.net tcp
NL 198.47.127.20:443 simage4.pubmatic.com tcp
FR 2.21.223.25:443 secure-assets.rubiconproject.com tcp
FR 45.112.123.126:443 api.gofile.io tcp
NL 18.239.83.92:443 js.ad-score.com tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
NL 13.227.219.91:443 cdn.flashtalking.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 34.149.40.38:443 u.4dex.io tcp
US 34.149.40.38:443 u.4dex.io tcp
GB 184.26.188.27:443 cs.media.net tcp
DE 51.89.9.252:443 onetag-sys.com tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
GB 184.26.188.27:443 cs.media.net tcp
IE 52.208.224.133:443 match.prod.bidr.io tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
IE 52.214.244.59:443 pbs.360yield.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 98.82.157.231:443 s.amazon-adsystem.com tcp
US 50.31.142.159:443 b1sync.zemanta.com tcp
NL 18.239.94.57:443 www.file.io tcp
US 130.211.115.4:443 data.ad-score.com tcp
GB 18.168.155.117:443 stat.flashtalking.com tcp
GB 52.56.172.63:443 stat.flashtalking.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
IE 54.154.51.126:443 pm.w55c.net tcp
US 23.22.211.121:443 ads.everesttech.net tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 54.203.88.182:443 dt.adsafeprotected.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
GB 79.127.237.132:443 hb.vntsm.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
GB 79.127.237.132:443 hb.vntsm.com tcp
CH 104.77.24.99:443 dco-assets.everestads.net tcp
US 104.22.47.142:443 hb.vntsm.io tcp
US 151.101.193.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
GB 74.125.133.155:443 stats.g.doubleclick.net tcp
US 143.244.215.221:443 file.io tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net tcp
NL 18.65.39.71:443 cdn.exelator.com tcp
NL 18.239.70.203:443 c.amazon-adsystem.com tcp
NL 18.238.243.114:443 config.aps.amazon-adsystem.com tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net udp
CH 104.77.24.99:443 dco-assets.everestads.net tcp
US 104.22.53.86:443 cdn.id5-sync.com tcp
US 104.22.53.173:443 cdn.hadronid.net tcp
CH 23.50.111.224:443 secure.cdn.fastclick.net tcp
CH 23.50.111.224:443 secure.cdn.fastclick.net tcp
US 172.67.23.234:443 pixels.ad.gt tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com tcp
CH 23.50.111.224:443 secure.cdn.fastclick.net tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
US 104.22.5.69:443 pixels.ad.gt tcp
NL 89.207.16.146:443 proc.ad.cpe.dotomi.com tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
GB 185.64.190.78:443 image6.pubmatic.com tcp
IE 52.214.244.59:443 pbs.360yield.com tcp
NL 103.67.200.72:443 sync.adkernel.com tcp
GB 142.250.200.1:443 739465d8d50ce292f3019e367c371ae2.safeframe.googlesyndication.com tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
GB 79.127.237.132:443 hb.vntsm.com tcp
IE 54.78.254.47:443 loada.exelator.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
GB 142.250.200.34:443 cm.g.doubleclick.net tcp
GB 216.58.204.65:443 tpc.googlesyndication.com udp
US 44.207.141.43:443 onsite-tag-logs.apps.nielsen.com tcp
US 104.244.42.131:443 analytics.twitter.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
GB 184.25.192.159:443 servedby.flashtalking.com tcp
NL 18.239.36.84:443 ajs-assets.ftstatic.com tcp
GB 184.25.192.159:443 servedby.flashtalking.com tcp
FR 45.137.176.88:443 sync.adotmob.com tcp
CH 104.77.24.99:443 dco-assets.everestads.net tcp
CH 104.77.24.99:443 dco-assets.everestads.net tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 195.181.172.2:443 load77.exelator.com tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net udp
US 204.79.197.204:443 analyticspixel.microsoft.com tcp
DK 37.157.5.87:443 cm.adform.net tcp
GB 2.18.190.133:443 cdn.doubleverify.com tcp
NL 18.239.94.57:443 www.file.io tcp
IE 52.214.244.59:443 pbs.360yield.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
GB 184.25.192.49:443 secure.flashtalking.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
IE 52.214.244.59:443 pbs.360yield.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 34.102.146.192:443 oa.openxcdn.net tcp
NL 18.239.18.78:443 tags.crwdcntrl.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 34.96.70.87:443 invstatic101.creativecdn.com tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
US 104.18.23.145:443 cadmus.script.ac tcp
IE 52.210.100.228:443 p.cpx.to tcp
DE 91.228.74.244:443 pixel.quantserve.com tcp
US 104.18.167.224:443 pub.doubleverify.com tcp
IE 52.208.115.114:443 sync.crwdcntrl.net tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 34.95.69.49:443 i.clean.gg tcp
US 104.18.167.224:443 pub.doubleverify.com udp
NL 18.239.50.115:443 rules.quantcount.com tcp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
US 34.95.69.49:443 i.clean.gg udp
NL 178.250.1.11:443 gum.criteo.com tcp
IE 54.77.124.33:443 track.venatusmedia.com tcp
US 34.120.111.33:443 api.edkt.io tcp
US 34.120.133.55:443 api.rlcdn.com tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
IE 52.210.100.228:443 p.cpx.to tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
FR 163.5.194.30:443 sync.a-mo.net tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
GB 185.64.191.210:443 image2.pubmatic.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 104.18.34.190:443 elb.the-ozone-project.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
US 172.64.146.150:443 ex.ingage.tech tcp
US 34.120.111.33:443 api.edkt.io tcp
IE 52.95.126.160:443 aax-eu.amazon-adsystem.com tcp
US 34.120.111.33:443 api.edkt.io udp
US 172.64.146.150:443 ex.ingage.tech tcp
US 143.244.215.221:443 file.io tcp
US 143.244.215.221:443 file.io tcp
NL 89.149.192.76:443 ssbsync-global.smartadserver.com tcp
IE 52.210.135.134:443 ms-cookie-sync.presage.io tcp
NL 178.250.1.7:443 ssp-sync.criteo.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
IE 54.155.83.6:443 cs-tam.yellowblue.io tcp
US 8.8.8.8:53 150.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 150.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 7.1.250.178.in-addr.arpa udp
GB 142.250.200.34:443 cm.g.doubleclick.net tcp
NL 63.215.202.169:443 pulsepoint-match.dotomi.com tcp
US 98.82.156.107:443 s.amazon-adsystem.com tcp
GB 142.250.200.1:443 739465d8d50ce292f3019e367c371ae2.safeframe.googlesyndication.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
CH 2.20.19.36:443 tg1.aniview.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 172.217.169.36:443 www.google.com tcp
GB 2.18.27.88:443 feed.avplayer.com tcp
US 172.240.45.75:443 track4.aniview.com tcp
GB 2.18.190.80:443 player.avplayer.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 13.107.246.64:443 adsdk.microsoft.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
NL 18.238.243.80:443 ib.3lift.com tcp
NL 18.238.243.80:443 ib.3lift.com udp
US 34.120.111.33:443 api.edkt.io tcp
GB 2.18.190.81:443 c0ak.rbxcdn.com tcp
US 34.120.111.33:443 api.edkt.io udp
US 76.223.111.18:443 eb2.3lift.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
GB 2.18.27.82:443 www.bing.com tcp
NL 18.239.94.101:443 img.3lift.com tcp
GB 2.18.190.80:443 player.avplayer.com tcp
GB 2.18.190.80:443 player.avplayer.com tcp
CH 2.20.19.36:443 tg1.aniview.com tcp
GB 2.18.27.82:443 www.bing.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
NL 35.214.239.83:443 csync.loopme.me tcp
US 172.64.153.109:443 uploads-ssl.webflow.com tcp
US 172.64.153.109:443 uploads-ssl.webflow.com tcp
US 172.64.153.109:443 uploads-ssl.webflow.com tcp
GB 87.248.114.12:443 pbs.yahoo.com tcp
US 185.184.10.30:443 us.creativecdn.com tcp
US 216.200.232.253:443 sync.mathtag.com tcp
US 13.107.21.237:443 c.bing.com tcp
US 54.167.186.48:443 sync.ipredictive.com tcp
NL 18.239.94.57:443 www.file.io tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 151.101.130.217:443 scripts.webcontentassessor.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com udp
DK 37.157.5.87:443 cm.adform.net tcp
US 151.101.1.108:443 acdn.adnxs.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
US 104.18.34.190:443 elb.the-ozone-project.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 216.200.232.253:443 sync.mathtag.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 54.209.158.6:443 sync.srv.stackadapt.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
IE 52.95.126.160:443 aax-eu.amazon-adsystem.com tcp
DE 91.228.74.244:443 pixel.quantserve.com tcp
FR 163.5.194.33:443 sync.a-mo.net tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
IE 34.254.169.252:443 ap.lijit.com tcp
DK 37.157.6.233:443 c1.adform.net tcp
US 35.244.159.8:443 us-u.openx.net tcp
US 38.91.45.7:443 match.deepintent.com tcp
US 54.80.53.24:443 cs.ingage.tech tcp
US 54.80.53.24:443 cs.ingage.tech tcp
US 54.80.53.24:443 cs.ingage.tech tcp
US 54.80.53.24:443 cs.ingage.tech tcp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
GB 184.26.56.245:443 ads.pubmatic.com tcp
US 172.64.146.152:443 capi.connatix.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
US 34.111.113.62:443 pixel.tapad.com tcp
US 34.96.71.22:443 s.company-target.com tcp
AU 3.24.93.28:443 sasinator.realestate.com.au tcp
US 151.101.129.44:443 trc.taboola.com tcp
NL 35.214.241.248:443 ads.creative-serving.com tcp
US 54.80.53.24:443 cs.ingage.tech tcp
US 54.80.53.24:443 cs.ingage.tech tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
NL 35.214.239.83:443 csync.loopme.me tcp
NL 89.149.192.76:443 ssbsync-global.smartadserver.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
AU 3.24.93.28:443 sasinator.realestate.com.au tcp
US 172.64.146.152:443 capi.connatix.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
NL 185.184.8.90:443 creativecdn.com tcp
DE 162.55.236.224:443 sync.richaudience.com tcp
US 8.2.108.175:443 bc-sync.com tcp
US 100.25.125.124:443 api-2-0.spot.im tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 15.197.193.217:443 match.adsrvr.org tcp
GB 2.18.190.80:443 player.avplayer.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
GB 104.82.143.163:443 secure-assets.rubiconproject.com tcp
US 54.147.159.241:443 cs-server-s2s.yellowblue.io tcp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 104.18.6.198:443 gum.aidemsrv.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 34.96.71.22:443 s.company-target.com udp
GB 18.134.84.25:443 1f2e7.v.fwmrm.net tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
US 50.31.142.159:443 b1sync.zemanta.com tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
GB 184.25.193.73:443 eus.rubiconproject.com tcp
US 172.240.45.96:443 sync.aniview.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
NL 35.214.174.141:443 a.sportradarserving.com tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
IE 18.203.177.239:443 pr-bh.ybp.yahoo.com tcp
US 8.2.108.175:443 bc-sync.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 50.31.142.159:443 b1sync.zemanta.com tcp
DE 51.89.9.252:443 onetag-sys.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
IE 52.208.224.133:443 match.prod.bidr.io tcp
US 8.8.8.8:53 25.84.134.18.in-addr.arpa udp
US 8.8.8.8:53 224.236.55.162.in-addr.arpa udp
US 8.8.8.8:53 124.125.25.100.in-addr.arpa udp
US 8.8.8.8:53 23.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 241.159.147.54.in-addr.arpa udp
US 8.8.8.8:53 96.45.240.172.in-addr.arpa udp
NL 69.173.156.149:443 pixel.rubiconproject.com tcp
US 69.173.151.100:443 pixel-us-east.rubiconproject.com tcp
IE 52.95.126.160:443 aax-eu.amazon-adsystem.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 98.82.156.107:443 s.amazon-adsystem.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
IE 52.208.224.133:443 match.prod.bidr.io tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 69.173.151.100:443 pixel-us-east.rubiconproject.com tcp
US 98.82.156.107:443 s.amazon-adsystem.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
BE 18.239.208.23:443 live.primis.tech tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 192.132.33.67:443 bttrack.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
FR 163.5.194.30:443 sync.a-mo.net tcp
NL 13.227.219.118:443 sync-gdpr.intentiq.com tcp
IE 52.51.10.62:443 ce.lijit.com tcp
US 69.173.151.100:443 pixel-us-east.rubiconproject.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 34.111.113.62:443 pixel.tapad.com tcp
US 54.209.158.6:443 sync.srv.stackadapt.com tcp
US 204.62.12.209:443 sync-service.net tcp
IE 52.49.250.52:443 jadserve.postrelease.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 104.19.159.19:443 assets.a-mo.net tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
IE 52.212.17.164:443 cs.yellowblue.io tcp
IE 54.154.51.126:443 pm.w55c.net tcp
US 35.227.252.103:443 rtb.openx.net tcp
US 104.18.36.155:443 ssum.casalemedia.com tcp
DE 79.127.216.47:443 id.a-mx.com tcp
US 204.62.12.209:443 sync-service.net tcp
GB 185.64.190.81:443 image4.pubmatic.com tcp
FR 163.5.194.37:443 sync.a-mo.net tcp
US 216.239.32.21:443 jelly.mdhv.io tcp
US 8.8.8.8:53 id.rtb.mx udp
US 8.8.8.8:53 ow.pubmatic.com udp
NL 185.89.208.11:443 prebid.adnxs.com tcp
NL 79.127.227.46:443 id.rtb.mx tcp
GB 185.64.190.84:443 ow.pubmatic.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
NL 18.239.83.104:443 agen-assets.ftstatic.com tcp
NL 18.239.83.104:443 agen-assets.ftstatic.com tcp
NL 18.239.83.104:443 agen-assets.ftstatic.com tcp
GB 18.168.155.117:443 stat.flashtalking.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
NL 13.227.219.91:443 cdn.flashtalking.com tcp
NL 18.239.83.92:443 js.ad-score.com tcp
NL 13.227.219.91:443 cdn.flashtalking.com tcp
NL 13.227.219.91:443 cdn.flashtalking.com tcp
NL 13.227.219.91:443 cdn.flashtalking.com tcp
US 34.120.111.33:443 api.edkt.io udp
US 172.240.45.76:443 track1.avplayer.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
SE 192.229.221.95:80 cacerts.geotrust.com tcp
GB 52.56.172.63:443 stat.flashtalking.com tcp
GB 18.168.155.117:443 stat.flashtalking.com tcp
GB 52.56.172.63:443 stat.flashtalking.com tcp
GB 18.168.155.117:443 stat.flashtalking.com tcp
GB 52.56.172.63:443 stat.flashtalking.com tcp
GB 18.168.155.117:443 stat.flashtalking.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
GB 184.26.188.27:443 cs.media.net tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 184.25.192.49:443 secure.flashtalking.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 130.211.115.4:443 data.ad-score.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 198.199.105.242:443 emailondeck.com tcp
US 151.101.66.137:443 code.jquery.com tcp
US 151.101.193.194:443 hb-vntsm-com.global.ssl.fastly.net tcp
US 172.67.211.190:443 cmp.uniconsent.com udp
US 54.203.88.182:443 dt.adsafeprotected.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 74.125.133.155:443 stats.g.doubleclick.net tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 198.199.105.242:443 emailondeck.com tcp
NL 18.239.102.71:443 dsh7ky7308k4b.cloudfront.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 130.211.23.194:443 api.btloader.com udp
US 79.127.243.248:443 ssc.33across.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 185.89.208.11:443 prebid.adnxs.com tcp
IE 52.214.244.59:443 pbs.360yield.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
DE 3.72.78.234:443 btlr.sharethrough.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
IE 54.217.60.241:443 euw-ice.360yield.com tcp
NL 178.250.1.56:443 bidder.criteo.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
US 104.18.34.178:443 mp.4dex.io tcp
US 54.209.171.54:443 ivt.pubgalaxy.com tcp
GB 18.168.172.212:443 floor.pbxai.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
IE 63.33.110.92:443 go.affec.tv tcp
GB 79.127.237.132:443 hb.vntsm.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
US 104.26.8.169:443 script.4dex.io tcp
IE 63.33.110.92:443 go.affec.tv tcp
US 104.22.53.173:443 cdn.hadronid.net tcp
NL 185.89.210.20:443 ib.adnxs.com tcp
US 172.67.23.234:443 pixels.ad.gt tcp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
IE 52.49.180.15:443 map.go.affec.tv tcp
IE 52.95.126.160:443 aax-eu.amazon-adsystem.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
IE 108.129.27.230:443 ice.360yield.com tcp
NL 178.250.1.4:443 grid-bidder.criteo.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
US 34.120.133.55:443 api.rlcdn.com tcp
US 104.22.5.69:443 pixels.ad.gt tcp
US 34.120.133.55:443 api.rlcdn.com udp
US 69.166.1.66:443 sync.go.sonobi.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 104.18.36.155:443 ssum.casalemedia.com tcp
US 35.244.159.8:443 us-u.openx.net tcp
US 44.235.81.238:443 ids.ad.gt tcp
US 104.22.4.69:443 pixels.ad.gt tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 44.235.81.238:443 ids.ad.gt tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 34.160.55.127:443 navvy.media.net udp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
GB 142.250.200.1:443 739465d8d50ce292f3019e367c371ae2.safeframe.googlesyndication.com tcp
DE 51.89.9.252:443 onetag-sys.com tcp
IE 52.208.224.133:443 match.prod.bidr.io tcp
IE 52.210.135.134:443 ms-cookie-sync.presage.io tcp
US 172.67.211.190:443 cmp.uniconsent.com udp
US 34.149.40.38:443 u.4dex.io udp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 98.82.157.231:443 s.amazon-adsystem.com tcp
US 20.33.55.12:443 sync.inmobi.com tcp
IE 54.155.83.6:443 cs.yellowblue.io tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
GB 172.217.169.36:443 www.google.com tcp
GB 142.250.187.198:443 s0.2mdn.net udp
GB 172.217.169.33:443 cdn.ampproject.org tcp
GB 172.217.169.33:443 cdn.ampproject.org tcp
GB 172.217.169.33:443 cdn.ampproject.org tcp
GB 172.217.169.33:443 cdn.ampproject.org tcp
GB 172.217.169.33:443 cdn.ampproject.org tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
GB 142.250.187.198:443 s0.2mdn.net udp
GB 172.217.169.36:443 www.google.com udp
US 76.223.111.18:443 eb2.3lift.com tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
FR 51.178.195.216:443 sync.smartadserver.com tcp
GB 184.26.81.115:443 sync.teads.tv tcp
US 8.2.110.206:443 cs.mobfox.com tcp
US 44.213.230.37:443 rtb.adentifi.com tcp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
US 44.214.182.245:443 event.hgrtb.com tcp
US 159.89.252.170:443 sync.resetdigital.co tcp
US 18.213.205.255:443 usersync.getpublica.com tcp
GB 184.26.81.115:443 sync.teads.tv tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
FR 51.178.195.216:443 sync.smartadserver.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 46.228.174.117:443 sync.1rx.io tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
GB 87.248.114.12:443 pbs.yahoo.com tcp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
IE 52.215.155.11:443 cm.adgrx.com tcp
GB 142.250.187.234:443 ogads-pa.googleapis.com udp
US 140.82.112.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 35.244.159.8:443 us-u.openx.net udp
US 104.17.97.71:443 c.bannerflow.net tcp
US 104.17.97.71:443 c.bannerflow.net tcp
US 76.223.111.18:443 eb2.3lift.com tcp
NL 103.67.200.72:443 sync.adkernel.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
DE 91.228.74.244:443 pixel.quantserve.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
US 80.77.87.163:443 cs.admanmedia.com tcp
GB 142.250.200.34:443 cm.g.doubleclick.net tcp
NL 35.214.174.141:443 a.sportradarserving.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
GB 20.26.156.210:443 api.github.com tcp
IE 108.129.27.230:443 ice.360yield.com tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
US 140.82.112.22:443 collector.github.com tcp
US 172.240.45.76:443 track1.avplayer.com udp
US 35.244.174.68:443 id.rlcdn.com tcp
NL 69.173.156.150:443 prebid-server.rubiconproject.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
NL 35.214.132.90:443 u.ipw.metadsp.co.uk tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 172.240.45.76:443 track1.avplayer.com tcp
NL 35.214.136.108:443 x.bidswitch.net udp
DE 51.89.9.252:443 onetag-sys.com tcp
GB 184.26.188.27:443 cs.media.net tcp
NL 46.228.174.117:443 sync.1rx.io tcp
US 15.197.193.217:443 match.adsrvr.org tcp
NL 35.214.132.90:443 u.ipw.metadsp.co.uk udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 34.228.205.35:443 sync.ipredictive.com tcp
NL 178.250.1.9:443 widget.nl3.eu.criteo.com tcp
US 54.209.158.6:443 sync.srv.stackadapt.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
DK 37.157.6.233:443 c1.adform.net tcp
US 192.132.33.67:443 bttrack.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
GB 184.26.188.27:443 cs.media.net tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
IE 52.212.17.164:443 cs.yellowblue.io tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 34.149.50.64:443 s.seedtag.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
DE 3.74.62.171:443 exchange.mediavine.com tcp
US 34.107.140.113:443 s2s.t13.io tcp
DE 18.197.30.174:443 match.sharethrough.com tcp
GB 216.58.201.98:443 ade.googlesyndication.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 140.82.114.25:443 alive.github.com tcp
GB 20.26.156.215:443 github.com tcp
US 140.82.113.22:443 collector.github.com tcp
US 172.240.45.76:443 track1.avplayer.com tcp
US 172.240.45.76:443 track1.avplayer.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
US 140.82.114.25:443 alive.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 140.82.113.22:443 collector.github.com tcp
GB 216.58.201.98:443 ade.googlesyndication.com udp
NL 18.239.68.199:443 aax.amazon-adsystem.com tcp
IE 54.77.124.33:443 track.venatusmedia.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
US 104.18.34.190:443 elb.the-ozone-project.com tcp
US 172.64.146.150:443 ex.ingage.tech tcp
FR 163.5.194.30:443 sync.a-mo.net tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
FR 5.135.209.96:443 prg.smartadserver.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
GB 142.250.187.226:443 securepubads.g.doubleclick.net udp
GB 142.250.187.226:443 securepubads.g.doubleclick.net tcp
NL 18.238.243.80:443 ib.3lift.com udp
NL 18.238.243.80:443 ib.3lift.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
US 76.223.111.18:443 eb2.3lift.com tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
IE 54.77.124.33:443 track.venatusmedia.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
US 143.244.208.184:443 sid.storygize.net tcp
NL 178.250.1.17:443 ads.eu.criteo.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.3:443 static.criteo.net tcp
NL 178.250.1.9:443 widget.nl3.eu.criteo.com tcp
NL 178.250.1.9:443 widget.nl3.eu.criteo.com tcp
NL 35.214.136.108:443 x.bidswitch.net tcp
GB 142.250.200.34:443 cm.g.doubleclick.net udp
GB 142.250.200.34:443 cm.g.doubleclick.net tcp
US 172.240.45.76:443 track1.avplayer.com tcp
NL 178.250.1.9:443 widget.nl3.eu.criteo.com tcp
NL 185.89.210.82:443 ib.adnxs.com tcp
NL 178.250.1.9:443 widget.nl3.eu.criteo.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
NL 178.250.1.6:443 cat.nl3.eu.criteo.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
NL 178.250.1.25:443 csm.eu.criteo.net tcp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
NL 81.17.55.117:443 rtb-csync.smartadserver.com tcp
NL 18.238.243.80:443 ib.3lift.com udp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
IE 54.171.192.42:443 dpm.demdex.net tcp
US 172.64.151.101:443 ssum.casalemedia.com tcp
NL 141.226.228.48:443 sync-t1.taboola.com tcp
US 172.64.151.101:443 ssum.casalemedia.com tcp
NL 141.226.228.48:443 sync-t1.taboola.com tcp
NL 178.250.1.15:443 imageproxy.eu.criteo.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
GB 20.26.156.215:443 github.com tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
IE 52.214.101.219:443 ad.360yield.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
DE 162.19.138.117:443 lb.eu-1-id5-sync.com tcp
NL 178.250.1.22:443 staticassets-creator-design.criteo.net tcp
IE 52.214.101.219:443 ad.360yield.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
NL 178.250.1.22:443 staticassets-creator-design.criteo.net tcp
US 34.117.157.22:443 matching.ivitrack.com tcp
US 8.8.8.8:53 ice.360yield.com udp
IE 52.19.150.135:443 ice.360yield.com tcp
IE 52.19.150.135:443 ice.360yield.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 185.199.108.133:443 user-images.githubusercontent.com tcp
DE 3.74.62.171:443 exchange.mediavine.com tcp
IE 52.49.250.52:443 jadserve.postrelease.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 140.82.114.25:443 alive.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 140.82.114.25:443 alive.github.com tcp
US 172.240.45.76:443 track1.avplayer.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 140.82.113.22:443 collector.github.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 67.202.105.21:443 ssc-cms.33across.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 140.82.114.25:443 alive.github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 172.240.45.76:443 track1.avplayer.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 140.82.113.22:443 collector.github.com tcp
US 140.82.113.22:443 collector.github.com tcp
GB 216.58.201.98:443 ade.googlesyndication.com udp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 docs.github.com tcp
GB 216.58.201.98:443 ade.googlesyndication.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.154:443 docs.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 185.199.110.154:443 docs.github.com tcp
US 185.199.108.133:443 objects.githubusercontent.com tcp
US 140.82.113.22:443 collector.github.com tcp
US 185.199.109.154:443 docs.github.com tcp
US 185.199.109.154:443 docs.github.com tcp
US 185.199.109.154:443 docs.github.com tcp
JP 18.179.63.231:32002 udp
JP 18.179.63.231:32002 udp
JP 18.179.63.231:32002 udp
CA 34.95.44.106:443 e2c20.gcp.gvt2.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
DE 128.116.44.4:443 ecsv2.roblox.com tcp
GB 172.217.169.35:443 beacons.gvt2.com tcp
JP 194.180.179.71:51828 udp
JP 194.180.179.71:51828 udp
US 172.240.45.76:443 track1.avplayer.com tcp
GB 216.58.201.98:443 ade.googlesyndication.com udp
GB 216.58.201.98:443 ade.googlesyndication.com tcp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.36:443 www.google.com tcp
US 185.199.111.154:443 docs.github.com tcp
US 142.250.68.227:443 id.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.212.246:443 i.ytimg.com udp
US 142.250.68.227:443 id.google.com tcp
US 8.8.8.8:53 246.212.58.216.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 172.217.169.78:443 www.youtube.com udp
GB 172.217.169.78:443 www.youtube.com udp
GB 216.58.212.246:443 i.ytimg.com tcp
GB 142.250.187.206:443 play.google.com udp
GB 216.58.212.226:443 googleads.g.doubleclick.net tcp
GB 216.58.212.230:443 static.doubleclick.net tcp
GB 142.250.187.202:443 jnn-pa.googleapis.com tcp
GB 142.250.187.202:443 jnn-pa.googleapis.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com udp
US 172.67.207.104:443 xmrig.com tcp
US 172.67.207.104:443 xmrig.com tcp
US 172.67.207.104:443 xmrig.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 172.67.207.104:443 xmrig.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 162.254.37.92:443 rbxidle.com tcp
US 162.254.37.92:443 rbxidle.com tcp
US 162.254.37.92:443 rbxidle.com tcp
US 162.254.37.92:443 rbxidle.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 162.254.37.92:443 rbxidle.com tcp
US 162.254.37.92:443 rbxidle.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 151.101.66.137:443 code.jquery.com tcp
GB 142.250.187.206:443 play.google.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 www.google.co.uk udp
GB 173.194.76.156:443 stats.g.doubleclick.net tcp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 20.26.156.215:443 github.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 185.199.110.154:443 docs.github.com tcp
US 185.199.109.133:443 objects.githubusercontent.com tcp
JP 194.180.179.71:58273 udp
SE 192.229.221.95:80 cacerts.geotrust.com tcp
US 172.240.45.76:443 track1.avplayer.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 a28bb0d36049e72d00393056dce10a26
SHA1 c753387b64cc15c0efc80084da393acdb4fc01d0
SHA256 684d797e28b7fd86af84bfb217d190e4f5e03d92092d988a6091b2c7bbbd67c1
SHA512 20940fee33aa2194c36a3db92d4fd314ce7eacc2aa745abec62aa031c2a53ba4ff89f2568626e7bd2536090175f8d045c3bb52c5faa5ecc8da8410ab5fc519f7

\??\pipe\LOCAL\crashpad_484_RYDUKMZPOSFHNQEU

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 554d6d27186fa7d6762d95dde7a17584
SHA1 93ea7b20b8fae384cf0be0d65e4295097112fdca
SHA256 2fa6145571e1f1ece9850a1ac94661213d3e0d82f1cef7ac1286ff6b2c2017cb
SHA512 57d9008ccabc315bd0e829b19fe91e24bab6ef20bcfab651b937b0f38eec840b58d0aed092a3bbedd2d6a95d5c150372a1e51087572de55672172adc1fc468a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 98ed97fb0055f9fc5da25d8c98ca56c7
SHA1 932286835c6e5afac573a918e4b1406fe26d1410
SHA256 e2f2d5121bd200bce7811425bb60ce52e862d8ea8f6d54ece2972c566651b0d3
SHA512 ead42d756354ff25c1b0c4bfe799b4f28507e4fb6a960658c4575250336fc68cbc452e620b555ec6cc52c9ad63abaf0a5022b7405d60a088e125039cb2c03ba1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c130c8a4f34ab3cc1615e59c9dad6b45
SHA1 01543557d9c83533cc9660052dc48f0689f10555
SHA256 3a30ed6bd32e0f9d24cdbfb298b9d7d2e382108317afaa0889c4b36dbd4a1160
SHA512 b25f4884919d1795d503e578cb2bd1aad8b396dbb011af916f3f5a61325ec5c22194a2e41adfdbf0e949d05a1a425207b125e77318d622504ba06240a89779bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 191122bf254815b8a032900f59a94f5f
SHA1 13482c0b0f0f763439a9d5d3b1e0c2aed25e75d0
SHA256 0822be5d7e72f96e7323adf49396798d57d54b9c264fafc6d9b5a00f9d708898
SHA512 5effaf32a0b67870b96930b74c65f9bf6600f2d0404c5ce310a67c9339e7f490db7f15d7d348545ffc4745e3505a53325352265a3da508d022d37ae4cb7dcded

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dd41ca5bb52ad26c8e0e1f519d4f4365
SHA1 7b853173d7cf291391752e1f7940cd6eff7dbab0
SHA256 c604acd47b6c7764230796ec42cd926096eb24c11660c1338e5bb43f38d72766
SHA512 58a50338ed87acbbc053edcc3778c818a0bb35028e0621141a60a9cbb4a040c9687ec8c31075c10e6dfd8e21500d747c461702049d864e142c305af28e328cc2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6f7d4dcefbce81781cf23fa22e6567e7
SHA1 f119443e10f00efa7e3094a8bf2d0988f263876a
SHA256 85af55755a5f6bb7302669ead8c2199da24049c3105e0d64a052752e01cf0d8c
SHA512 60095fc88b112851cb9558e6ace0f44e688ddc1d72585fe67a09e949bff412728af9367915b762c990eb25624d2561612b670025c1e8592c34709a62ecbf4b3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5810c4.TMP

MD5 4afc51124ad4285060c4f05010350da3
SHA1 141df40650e53dded8285102cea4d79d5587627b
SHA256 3433e2e27c77e850e5245a90a1575c97b1879f3e0035734d9d1b162e2f968411
SHA512 f9507938b6976346258cd66c0f043a5a85bb1e2e1b0fde1a88ef96df22fd464fbbbfe6bb0a0d57211666c8266c8a473647a81bd08f36eccb28990ca0a894f22b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 26f7b574754ee6d54ffbd53e33683ef5
SHA1 ba01ed96f05db2e7fd40e41dc104b1bb856a5ab2
SHA256 be38803ba827fbbc9b8ed0339bcf2d21687ee4038367dcf372ab4d0eab13a0ff
SHA512 793658898c9ff1080f77ec0528ec8f088b3c8a599f9bbc66581a5f80984ebb00b0ec1b8b38263c8d85108ee1c435694ecb0cf52cae963b86d88831faf184d269

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ffa6094dbd37e233c99fc3e01a2c71fd
SHA1 9b8b37ee23cfc90f25d9f681aa9c2e954fbcfea6
SHA256 52877618af72f2a75f9235f435604d21eb0b73407e0d2cf495aed7343a69b6de
SHA512 c0b9030ca96e56743cda0ebf74ceadbd6db1af12dc53fb03cfabbbfc02bf266c2de114e1a51be27ef11c2132670862afedf1a32e8b681266114e2e611d5160d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 160b113f759a762e8404b19ac42bcf82
SHA1 4bffc399bb4f9806ad3e9ed564b7e1fc90763b16
SHA256 7b11670bf4fec666cc39fed6648455f07c1562f2f4de0c75e3af627c2a768a58
SHA512 63489fede096f95fe832fa4ef31daf75998f7a6b06440ebc9427aec822743d2ba5845f1e295c506ab7c0f0f8122530e63b4ecfa8cae4ff81bd465cf95424df79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e62a362c92edc06d1c6ce7f2b6ff87ad
SHA1 de80b63334e6692433633f51b67a6a188cec1630
SHA256 bad48d31aec05a65ba1eca7bfb5ae7fe8f644e6c91067b9e4353d586aa616858
SHA512 c5875c5c1dcc09b9a2e3b63106f7380b30412ab86d7e4a5a9d26c4bdeae6989b87113ac97091b92d5bb5577e90071fc3eb6917422744af92076d4f39d5491275

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4c44f03ec0f294b58654404b49b64f7c
SHA1 d9b6cf4e40d78bdcf6f78def0fabf24b9979bd5f
SHA256 1e4c0ceeb629d124e4a4df744360a6cbc7fda0748c4f7ed3affab172983d9a14
SHA512 90bf3b70657b1bb49fb37aa5ab264fe4223a2e4014ffbf9e22f88beb25c168ac1997a0724f99f7f450ff813ba679733b167c65329a5baa51f56645e838ba46b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 895a691b528ae38901493190bc6e95bb
SHA1 a7b39dca9f2582ac2e00b56e23f002f132db8530
SHA256 70eba129aa1e317b5ca807c7da37a06d66827fd08da874e8e5b0a86f959b3844
SHA512 6b1098fed3636d44a9d593fa0f0a3377277fdfd41bdd3598091ffb7496899c63a387693bef2c6bf6df3c995b949645366fdc3363bf347f1f05a9345cf70942db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3cc16ceb14af72078e29e3b8123262ba
SHA1 7ad4e950f7ce8b6bfe09e2221f17bb20c34a7fcb
SHA256 6a5c6623e942deb1e8a622feb63aad4b6fb6ca4c646052fa22b080aa8880a765
SHA512 bafa645ad07102565cb5548432edc37d2f4fd28a0b347373e763a412e8fe8a18308b7bde86aa50caf935616246bae5be65d490b6bc7d1eac8828e9ea47aa6724

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e38133a5f2d3ea9ab40739132864505f
SHA1 b3336f2d28020fe7c4a4ac34d0421a1d5c8ec567
SHA256 768f0ef565a0a85796ab74acadbf0a0e407c00fd478bbe52ec557899f95e8731
SHA512 7a22b8b9b7d3d7d500875ed62872aedfa86dcc79453d2a836f0f8c0bdd78622fa452238d73ba190b66b45159bd9983a1c6d804ad7c0262dd0018cff2da9a396d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 c3c0eb5e044497577bec91b5970f6d30
SHA1 d833f81cf21f68d43ba64a6c28892945adc317a6
SHA256 eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
SHA512 83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4d03071b820a43e0f6b45bd6721957a9
SHA1 3c82f7966ba2313952e075d8211821664812476c
SHA256 251c97491f15abd27fcc6d598f923c7f3105eb635efcd5e4bbd97cc1884ff7cf
SHA512 098adf6b33f7ce406b7c40e883db19f406b34c4367c9fb64cfaea227d2ab66b309fcb42c35fdceda7929cfae8c99fb44e1264e7f47707fd413ae684b955ec245

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00000a

MD5 8235f98068f731038d8520df4727c625
SHA1 6ef1e3ca36d59de490e593ec195b632e8e09565d
SHA256 98280dcf81e7ed7a29b2d383c12027481bf771aa6358012ee5ffcc8b3af21e38
SHA512 d75d4b688898ee9c9ee07f7be6e9dafd0154518ac54042270666969dd15dbc3b7c8cf92997c510f42f20a5ad8270d5324dd8f2ef91666a9d6d0450d60bacfd83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3a37fbc024a29529008c74a18b2bbd97
SHA1 057a4a9263089b30c23bd1d0c19a392197b78555
SHA256 8bc0c9ded892660a60d02f2530f028da6dc6bd072fe5d191cb8308b13dc81c79
SHA512 ff4be94f9a0318d77c184f30772d4a3b420c2e86f381d0933bd5fcd7f7a357057aab3f1c07fd86443fec94f0567d883f38728f32b3134ed73700ed720eeaa68d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 587231cb9d54ce8430f861bc5755bf23
SHA1 c81a4b1c666b88c33239e9f6387b22cec0bf3768
SHA256 38da1cb188afc2879e2ef30138d0208a0816d8586f40711f9f6e12a6881f823b
SHA512 df5525fe1ee0f7684372ddf93374bcdd1b1cc4904f3f62d978e83e16cf43e23f488599a42a1fb5e9d83a7d1debfca3444619b9f25c5257253e256528a60154ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 065066a9b1f90f3eb3eb91c7cda09c20
SHA1 227cf34f217df54363e91b8d1c1f5b2015546947
SHA256 5fb32bdfc8ed935791da8aaf76e826286ec96f1f2a5b17df7d9948bff1d89df6
SHA512 aa8b408e3d0ae9a82b4c1e21c202bef5cd9855ff51bab6444ad88b3fa716d8ce43b6a5ff998686f54235feae1bedc2d56aa60705aa84ca24d11420b30d2cd3a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0d807087014a40eea6a9396810221e0e
SHA1 3b7b82fc17a482bba8da60b4b360002ffd89d5ab
SHA256 c6e8d57ec37974e9cd77405b5d5b94e512ad6be19b17beec113ad895db30fc02
SHA512 20051102b4c6e1d39061b3d461f64b8a12c2b8198cec4c2fd3921d53f528cd96a84a2661a0ab046a7dfcb46fdbfaa6b6cb894214b49cda7e7816462a678576ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dd79a2446046b64331ea7e54aae8a3fe
SHA1 2102418d734401d7dc8887a8a55c9d8c416a2ce3
SHA256 cecbe923dec3157416ce038aa4cbb6db0bfcc70217dd845d13f1b38df36899d4
SHA512 fa430c7cd53e6187ae8db9f8cef07e63021f18b19cc54255e137d6155d799518777c714187300f28a7cccc76ee7200bc7823e62e5f69ceab28d9c054d1c561b3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 18f90a846014f3d81834efacd2a1475e
SHA1 b779c82cf85d894d6d0f630a5e5b6d7815ab4335
SHA256 5fff2e26288bdb89fd067246c1d07ccc1b6f2d6e91845e034250fcc7e23c1794
SHA512 b2736889a7fecaa434bda690d900840472c3372903b77042ab3b2a0af8f33f6e817404517990a23bf70e480a033707c02b1710966e2d78d7625d56c8a0bc86af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe638e99.TMP

MD5 346d58bcd38d0a6287deccaac623a5c3
SHA1 f4616f667ff0bdd7ede3634020b2cceaa6ac3bba
SHA256 6b1a58b29db2708f6b9bd5b341331427407e8bd460159d3872cd2662c984cfb9
SHA512 180d3ce2f58cb4f62245067a11d97891dd4b997bdb8cf1fd91d09ed166a5817ce1298cee7d95282d2cf69e775144b52402865d09f2b5663ab13dce670cdd6606

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000027

MD5 eafa769e66dc39957aa35f48828c79d6
SHA1 723e15e212023e555cb10cac00c9577420c9ccf6
SHA256 c9ec3112b647eb4c9d6a0357d55742af5359d493ab697190e10d590585b7988a
SHA512 3f0f152d2da71d8b1e840b35bbb7076e0e193fc25c3fe5182487bbe4d1fc7e5b32f179ef61f0d25b90951554008c97f64df0b753c10a9f1a211a17a7fbd31a8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000026

MD5 7f6f10fe29ade78c83d61e4c94d08c58
SHA1 45384d928370fe7282464ee09780dc21999c76f2
SHA256 2764a38cddafc1476a50fc3a5b98e0c781f18f19659d60e3f0e73fc412c7092a
SHA512 ab839b10612850e357e8edcce2c92aba3f5ff10276109c01175c5f09b319227f2469505bccc66be21390d7f0abced1057cf90848bcddf72743c1130c30b25740

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

MD5 bafb26fed0ae9bba5fe7460bfc9bfcbe
SHA1 557279b848bc18cde9e6e090510616869733e782
SHA256 941ffa3495a8d9c3b9dff1215546f3ca0b522627bc980964185728554bda3e8c
SHA512 f39b33bbbd7542546b92cabb65db762e3831a015abd56d4f8933c577adc4382f85cea180a7e4d086e71bb850c68c258aea261aed353b8211147d31faff566008

C:\Users\Admin\Downloads\Unconfirmed 729442.crdownload

MD5 1297c8efb5b9a87255b93ae2af0036d2
SHA1 8c43dfe959b894595e2eee40083afdd77ab2dfa1
SHA256 78aba77129109aeb8d995c90432229509f18a953596b3a47ca1cd758bdc8b906
SHA512 ce9f226ac213ac293a3319282a2e3412028ee58ab58afd08cf7a86c414f7191a6a61ca97cd2801153868ee491cf41ed5409ed079c1bd1167b35742de8420782a

C:\Users\Admin\Downloads\Avica_setup.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2db0ef8887324ced5c6a3b4e694b976d
SHA1 e571203f12fab6597b3e0b2f2d18873ade2fd47d
SHA256 5112327b3e54ad210fba184a82084b0f8d8ea141d344676f78d947b51c3a3280
SHA512 0c3924306a0fde20493c1e8c5eb54b2c48f9be735fce0367b27f376468e1740880c74ac0a3c2b2ad1937207808d80b6c805b565279fa57a173cc0809ee60f728

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 b6a2df8047ad07f40df38f9f8dc48bcd
SHA1 9f899deeb7cec41502116186289c7ef6c849debb
SHA256 89942aed530f44d08645714aeddd80dfaf93cda71bf2d4eae903ff88cbb9fbbe
SHA512 d89907dba39d79f36d7911ad2d4bf03350da481020f03c6908d52fa676c0df564f447fd858d5d9aaba09c2e8e6e317368c882c213c26dd909b8422239ddd2385

memory/4924-791-0x00007FF626470000-0x00007FF6268D7000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 74d72994cfcebe3cb5127481ddd4e9b9
SHA1 4ff98c426ea53d0480360e8b80e53a81e8dae36a
SHA256 9c5892fda374f83c7343ea45324c2c7dc85f3c454538343fba362f6fa2536b7c
SHA512 88e00a39da12a12a14233b54dfdadb04f04502c951c5097de0fe2211346432e64fea808bd33a4ca47926b58c67ff52a2785d32111d384166b6a594d07dcffb8a

memory/4924-824-0x00007FF626470000-0x00007FF6268D7000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f1f5759e2d704f697548c4c8d78159a4
SHA1 d1813d951af2b76fe7e97cdac1b021085937a88b
SHA256 37a40efe9aa72c9a46ebe3f2b2b2de7d3553cac7d3141fa4aa318e81cf6c99ff
SHA512 2f74ca15d02f9b8a1e2546ef3ee7346d5ad466360d0fb88927fb053fabb007329a6a7c70f2ab80848ff6a3ab7fd8ca3f1e42e0a68d56ade558309b7fa1eeee49

C:\Users\Admin\Downloads\Avica_Setup_1730047939.exe

MD5 dacddd9ed3076706fcbe2899fc80843b
SHA1 b495358c42978f749fd6f576c57a6f71c4a826e4
SHA256 8dbad1b2c293ef3ed1ee9b1d864395a2f52d3fb8275d32c21592f02763f441f7
SHA512 a8d5dc0e6dad830007df21d26bf5e5f4b955ed47fae12b0bf8da05ff60daa6548da2c04a5631bbd7ea8976a8a059aa0819af39f47282bb7d0558bf44983f487b

C:\Users\Admin\AppData\Local\Temp\nsh23D5.tmp\System.dll

MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4

C:\Users\Admin\AppData\Local\Temp\nsh23D5.tmp\nsDui_english.dll

MD5 1149683c84211d751af12ebdc20b19b0
SHA1 c850128e27ba351c8499fc782e90a6459dd83c05
SHA256 2da4139072988cbb1473b631311a82443a23f378cdde5ad267b6c5c08dbd3098
SHA512 2563d5f8c0e973a3f0df7ba9cf48fa45e868adad4703699bf7a73f782b4abdffa356ad0df310cccd82533f67a90ca5367aba032ba7d94b4c9c7da345d1a10556

memory/4924-860-0x00007FF626470000-0x00007FF6268D7000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsh23D5.tmp\killer.dll

MD5 90d4a02442dbf8cbe8acdd751c090e3a
SHA1 e45d21b5ccb7aa6014124c649caa29bf6cd0a0bd
SHA256 c38671ab01efc0e0242fb7e7c0336c2cdd0403182070a1b2075f04a8f6616a3a
SHA512 8df6423f857f974f3405ca0e21aba79f94b8dace39c9c1e78fa420de87fab5a149de484165f5fc8e1c0a2fdb80444d1887bdce63c23418c6a7a372c2d0d6cf95

C:\Users\Admin\AppData\Local\Temp\nsh23D5.tmp\nsExec.dll

MD5 3d366250fcf8b755fce575c75f8c79e4
SHA1 2ebac7df78154738d41aac8e27d7a0e482845c57
SHA256 8bdd996ae4778c6f829e2bcb651c55efc9ec37eeea17d259e013b39528dddbb6
SHA512 67d2d88de625227ccd2cb406b4ac3a215d1770d385c985a44e2285490f49b45f23ce64745b24444e2a0f581335fda02e913b92781043e8dfd287844435ba9094

C:\Users\Admin\AppData\Local\Temp\nsh23D5.tmp\BgWorker.dll

MD5 33ec04738007e665059cf40bc0f0c22b
SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef

C:\Users\Admin\AppData\Local\Temp\nsh23D5.tmp\nsis7z.dll

MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

C:\Program Files (x86)\Avica\firewall.bat

MD5 da57f1ef77c4cb54dab7bc0d7069de18
SHA1 6e8a251500e69b6542a15989ee9c19fbc631acb8
SHA256 9c2dc07dd54047a62b77e24dbc05d91abd5ff139d9a392e3d6b653526023f905
SHA512 6e4e240d2499366cbad548ca606fc81f8bbbd5ece2ac460bfd57cc06c184714cf819198e5dc3b19c3deb250b5e50fc8699ae402082e2dcc58c6680d3081b1e80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 eb17a4e21d579880fd5ff876f4d83494
SHA1 6f2bcc0e11fb45f237b96e32ce195a15f36adb0a
SHA256 ce3ec1d9c0f1fc9edfbef21e03a22558438ad5f670b58ff825a5fdf9eed0249c
SHA512 ef322b8aa2cf5593cca7d1bcbeaaf5bba0941adfe95aafd2d778f0327187ad54d482722b8051ad59e4b4904d56d0af6b2bd1aaf6b218d96336a5c75868fc41f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 fb2f02c107cee2b4f2286d528d23b94e
SHA1 d76d6b684b7cfbe340e61734a7c197cc672b1af3
SHA256 925dd883d5a2eb44cf1f75e8d71346b98f14c4412a0ea0c350672384a0e83e7a
SHA512 be51d371b79f4cc1f860706207d5978d18660bf1dc0ca6706d43ca0375843ec924aa4a8ed44867661a77e3ec85e278c559ab6f6946cba4f43daf3854b838bb82

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Program Files (x86)\Avica\Go_Daddy.cer

MD5 91de0625abdafd32170cbb25172a8467
SHA1 2796bae63f1801e277261ba0d77770028f20eee4
SHA256 c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4
SHA512 2df98b9df476d49399f0bd7f74627356cbf0e231bdd15575b03206a8c52bc6a010790543cd79a5d85254c9b7bde708ba1cfc03ab2138bdcc80004b88333d9843

C:\Program Files (x86)\Avica\drivers\devcon.exe

MD5 bca378b16b514716bc0e675bb1b6bb6d
SHA1 05c4451205d778a560a1fa8cbd49cbdfe9afc928
SHA256 df2166c0d45909aaedb4256698ae99c9b7b462964bfbed75bdf93b2837e7776d
SHA512 460230cfaa64199e8f31caef27ccb25507baa25fb6076ee8fa5029d277aba23fa820f2d144badc214f9054b8018c3ffe6474d4188fd81121e74d613793149b30

C:\Program Files (x86)\Avica\drivers\ViGEmBusSetup_x64\ViGEmBus.inf

MD5 cd0027aa0f5a8a47a6596d880f06964b
SHA1 167b62bfd7471179cf68cb5b2f83c8365edf4875
SHA256 634b032a33cecbf2e43c46c5896a3c359cdda452c632da6396452419ffa301d6
SHA512 19563a3fc7d985ee48a158f6f051e5b8ba200a092b2f1e902024aa9c6a8d6f5a6f04b80c8ea0587bd23802dcfd7775a7a625164387ae61ded5124ccea61b8ef9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 402842c49ae90dc2fc6895b39077e7f9
SHA1 0755c7f8fb29bfab424548a4de5e7e082d4b0b1b
SHA256 e1d0b0dde92049259b7ddb1203e3e0a91ab8f503b5e2e0711e74bc172b968281
SHA512 f45ff72f36ad926d2d5f1d1bda556c3fb9598b7b7940e4694a1dc278bf9b4997bc640868b7c6d2aa91fb9fa2576becd667b5173212199dd5fdaea306020bd71f

\??\c:\program files (x86)\avica\drivers\vigembussetup_x64\ViGEmBus.cat

MD5 5312064607460baaa4562aabc42b8922
SHA1 c8a0758e5ae7158acb0f6f111ad298fbc0b1a2ae
SHA256 58b8a1bf9160fd4310a183b3431580eda2bc0a5ecaac2e0fbd6399184ff02404
SHA512 dcfc68f09d339695aa3b8eea02a7adafc21473d259df9d6dd7cbb7d29fb8f3ff9b3184f8921d9f829c665b1447ebec7ce97729914fb7367bf6e07d9fd02d2aba

\??\c:\PROGRA~2\avica\drivers\VIGEMB~1\ViGEmBus.sys

MD5 87fe350c6ffe8d60ce58dbc16a2d091e
SHA1 7e2727a31c54df2fe4fba73a6b0537afa5faf534
SHA256 8fb8402b7266fa9b9ea8841708317c8c25367b2947eeda9b6462c0e4801f05a4
SHA512 f892b87a8d45ddb14a99e736eff26f7257c492dade5754362acf4d2522927c337dd3d6ec4d47b0553681764e5cf15db61f8a96098889a7b5a56c052b53dced63

C:\Program Files (x86)\Avica\drivers\AvicaVirtualDisplayDriver\AvicaVirtualDisplayDriver.inf

MD5 74525bcc98bd5c32a49b0becfcbbd557
SHA1 812e84cf7f5230a351c128c001907e9bc092ae41
SHA256 d8e9dbd6ea59375be85357a22078314fe443335b4bcac4e0a034b8efc861e4b1
SHA512 70226afa26930052ef1bdd5f1dc1bcc9613f246355e3c6d2d7c65a59d3feef8333f6b7c5d57ff6c1addcea5523ed1bb3064cfff41841ae0c4ea5e5907e82f63e

C:\PROGRA~2\Avica\drivers\AVICAV~1\AvicaVirtualDisplayDriver.dll

MD5 321b124c8f5edeaab2deaf3c47e53b82
SHA1 5e886e005e778d048cdb5a6c246e70db436c6f8e
SHA256 7d3a0a92f57a7ad38c3d880d20c1640bb19b5d1cb72fb7a8af1bcd5e55de6bed
SHA512 fd167fe22d5353ba5210c3941e80ecf8b4099c959234ea438cc3bc4e9647b91b4a617ee5dcd69828a2c37a6de29bc21d017b2f82291263829c4d421d74f268ef

C:\Users\Admin\AppData\Local\Temp\{8d429ad4-7248-6f41-aa9f-a968aa09ce40}\AvicaVirtualDisplayDriver.cat

MD5 da04d7462383a8bcb21b2c5c599ce6ae
SHA1 2d441073dc9fdbdb747b0029cb54ad92208f06f7
SHA256 acd77e77dc9f23d039bafbb9434a7d147458b896001b44b3a823270f302fc0cb
SHA512 358cdc884c656199f1be4d7d8763e532d29f7d7df00c1982b61e492171331e3f227ec0984bf35268ca2cef0f0930f51476dcb633043bdd16278665b4bbcb00de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 61ec4b4216b3072fdaa42f10542b7409
SHA1 5f2d0eedd631c4f57c6fcabfc861224979ef99fd
SHA256 731be998bf8befd7e19687e3214e0156d1968a38f16a96c1fed2d870974da346
SHA512 bcf849c476c10ebe337b28630a801a893f5b9c190c189efce1e96838484b09dff9e337cdb743bfe3758774a00f4f05a8f7bb0ae1d84ba21f0ee7f160fe075945

memory/4924-1418-0x00007FF626470000-0x00007FF6268D7000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9d6dce142ce7a09a75d0cbf4594caeba
SHA1 496a16defedb829c533887850a5b0e46909588ef
SHA256 fe887ca30885b13ac19e1d38dcccb76e22992bdacda471884a2bdbad701de79c
SHA512 bfd59cbbcad48feb3974c54ea797cabe39ca3806fc0aa3945d3e44fd197118641203b0ea0f8e570299d894a993cc685442907dd722122e9bb317bd8033634070

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a2681adb3a797377055d9b88acdb1e9f
SHA1 148e2b538c55d878f46bac0e23928b5c7aed3f6c
SHA256 e26ee89a928ff3c4be7b65867b465afceab22d7ccc686e7044ca04214f7aa813
SHA512 1369f779ce1b978c2437d1b7b4caa46019ba6f18ada8110d7637b8ce05c44d2ecd1d301163f7c73b00579216154d590b48dc3ed5feffbb8f13c95347cb9bf242

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 39cd2a9b28d6fe9f5a81bcae60c7605e
SHA1 cbc901121cee2eb130764c5f9b0e4ad07f0cc7a7
SHA256 09699b49c895a6d9ec763d0c34a3c80be4b597ec0e271931aab4ab5e48f4c927
SHA512 f3a1586755c9d07f82575b909c926647c41ec3f9fb767c263758d3187f122854fb2cb743a45ef753bf02a54715f9d04c8fda2e5342b5e16672352c9569ff1eaf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 63de491a82ae1346a0467337369145e9
SHA1 b21fe362a222d98970c0a29843d55de072d02022
SHA256 46c1fd85d8b61e69a04a34af72ab6b8651165f508c73253ae56ca8fb2868a66c
SHA512 e16f325c45fa472e2f696c5c725c0de85a269002aff817edd4b4d92c29e652327fc86d891d440a9d358b6d0ea22b12c2955e0aafc4680788ece5ba62cc70f868

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0b9ea696ea786f063df05277ed00f956
SHA1 f81ac132b2f4f7778b11674ec84041a868dc4897
SHA256 99dea7f4ab4f23bc2d3d8282caf6cabb4accd51ecd15941ee6c1aa377daf47fb
SHA512 1d44f7c014eae11d6a2725ff876dd3ef96b4cce40bae4c5f53fc24d1f7537e60b9d7f2d7f197d7abca9968ed18d9b00c252dd75b9bf6edd29228acab40d79559

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 83f8196c6ef04e3acc0a6728d39e2d37
SHA1 f6954182229a8873b708afdfd955ae622ad076d5
SHA256 93aa99d0bf48958261e8938c6c77bec041e5f3bf9a17942d7cca71e6e56126c4
SHA512 f0e3090977af11a3b8ccb837e14b5f26459d03983d4de2f78a186ec274df4b06b22e686de9d387fdbf6bfff22a8f0d9f4361b72df2f71c449ea29325279f4c91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 042e586426155e86eb902dc1f0df5d43
SHA1 bc27822699ddc0affa79283696c9dd350abc418a
SHA256 102595f0c451fb510cf3c4c52468edf014bd2bfce289d7457b6b638efb338e70
SHA512 808b45070a2e97165462d99acd82a88bb600671a8e0ffe692824703bc3b24202f41d62975285787a9d69bce789b75dd4e4b439ec0d500ca656ea3cdf2cdb8222

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8b8d02eccbbaa779cf02ad108339daa0
SHA1 cef0ecade15c0369d57fa172779ed6f37b44baa7
SHA256 1b487ea4168120c00df186a12592e6e97befc8ff1d332b6419819907ef2bcaaf
SHA512 76c9832df259654e07ad9dac7ad92d6fc6b3038b8d6da6b8f9ccc3b20f249b3326cee07b56efb564ff60fe791ee0473965a0147de4655858cc7cb4cfc12ef809

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0da7d7896c6e66a45ef215587e1e18a5
SHA1 c0bb992684bfa3a5a4d8a26510bee2fee148848b
SHA256 6f3d32872422d070f10022f203c09779e01934a4d6fc2aa0329467f9c7a4fef1
SHA512 080d570de13348c5550ab8374c4566f1f4cd153e23862a2fab68843fb99dcb1267e5c0cf32b7ae3bd181450439b2b55ba1839ab70f22868c4da83643b17eccf1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7c045a404f20382893a1ad120d69f6e1
SHA1 c69621b5b749f72674e456bd49ec44efaad24301
SHA256 d87c18da1bffb4769d7f73ca97dc63d7925bc34902132cc4032de067bb053957
SHA512 0bbd90381536bdc7e7afeae12f41b4c03fcbae919a9564e8f9bcaf10e14909453e0638fa461026ce832cf5d0124f16a47ed2acab8b3a40da4e9f402cbf3e9b38

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c83aaa5cbb955573f75a4a7dd25d23ed
SHA1 72aa3bd7b94d885f96b22bacb9ff063546e036fa
SHA256 734f28b19f75a57640d0fd8a66106644641538f68f3eee908a0c82ec68c69dea
SHA512 1bc05d7eccc7db5678cac107b333f838739ffdecc7fd0b42d337a4c72ce00a7906867c097204d126a1e8e10c420f263dfca48d31ea21146507d33bbe6ccfde50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9389a11afe978001dd0a38a4b901d94a
SHA1 a09f013985aac18abce259d1b217cb76f61640b6
SHA256 6e55ee2944651cb891079d3b4a5e6b4a3663c5b467e5552ce8e06bc66bbe41f2
SHA512 39f90f717fe3046fcac7409cd26ae4591db8dfa2a6e9df7e3967fc8d96c6e49383cf52fdd91dca4d96c61e53b1a04fdce2c41a26b6bd82dc7700ee7d5bc6fdde

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 44a0efdb62c8716a215a27af435fd27a
SHA1 d293b55224f753fe1eb368a8b7599d78709c3b87
SHA256 4e7f7517db2a941ef752966fefc24801b7c8a94d71bb5cc9c64dc8fb697dc0b6
SHA512 c039c14abf279adfe16d0c3621dc27a4713c447a5cced596fd8147bcbe5c5e60c444f30102797628954fb7cdff8de13448c190a95f5dd29713f409e7cea3fac6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 04c96695f6f76977f3966f6fd8a1cbd6
SHA1 7086e39183bb8765c9699211725144288efe0ce4
SHA256 b17cb40cbcd40c861f4815e851434517f5387cbf5ed8590071c72b564fe060d4
SHA512 b72926ec2c3f672bdb7b1d74486e1a15fed771e36fd89eae3d4beb9d96ea4940d30cf52b59dc859fb2b3d5f9e005f68665c54647c4f70860aa85d330e0e55c66

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a53d6b68dbc9352fcf12da01b732c914
SHA1 39532f6b6e8ccfa8e2ce383d05ba8a9afd9c68cb
SHA256 b81de23d8c9ddb417ba09c3bf494e81b44bbb11be5902e9c8901e089eee28e1e
SHA512 824df5b723446e7947510add299a101edda9c24902c7022e89f1b378b27afd4251253465d13bf929dcc187e28fafd6d81d6cdf0bac5012bb5b3cf5af30b52aae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 509179c4e96165e2dbebcd840ee4db24
SHA1 70b5333121d1907e071856ce22989d4fe35e24cb
SHA256 66b1e579e1b56f3fa13b40475b20817466fde13323852d1bded8fd1055633fc7
SHA512 6617ef3e569ff1ea0b94b0ffa200c9f91d9173a579928fac83a626f2c8c9aab5e3d0f9269ec2fc3c359cfd11537b236b97c7ac245243efdc8f7c4ead0dc00ae9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 260cc404f171b6dd14d7270325c93fc0
SHA1 0e982a19629f0832f21b5316ede8a170a0a438db
SHA256 66a609f7da8ab61ee497710e4f85c01ea35e5f90038842267fab1171179b4438
SHA512 7ecaa326f5884bab21f4933f9d90f7e92b1b3505254f01601f902182cc409ddc82010a70e889b34fcd3f468b1b38bad2a64416265af69ca3ed96c095964b5972

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 008efd6dd31c9c719de0fa4666e8cdc6
SHA1 7a978c6fe564a372ffeb6b0bcc6eec3e98d65326
SHA256 c51cecd3e99983b57302c934daf8f2c7e366d6a9bea4a74a8d38de15b8b9276d
SHA512 a9cc5052537da55bf2737aa94dfe9f1f7217def2eac1a3e3e19467297d13245199b146898c60e81672490e7c86d6971ad7d3545df5896116f46b77d32e305657

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 263db9fbbbf69f2e0d96467f01d54e83
SHA1 1f3ab0de219112f582d2a857ce06c7925569d52f
SHA256 99e0f6bd3ccc78801bf385e09331901b4268f28baf209766e3a1b1aac1484978
SHA512 bf205edf4f0e4ce0ec2b07cfd7110a315551e814bce1d64f5d9c61ada56e8d53d01eb30710900bd284b0ad93aa762273e69741db7695f3d0501d080aa97b13cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 95bea4eab86c528792ff9f272b880209
SHA1 b20169b93e67a85632d1755b8bf475fea7ad23de
SHA256 e86188f8d8d3d3798b346940966b8e138ee8795f162e5648a89dbdc15d9068cc
SHA512 ef63eb659f57d604ebed048ddd12c7a31ee8fe9593d1d7a895bc0bbc784cdd73672f30ade17276c5a5e2c5652bc6f0370c10270cc274d03a41c80a8db06c3c5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 c06a15fd1ddece0f4f1e55f31d7f5ea8
SHA1 f1d0f63225184a665aea12b8c7a2f215a2cbacb1
SHA256 6d11f8dd7d0bb8059b2f3437ec2a83f7860f8ecfb8993e7c302b111902a86433
SHA512 123a509e12fb0966049a5e4656e03c47ac37eeeeada2ca2961839fa7dd2866977125a31c6a5b5642187008fe2db96484dfc919f4ab6b01d3a75b7e2b57b514e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 261d68bb89c3dc5dce14809fb2af6a32
SHA1 e3c016164b641fc65ef03e90291c06c7699ade2a
SHA256 6ec365cf4cfe8bf18529b94bc1251295057360491fb2a351fc80cb51ed255411
SHA512 bfef8a6f534ab4af0ba2f53f258bf9421d1622c6275c2712fa91367380787994c7e5fb3eec69223534f98096f982dd29384580adbbd05c828eea246d37e275d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2edc84eb533efda552c31e30b31df2f3
SHA1 190f39f70138d7643bd9dc571d8068b55ea824ec
SHA256 11d4010f1c81f37d1577a4aa771e344346372356449f0fd647a55ea563280cfd
SHA512 9142c89fce182285a27bbc8f644c90eefb7c7a9600b6d7372f34c1940b433e801565eec6be56d929b77651091a8c10e1c9d741e56af107aa9307cf81cbf51b39

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 477a56d8df6634cb1d16ecea42622a30
SHA1 0d3dcd7556c206c9412cb8b0a4d5fa86701f42fa
SHA256 544d2666d4190ccbe47710da5b8b458a8d93b28e1ff360350963306eefe628dd
SHA512 8a1ecb4e7c3ad2af3548174621c1fb94ec49104ef3201a2afdc90e8773f125540d6b177878d893513d7c0e99e9d070b9ef07f729e2a181909a993d077cc9c17a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 823630ffab71b87084f91a26ed3293fa
SHA1 840e89dd9de464a3812ededda2428faae0c3fa6d
SHA256 48e9c92f4d4e46e333a17bb61dc2b62586ba03c1a0e4c1cc0c0e1c2e406d0a20
SHA512 eeb247d3005633e97f214ae7d8931570fb31f1e695a04b17c9906adcb36c6daf13cefbdf54de9b81d3a2234352b983f18147ae979beb4df1f10514044782841b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d41910ec7bec1ee972db758d64be415b
SHA1 34055a1b9ce912adec3e2af3908b5178fc9f75ba
SHA256 78f2fd2d58fde589bd1f95792c84f731c7c7739ce45ab78a60e2cb3ff2721954
SHA512 835c23223ca492b4c6772d9129092e55b515b96f51b021a027cfcd3d0a87a4ce4bc463e8421697107a9e96b79b5a86b0fb53dc4f6d4fc0a9f60760d8ece6ec7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 37c0908bf373fb47a25da846f50ffb42
SHA1 a6523f68d81437b69fab4b279b84a2cd1b349b24
SHA256 bb578e94c90af5090e4bf22d05748daee969afe390b419f30b54f24bd58500b1
SHA512 4b37145b8ad175ea58e720977cd8bf52e474e4d844e5e212ba5841aef915ce27b27d25975e5d278173002e8c4a576d56819c3d3446801962447ca78aa377fc4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 43e1cc6f04c8c441aa3d8a1964262fc4
SHA1 5487ea54cb7e7ec1a1cac9ac7edfac9bc4ad0750
SHA256 937605e3384e780351b5576f6a2567c95a26886d511ada5b2f4900672f05642e
SHA512 8d902e764d2ad5f087014330c9e2f1af3cec353abe7149e9803c15591eb2755ff829a42924d7aa866a7712fe7c8968e475b5467e40c3d9f2c98c3951a292ea97

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 75bac2f255d0c9ce81672634baeb5d50
SHA1 03677c68296d511b9d2b8da81f1503be31ccb595
SHA256 1128b16997cac3a3c7f18538a1aa3abfba79e36bc93843bbd3af88dd743fe807
SHA512 21404bd6e934b8ad5ea6a7d10eaad9eb3f797b6d736fa9cdd56438a74dc26322a64c6cbcb8811b2e84b23334e37003f2f57bb28831911f3b39d6986ff449e93c

memory/2964-2265-0x0000000000400000-0x0000000000480000-memory.dmp

memory/2964-2382-0x0000000000400000-0x0000000000480000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1350d8fce5a3c696b88dd634533d32cc
SHA1 9c8a0ed5df3f2ff5dc9e75a927e09fe64255e0fc
SHA256 5a5ed8a0ba0cbda66b05ec2da71b76b91a4d14725d6e805ba185cde82197af69
SHA512 8a1d000a42da2845df66d510f07324ad52e5e723d20e1bb38d18d26ffd72adbb1896910f0067ae110746216a7c3d5d93d6fd55017c32a7642dd0636768b4ed08

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\shortcuts.ini

MD5 d1ec50b89beaff7899fa761688cd14fe
SHA1 129f602dfdfc0baec0ed2c6baa3517229a161384
SHA256 cb6f45b4baebc298bdf4b59933acf0bfbb39905fb0a5cf76918362a7a373e2a8
SHA512 e4471b7569eae943e09ef6e2dae4bbda15b66fe7db6aef2bb1d44d7685324fccc6307cd50f5ddcd2db3ab69c0b2fb89372852effff1da4bbb0e5d615d29f7f87

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\components.ini

MD5 db7c000b9ea479d3b1879118a47adf82
SHA1 593e1f9c26804f7bdf0ef84d7dddc3cd72721146
SHA256 ac21747209b1aa94a25d7297cd4938cbacc09328ddb471a368a1968c4164073e
SHA512 5915c53fc95264c8b8063b6f4a0365063ed1a23e2b999454a0a577ea7dc5cea43ccebcb0084fe682fc7b40b6df84a1ad470d351a2414632b89a516264e64a23d

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\options.ini

MD5 3ddbda20013a98dbaf58eb86cd2f0239
SHA1 6115accae5bb63934709f55909ab34a0c03a1fa2
SHA256 ecb8a3fed1f9675d4b2016051fc1d2fa310bedf12c213d682892e32d0b2313f3
SHA512 1f480a33140127d8f9ce06ea13532e7e14d90d502b36518842c42860bc4a91b6b62eb6736698a15fd90c65e8c35695a01787f81184cc4315462188b9beffa9c8

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\extensions.ini

MD5 940e15a3691292c513f015e351f33072
SHA1 0545d9d43b188182988195db8a01fcd3ff43afc4
SHA256 0723b5d0c55354754b2084b712854c39ca089b1d883de067ac3c20935808397d
SHA512 cab225845a6ad929b643f3c6f8e9f1b8d0e7f0b19ca7ddaeb6350c508e9d21294749077ab3d041facca1d41578b2434f0faa37a5bb64f1ab1ddadda0edce4b75

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\InstallOptions.dll

MD5 fd249bc508706f04a18e0bc0afddec82
SHA1 b94efda9f41c89fc6120ed385867125d03f28bea
SHA256 c34f095e200db420ce9af5489c3e392be285e43c3f4c9fbe34686b1f0a1531ad
SHA512 c820c06ad5ae21101602d9e7864fed9b470b25fa9a0ee025d05e72697d88c7e03cbee7ad476f4e3d5b6e467248b8ad1fefa2710c76011e2156b85068961404ba

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\modern-wizard.bmp

MD5 07d52c053f2d9003ad81fcd055032dfc
SHA1 eea2d0000a8755482d2bb294ee9bc07890487cb9
SHA256 829da3d3af2550bb4ee208cd02473db35796f47c3bb8f6372efd7a6f86a32074
SHA512 d8146479de159609e2700518e6d39fca3d32bb735b7a2efdce34a84549fbb5c177c417cf7bd8d2864e70dc1a33b214db18194133ec4cf663033e01416a534ae1

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\ioSpecial.ini

MD5 76957a650110473c862909dc1ed6bb98
SHA1 94da9f1cd67220768edd3853550324a03caca6f0
SHA256 8dcc77e2677a99fb58403ea871da8e2bce904842a6fa32eb62b4b0261498a150
SHA512 8ae93a43ee919bbfb35143823f9acf4e71f98dc989f8d47dd517e0b330e1cadb49149075e1c4fdb7b83865cabca988893f21d4d1bb9e7d79bf35416d7b692961

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

MD5 7153c0e56f2bd0b9d61cbe3c697e3bf1
SHA1 59c1a4ba00584dd66c94113e7d38b8fec194da14
SHA256 ecf4f22780a8de18840ba98100130e64734d0406893841ac7361a3d73903a2ae
SHA512 33a20aa2217b42b59bda70bde70681fb75c0e615c651a799849b71afa276114e77e15087f97b2db231e2dc66cd842f367355fb268f74714de51ff15d2112a37d

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\modern-header.bmp

MD5 470261eb1db88b783084c5244fea4d40
SHA1 d751dad9b8724b815e4f8ce2e1dd2d9896931483
SHA256 582bca614b1658994935b158ba7eac86b78d561122c59943eedbd294f1aeb44d
SHA512 9ff1d79d03f0310cd2f8ad5b104455b9f4933ad1f590dbbe76b277b827162444ecea5c0e2604901335082a17c992c6e1271d5913d9676aed9663cd742f8bdcb1

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\options.ini

MD5 547ea5355672476415b21ed926b0dabd
SHA1 89877f0f446df26f40709d0a301b784f4848498b
SHA256 9d486b9019dba40359ea782ab87ec4c5821434fdbe0eda66647781792f104917
SHA512 37334d4da0a6e1a8387ab7cb7da0a0c7dc7113e9aca4a52a0a84ac74a2b004542cbe9e7111bdb3bb45328416761e3e4fb0aa0e4c3706804ffd6093a2e94287dd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b723e2ef98e6afe29dfd85080e7ddd39
SHA1 8c1906142dee274949b8d5fe95a4185461f9121f
SHA256 3fdfe728a5ee9239adecc8905459d62ac5c815db647669af0a38db6afaece23c
SHA512 8aeec2af7329461026a6d56aa8cd538695fa7ae72689584b583e90097e242cb3946c4ae3e956d6d248c9ab74c4967c2aec749568b50af566c481b11482f79fe7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 426a361b7c396d0c1b097d193cf507ff
SHA1 06dee7b902e95531e1c03c59096b01c0a69feadd
SHA256 4e406860c383d33f463262151f07b7fae222839b4fa015324c32abf9513d1efb
SHA512 b0856f4c00013b632ed8e45e829436495207f4c7891905465df74d6894a704bf552b34a38424ce502e7ebbfce29e560ff022e674a97e39e384902281086b0c63

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\options.ini

MD5 cb25cf7724959957955043a760b4194d
SHA1 1184ab0e87cf94510881c5ac731a485468729eed
SHA256 718054feede84aa1940f6bdad8eb845722c5b53556998d229d323c58e64c6883
SHA512 a0aeb4145fac1b5d38781ff44b77444f4ef4f6fb6afd7c7bb416658aca17834aebad385e5dcb00879aa595a61177fb45a1ffbcf5b57c70fee7c91768c7e201c2

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\summary.ini

MD5 4d6c1a8d1670b072e2222a64cfe60def
SHA1 9452f66e5168f147f530486982761bb0528c8588
SHA256 4f5baf2906b2d0cbe7856d6b4abd7a02f81a4d7827d637e15fd292c9cd09d61c
SHA512 7fd1580a2c60c6e867fa1c5ac931f2789a95edfac763ae35705d5dbadb8bff702deba44253f2dfe49ea9fce8675dfd5a242c9737326b4429f4702336af76093c

memory/2964-3080-0x0000000000400000-0x0000000000480000-memory.dmp

C:\Program Files\Waterfox\api-ms-win-core-localization-l1-2-0.dll

MD5 bf2d091e9f8de2274f2f15f84416bed2
SHA1 d5db7f858e4ee01210c0b587a4fec932acb44c7e
SHA256 e14888c563d71ddffd7146de3bbabe2dd7cbc84d4209e4200a2629ae6eeedbef
SHA512 aa11b5db91fa1cb23ca3c572b213f8c89b2dc9c064e00a0c5901a7e0ee7e62f82a4091c1773001f29b87274afa7a3e8d9051c71d5570fe6abafa5bbf2c55d709

C:\Program Files\Waterfox\xul.dll.sig

MD5 0618b0447d3923f7d7d9db17b66f1c33
SHA1 144a59e7075c3f67c29843b4b2b50d07ac0c62e7
SHA256 b9cc9389647b4c36714186ed6534dfd5e162b5ec16c9de4471ce44bd72df8e42
SHA512 8e89bd890d0df2fcf04a6bc72f4c7ca022c5a7677ac2a7f4180627e53a16bb019db632644ac3be084d1e747b1f7080a03c6a30875d9e5ead3327ebe892b937c1

C:\Program Files\Waterfox\waterfox.exe.sig

MD5 eb465c46a6304c24e8d0efccda1c7c2b
SHA1 43c8b7c7a90613c997cf0bd78b435dfed2f652c7
SHA256 4dcb6857ce2ada1212993d19b21ce72072241bba961fe44178ea68392151a79f
SHA512 25d51cedced52ff9eb4d23e455a95f94206320ccbbbd2c8ad6728479ba1eefdf2e887da675cb3206a5cd30edd2ca2faceb876228852eebf8d9f6e27632741d68

C:\Program Files\Waterfox\waterfox.exe

MD5 240a6bf157e337dea52e7bf5a27f1cb8
SHA1 2773987e599d7b37e3848fadfd114b5cef35dc37
SHA256 06d02c153a476e7f2487b757c7c63685c3abd38b406acc598ad9fb76a4fb99c8
SHA512 c565881c347b9770cbbf183e50fa816a97a50601d4a537914c90d06e8eea790c8946062df1f86e0a764572c6afb0c2f01ee238ec2976aafc44f9bdfb25a583e8

C:\Program Files\Waterfox\vcruntime140_1.dll

MD5 13995cf2f33dcc1ed0726f36f40c1fff
SHA1 cf3a15d1a44eb44b364ac5d60e8404c2be190d3b
SHA256 4cf017f49d5d8d894ac09535e1473a54380422db08e0c9bd06b55ff723e49a5e
SHA512 8e46959c190f02a221b9d2f5e179c8cf2d98350039145bf3913be41511abc46a18516772a21c8eb0564f6a5c28e5f25e95ee71459cbd8a2f9c5938992f199296

C:\Program Files\Waterfox\updater.ini

MD5 dbcb32abae7ce421e5f9cdd9ce8d6ba3
SHA1 63db438fe218b34a26e5b9b0dfedce5a4d385fc1
SHA256 21e8f89064899b455f9269f4db942fc802122d18aad60ef573a955151a64cc4f
SHA512 e1875c2a16ce7a08bec947ddc10ac9aa58838859df9470497c78c0f98020b963732e4ab393d01a92631657a848ff1aa33eff1c7ef673ae6b167c5bce122ca886

C:\Program Files\Waterfox\updater.exe

MD5 22a500e90e69addeaa830c8b8b85241e
SHA1 bd885e978f761615d4be6597344131679e2dd73c
SHA256 7fbc2e8a97d1007981bcccacccab485d8b6ddb01198e33c144134d21b1073900
SHA512 a68b00f246b53c4e1cc23b8d74eb5e1666afd6429d9857657f63d43cbd71eda35661d29b6ff82a0e4105c46fdb3ee6be17e317ddca05b88c39078494465e7ec2

C:\Program Files\Waterfox\update-settings.ini

MD5 b23537f22e0cca13ff93047b685ff046
SHA1 ec77701e8c49c1ab48256b93fe7504fb40b408e6
SHA256 e337a87d021fc25ac78f39d93fef709e51ca269c6e10d4d5c61b29b099f3b7d5
SHA512 9e8a86d70bbe4948290f3405d6f043f2d2baae0ec94dcdc759eae69f19bd6e0221405e43552c3da9a44b101e30c1a01fb2ef4288a386f234a9f73e8043f09735

C:\Program Files\Waterfox\uninstall\helper.exe

MD5 077af3d6f117bf47337eb0cd541025a4
SHA1 3dc294365852c492c979b3585101aa8a8ac0a1a3
SHA256 7260276651b976b62a6b856556559c497011b36c99e3fe75f3095067ef99a74e
SHA512 9d4d6f56e8c07f163a833e47d5bb1d7435d76ab27a9a46da11fe0405cf228954c44d90fac39d1d7d5fde63f65c4b159c90c59cfd66216cb7a8cff03e4c05c4b2

C:\Program Files\Waterfox\ucrtbase.dll

MD5 8d39854e0dec26e36bafc80c6408666e
SHA1 a9d356e8d337933f5868de958cce96bd34e8b19d
SHA256 02f7aae104de28044613b372df04c95db1891210a9df03d9aa3261d3623cf819
SHA512 94cee25bf0de821033ec73972e4baade7bad0e80241f569b106a21a5f64b960691bfe3979cde0cfde0a500038131323ffc756b60de2b85eb5cb203f7ab50a1b2

C:\Program Files\Waterfox\softokn3.dll

MD5 77b363b6114898c70b05284ba13e046e
SHA1 267a8a5cdd1619262bdfbca0ad7d96ad214d4601
SHA256 a1c9a8bd7ae312dfcd30933b3c21a34e73df88e554a84733ef46ee9a5f3dbb79
SHA512 0fddca56c584547740837aad3ac475662974a07837421b5a87e2e785f259da485ace07cd8137d78e2db6a71c9661ec333f5815a18e051bd3e16087d554f5cbd0

C:\Program Files\Waterfox\removed-files

MD5 fefbfac37461bd30e05f5befaa1f7705
SHA1 74f9024662db06184e645cab76bfecb0e6897545
SHA256 52523da24287c4d459131c2e4818a713a732765e06e9bbba1cf353888ba34f9f
SHA512 874d6bdef28dea531c858443810d0b026a3a5667e0b9985bce84b7c5ab63d06a015487bd1da2a914d28af7b6568335b1927f9fb9656715947929cd6671ccc4b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5610e2a51488345984ed3194c0ad5151
SHA1 c6952e312cb839f7b93e75cc8d7f114a7ff5271e
SHA256 536152a8b13f2c7200b53ad714db09380c55b80cc6f0aa80ad7407d5780e1baf
SHA512 6d9476f1776eb117e444b77a23dd268ce43d05bb01340f51abe75936705eeef4a1cecda7e995d87bc4819de161046a6f8b8568f07c02faa940aba739cdc16447

C:\Program Files\Waterfox\qipcap64.dll

MD5 ee0244f0d8f591aa4e6b1a0423ad48aa
SHA1 ae9bd75399586a237810c9520d5301b7460f2adb
SHA256 79f9e5d059ea7710800f18f8feff9cc630d9af68b146ac788abf5504dd9b3261
SHA512 2a632f2c54ab5443d5ad8e8798858bf1e16a4eb38d1ca8b208c4577092a64a9be657b18d2777d990025e7252300f26dc26d1b7af4c3835df0ee87907e7bf7127

C:\Program Files\Waterfox\private_browsing.VisualElementsManifest.xml

MD5 b499ede5c9228c742578086591193efe
SHA1 18e682ec73ed8fcea99893142fa8b08ee8a32b72
SHA256 9ea86a18d41112e25b17454044ac29b458f508d9814700a6f4c0f9370678f3ae
SHA512 b99ef0e9152da3bf6adac5fef67b44738ae7a2d1ef0041786a5700b8389acde7380f1bc9bf1402c7a356f1777aca7c2b05af5ee22b7297bc879fe2e6b9741f13

C:\Program Files\Waterfox\private_browsing.exe

MD5 41067bc84512a728ef810dce6e9cd5b8
SHA1 226d8a78618d1f3bd0d0ba46e1bccc5eb8d58b6c
SHA256 a1a61d3159c659309812a93090b5027c7b24c5690f601ca7246ea9f32898c295
SHA512 5d523a2e9859a6b9631d8d96e6375a450fc9c04c0bed799e15ac278b6f2ca014389c09df8e51733053ca7142f03b043020fba7b40ee11950da3197ebc36e4bc6

C:\Program Files\Waterfox\precomplete

MD5 2baf7d08019a2e85ae0a5efa95822d57
SHA1 ff39cde7ba87f88113077937a4bf1d972da76f3c
SHA256 c4d8d10b44cff38f42380620c73fca7854e04ce7b9085ef5fe75052f7c96a550
SHA512 53ffe4893737fd1ee0a08910f45079e3d33dda06c8fc78b466aca583d5ae9449d7261febcae078a82c62ce875f7cb7ef56a770c8739b92d357c7fbfa0aa7e236

C:\Program Files\Waterfox\plugin-container.exe.sig

MD5 218819ddd84fa866b01937a40f206c57
SHA1 0510d761f7c1254478274152b6f9d882d183eb43
SHA256 5621d3d600fc93e8a2bca89a07ee29085a04b6a49f80e00e6faaa05974c4eb2b
SHA512 b213260be44dd0dbe9c0fd91f3ca62c4b194aef6e0b327cd638022b4d9ca5ff71c4ec91194b47b774acff8be7ada6ef4be75b2c760234c4eeb78464a5a14bd48

C:\Program Files\Waterfox\plugin-container.exe

MD5 81fb5e374cb002c69b12fc32c1c986f0
SHA1 3170e34e9817ab39c23bf9fab40e086b62fd47a8
SHA256 ea3b39ecbd55f4c5f79dfba18acb37e6dfef486239ac27c2dbd5cfc5b8cf1f3f
SHA512 15c693fd3c2b9cd98e3187d6d8e0448594c0abf9161a2172b5e199a102127f0c29de005c4550ff1222eb6ca730c6ba78ea7bced6ec4b1a5e40b8e7d7daa4d49f

C:\Program Files\Waterfox\platform.ini

MD5 d31419e2292476b3e25442bc259c4350
SHA1 453fac8ac33da7a8d33922fc08e244fec62848d4
SHA256 03e6d127f5a35aedc5dfbac6c6bdbaa79c38ec41be3d1b5952af5a5367053aa8
SHA512 3125b0dcde290090ab9bf3b1d2fb0ede42b3fefc25349fbafc2ddb675a704de1c9a0dafacfc3d02f557b2861bb03f80d493198dbde14fe619e650d8638948f62

C:\Program Files\Waterfox\osclientcerts.dll

MD5 b37e03c58aec8735a0d9d2762fd5cd00
SHA1 3241623ff3dc40e78da703dfced0defd4d43776d
SHA256 c9a3d4c95f3d395cd037f62548d3d14309505e76de201987f74c1dbfb3db6862
SHA512 13c0f860a01c52bbd94558931bf3749db0e685a34f1dcc5b39b3a5a32e531c5510f995b5378de4eb34faebd693625c151f481c78013a1cf00ea5d75f3bfd4fa9

C:\Program Files\Waterfox\omni.ja

MD5 842923ca81711cef6b3d22520a3c78bf
SHA1 211831e6764084d3ba657dc227355946ab23eca8
SHA256 40dd1abe929f2d81305c36e18ba2f2a0c03785c0127ee46e3ab7d9f5046cf538
SHA512 c32994226484a957339ae58946a58d995e6b14a591b6f4cc382eec2a6f957115f4b1c9b102d7e90f3ce858b5965e0380171bdfbffe42de6d63b3963438524259

C:\Program Files\Waterfox\nssckbi.dll

MD5 3ec0d47f91e07b6303f0ffb4a92df75e
SHA1 5729fd7c3775a2ad1ddbd0b1b8b29a5333c0c1ee
SHA256 edaf50bf48f44fefecd2871dd4f3b9bc8292c492f8d11f33e337e8efb77b657c
SHA512 f3f1e450193a3ed89e1a8542d3b044d880689add0d21e10af38c2a78eb5f6ed3a2608be164c3f3cd18e1dc604c9a2140dd8cbfef95d9431fbd9019513f19e2ae

C:\Program Files\Waterfox\nss3.dll

MD5 7935a35b3e2a7562e4ce8a658b60fab5
SHA1 10703e79883cc8d42af1c17ccebec88bd33aef26
SHA256 9ba66d61ac182a3e07726d662913af4aac9227c7233f23d82e05de03687b02e8
SHA512 a6bf6a76ea71d1b611c7b44d74d6cfd65034b7fe69e59911a5cee31fb27994a0b6a631f80a3cbdc55336b1887b094cdd043bb6c6779f656283e43cf375f1a3f7

C:\Program Files\Waterfox\notificationserver.dll

MD5 64cfdad859a56bd2a53d0e1221aa13de
SHA1 a558bd10681079c21a4140679db59321cbc03c4c
SHA256 c812cfa1db54e83c24705982b001fa77d62d635646141185347c0265b9618e70
SHA512 af55b65a3baa1844b81ca47616bbd15c15c0ed4a7be2e9ae641a92e99a5416bdc423c2058946c72c4918303a59bb041f4dbf212d055a4a11ca0a75aa4af9283d

C:\Program Files\Waterfox\msvcp140.dll

MD5 e82a9818d8caf6c4ca3536bfce5b5650
SHA1 cc2113788421cc90988f21a004b7aaa717232a8c
SHA256 202d7f06e3d4f4fa188832e131664846979c0c81ffa86f91728431addffafbfb
SHA512 416c21778acab86527e9f3f237e22bafaaf1031ce28facf913d143c99c5c57ee0f13771db785e7378031f16643655d5233a5cc7ef10f41b764a039167fb65095

C:\Program Files\Waterfox\mozglue.dll

MD5 0f3dc7cb469919ed4415d04f47f66185
SHA1 187e2a23aa49df358057b7a34cd35fc26faec954
SHA256 8031deded187f9605f3540c8d1abe6859003e6b01998fcb6971b60b7f5c28b5a
SHA512 0b80668a9fbddd55ff3ac48d3a33fcdbc0b9b7fc41adc32e35d3a18e6936664939ea898e0f32c10c1e2489a434dce1fea13fc9c49c761e082bcfa7b26d68da93

C:\Program Files\Waterfox\mozavutil.dll

MD5 d2a752b9be6a059d101a2b91f794f751
SHA1 7c6591ce9ae526031014999e018fb6acc5ac8d2d
SHA256 585114f5e959d202d0af7901bc69e6e70a349555b7f77e7edd4f7aba65f0799e
SHA512 89118e71426d296bf5847111a3bca5e4edb566b1d08b2b6a7a478520960fc047560f6728500a1e95a1e853269f38b3e31334f1d81fd48a1424ac1bece4787949

C:\Program Files\Waterfox\mozavcodec.dll

MD5 0eef83e9c5d5a3d79aae888fab477b2c
SHA1 55e0d98056e02430729a5308abff9bb17e4fdcdb
SHA256 94212f1d51a8c4e7f9768bffb60518f9babbd5475ac8e94ae23b9280b8135897
SHA512 7ea24949e2731b147eb12c75b478bb75f031e376590f8ad1001989ab944f297928adb5ce5064a600a4537f3a385ed4646949cebfa7b2a815a3c3b45cbbc71d46

C:\Program Files\Waterfox\locale.ini

MD5 bad74b155b8731bfddb8d54cbd1b0021
SHA1 5a4d8b98ae81f75e362d510713e05022be64c60b
SHA256 a4a030b6f430548e5bba3cfc748515d40b72c522a1345957df4ed5f88736013c
SHA512 ebfab2f589390553bd93c1299db8b7a7bfb8b1ac9ac5ce3c2c8d478c79ef8b93d6193f9e739e94f662dfc026cd49b04a8f2fe3ed82dd4bd191d1cf34e1e4501a

C:\Program Files\Waterfox\libGLESv2.dll

MD5 cc732488d0703481f5ad7d58bdb26873
SHA1 95518e8810789ddf409fe66057d072816b6f8b1c
SHA256 4000be42f7e0d6c5c56f45ebc23281d45653af4c42a87938bfca0e26cf2a90da
SHA512 7cbbe203358f7815fa76807c1637939c958ca97acdd1684cc3bb4d6065be8749b89aea8173c77a09081f01a48b4385d7f67c12fcfc3ca4eb545d4493406ca858

C:\Program Files\Waterfox\libEGL.dll

MD5 40f102038a28269900e953799ae4f3f0
SHA1 76f8a9e2e19a32e3c3c021d92f80edccc0ad979d
SHA256 dadeed03b6c98f78df35e7d33f39efd690f1d26fcfd06efd920242edc16ea7c2
SHA512 6f10994142133ab192563f43b87040ff21edd8afb7bc14e35200af42c83c23d32eb77d6176c0c674c145f2d5dec1b5595a67fe1726e8205d130bc8652aa8b8e9

C:\Program Files\Waterfox\lgpllibs.dll

MD5 aabc62a29019a0411533476c181239bf
SHA1 564e74ee5d1047ceb328eca4eda15d9a8a2f0010
SHA256 b5574b7dd85bf6a9949e275bd2b8f6657d6e2ac8c0b4a0cb537cab20643a779b
SHA512 f6e1cd44a0f255d32b4dc0167535ff4cec0e34c3b8805f5998babe6a5e93eee21ab0984f35e9f459e074be794c391071b13b2839176c2c54ffc8c7e16e4bd2d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 41316a228ad1563bbf04823147bccc67
SHA1 c890837b35e091dee79e6536cbb21085459b4326
SHA256 968bceb9cdbdbdc560df21d669fe202444d5ca8bfd22d80b48ac0560cdcf462d
SHA512 2e387b5d39fa162cc84e285aef1e942476bdbc5f548322b0baec2e252c9b1b2ee4bef4ec9c72c2a096b64925794720c56e6057edc63093934591fa2cf765ecb7

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\ShellLink.dll

MD5 fa94d120efb029b43217c66bbc8c650c
SHA1 1fcf2d76adf69b403b7400681ac91d50ed20385f
SHA256 5f6f414b412c72b10f49eb92af1d368ede531b58fb200d539fd2b45e371612db
SHA512 07ed0771d5bbb651ea7421a5f6b08fa234f9cc041315d9360a7135ba12180064fc99a27725385a8ecd3ceb25bed5c00de169f7dabb3ccf6e987f45254dff8158

C:\Program Files\Waterfox\uninstall\shortcuts_log.ini

MD5 b26e2020b30a0d4f350b4974ca6f1c0b
SHA1 b50dd7268e3c12249b59ca0beb5d1992fc1dd6f4
SHA256 e79b4d93ccfe977a1cf434b667254293b5ca0ed57e8b87ac4af27810affb0485
SHA512 16ad0f89f8dfb018f499228e00e67cc52ec34e2d15931e26d712923c0917e5f0ad0aa7ad09fc8ee07226ecf6894c6a12ab2a7e30dffffc48f6bdfd3b5f63e238

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waterfox Private Browsing.lnk

MD5 cdc44e422cccf33d1de2295d30c4acc2
SHA1 d09e0e101cdf1e88c2945d594424fe172b1efca1
SHA256 0b7c1800fd9fdfe42297889552ac5a00fa436177bdf7db67f94108adb8a12ca0
SHA512 4b52e43223a93f4c5b4a0bb1fff4496b5b628b8f110f163fa0d39e37a74658e94c77043baf2ba753439695ba997f4d8884e8fc8fff61579e84e8a0c3f39ea40c

C:\Users\Public\Desktop\Waterfox.lnk

MD5 f980d57d2060be1bee72a97c069b1a98
SHA1 30e51f2bec64023ae2c6feec1084cc527cacf16e
SHA256 f400c908785680a684a974497d9620e819440aa16cc1479c0790ad6ec4ceafa9
SHA512 11066a4f621f21967aff2acadfedc4e2519a51becd6b37f2a775db23e66dc8472397a68aa27faa9371b2f92d3e1f0b3863e717d56c0801b0f95c858fca1aac9b

C:\Users\Public\Desktop\Waterfox.lnk

MD5 879bcc2535a3dc68c0aed3eb79b5da16
SHA1 97e6a6a2cdaddc50c85a6d66471cb9f4389ab363
SHA256 f902d7c88a4dcc8e46fd9f1b321cb5fc8a4a2af39824b429dfcdd9799c14d034
SHA512 4f8684938eb1dd8e1ae1b3a5e61c4ea31d88e43ed3a0db114691a0055c794cd1d5be138e5c94381f6537f6a1cd804403dfcf0b2e108f0015804bd973e946f144

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waterfox Private Browsing.lnk

MD5 bb650fa8ab160218b011175729417e19
SHA1 431e67a60739e67bde0d0cb4050e2b6966da385c
SHA256 5e5969b3d5b9197649b8048224754623e17d2a622988578d0e39915aa1f49cc7
SHA512 fd673147243a72ae8524c869165d4435cd5ee1ff5e301227d01e4b2e8c9ea18a6e2177d0ad9fe17b91311390f88a524c8724adaf2b86416a9f96f168a0f6953a

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waterfox.lnk

MD5 8fe32ac0ae9ab0c65a33767e322553e9
SHA1 5dd159fbad4f2fd4c4c71cf7634b05a88e7ff637
SHA256 3e16d35feaea5157095af4954ecade3aa172e0bcaee6e01b31822f4d35822382
SHA512 372c0d70eba5cc4bafb0406a61231d8172e972e4f37bb76ce5d6279464624c0b9450f9faea6614a7979c63a9e3bacb31dbd863151a7f9ad4d7bb397f556c8847

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waterfox.lnk

MD5 3060511396ce245b6d22315af2a789bc
SHA1 27ecdd82956891acf474279fef2d2f9267679c55
SHA256 702a66ed81fd541656df44635e3556f5f7de39656886f9071151cee989502225
SHA512 29dd500618d78495fd364e08ab42d83f006f1b22b22935e06783e4b3e6428e38b6b03d9dcad2e9d878f28b11e3b8a0796fb47f77853aefc012e77d133d438f9f

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\ApplicationID.dll

MD5 fdc0338e6faeaf6f7c271982e103473b
SHA1 9a41f7932abe8be7e32c6371f085cf14de355d00
SHA256 a9dad9fdaae93d10dc2ee346b231913445e731049554b8bb1506827e46f8a44e
SHA512 a766eef11db4c94b1445d1cd70cf1d3b6141d6b3973562e9fa8d81c79195886b884dbc9b9f6952f8a6e8619534a6bf2d615d539d2cace9c8843dc19415051cc0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a98da68c4f81d0f4be27f3ca72223dd0
SHA1 e674e007bd00a5e86388214ee9d208b4cff74e6a
SHA256 dbf4a9edb418141ab8008a271ee5313aad9bda7ce0b32d1c68b496c1e2bec819
SHA512 9aef6a896454b91623e026ad01dd822da380aa9ff5625f5aad49f7a95a14218b93a5bc73c48f05af4a54fef319f7965c341a3c193734d47ca70c3e9abe48aeeb

C:\Program Files\Waterfox\ipcclientcerts.dll

MD5 94f38300082a21698dddc03c36609a76
SHA1 1eafeec90b095d9fc8dc282d3323576fa20fdf58
SHA256 b83c05921f2cc51dbb5e18704f9c94efbc3e626fd2b798f08ba0bbe5668e3129
SHA512 2eb21c0a5056e52fb7e7ed985fa6c63bb168455d13a6f7fe7269b971a0f4e0cb683833038114a29c6fa3cf2caf54e6d517ee2b338b41128daa578e83fb05214b

C:\Program Files\Waterfox\gmp-clearkey\0.1\manifest.json

MD5 cffdadfaeeaaf0a5a78e7f9a299aa7f1
SHA1 7a8f06d7c91877484301ce8474dfbb1bde08a040
SHA256 ef47e83036753b53f59d079fef62bfedc749abdbcdb0fe16f448d9920f11114c
SHA512 5a11e448389326ddbd3be792d9a10ae746c66e4a41f9c96f4979ec71fde385fc4deb205a40f1b4f24415abd9d41c453ca1285f4b813005b1d12a2701f214db85

C:\Program Files\Waterfox\gmp-clearkey\0.1\clearkey.dll.sig

MD5 57400d2ab6b51c13c83ae1cd2e095eb6
SHA1 e0562155c29deca9f40aaf287e39a794697e9f43
SHA256 56e5316c5c5c432f2bf2b6789333f0d3efa1535c242481815193b4ce01f7fac4
SHA512 b37a100d5128a920be7e2fdcbeed5bde2223e4337ef37a5da425f1aac8de1f882ca1173d3cbbccdfeff81fddc7110b5be89d030f889f8ba5b4f50bc785ef3b56

C:\Program Files\Waterfox\gmp-clearkey\0.1\clearkey.dll

MD5 58a8af0e6066cb48093a57e3e79fc7e0
SHA1 85b9a8b9e4eb1aae46b4935b77e3500390eceaa1
SHA256 bde098673cfc71964f26bba3fad623fb6610052ad3b6c54ea07a2033a82ee227
SHA512 6de26186ce3b448455fbc29deaa181a525cc622e2fa552b294481e499cc8f1820b4815b9092ced474d6483459ef2b12ca8bb77f4c634468d02dcaecabcab0cbf

C:\Program Files\Waterfox\freebl3.dll

MD5 0b581efb91df93a4bba42309480d656d
SHA1 f09e27085d600a6ef0b9ab211e5db9765db29b9a
SHA256 d0d5bddecd41bad8bacac0c673a55d04ee3b7f51736f34f43846bd54439ada98
SHA512 9ae07c2e0e58bacbd06d2abd6344ceca13b65ffca491fc93045173f236ae79c50f548374048ddbfb7f7abe131a33a6160b09f5797d538518ca125e4237b77017

C:\Program Files\Waterfox\fonts\TwemojiMozilla.ttf

MD5 047a15b6a6bbbff2d49e940f0708ccdc
SHA1 49be47c5494ff2989ac6a76fa9cf7c87120467aa
SHA256 06710595cb382a0c5c097d05ae1a8ecec9b8fdcfdae653be73dc1aae2f7ab2ed
SHA512 12e8260f91f1108ee1ce9ac0c033a097fb5ae818eb2337bf86e094cc696c05fdf87aaad84724d5906b16bfeda18c5217d9b56b2a0f4dbb4b0249a6e9f0c7558d

C:\Program Files\Waterfox\firefox.VisualElementsManifest.xml

MD5 0aa43576f0420593451b10ab3b7582ec
SHA1 b5f535932053591c7678faa1cd7cc3a7de680d0d
SHA256 3b25ae142729ed15f3a10ebce2621bfa07fda5e4d76850763987a064122f7ae6
SHA512 6efb63c66f60e039cf99bfaf2e107c3c5ed4b6f319f3d5e4ef9316c1f26298b90d33c60b48b03699059d28b835fbc589417ac955fc45a2bc4c116a5200dfdc32

C:\Program Files\Waterfox\dependentlibs.list

MD5 35da5601932b6ade92ec29951942ec1f
SHA1 4d0b52b709c3e25b50dd53dfab9337ef8958d1ca
SHA256 3da3fa240910cc0aed83b17a81c87251a6bc6cf5db5be9e71a3e01d7b7d88f86
SHA512 0bd4ae8932d6f2d7bb1655b13f66fc24a858a17993be9354921406e63372242661a3bb52010445173fb856d4e5f98fcfbd44a155fe0760feca8cc65bebd777c0

C:\Program Files\Waterfox\defaults\pref\channel-prefs.js

MD5 3d84d108d421f30fb3c5ef2536d2a3eb
SHA1 0f3b02737462227a9b9e471f075357c9112f0a68
SHA256 7d9d37eff1dc4e59a6437026602f1953ef58ee46ff3d81dbb8e13b0fd0bec86b
SHA512 76cb3d59b08b0e546034cbb4fb11d8cfbb80703430dfe6c9147612182ba01910901330db7f0f304a90474724f32fd7b9d102c351218f7a291d28b3a80b7ac1e5

C:\Program Files\Waterfox\defaultagent_localized.ini

MD5 3474890714b7adbc3ae61181be71cad7
SHA1 b1510bb7723c7b0ccc47ef22c0540cede85ef7c0
SHA256 1e704b65b98835232395613a064f3deec416c4b1f49d6b3a2c12820164bcc36c
SHA512 ca3142503fb5bcfaee0d5fd52045ae007865497258533f481b687f93a703150e581b6ce5f1fdf881bd35b549ade12633ee5709b7ce419de88a295803cea9d95a

C:\Program Files\Waterfox\defaultagent.ini

MD5 5e9933470b164015f636d98852a9e091
SHA1 a944de0694461f0a5d0273fac10246317b7f6578
SHA256 ad0b05d3f91d363257c788c7809a49db6f244b8595927a1028f569129acf46e7
SHA512 c22646a0689f5422077f82706c42f601a86c106fead04aa6656729b1454e045e4e7010f86eb16c80a365362db5e24573740b15a09ab6f7c397cad8dd273c252f

C:\Program Files\Waterfox\default-browser-agent.exe

MD5 b8bf3fb76e65fb2624f3974d752a627a
SHA1 ae333e9b8a6dd84b23ee613c71f38c1aecf37cea
SHA256 edeab2da60815448b36b2a8ffb16aab87a64f920c746ce92927711828a0cc6e1
SHA512 391dc11faea21fd648aecde55a90ec5de3472cba69e2db451870f17d9689b0fb590893cf9910b77e0d88ac988d397d09af0e7a1f8d2e53b8e2ed3e77096e07af

C:\Program Files\Waterfox\d3dcompiler_47.dll

MD5 2cd8ad4320e2847b9446cd47fa473eae
SHA1 ac6eeb4384c96767a7b70ac3758d8571fa91c11d
SHA256 1a9f993e37318a8766a8abd3bb476efe3aea4960430078e142de71c14c4ff384
SHA512 0d4055c9963a5848366c4d755b1cf69f736741f66ec4844fb9ac54451f7bb5855d627258d48ce7e5f860fdafe26d2b5ab4d1e4e067924b9a3e76d0966de4bea1

C:\Program Files\Waterfox\browser\VisualElements\VisualElements_70.png

MD5 e3fd6716ecfcb22385dd72abd095656a
SHA1 04ae8fd5277ab071d6b43b6465b34dbcbee63b2e
SHA256 b0bb04d9742d801b43574e4355374f5db2f3d378924b3a5ca91d36b6cda44740
SHA512 442bf524ad2523e42ec8f53703815f94f809fd2874b9852f348af09ea325a08d21e004798b67e29e6891aae0e0b78844bc1933903d06807b48ee0d80fc424d97

C:\Program Files\Waterfox\browser\VisualElements\PrivateBrowsing_70.png

MD5 9f0484ac8e114cbaccd0aac2e4ac7e37
SHA1 f1a4be166cd02323508745a56fc18f3c77c39386
SHA256 f521152207b6948383e6ddd7f5707042fa531758369d55b99c44974f5d53fe99
SHA512 8e7bdeb1da15916c3d2f67725fba720e52f4a71afd6b9e5116b99d329e378f84e684e472b1cfa68fcbcd35488e8b35a01b6260ffc91de7d7700a4545f2c64598

C:\Program Files\Waterfox\browser\VisualElements\PrivateBrowsing_150.png

MD5 72dcdf55bd3c679229fd2be31a4ee5d1
SHA1 d66a501a611cab86c77108ca2bd6bf0573b0fbc4
SHA256 77b00c4d67b5e2a0fc4fac2c2cf4ec8b9e852c0940683b0462eca139fd86964a
SHA512 c025f2fec9aa43b193b1743da0f814e2889fd4761190c104b0540ab92f6a322d23d053d290aa9f95740ce614c836d7d23e282170a4285540fe3beaed97f715bc

C:\Program Files\Waterfox\browser\features\[email protected]

MD5 75854a046eec74a03d73097522d7bf36
SHA1 b5fda657d27afcac076d1645367acba23c23b5ca
SHA256 357d424d7251aaad8ef4b747d11d224d0ad9c2b648ab0b44a634c4a68d1a61f7
SHA512 53f4455e322d7c4b586dae057b2091e8071aff03ababad1c866fdf77387be5ce639eade7504e08bb94925f90f2f454b9b7922c7194311b0197018511645aefb9

C:\Program Files\Waterfox\browser\features\[email protected]

MD5 e8150f37acf2aef634f039026192916c
SHA1 367c0330507e5917087bcfd434fd805ad745200a
SHA256 dcdcdeb295f099281ac32b45f42080614c1a74b9f83709c26c67772719aeacc6
SHA512 a529b969054f84ab18e0e17b5dd6a061d9c1d8189b5c7ad95f4bd52043ad41ed6519846b360c3c6ef7c0d720009439ac67da022ff96518df48a22fb6fe1af5bd

C:\Program Files\Waterfox\browser\features\[email protected]

MD5 e1e6d991360d66aeb432c18212d7352c
SHA1 6ed87390439c1895b20ec80db93fb4cbc59d7449
SHA256 b4162f66a209ff4100fa9835e6b952a50b9529e2efcb24a320d46bfdef4fca9a
SHA512 ce13c5169e340e5e4320d748b0244198e05d46cd2d3bafa708eca156e296760cdff6de7692db416a1ce983097c97f25882a1344f62cbfe3ed19f90c5d6716a92

C:\Program Files\Waterfox\browser\features\[email protected]

MD5 09a0c6ae9035ad0de9b0bc98a5aa79ef
SHA1 46b556c7ba06479971778d84205172c2d975866e
SHA256 587159df8fcfd246c880acadc9d504f0d74b54e69fc14dd74a287da64c0681d7
SHA512 f003ee3d13f776da6856c06cc1064bca5368f6cfd07695d8d9dc5eaa8651478c4f7d7a9ea51770831b54dc8f76c469f4209ca540a1d357402140adc42a507d8f

C:\Program Files\Waterfox\browser\features\[email protected]

MD5 6a6ad1547a5de8ac3e897af2f8838c0b
SHA1 7fba268b6b775acdc01ba46e9bc5e33a9aef2131
SHA256 9f615f80df892def00248f38228feacd4bc26962bab637d047fcb967cdc4d52b
SHA512 0c53549dd468bec126b095efddec65070ed5ff1a1133f589409ea19156c5217930d0f242a4afb62b7e40682627b859dd2ac8b6c0280738ced31f2867812ee70e

C:\Program Files\Waterfox\application.ini

MD5 5c7ba1bfa7a8bed5897df8e4bf2fa10b
SHA1 32d424cdee4495a5a11d1b5c2ce835101c4f2199
SHA256 b7ab4a09af58382b7f6b1bc1c4af531936b7407adb7351e3f8f99286f3f96c9f
SHA512 dd7a519fabc85b8f644e0ecb50497d26f0969e64760603ff2dbf907a60a6f3f5062ea3a09bbecb2bd7c1637254ebbe7a66977ddbca1e7fe97339b89c4df5cfd0

C:\Program Files\Waterfox\api-ms-win-crt-utility-l1-1-0.dll

MD5 56854b03ae70533a17d1de27c6a4abd2
SHA1 1409023d683566c9593c1f23150f7b83c948aaa3
SHA256 f9a6343d876bc59574ab76ed9b3211416cd1250163e7c4cd63f37d0095f801ac
SHA512 3d2fdbde7f43b4807e01c76ad6464aba738537b37eceabbeda3851ab9ecd0512f9e2afa09a07599c5be086fbaf2342894a194b44af6b4d1db607cd44f9c0f071

C:\Program Files\Waterfox\api-ms-win-crt-time-l1-1-0.dll

MD5 08ae16cc68b10947f99a9402da565e44
SHA1 4d66518e55e6f3b702d6b19102d67f0366534c39
SHA256 7f7020ed3a3ebb758812cc6925800cb99e0d857ad8adc6ba9e168e193f6ab185
SHA512 a56eff64e18de96081522024a8c073e07e6f4b6518603b681e4d84c0f55c411f179230b52935d41697e7aa702987e6bb58bbaf97057198068ceb68ad555c26fb

C:\Program Files\Waterfox\api-ms-win-crt-string-l1-1-0.dll

MD5 f86ba4a611dc13cb57951667eecee7a3
SHA1 6f9c6de28896afca4e869281648ff338da6ef75b
SHA256 bf59586952cd330276e54409395bc7035a70511ecf0bae11b0da2086091769bb
SHA512 c58246e84f14385442e50aa710371ecee01e7f67fb4f5e9e47d9fea1abed2bca32a35a1e4a9ed24bc6368fb6757e2242305a176b5cef41726e86c1320b6c32be

C:\Program Files\Waterfox\api-ms-win-crt-stdio-l1-1-0.dll

MD5 7903fba3be01abc64e68939f34cbba87
SHA1 83c5026b1872dc7a578ec2d9c0a9de02b5ae86a2
SHA256 6e2e0e6100ef8bcf60eabfa067100fc230f6e81cccb5277df137b0afdcbe13d5
SHA512 6a3a414d50cbc81cb5b08a52028de6c6580034bcf6c4bf935fa79d2ec488e974560720e0d785d67cd5092b169a0913e6ede00fcfbe0673556e000ab119c24391

C:\Program Files\Waterfox\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb470b5411788c820ddb215c30544d1c
SHA1 e01f72fa8988bc78e9d92a2f055352c7b50905cb
SHA256 6149e22e3007321d31c89b6695b96a0153dde36757048d2654015c21fbdc1074
SHA512 fd74960cdfb7a59ced14deaa08e7b086481b16cf6d747afec1a33acfa7fafa555fb1241e1131cb66f4e51cc9283996b53f1829bc3302647fc0dd7ab8bf1e3664

C:\Program Files\Waterfox\api-ms-win-crt-process-l1-1-0.dll

MD5 577c479eea1391eaecf92ae5e0b15a73
SHA1 248b7f8c48adfaa3de5492a126665d7a8ec227cd
SHA256 1ba44347102fb3029ce05a4d96448dde5d449881d193add905a6beeeea3c43e8
SHA512 bb2dce03eb165d2d1d1b203c218a71d892bbd89069daa1ec93a2e97e331050f4b35ba9d0aaf0e7a59d230c3d98a79c07a107132fbf8ee1c5b6a66e57d56f942b

C:\Program Files\Waterfox\api-ms-win-crt-private-l1-1-0.dll

MD5 4f4fc6471a63b73b2996348fa1958d6f
SHA1 36d74cc27cf4031f20ae95baea2a84f30cdc53d0
SHA256 c0b285d0e7a06e993fc0dfe8b6471b9ac5f58ceea78ccea1ca9f6c232ad2fd5f
SHA512 4d19c754f0b9cf6231aab1060150e81c9fa2764a361a1e2cdfe32a93303b4de1147e4badf89b662d49029d1f229d702464ff5e290444ea47d53ff20521255948

C:\Program Files\Waterfox\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 6cbcfb01c075929b086cb8239bed907f
SHA1 3fdb11f7070fa97f542191cca7a33082dcc902f3
SHA256 89eb77894d90cb96473affa75bfdc4ad0fba877f2dc3474c680eaabfb25f0035
SHA512 2cc4cc89fba594a7bc67d683b22f7180af8c8ce26234111c45cfc673f15f62ccf08eacff0e98b8aa3af9623019defeb09931b66348d23324e89f82e1767078f1

C:\Program Files\Waterfox\api-ms-win-crt-math-l1-1-0.dll

MD5 f825ddc949d0a287b27a8614722f3a16
SHA1 4095251c1c21e6cc45dfffd971b85f139057e1c5
SHA256 c69c407ab592aaa940eaed0d5a4f8498870c3b63072449d3befe14feb909092f
SHA512 bfb732aa26c33577c700969da66fb4c16239fd240a59a8c2b83b80562a59301e6f08b7a314df036bc231b193180db68254708942171b91f3793fb1a8c6e58a50

C:\Program Files\Waterfox\api-ms-win-crt-locale-l1-1-0.dll

MD5 66e392fa5b2305133c812583861d2414
SHA1 cc5b333507098fdcc5733ca01621e1c680d83a95
SHA256 3dddfa3d85649d5bc8fb67e2da439e3fd1adf51e5dc83d45f1d5fb8b2d7eaf3d
SHA512 5d1cd38090d673780b56f1d357188ffd5cabd497a207613a8fcb4ba05577b07a0e212deca1a75558a0b697739fe5ff7a7400dc1ead6586aa59dd43c05adf3374

C:\Program Files\Waterfox\api-ms-win-crt-heap-l1-1-0.dll

MD5 ec9c819aae9726c1472a6fd7f1d7fe07
SHA1 fbef040b6b2209dfbf1764d2d70ae0afd6a90480
SHA256 59aa6442c182d82e62676b166b4983cf5b415518813c172e277af7ba02318805
SHA512 93f55fe4d35cb4c5173088b2de8b8de60a41b27631e7da1fa130d008c4813f5a37a49ec20cf2387f391fd22c31c5ed2ae527811572e836047f516e7600a1f7af

C:\Program Files\Waterfox\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 5a8abdf5f7bf75651641e8107300cf9a
SHA1 79796b3f9a0259229b58a07c9b836bfe5a8da36f
SHA256 31e0e0a41e65701aef0037c11ea41aed600834f1e3d8eb27a275a3836170b35b
SHA512 934b693a2dbf4c6f11a6425c35ef7605a2efaf07eb1cdfe4a338f652b1172d7df4eced30b249baa4d5e04f6f043bc586172bb0299f1b2cfb6acf8e6b924211f0

C:\Program Files\Waterfox\api-ms-win-crt-environment-l1-1-0.dll

MD5 fd120dadc47c7a7404d7f5ed10eb0164
SHA1 ce9c473198b48b8576d0aa402c6a91e23ded4f76
SHA256 9916fee4005c3b46ca61194cf370b292f829e3ad1fe55ba549aab8d7a8d58852
SHA512 35476c5dc327fe3d04392f2c0d8406591e7e3e15065cb6bc0b8359e9c2069b0b612c62daa9a5b45081c895c19e1f1c7e7e6b321dafed3fbc173cd01482a2443c

C:\Program Files\Waterfox\api-ms-win-crt-convert-l1-1-0.dll

MD5 fe26cf0476957f30c44f8db6d6da47c1
SHA1 c509d2d41f8bd23afc16563821b3f88b118fa16d
SHA256 038feb3c6521ef5e39ce91475e95e37458f54e63e899201b31ac281b30de0832
SHA512 d4dec817c4377d70c85716456737ec93f08177d587b29bb887e43d04d586df7449ca0c1e48defab0027b6ef9000f8f289540f961464521b52374ccc43325e0de

C:\Program Files\Waterfox\api-ms-win-crt-conio-l1-1-0.dll

MD5 2fdced57e712fd867bc782d8e7e1b4e6
SHA1 8e11d3c7d80a084752a675f922da7fc49b691880
SHA256 3be92c6b23a6f1ad0cb8f70e8d493c79b91c259f6709580e734eb52fdc7c012e
SHA512 1d88c577bae2c3776c7ff2ad7b09d60ee96f412085f4a56a7c2dbef190f637ff143779a2618a8cc938e4fc6276bee7bcca6f38286d09b457e8675b6efe99bf13

C:\Program Files\Waterfox\api-ms-win-core-timezone-l1-1-0.dll

MD5 ad8ef4f98cccad45423cb81b3d8d3f25
SHA1 4393ac0e338733e1a825311dc75858595e644266
SHA256 f9ddff342881a5f0ecd4774e9b283ece97ebc4550f8010b1d3e237eaea71fb37
SHA512 a9d932c71cf1ed693e9a6857384a0cbe98860f64a87d0a31105dc438f59643ecee81493297535674a9195ee5db8a4f6088af5f75fbc945f3a6ce7a893ca4edbf

C:\Program Files\Waterfox\api-ms-win-core-synch-l1-2-0.dll

MD5 b0ea6913d0650be994f8ecc6774a84f4
SHA1 ecba83bc453eed23f61b4952b34ac5b929c9c662
SHA256 ec047e2eafbb18171e3dc6657c6892bd8d829518ee0250c112cd87cb0a27f764
SHA512 be8dd04934aaa0fe3ae096214f07cc973abf6aaa25da88bc6f13aff9936ad2a73962b9a0664d0624436b9febf66d969da67d61d1d3148be4d97a2290cc3c4345

C:\Program Files\Waterfox\browser\VisualElements\VisualElements_150.png

MD5 c108b3e9c3975ef74c2bef1bb63be62f
SHA1 ce5420baf1305cbf20aa7d8bae39a11509bef8a5
SHA256 3bd88410c45e3d0bf6aa69a4802b310bd1bc53181c5c10dd7c9945be48411a3b
SHA512 a39ca17f3b6ac4ed43bec2eb30da0bf82eb5265cd52c69a5712bb181a0727b9a0fe2129c3ee533cb8a21202600d2631486139bdd6d1dfd2cf1b2e23f562d4a5d

C:\Program Files\Waterfox\api-ms-win-core-processthreads-l1-1-1.dll

MD5 3b6146b64b6789e9751fe4d7923cbfaa
SHA1 5206ab38ccf27606a9f801099f78a3cafdf6d7fd
SHA256 7c182f72337bfe0dba5a6ca8977cf01b4bc099cfacdfca914d70162cc2d951a3
SHA512 8c042c289274fd03000eb68ff3386b05a9f893c9c0c1b0e1a0a6c84210c35ff537396c4d8c5670404f0f4e9cda318dd0d7f6279fa1904a5b7d41dce16ec668e4

C:\Program Files\Waterfox\api-ms-win-core-file-l2-1-0.dll

MD5 4ed9af6e7d977c9f2a289109330f3904
SHA1 e3204cb4b0e9db65cf9584eef2662d16a9d4a1dd
SHA256 c5bd86565c392ed96c0a8123dfebf6bbfcc39f15b455a5db751db0d629f0c5f9
SHA512 e1f6c5494cbabfec5cf588171c242c5cd0e3e066e3b02e9afd407f0f7a26522b491d24b34ccc2fd4f70ba99a4b8c592f2666d1e88b1c51a06e55ac801bf32fca

C:\Program Files\Waterfox\api-ms-win-core-file-l1-2-0.dll

MD5 9c837d13c7684f43ae705982a5431cf3
SHA1 cd29fbb9cbcf43f78b3f0db0eacc599015e3bfb5
SHA256 f96992b8a3657e0aea793c2e5a59eac0891d5f6854ba55b16f427068d9be314b
SHA512 856d9b6545d12b5d805e20f1f1b7d7505cbce0c7bbb262f29eaecc5827ef085e09bdf0217e03b67df83b10aa4fda0c382e490c47032ad2cdc46f1bb2e7f27ec3

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\summary.ini

MD5 7b874cc4a85ebb1471b6969f50152424
SHA1 861a7b0a3bf5a14266e5ff272cb3caf7ded86805
SHA256 4fc8fc630c7635fb13baf30ad1f37c990d83027b2be9c3e5112feeff8aed7362
SHA512 6e3dcd46d0893ac22da84e957e5d671f52ad8171a87b3f32ec70334033c7986ea2e6fcf76043ead891b3e6d7eace3de4a22b2ce2cdb7d091c4870e81d23f37eb

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\PinToTaskbar.dll

MD5 70016ab449dd0034333b0df88193cb82
SHA1 add0b693b75f14e7f9a063d0de1921c3bc8d1a52
SHA256 6bec8a69845fe9012a0622e79b63328fb611151fd24f198a779d781a36dce5a3
SHA512 1295dbe8596a37d0799b51c3be011b2aeb499d382bd860bba784dbe5a580f6d2e1116830c4c619ef32df9c5f7af0aceb600c2c7a29e321cf8e355c73627ffc71

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\ioSpecial.ini

MD5 1319c2a4b9e1fca85fe48081edf77774
SHA1 963d6191866c10bdfe7d478ad84b4513b4b2c7d3
SHA256 e3665b49860e47c077f722d7614aabb616197a8a9e1be03593f3432c0a8e98f2
SHA512 fdcd40f93204d880075cb9bee78f527c0077afd3df16b60c12dedeba0c97437c4a1a0404fb995a66951ef56eed5434936aa944b4667395f4406b8c1c44461452

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a787101afa16408ff6cea56bd9899573
SHA1 ad1680450c05617512fd559733f79455e51c439a
SHA256 15ba1996e612098dd22dc4f3ef87e7e34ad26289fb53b2573474666f178353a1
SHA512 9fcebc532ea55a9f2cf105ecf33f81a9b33b7458fda4f1d58c16ae700db5c404b878db96ecba55c456cf65e7610c64e37890108edda4319bbb4203773f82464d

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\CPUFeatures.dll

MD5 808baa6ba8e18f4f7072b0caab5d956a
SHA1 621e962358ebb422b71225201a3542c0805eba92
SHA256 1826a7973e9e3fccf4e7a8cc955cc3401a4b4f75fa5c0beb4d43808f01179935
SHA512 2a22632363eb297baa4bd4a64c8f855a9bb5d3a210a4636db005a57b0edbd04fcb4cd95677038d98bb3fd058f651b0caa60850e269a9e08568a70a56c91a158c

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\CityHash.dll

MD5 2021acc65fa998daa98131e20c4605be
SHA1 2e8407cfe3b1a9d839ea391cfc423e8df8d8a390
SHA256 c299a0a71bf57eb241868158b4fcfe839d15d5ba607e1bdc5499fdf67b334a14
SHA512 cb96d3547bab778cbe94076be6765ed2ae07e183e4888d6c380f240b8c6708662a3b2b6b2294e38c48bc91bf2cc5fc7cfcd3afe63775151ba2fe34b06ce38948

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\UAC.dll

MD5 d23b256e9c12fe37d984bae5017c5f8c
SHA1 fd698b58a563816b2260bbc50d7f864b33523121
SHA256 ec6a56d981892bf251df1439bea425a5f6c7e1c7312d44bedd5e2957f270338c
SHA512 13f284821324ffaeadafd3651f64d896186f47cf9a68735642cf37b37de777dba197067fbccd3a7411b5dc7976e510439253bd24c9be1d36c0a59d924c17ae8e

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\System.dll

MD5 b361682fa5e6a1906e754cfa08aa8d90
SHA1 c6701aee0c866565de1b7c1f81fd88da56b395d3
SHA256 b711c4f17690421c9dc8ddb9ed5a9ddc539b3a28f11e19c851e25dcfc7701c04
SHA512 2778f91c9bcf83277d26c71118a1ccb0fb3ce50e89729f14f4915bc65dd48503a77b1e5118ce774dea72f5ce3cc8681eb9ca3c55cf90e9f61a177101ba192ae9

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\nsJSON.dll

MD5 e832077eaee06f3b2ac9a8d2e7264567
SHA1 decbc329257c9c7fb67d3c449b4c5dfc1f87471f
SHA256 705f4947fb94254c4e5084e6a962045f6a4e790dfc1ecf59cd0fc3feb38bcbbf
SHA512 c1bada98c52ee2318d23c48fe202380eb42c5e1f18226cdc017f264c8c34f548bfe4d9b6eef13caae69ba321a71b199431b249fdec65f8bb1c386810932ccf6a

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\AccessControl.dll

MD5 eb7a540d0d2e28f6bf524d2cdbe0f478
SHA1 76204991c60913cffeba5595033c4f79e1e89bd8
SHA256 ef4b548b27a6edab3bcb25cff0598918c645795850d62f232909dee851e04c6d
SHA512 947132d07f7875dc99fbe8a87757f6efee0a8c6271f8a3bac6747f9f4f60ed7e203e28a588db8c55ee898ba8f3dcf640f6562c49c45d6c6d8fdbe2d2309b9984

C:\Users\Admin\AppData\Local\Temp\nspFB46.tmp\liteFirewallW.dll

MD5 f31ba98a8d87faba153eea134968c854
SHA1 da0865cc1a86a39367f22897e1f9fbf4fb1f804f
SHA256 708fb54cffb6aea3547fc5ac745d1435ecc814df563bef59ba7a94f57d082bbb
SHA512 d991a2dd5ef537b25898afd7b7e73274a3cb8e6f5fca1621af22ee2761b82baf220aecb0c84434566742e2ab00b2f57a3740ce9831e76d4e1829bac3e044c8e9

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs.js

MD5 67c6e0d9bc7db306ed23b9ac80c53b18
SHA1 69d212393325278437ab38fcb4ab5d93483b1536
SHA256 1d1e6e4577a8d18e4c6d07f4c6d6dc8385eb2a07ed1a46498f60675df413aa31
SHA512 46e3ab3d3dd424342335f9fb89a94d7818bdd472b7605cb1e029e0b9cc657bb9eba9237bad865d0746ed93a5c8983f8f1468ced489738a5bc834ddaef1a2f3c8

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs.js

MD5 46b86419f811f3e8570226faa2e40bc0
SHA1 dfb54a57ace5aa9f5ee89f01075bfb2645566b16
SHA256 a16ff5395e3d3d24f10b3e43b4eb5018e86f53be005ae25bd4a5f80611351814
SHA512 3ec2273446998f7e0e2e4c5ab615f547a2301795236a8e30fbebd1410bc415142fcdff3736d2eac7a342378cfd228e6040ef4e39a58a89430c080bc4e64086aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fa05fb1bc8c1a2dd_0

MD5 6a7a71e40c806f56f691cd455c6645c1
SHA1 0c973ba63d92fcff81e05b1ff1204a86c3136fb3
SHA256 24a11124ab46df36372fe8669cd1e2cabf8fbfef73766f9375716efe99336e0f
SHA512 48c2b844a68ee3b541a5d3e8e0649f46298cccf684c58a78b32b7e71ac6545c222d68174bc50ce514c396f5f9713b1142f8d3f01d351da8a7025057ee7ab63f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ff425a22053e7c43_0

MD5 1cc1e390cd8f63dc74e200176c6fd578
SHA1 70f338e1fbdb828de867acb6cbaa27f338c8ac52
SHA256 56afb2fcd56eb9e65e8eb5301b09ffd02b265a32af42d36d8bccf73a1e95875d
SHA512 87e15184dbf06b4e364eba7de0e7bf05275a7c90a80e4a19cd7c4dfd69adaf0345da84a93886481af93a562ef1f497faad5b0af4730923161324a0ded75acada

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dfe07f2c15075c28_0

MD5 bf17848140a326b11fa4ee57773d559e
SHA1 76a78f0d577f1655e5c1060ece7d6b545f251249
SHA256 ebe1e68db0e8290efa2d05e5e315c98844faa8057a7baef2dc53d49771f47ae1
SHA512 60e10711cc02e017f5559ec64fcbb165250ddb1ff8e4ef7368f5eb1ba637d392ff9a688a59ea33d437a6c1b0f4edba32a74f953e8445a6f19a02749a1c61ad09

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\580fd9376c2d4a3e_0

MD5 3e675dedc13e943cd5555dc3bc54277a
SHA1 2c7be8adae7ff7ad816468ffa87526f186e5dd1d
SHA256 a98b9dca2775af686818a8ff1249dd555b5f38b619956aa19776fe28d24308b6
SHA512 6c103e4e7872794876705226ea217f93ec1b84fdf4d3d31297403a8bef6f5a13d0d1b1b36cedf76d9f9e74b9928cf1eed6e358dfe9a2f0d5435b5e35425e9432

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

MD5 b1a89176fec8c7268366abd0a19d59e3
SHA1 282d12ce842a6177a7c385eec3c243c2995c36ff
SHA256 6a4b46e3e72de9988d86e432f740e0ad4a63b9fe6f4ac42efe0ff9e40659acdf
SHA512 9afe7fb2457c74fa0d596dcbe0e4d3dbf419cafa4154b14dc0192382599a46134b1b8102160db2f54fedda5d66b961646c541fcc2d52a3c111f6fc0f3a0edef3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 0a6ec15c289bcf50ddc942558c7e0caf
SHA1 d4a6ca47a41d3dce594d09af10ec04a516e0a2d4
SHA256 a99397b081f7aed60dc83b42562f303e4178c7ede1c7cf87260d903df73ed909
SHA512 552650c97955ba1362cc3dbede4543df9689203c6efd5535f3338b58f0ea35120e3b78b698a04cd833f0a2651a4faf1f1134592c191affbecf527467638d7a7b

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs.js

MD5 dc3b64af412b61fe5d688511cdf7b907
SHA1 d6de2f1d8ba19c79fcc618e5c7b2c0eb446fde7c
SHA256 0c69ab5288c9fd91096acd5c1f9cc46d4e753cc324e46aaebf77d7dbd07c1660
SHA512 efd5593685a0e1c63ce8228bab13ff13a63b80e66759ea1a72a0d58e8590c83706abf95e28d30e3d89d7172973ad6e648800f99da97d03be8c26097ba4801234

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs-1.js

MD5 c9892aa414e213ca0a141d6657d1f017
SHA1 f96b582d9fe6d38a8bce685800b0493f04582716
SHA256 2269a847541d2639e3075a2006a04a96798d70618e4f67aa8f40eb6f7aec1c3b
SHA512 fa88a33ae695f99ae6a06d318d795c8bf2826d4f8bd5b5a75eb06976db76da7bde14ac1f03da759273a203c23cc69a3147dcaa73129ee72c31e69965333d3c2f

memory/5712-4058-0x000002CD35140000-0x000002CD351F9000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7dc79af4d36b08312d650017534a7475
SHA1 284e7c9c689d1239b9aec60cdb5c26addfb2ac1c
SHA256 53c36805a9daabb394ae77ac7870393ed10f0cc258976f4d90edfa7b456e13e0
SHA512 39fabbee7462f465179e9a569d7e8fb210d41b201e5695916b855f07508e99f11725442cee7cd11ac74d4d101a772f4c859780a2e37103eb2d00ba3bb5e1e42d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b6

MD5 bdbca6cd39a21b94af5e37a7d95cd7b1
SHA1 3bbd7a9c40294b9f26a7fda297a07cf68f4274a8
SHA256 fa016fd584f843b1373b82746add6f4ecc0bd88711e9e85546dd9270e77cac50
SHA512 930121da974124d737bfd6971014a2127dd1e5c383eeb643d7eabc822c867068c261f7d978a2c86f2237a98053ae3dd26a00624d8f0233ed04b4d2c0f8ead102

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe66c92c91d5232cae5482f39fc09115
SHA1 2d394d0679ce298b13d1e6be4a9c223c819c3ed6
SHA256 107b8542cce5469a1ee7c1b9d6be1b256bdc7389abf9bd7e15a26f14ce8e3ad1
SHA512 93d5a42f114083219fcce7acfab247311146baf5367fe7906adb1e7acbcb100dda578a9c766856ce0a7a0c7ed216780d25f50a89bcc3a3770222e2fa351d22fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 88dc529dca9f6bf0f49af9ac26272d60
SHA1 3a5710871e4929870303f8fffd6000d01ce9cb4a
SHA256 d47760b5ea11030c3594cbed8b546e63260fa32b80ae6c17562f85ffc2f64469
SHA512 f9fb5539b0a5107bc69cec87a85c3e8892dcf12413d820101ecc037824136bac1f43ee415b6181e88cde6f223ba921e8680fcd5186fa308d4f7f942ba9b952d6

C:\ProgramData\Waterfox-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\6F940AC27A98DD61\update-config.json

MD5 fe74f5c38f433736ee7015868cfb159e
SHA1 f723b0032565fb3007407201963f7bb762bdd981
SHA256 3f7b3252ef3b6217ad78adb7007738601ce1eebca69f55990b64bf254bd4fc63
SHA512 19fe20baff40c195955a921ee2fe1927d00da14e0ed3eb683e5f6f026353bfcd5322a1d2399b8977bdf97bb23dfd6cc811c9a9494f019b6e404aff477316cafd

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\extensions.json

MD5 17d758f33d0b7f40ec542b8f25b497de
SHA1 f540a2caf4c5db288c89757bc50dda6a08adabff
SHA256 203245b2ca55c36591c47ff977d354a3a8a677e755ce1bcf7eeae723e3184ede
SHA512 22f89575947d2a5648d917ec6465ae4ced56338934c1f3fe17213d357833c5a51229bdf390bbc6104c00dbf603c4d157fbbeea585591938f66b1b46eabf33206

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\key4.db

MD5 89779a92bfcf07d6c7644e79859176b8
SHA1 af08db7fe5cfe55ce36a05e0bea717f8be676f5a
SHA256 aa945b79c393cd87553cab936b3d1d979928ba1e1a7aac58090d3ffcbefcadd8
SHA512 1f620dacb069669c01b34f84681a2cce442c75606d2ec4ad7c2113012a5344589915763733c55ae556c4b78ec1191407c7581a1e605a1b15a773ff49f3bb589c

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\addons.json

MD5 3088f0272d29faa42ed452c5e8120b08
SHA1 c72aa542ef60afa3df5dfe1f9fcc06c0b135be23
SHA256 d587cec944023447dc91bc5f71e2291711ba5add337464837909a26f34bc5a06
SHA512 b662414edd6def8589304904263584847586ecca0b0e6296fb3adb2192d92fb48697c99bd27c4375d192150e3f99102702af2391117fff50a9763c74c193d798

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 ecb9ba839f245026600fde0a849f15b6
SHA1 134fefe32cacd00b2aef9f0aeaf74ed0198c3112
SHA256 d84edb16d8ca0d593d412958591526638e8207b5d07b02dd155a8ee51e07e49d
SHA512 0b386c6d83570899ea2cf1e4ea15689ef9b4ef5aa4682c1e6339a11bd84a4431aa58c81efc66989e08e13155194992c575121f3eb473af229624f9609b85d486

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs-1.js

MD5 7a17234d9527d8bb1f2605990e57ae3b
SHA1 4bf31a550db093d42db3887443e24a52b1729e6b
SHA256 dd0de63a1b542fa5b04a9ed27c61965260c8560f8b95c70f3800049b6c0d96b0
SHA512 e193bb2e254a626227dab461b26ef246913634e21243848afc696338caf55895dc9d2a56bb4b31b753e8e59d786fc105684953d41b49d0a99c06a1430b112f65

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 16ff8c6be38824225e6e38cd86bc71ca
SHA1 bdbf9b1c42f5abdcbbeea6af3990a86fc1a9e2be
SHA256 8722b5a631bc49d7e2e4d0f3077aaa0aae658aa679a8083cc026b304137ba496
SHA512 caf7270a52e19a199fe6341bb0e78e05d0a0e7dfa1bb9f8241c05ec1533dcc8050e90492911e735c8d47aceb8d13c712d77e72d9d914d7b21a38fbb7d0649050

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 3db950b4014a955d2142621aaeecd826
SHA1 c2b728b05bc34b43d82379ac4ce6bdae77d27c51
SHA256 567f5df81ea0c9bdcfb7221f0ea091893150f8c16e3012e4f0314ba3d43f1632
SHA512 03105dcf804e4713b6ed7c281ad0343ac6d6eb2aed57a897c6a09515a8c7f3e06b344563e224365dc9159cfd8ed3ef665d6aec18cc07aaad66eed0dc4957dde3

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\gmp-widevinecdm\4.10.2830.0\widevinecdm.dll

MD5 9d76604a452d6fdad3cdad64dbdd68a1
SHA1 dc7e98ad3cf8d7be84f6b3074158b7196356675b
SHA256 eb98fa2cfe142976b33fc3e15cf38a391f079e01cf61a82577b15107a98dea02
SHA512 edd0c26c0b1323344eb89f315876e9deb460817fc7c52faedadad34732797dad0d73906f63f832e7c877a37db4b2907c071748edfad81ea4009685385e9e9137

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\gmp-widevinecdm\4.10.2830.0\manifest.json

MD5 2ff237adbc218a4934a8b361bcd3428e
SHA1 efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA256 25a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
SHA512 bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\storage\permanent\chrome\idb\1657114595AmcateirvtiSty.sqlite

MD5 37ad2e1cf75134113882030568cdc275
SHA1 4c9b0319b772160e633e2418108dc490b6213197
SHA256 bafac80c968646b80823714b91d87e654b75066398e347eb90e158d4eba5e903
SHA512 9352f2d85aad1fbacc056f4e7d87a998d8828556099877d673198c91ca7771254f7f2fc6bb93cd3f9c137fca05fb461456ea1975b82932e01b6ff47f7c725cda

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5c90f10ffec292c90853b9b7b73c25f1
SHA1 e15ff011f846be3e193fdd6dd21eb6230a78bb90
SHA256 84acfdb4d2b088c61d4556faee1d4db1c8138ca285453ede604457787e5b0099
SHA512 564f57d0cca5bdfeeabd10181e2972d797a4fe7d9875a09f2ffc9bc3c0c1692780dac510036caf264bd2e61a335763cc80a53637a90e81f0f054d14b4a1c0ddf

C:\Users\Admin\AppData\Local\Waterfox\Profiles\f4t0dz23.default-release\cache2\entries\D500AD994A7515157BB2A6ADD5B18B754E4D2F99

MD5 7c825872c0f28295a3337c491b547e6c
SHA1 97264b02d066dfa6a8fa51ec611d9934971036fa
SHA256 2da4d28bc6d230944b8707e9da52add672c915d472d6da6f9f669709d1c39a4d
SHA512 c89d2b18a63a403f006c27dcd2c993a4764429f688d446e8b1322ccfb101f5a53ee2a0e613b1b4de57dd76570e6f436a5d1571d326e3a13d8d6a308399c2f892

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs.js

MD5 796a3969f4280e042647b5e23dd52cc9
SHA1 459b3c9665661c065d615646874e23484156fd66
SHA256 b1ea2a99b36e6e8f592499e5782ac4faefae24765201e0d02a79bbb05af94c31
SHA512 5b7887d9154eae98cf09e40faca58f89311ebf22a573129ab971060f730f59ac77a07883a0c6252b0041758d938f1ad804d2b8b48dab7e75aa703a5dbc991a1e

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\datareporting\glean\db\data.safe.tmp

MD5 b1c8aa9861b461806c9e738511edd6ae
SHA1 fe13c1bbc7e323845cbe6a1bb89259cbd05595f8
SHA256 7cea48e7add3340b36f47ba4ea2ded8d6cb0423ffc2a64b44d7e86e0507d6b70
SHA512 841a0f8c98dd04dc9a4be2f05c34ecd511388c76d08ca0f415bfb6056166d9a521b8bc2c46b74697f3ecdac5141d1fe6af76dd0689350caca14e9f849ee75a8b

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\sessionstore-backups\recovery.baklz4

MD5 047b44c7ddc7807be444cfebdc8371c4
SHA1 c86a99e3f19754afb870517df92dfb57a4ab182f
SHA256 5ea0f9904b3a8fd85964307e810c588c0b56a6ab54477c6a12c944790b712d41
SHA512 1889c67531be4ec0f71e8f4fe40481b4ccfe39c06e9a36a94bed8b03379da966e07b00a718de61af46e59f9b37881bee826c299833d58bfa4c5e02c37688dd10

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 2fcbfc89c412c14bcedc1d00e359d104
SHA1 ddd7d0b9992abf01e3a21db480fb9049999c5a96
SHA256 a16603a64dfcf855c2e470a00ef691267bd6a2506a54fa62b9200c77f54c1ace
SHA512 b8bf624c25266acb0011e751c8792a8cbba004c8228648b7f5f891a319b8545f8e7832c0ad6f16f4d1247c4444e9bfd257ce0f1d943874b329bae54dea86c0a4

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs-1.js

MD5 bed80c7422b9d340fa52be99c22566ba
SHA1 54a86b7c43fcd5afae5377bfe240f873107bcb7b
SHA256 eefac88b564c57315cf7d71b841e8166a4dcf18337eaab96a930867642aed84f
SHA512 f2513da53ee4622485f7c2801d6d8edcae2107182797777ab46555133c62866d80bd2e13646dbe42744bc3a6c94529c1d1d08bbc7db4321f1d17204f2a2aeb6b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 105bbbe0d6a216f62cb1508df3d3ed36
SHA1 ac16eb565dcf0de6c09ff4aee4e238282a6562a2
SHA256 f6e71a70621e2753acb027c1afa1e7d83585a31d7d39a90c2c4196b2d15dfd73
SHA512 7fc5232338efdae3fce09216d40fe4a7caf40d436e3c815fc5b12c78815142435af658dc8769924694e851e996537a2a9347183cc510e759562d01496b427f56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 eeef353d743fec4236b5320839275623
SHA1 5e17ec9519d00788b7c96d7e321b97329f2921f1
SHA256 b48ead79b50282229daada8509c76943bcfcb732e5b6bc3a67e1f5e0982c645b
SHA512 e3dadce54eb00c96f637cd6f992827820d8eebad284ed4e118dc5140601349866d0eee702661cda393630fc7106058a273305850ddb35914cb0349d662cb7ed8

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs-1.js

MD5 d02393f625b0fdee57f98bd7ef4d673b
SHA1 de0902aefbe89ca9215b61df8678cb9580a8c5d1
SHA256 8c0b877133c7b05607aa86af7f0ac5eaec6bbac2a533c6922bed780aa1344873
SHA512 8d2823e344cdbe2acf3c22a0e5df29ce9466d241eaa4e646b7b0a0af51285e28ef902aa85a0cad5c9986084e3d22dbbb6c1c1d2ae02766f2adbf84e1cdf9c2e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b1bf22a1bf257db1832da9fea229d40c
SHA1 4660f303327eceb8c8d5e53ae3ae9783847e04b5
SHA256 05bd992218d5269249b7d0a602a76291fcf3eb69fe6cf745a2b8e9f8514cd75c
SHA512 b5d7657a0b6577f0d545752f930965cffdfaa1db70544e20d7606f759aa0ad4dca9ec30b68075c56b8fb8627240238a6907cc8f25cd4dd73fc8cf974623ceae7

C:\Users\Admin\Downloads\Unconfirmed 245101.crdownload

MD5 8fd371f8de16289ec3b67f0c5c1f8a87
SHA1 4a63c568632ed6f36ce81c791101f95ce2f1610a
SHA256 852db062463037d5dd284a9ee7ec830afc4908a388877b76c0b112c19e30c97f
SHA512 030c0505b1164f235e930bfeb487bc414328328abe2dee7b00ed524f84438cbb5e3bf2c77117f04d709fdd8e7fac239e78bbcaf4631b18a3a1d6706a381842e1

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs-1.js

MD5 5bbaeaf68565713ac4f70c71a695477c
SHA1 9ed4d64e36bae15140bb0f32c820fde9ca1eff7f
SHA256 14aad1ff3936a854d78f2e82583badd8e3dc6f571730452f38cfb2581e82590c
SHA512 27d699ba4acd67bea186c3f32b7a6291eebb8ae6ebe9b1b286f108e91f8ee3950359abec4cc217dcf76db76b8229e5d50c5f96bca72a724657d75d2cdf51fce4

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\sessionstore-backups\recovery.baklz4

MD5 984985aaf3c3759909b6e384ba2d1ef4
SHA1 b39ee4f32eb51b2aa608edaffd54d0e14dfa64f1
SHA256 84701fad9f71562fe5a4b27ded359849f85131faf0c0de52ab836085c11954e2
SHA512 55906d91a292c55b745039b6da9b0aa9f1e25f59c49fef3283bc883163732d50a5bb5f9f7f21a49a3d49ad6339b9853e61bf87d4c1e1b560871e7af43358b439

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs.js

MD5 336eb437077dedf69a10ef673b21c9ab
SHA1 51447f6858af38a8d8dea7ddbe6062ddc7336eef
SHA256 12011688e35a9d02ed006cc53b8c395a3650e78eb4be06354161916bdfc9dbb9
SHA512 0bebe205d7723bf2412c2fe1413f5272ac570129dfa31a31dfc20c8c768accc1b5995aa9149194b2faca53981284c37f6ba40250ee1f9298a31c0724faaa9201

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\prefs-1.js

MD5 f354b671ba6fb50444cb131def21a734
SHA1 0f482f308716b629625bb1835bff9c81d0afae54
SHA256 652b9b5d897e54489f9432cd4f94fd30b15fedd7489ae50d9b4abc67acbbaf96
SHA512 63403bd583bab3eb62d3ad0e1c50c0839c1227e0a7f525620d21bbc9cabfe93cd85d0f294272fdc3c44e7391a1caa78a950afb8405c464b9ef9cc981cee21fe4

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\sessionstore-backups\recovery.baklz4

MD5 7b249c40398661d3b7a26343a28010b6
SHA1 e1df4b9ed6c64a600388cdb6178e616f52cdfce3
SHA256 df5f961f08f37a6a29de039fb2fa8864bb2af5aa07ba5735fe3b796e67373381
SHA512 e3d27286c301b16e3b03a664afe12785478851f5a457d6d3f917e6304f787f7ae99f95da240ecda483383b6392badcea09120d36f958910596439e7ef70231b4

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\sessionstore-backups\recovery.baklz4

MD5 f1d6a33332875aca7ee0978bb0a6e5ca
SHA1 2f0a9bd6e5de530eac536045a3bb9f893a01c8b1
SHA256 05e0eb2ecace051263361d3dfb000dc457bc14d4301e3b622c0a1b911b49f722
SHA512 9d0390744d501a7d14cef3f52513508f777ece24b6bf25b01e586d40d980ba19a4124d6eec33cff703e7e63604bd302fcae3ac7f87aee25c1daa3457e2cfe1a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 43e6d10fb6cae37d74009aaa6077ae60
SHA1 51463d70a5230e56a895379e27c0be31ec8115e3
SHA256 2be4c5d8b259978c88bfeb690e6a3361e51cb80b44c59c26feefcc0f413a0609
SHA512 8e62837e3fcfcf7f42144fc1ef74b237524c3949100c646621b1bb81f169e73806bd298badf8fbaf4575d170445e5197789343c0d58724948f724f436d6bbb2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 ed1950dae6a36f17c0671d7c94203690
SHA1 65db28ff30c9312c2e44739627a44f568b78cb9e
SHA256 538fe045c420b97a380e1bb36ac8fc1d486fe9db270942e74ad3ae38a5251420
SHA512 996dfcc9514de7ffec64bd9f60a68bac897c2d1140694f3e0530801b1c8dc76f51cde008a86cfdaeac1209d19ef285b9f85392992cd7e13836be4b67d076a6fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 88bd0f71fa921ebd6b139d4d60fa1564
SHA1 a7097ee520533978ceb96dd5b183170b203fea26
SHA256 4af704ed810758c86a9eca09ca40b9a75cc289744318ec109fc85cf4b20c000d
SHA512 49a226052ad7d13d21611490c6d75e92200eb35a2cc322a12c771f84db9d4155848dc573709f9a51f3ff8a064415c0735d5f84ebb5872a2060fe5a6b22af794a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a94f04742ba940edf3e8fb7423bc3d58
SHA1 bf13c6c5b38fa5fefec424cbcaa48326af86ba91
SHA256 e6bdf739994bdad2258d20c568287eb66105bb297dd20115a3b0c0e6f1168fd6
SHA512 405d96f91651bbbe070c339ec09aef46c470f9cc20459f40601c9f9791adeb90a53a288acd30afd4d9633ebcef59b056549016a57d5dbd23480109f1b9ead22b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5f8e89415457dfa4fdfdc001b142edf8
SHA1 c67ce198b08631dce8adafb1383adc430b71b246
SHA256 80614730accedb50784a118da48df53d2edbe32b38edfd402feeba0092257eac
SHA512 86bd1602973d63163533b7799d77ef3440ae811d1760381b135f7318acb7b6b6cb1b32aa20e9608a40d7c9e25363ac98935210b2d1d3060d73a11582bfaf9c3b

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\sessionstore-backups\recovery.baklz4

MD5 64bb1b655729b67c35e6f4508376c299
SHA1 11381ae6e531b33a32c5927c49a8c5a37f4c639e
SHA256 be44d6affd85a67314c5fde6282973ad18c95f79ec7020727b2a3b8e964de104
SHA512 f6b79bab3792df68182801723d08c8a2e473b37c9a9d8f839dd3be722ee1e23b4d5078819513f4f7dc46cd060a40ebba064bbed2deabc21b4bf3190fcdd2e9e0

memory/5728-5591-0x00007FFDB32C0000-0x00007FFDB32C1000-memory.dmp

memory/5728-5590-0x00007FFDB2700000-0x00007FFDB2701000-memory.dmp

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\sessionstore-backups\recovery.baklz4

MD5 48f08396712285dcd29c9479bdacf1dc
SHA1 e0b96195c7fc88f77d03f6b62c9d358b7494021e
SHA256 83bc184ccefcb61757d0b672105c4434347a9a093830295181acfae553d9d431
SHA512 0625726bb57d1e8b6070f38545918ae45b367a528f837e777a13f32192e1a1a76576143fcdfbf5ba131f067467acdb610cb0dad2e1a4dddc73ea28c549826c36

C:\Users\Admin\AppData\Roaming\Waterfox\Profiles\f4t0dz23.default-release\webappsstore.sqlite

MD5 41c22c9f81a84b1b0e5ee7ec2ff7c545
SHA1 d12424cba9e4e9124bf3f15e556c562b95c9b6a3
SHA256 4ffdc78433817da79ad2e84b26a2ffaf62d8c1baf80421751d752c3d8723328f
SHA512 8b690c55ae0b25aeede62a09dea1ef6b7daa9880ca63c6d4ce192160daded05fe0dc44b115216ce10523e2ec45991873c249f159fe8608712818f5ead327897b

memory/5728-5713-0x000001C44E020000-0x000001C44E10A000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

MD5 f2dcbb1f3153e72e5f9335a4776bb51d
SHA1 fcf76e5002b9aa519906913f3ec493fb7affa3e1
SHA256 2be16e2098f1c7f123d123adab5c763061ddd3db74fcdff7e77299267d4bd1bf
SHA512 0f9510cd8fe090ccc0ea7c60105b56147cb6f11d9726d1775cdf298c8d131f103b6d0cd71502ca1c72646020a067cd2b9e6fb41d18431a57dc86a8a1688b3afb

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 dc143cd9a53907f5f7ef78d1eaddfecd
SHA1 bd45ecfd98f5efca030d36dd29481ce5b5e43327
SHA256 2d939d20d96986701fbc347d6e1fe73a0bf8e0922afb80d48438005279d20c26
SHA512 d25ba5f7e95d53326bd0efbaa2d68ebcd75118a250634053cf2815f7ad2fb47e713cb3afc7b78e0b5d517409d941a63302cc2e60c4951fbc770346ed97b1b20b

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 76f090cd1b91110a12464174d6544467
SHA1 290abaf95fbb811c3b2243ed5c2c8219220e486f
SHA256 8b01568797452174572d97f78e90ee6933f87241b144a873691dc68c80dddfca
SHA512 eb90f9bf91bd26e8aa63b0375b84689873957e8c29bc35209d2388e3939729b7f858ba455dbae416c7e7cc0e05b9a010e61e2d210b35528f1d09f07198db8579

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9cb23d394516bb2351f634543edaac05
SHA1 021e013962f2cb1db17b0c63e22456f85679d71d
SHA256 531c836ee002564e7bac150b64cb72385d85c69805f8786944c2d7735f950596
SHA512 612fd22a517565ef743a6cb088e69d1d88d5fff5dc56f001395dba04b2a0d1c234d647d1e4f8637d587252a4048119ec4c1e32adf4345f5b318d6551bc204989

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f5e4f8abe2d40dbaa9b68eaa9835a7bf
SHA1 76b62e90fcc6b10fecf39acfefce2d8ac391e4bd
SHA256 697c2d034d8b6bb558494a2e217a408590c4cfb4e321d30e28a04cdcd99453fb
SHA512 a71d65cdf1317594fe97bc95d56eab59893d9cc97f4616e42c1d416f95ba2848eac125b79fe1a5d0a18e77ed3f591ab276f6d188cdb1ff62fe426772698c4001

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe933843b2f2d77598f6fbbbf771a254
SHA1 1687798efeaf75743b5b9c85ac690cfd3da20cd9
SHA256 3d5601cc6c97c3e8cbd8d131322765d30bb80078069a82e7fc4b2551469648b9
SHA512 bb4151ed4962ac8171e2d19dd39be34bf3ca8e097b7691df201407c14a9043aa159d852bf1abc9b8d33fdcf1febb069545df448f1e3ff1a800e82442e6b23216

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 57e1c9d22e7ff39b3673cfbe6f7716d6
SHA1 d8da42348028ff0bdafd8a991f8dd4c0109a5f40
SHA256 f505bca723f61327658ee1d58284a8340a6cca22c2036c7cb2b83507594f36d3
SHA512 8a063a5b21262df35716e4e59760c5d4825c403005b9b2562805a9bbc9d3c3aee662c95de35a640045a2b3ad4a4b5ff8a5bb251ebcc354a8b5a88ade30a87780

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 12526b479a28989b0c42fda80194ba98
SHA1 262b8a1c3b2a76079215039d0d4bdf0298f033d5
SHA256 ebb33a8213511a254a552e26f1d4fb70f5b3bcf7fa99dab1addce8f524447fe3
SHA512 a7b806c9db38905eb94af26fe59fbacf5a056135bdd1a4ce68f2c7d43458c9ed273aff7f57428808363193413f87417a198ec92dfc33dac547f9aaa420b60191

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a47e8f1e-b559-4ccb-971e-df10737b73e4.tmp

MD5 57bf1589547615b1d57fc1038a5f3988
SHA1 89f4f4a59f44aab8d13fed06974cea32195c4661
SHA256 b33292c5b263c523ddee225fd945b1b8438c4006a28877dd8663890082b3f198
SHA512 80de0d49bd753e2def40a0729c9467979c26e397c1718656f09bd8bca09d6965b2c5d03b964ee2cad359310c24be2af9f89e3674666ddaab5322b3723732f26b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 09d2ecde90af671bc890a64d6917893d
SHA1 0f002b4f588063e25015cac59829c2785b27f5ad
SHA256 72bbdd226a37f8ef89f9f3c04aa27aa3a0cb16b69f42ff6b6f5f7e69fd1284e5
SHA512 e472beef34fab38733a4b30173ace5e2ae48221180c9e409366aa45810b837a371669085ca70d724ce7b9f6b05735399ec8bd39a04c0ba02f18697a43e6d21fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5 78413c0d5e05d6c36720ecc0c3013cbc
SHA1 4ea7f7a04d11a77a9aff562788ac57374607c329
SHA256 4238a86271d25bf5f8f4ae9e2e911200e54618164a67e1b624ee497563af74ee
SHA512 0835b56d178ca0b3fe555b43e3e265c2f847da9fbb6167b52385085a1bde981000153f65f2026d45352b783d155f3d3edce5ab9576b9333e1c31d8f7afa4bcde

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 782b7fc18a24ee997efd9a7f02fa4bf9
SHA1 db1f15bf56aa30ec79bb6a9d2632fe2a12de099b
SHA256 c45388c0937dde58151ba6f3d2225751b8b89ac001be1ef1f40134c61d391b8e
SHA512 c08790580afe4c89fd3e6cf9dbb4b26548b4a686b1e9bcc3a9dbc6fdcad49e84a0a5ec2ea7f3935308ac059af040af3879e29f3c0e2150d7687bd02fe5f4daf8

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 5451b0e33fcc9ba670c2c67ca5368e29
SHA1 a03b98e61f27b280aa9a0a87da337255b586cc80
SHA256 87285a7da7624264bcad08f029a79f9496b72f50f77257af1da4c5c5b5dcf054
SHA512 e42b7726b438287edfb2fafbf860e1bcf058a171f7ce54e85f4983dfd59c32836f60b244237ddc7c423b152bec22ad60d91f23ee136701b83f71b77502626fdc

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 23a9abc3930f37d30feb78ce438734c2
SHA1 08dd805522052be66f608c4ef3a9ec681793fe6c
SHA256 ebec4b3916db44cb50d6f0f0c2c9051d6c22430f2b1336ef0ee520a171d221b3
SHA512 1a1d03ef3378138a8058aefe97b7045a2c155a62d80a102c9f510fb0a26a65abab6be7717141dfe0dc4e81d7419854716f6c8e5c16cb2f91c6cc6c52579f85f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3a7b51f896e8f5e54a0c66054bdecaaa
SHA1 2d912024c121c134a8c8c7c54c7bd7e928ad77de
SHA256 8d1253edae3ff789a66bd7173f964aeb5703825fa3e8c19512781e2676c0347a
SHA512 ac7dce3873dc6785703bf54ad85fcd6b2b16e98eab6b0f4a2e405c4bdb092d80a53cb674590d423c1f6ecb3b4636219c8a1698be18a7d56c9542f22846d08372

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 594fc3a544c74c801f2144d155504e98
SHA1 f557d2c8b229679825617e138d8469d19614a4dc
SHA256 06593897d85c0e728f10f1787ea64e1a3718defed78999d1f2b04fa2ccdd4df8
SHA512 5ea3c1476c529a4cf3ef541819f4a6188b460efae6a8905dafdc5319ea5f7a009c5f17fea42293820106beb39c3124d60ccdfd34a95cf5761098027b272bb378

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f9f54d7f2e6cf0b1_0

MD5 c5bfcfb6268ec0f763dbffd15b1a80e2
SHA1 ce24329bdb4ec8cd8b77e8e986ac2f0ef7f32439
SHA256 eef586a78c3edf49932b940624d2fffffc51b0d3464b027c70e3a53938999b57
SHA512 313186dc7add25263f7fc991c6a37a79111186b3dfd3ebc0f44879f2ea8879456c7c3f2675c84541ad2e5c01bbc347a951d1541db0bca50faa0d1857e0e97c95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a994fe24b451732_0

MD5 337abcd1c6da52fb371af33669148dab
SHA1 0fe530b03ca687d9dde588518002df17feee4915
SHA256 4dc02ce3f6a307e3cc530c2fe2f97874bea146a312ef446a11eea10621a374a8
SHA512 56dd056a70cfb3d0687d1fd121be255bcdd0961e5b834f9712e835b39a4a3541c7085b5ef430703bb35266c4634b0b947d85aa536da604926c5bfa08962fc107

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6e1427d19ff38087_0

MD5 591f5a2441805499876ef59b1f9d8607
SHA1 02b808f982ddb5fbbf7e512f08574459066857f0
SHA256 5fe0633f25396b7b1b590aab4461dd65a4f260f8e1a7cd93a41db27af82c8b92
SHA512 6415133e03c6cef443b3182278cb368e3271ebcb533a4e56f3170451ef2e78896c15a0880d37d8001f0303eb6079a40f033f4c21a2db7098689dd285a31c97ed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fdcc79825f72a05f74d1cf5db0c72229
SHA1 d07f8d94891cdb6353dbe66e2275a2771b7ade8b
SHA256 fcf10efc78470652070f0da8c20041d66a978b6a4dd2abba926666e4715e146b
SHA512 0554a95f3e5e2bad56ba8b3b0e4e6ff7abe00f9f3add742c052cc7a7b843d2675caf16440166478953934bdc4ff8823c6d4b9d008c73b9e08da73ca7c9e1d67d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5f3de6b4498341cce2dd5d31703b2c71
SHA1 103736ad7e3a47331bbfa4127515e3409382059c
SHA256 292054a502a3e52c130769683c28c2b417c4334ceda99e5ce49002057ef7ef28
SHA512 2d731d99595e877cd1bda43ec5f65e3edefe7c77b6b702da84b16d61f81092d47b65c646d0e3459e3597456b8aa2fb03113d755195e8b867c3ecae600622d0d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

MD5 0fb63c198d5605c2448c8b630ce49c65
SHA1 3596cc4890662b8160071a9f602bb0995793ea1d
SHA256 d8c731716edeb733ddb1657b550640a0e6056c9126cc736843bbb868be1968cd
SHA512 6ccd680f2026cd3cd5709d47ed053552a711c1a1cd25e80e94a803c59eb5d03dbc6c794ab408b5a77f5428e5c6fc8706b0ccc0f7bb199cc10055b735dd131751

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 85fd4e4d8bca6d42cec2ec6b3a99a99f
SHA1 4cc19509fc929820bbb44502ba219db9a00728a9
SHA256 9a3f7393445d57e0ad7ae95abe6e1c962d5865b1e6c0b9fc4a894ee376e652c8
SHA512 4378906746d5d7dca2e137bbfb61997071f3b2d3246b84abf1b9f69a6d00384d5f14f13b0ecb8b462196afbb2caa4d5fbcce3cf5905e1249458be8d3d8f9aa4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

MD5 ab2a648c5992bfe239a1be45054f26f9
SHA1 d51c32b4868f46786b4a1534b2b40c6b94e9c0db
SHA256 06c0d1c940473af5483902a53a9276d24ebd43c31ff29c65c7b1f5641f6d8e0c
SHA512 51b3cda8677b366630156c089e8d88e95beb80b083ad20c0638d65d22b69846c7c4d5aef78a01b92958b3b833d6105013f3cea2d80c28175adcba4ef5727d458

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9611bdbc5f6fc001_0

MD5 37d7f819da654524e71d90a8f6111bb0
SHA1 38e183614896601b809b22aac5c3fd9ab0d468bd
SHA256 867d92bd16212347bb351e812ad279158713ec18f10aa197e8b092dffabfaaf1
SHA512 b82731f098bda98b16c9eb30057385b100c027838728cbb741eff2c2313fd00687f2a5db2442f5bfb8ffd6abff49a1bb67e5efdcc71f554635fb2ef8d58b7552

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\605167868572c6c4_0

MD5 4949df5805cd1585745c263308f4d4e8
SHA1 f8a4cc49644f0de478000ad1604c65e72a98d81d
SHA256 a41f69df0f26957872de9e3e4294620b1d3d3ac8130063e6dce8277154eb40d3
SHA512 eb5ef6b7abf8ebacc3f5307f6ef8b50820aeefe8f3100c3360997ae6d083d180d09959c79d90aff3ed8536f2fc2b6019f2a702dac171d7a07b187927d326b20e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

MD5 7be652bb10386dcd86de90d3e945cb8f
SHA1 2b4b04631b15ebb4aa9cdff0ac3e256f2fb28f2f
SHA256 9dd0c49a261fc40486e7759340b13c8a622c8598a94d7a1030a92f2b4d140c04
SHA512 eddb3cca375e2f61b4e197be02c0cdffb79d5dd706d4c136b97398dbba71c8526f30528e356b7b20f43fde4563571cd4bd3429d979db86f39278ff7d2352d545

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

MD5 557b48346f64e58ccd3bb60a086f2502
SHA1 3e65fbfe54cef07600c76eaefac65ce8c8f9fa72
SHA256 58a15c139905dcc1d708b11132c2477edfc80612710f5c4a2c91d43420ec2ac2
SHA512 cf9175687a8fef1d05e19e3cefd106ce12943d483c0e91f523ac34c70b6f5d0c6a7403d5c16867bbe640b801867dfa19b7227c734d3ee35773ed773c87df90c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

MD5 95053b5c93d45bd6694c8f586a7e2b3f
SHA1 12e3e2f790d0e7f9c3a1c6f2fa12ec60f2ab32c6
SHA256 4808a64e0253be16f6f3433e380feddac7ad4b57430861fa87e52ba8d5ce8ec1
SHA512 48956a1590023e9676bd1e464eb7d2213cb2b378339db9a7c221f3a3e1a21477836d088e35f172a7c6d9c1b7c0260cb4df8e098d8c14e88881ee43d00e53ccf1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

MD5 0c4819157de6e63ea694c61aec9c2d16
SHA1 a0ec0f6c760df9e3e4d852dc4318dbc676a1657e
SHA256 28ec438a8ad82975f78f0c7c2789fec49e32c38407920834d8bdec8cb113d652
SHA512 49193ffedccf6d7f2b5dc8fbc1dafea6fdfe73903b774b929106da4204854751423fdff4cb1adb3e715460a336b94a3b4aaa0186d5ead47ede0efaa025a07e47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bc1a47f6b512460f_0

MD5 c64f623ff01678749ba780865108644b
SHA1 89718a4a3cc4f6ded5a9d8fcb20fa1e1382c13ca
SHA256 d647abdd461aede9293fad0358ec645bcb487ef7ee59189c9903b4004796382a
SHA512 53021ab83dc51fdb06d3b8f07b7871980d702afdaa0230f6ff8c59ed067c73a4a5abba636494012860b4f2fda2e2cde749f9721e17f004fdb92ca02f1a2f865b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\83d6d3a772bbc707_0

MD5 c5bf3e9aa27ba6ba984370aea7d79ceb
SHA1 df82a564ff3429a512c69deb6be0aa5fd89a3691
SHA256 9960ca6d91caaf2c9fa2c59f9da0e3ecc69282f86a0b33438f667f25aeb57f9e
SHA512 578f4e3448aa5e6dcabec258b0969c09f668cf0407288b62945e5033a588bca9ba427413a18ec066e522c5040b3fe2f3a36d06faa2985c82d8f7a795527ab890

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dd1e579c9681f95_0

MD5 9ec97993d94d8c61c49171c288608839
SHA1 d2ed494f1fb1d1de6483b6f6c49ada42e16c80b0
SHA256 76e8d8441b1f63839a3ba9780c9ce78686ccdd943413e5f15a70d22584a63534
SHA512 5296f4d08aa2a20b61c48f8632a8988b23cf3adc552e17eb0b8b240567d8d85ef6ef0495879a316d2d52d204c42ae2178f8daaecba28f1001792726955898689

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 4de58269448f6aa8c05fa13da0aea595
SHA1 e5cb968b8e3b161e8457c1b7699f0917a9ea6348
SHA256 d5de2c6e9aebfad74e8f544eb1b41f0953c62768e901eebce8cbfa9822809bd5
SHA512 e68b4778aa073abd14d081e5e143a7cee02c9ed8b9d09c129c3c76c9e59936e1d7df4fd8cd847a9402e1004535e77ef43376054d6138ab320271f3d86cf46a26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

MD5 45ef3ece269a35c3dc4d66df28b4e922
SHA1 9d6488389f25ab823607c7b4c4225d41f096a209
SHA256 ea33d90d20998eb37cc60444fe604924f938c85cd40cf91c7a4f165ac9974759
SHA512 369b612fe65ea1b4c19be32aef9ada25ba133bb653b67668861f2ccb7e3e6a0c1a208366040c257f2163312e19d2b5416956a2f6a433ca199a9c41a36e49b9d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

MD5 e8ed83b650daf6b3e56c9351b5b49e27
SHA1 1738cc95a5457e29827b889be5aad99332f16c78
SHA256 7ddb58735af2ea29565ab502a87a0631350408e9ac88d55bea5875f402605311
SHA512 5e207d72dbebc56b8e4fb5a640b5be2a6bbcdf2336e7cda5d24f11600cf06fd614b36926990357acf6d21b2f3f1c2266f08f4a0efa60be9d0505d04d3d287e77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

MD5 967e97d660af97e4f162f9eba93acd5b
SHA1 34440ef4d5e26291671e1597824cb52807b9d33c
SHA256 e3ccda04bfa7762a13234033d052958de5021a66a4f361c5dc3cea44317cdeeb
SHA512 3dbc82374eb0ffd36b4d54be225b474fe98c72130ffdd486a681379aeefd6c1b847e2bd9e37b73db9063633bd5818c85926f353c4ba76800dd6a9b0181b958f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

MD5 1146f8a2fb971f3f4cd8381a47591fa8
SHA1 368b6fcb4b0415c8ced04431cb1676b8e4c0f329
SHA256 3a67cb7e1d631f666f4895b266c1f42c48d6a790a491de5144e68dfa9b393f2e
SHA512 ae933d126718f6a71235d1b2a8cee9ccd9bd577d6b3b0f1d7be82843ebf3447a2081ef4968748ffb81b3ab3021727aeed2c13d6f72e1c07b44b5d8c368bcf8fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bdd8a4f7267aaf50_0

MD5 1e60d79b81c24a03d00c02a712f443c6
SHA1 c97ac7261bad7c927059c4368fe6852e1e3a40da
SHA256 ae1c2d0fd433b70aef7da8b2d7663e1a5e17474b88a2e686fe7fbfa5ebdb17be
SHA512 b4d884e650e748d74bcc7fca016e9881b68ee4468cb7959718ce2299fce381f0e5ec73e0a330ade6ed2dfdd1ecdf2693e7897e747d136c767f8605f4fb7e92a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b4efbb7782bded86_0

MD5 4aca38bc2d02c2aec156d4da42d3e63d
SHA1 a06b6c23c53f12b3f2be1a4e0612a8e3c250f1c9
SHA256 74e124a1380fc579b5cc9f44c26095a7c23e37c6433b1d159b771a6b5e1e644c
SHA512 675344b0767a4f85f2d1daa96b63192c8fec8f7d909e7dd8d7d366fb77b1afba6c59ba405badeb1ea35aff78d028ec0105310bd27d4adf479eed1a48513ac909

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 ad80f3eb13ba2284428b0083b6ec7656
SHA1 64a7ab72bee471e5793d0c8d4b7e470a50727a1d
SHA256 e5fad1c48a20644093483698da6f163adfeb8f0c96c6f1392b878e5a65be5177
SHA512 af8c9882cd305a441122fc16d1a713867d03c37fec0d92c1a7e0316d89f93bff80b024e366f688b9525877494beb8d1ffa24ac004b550d883eb84170507305f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

MD5 f293daaa68086e98729479d84045eeb8
SHA1 04db4151c03608f320260fbac769a0a177c7abb2
SHA256 364b8c2959487cbb7a3157bbd4524fd777aeb3d5e43010ed061269c46f876a08
SHA512 e08d141c83f43898a21c17592830644ca635b621a8d86e6eddeb6e8cc08b147c3de5384061afca79bf18750df37b68a6fef1d3a5a9f144ca2faa01019592c701

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2c633247059a336_0

MD5 5ae6603ce6446bb6bf7458bebb6957db
SHA1 b22be649a0aa1fe39bc3c2bfd2ee516c8f8a786b
SHA256 a65a1c0c8dfdda8095756f09ac3d4574d7cacbd11d792977d382701014f20276
SHA512 98ca66b2dcd911712b4fbca1fc03b9fed82da54f242474c727a1d54628e2b0486e165f36aecd6160e299e4d33355e8ac92e6201f2a4197a4da5aadfa4dbe2a67

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94e4831af3ccd8a9_0

MD5 be383e453aa67f4298d280845414a595
SHA1 f8d7db6f684a0ff5d778acdf65a56ffec9d4f457
SHA256 48d7012ca350f508e364c7861dcb6f22dbbfa7010d5f83f1422c7ebb66455957
SHA512 0de4ecc97303cee2ad1300a8bb1c0299d84352029335b03d4a2290ae6e35f3b49c0a680a521787b263d59dcf3534e4776e5c0f9fbeadd559504018b2f640087c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7f8b6e9ad2ad3342_0

MD5 dff50c2901be671661fb4e418acbf5be
SHA1 13307536b5fbda1c8463cb87591b667558a0f072
SHA256 0f3fb7d0a3887afb36ae69a29127292fb211cb601913eb5533156869e9b51abf
SHA512 d5d5af89700672a5dfd608bf2f27511547392d872c95677a1a847cf829ccdc9955f1ed356f22446a13880460dbe2c54d79b858fc3fd08f97c06579f483a65c1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8784898b517fefbb9e7ce66d163a507d
SHA1 04dafa4bf2c246d019d49ffaecef608a9f5fad8f
SHA256 1940e078fc15328a11c80368b8143215c8be11187b08f14bbc3e986655d591db
SHA512 6ba237db97042b2f15089907deeea04e5f2f7c1a46e3eafc904901f5b3f6eb8effc748fc4d118c012017233014e0676447403c6e6094ea4e7ec70cddf8b052fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0e598303ac3658692e87d07cb0931732
SHA1 3ece5c080772eb0505e452b9d97a02c130182c58
SHA256 30c9aa1eda2a60fc7e6fdb204a67ed8cd9d4ec342adec59937e47ec117cf245e
SHA512 6b439187f000b60a762ce1d229669611302f0b5e48e5c15b52784c5caf1afec65df9f328f9fb2ace1445f038a03086699accb2711294d5622fc80b764e266980

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 fd2035a4a455bbc1fc167446341e8bdb
SHA1 7054cfc897ed13314d37850da430f986ef28a1c2
SHA256 8a779bc83559ec33d34f6e937c200baa95cf1b315e7754ed1f062717dc20b75a
SHA512 ef47d5eecc92cd40baa8585e1eb5a0979434c088c5915692a54408f6f0031c80f3e623fcb75283f88c4eedded70888b9dfed07dfc58a0e7bedf9d76fc8fc5197

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5 d4586933fabd5754ef925c6e940472f4
SHA1 a77f36a596ef86e1ad10444b2679e1531995b553
SHA256 6e1c3edffec71a01e11e30aa359952213ac2f297c5014f36027f308a18df75d2
SHA512 6ce33a8da7730035fb6b67ed59f32029c3a94b0a5d7dc5aa58c9583820bb01ef59dd55c1c142f392e02da86c8699b2294aff2d7c0e4c3a59fce5f792c749c5ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d2b98c86e0bd04b8f7875988b61ff36a
SHA1 1c1f3c56b1e85057611e0de6769ea748157094f2
SHA256 89e9eafcbe1fa0ef399845f85c9d9f61621022026cdbfa3afc5dc1ff7b6102de
SHA512 9bdb7d1c4f6b2f13d77027db3d6115fd85d0fa203559c5de895973a70ac2af39386cee2ca41462d8590c2e31f8b10b2fb1988f90c5fd6014d405f5a4eb94debc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b99290cafafde412a7e535823ae551ba
SHA1 c68a07f111d8d540e6234596be4177b10d82cae9
SHA256 bb592a0ee8283e3446ec5e019de1312af42a933165fa67628a08228d40557c69
SHA512 3049ac69fd948bac579adcc4429e82d7e3466fbca34bd1fe74c272043f8bf618de9610747e4b3c80ff1de0a7519f4118dd061c0009bc9bcf4e42699c5fbd5363

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 82065f9ee2f5c6ae04e8facde9707d7a
SHA1 fc79544742551102fc79803dab3974b5d4d5aae1
SHA256 902eeaf7199f9234d18bbffaf3b2cd7f33a4f84713b1df07de38cc14058108fe
SHA512 04f92d95fc4770cff12e6f26740557e5784cff8b3edd1ce506bdc214f467e80ab3d6c5733f478697431ce6886a2dbb1e05d3f05aad0f633a35026e83a4e5588a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ba1ad3388ae60372ab4319b88d2dba94
SHA1 39349aea5b3cf49e660db15b6eb743fe9ec9629d
SHA256 1935c30bb12653e466c09fdc47278733aef39cd5096997b5c03f0779409f640c
SHA512 305e254a7cdfeb420f222153d678df28ded5ca59f35a35275762bc05474e6416ecb15b5c7781746a07e2045ecd6d23b5ec067866c92ce8f08ef46901f42616c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

MD5 e1f6e032096b2924e561c3928b9dc73d
SHA1 f33a3bb1b04f04ed1b93b13d21b6b3ce529690ad
SHA256 fa802b853572d8a40ee939940d0cd9562ea8f5954c0522b0777e01fcb546c3c8
SHA512 b13f6e1f984d28c5f4cfc4ae2298b321c314892cab1e5ccd6f1f61ec98d8c1a39669078c88ba541c91648963abc6e16e0a1cdb4e9449b4be16927e9bad8d0f37

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

MD5 cc7ad65e0558327d8fbe8ade40ab94e8
SHA1 6c153e9bf971f196db25cb2cb3b62f77f0a1299a
SHA256 956e1fd407995ff1ecca3bf42ca0d01086edc7eb6a965e1d9d4a48f197a8bd30
SHA512 0af63a7bb1151ef7564472b90ddd766857e3fd78973195817aa751d97093558688733876114ea7341063c7f1bc01f90aba1016980ce2c009a0cc399f40614377

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

MD5 f1cad4800853bba09a023250de102801
SHA1 76e1a6ae10ac4db2a3e4e8bf6b7edd692c4537f6
SHA256 e73ceb9052ea848498daacd8a9fff37846cce47324b38df12e9dcf0bf25d2e3b
SHA512 4e869ccea434e71f03ab513b3aa6212da3326cb9625c467b782df48367cbf5c69fb8a073d68180877cfde2510dbe74670046b897125b55f013fe595bb7d3595f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021

MD5 60df02cbc9b6a531c2d3cf32025a4dc8
SHA1 71ce31d6e0f59f98855a01b3eb9a37a86352189f
SHA256 2d73eefd868f115745117f76888a9b0124453918522046796a55c3621ad2c15d
SHA512 cfc2d4bc147bc757054c07a7e347091922d4ff9b7a0f856d0a3c278f5a98fac1a539d05ea5c375868b372f006a530d14558ac7027723f83f3b22087bd12992dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4bb8a15d2e8ce9d1728ca57348c4f204
SHA1 82abcb6730dd59a19d29ad52a7e8e92019c77e77
SHA256 ca312c6e9fc1ade9b4583db3ae9f46e2f805256efb6dae2625377561449d52f1
SHA512 6458e10138a350a85f1210b598433a5537e6dc94dcdef8d7246924823c545094badb93e752a6c4e58cc977c7f647c17c7a4309c57c326a1d4aaf0c99458697e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 61ec4e4bbe7b22973d7109ddb1dfa64a
SHA1 e26e85bad92b746c09a55ecf4143d76d18ec772a
SHA256 b457c36e4c82036455d01c898530379b191543b55677143e22158e8014b5bbaa
SHA512 6667e472d301f39b18e34fd767047ef762d0997fe142881f7c736155cbe2da4eaa7be91fd21123b3d58a5b51c79decfbdbdb627827bf5abbe27fc43e6b520f95

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5d40da45a474ea63d7e0596d9be3b67c
SHA1 b2d96c26c8609d70d78d238b12165da04fa7af25
SHA256 e8abd031bd2011e96f87e5ce515570177ba334242e81a966d56d7c27c92e8b7c
SHA512 2afa79f9da926d20636bdb8fe2386e8bfd24c18882fbf3fdeac89ff2c47e77d6e79a20efc8cdcb59642045f0f3775255f84144676dcd8ee4adbc7d7a796f24f2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 94fd119b9615247ef11c83eb51a4ed79
SHA1 daa8649bc7ead70e5529501ea4c6474bc0386cc2
SHA256 6c022ea63ed6e066a8c7e331caa953b28a3477fbe88f1136a75828a4c50dfa63
SHA512 d18b394e25f14c903d3a9a3f105901fee753c023cfa81b2370256f10093c6cada1c4e9ace862a3ef0f6ea4176970e7ee5024495a6c2e9808ade1ef9de033656d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ed505f56ce08094df57c41a5d679e043
SHA1 72fbfedd9675ea38799d15261ca03d55f5aac12d
SHA256 d22039b492f5cf7a108107c62c1703ce4757a4d7510f3eb86d9f5093be0af6d7
SHA512 b341387324a96e1c5c1702f42cc9b53fb6e82fdd4324deeaae71813e6bdba5e43f2c9726ea438519225984c23d0f90ecc94bb5901d5cae859cbf82cea45e70a1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 36a71ba2b5eafb1b4a771a2586ea370a
SHA1 fe79117aa1f224464e4ee0212b94d4e725a805ba
SHA256 f5766e15f5f5fe6bf8b9caaa4bfdaf498340eecfd02253d20ce74117cd05c766
SHA512 b0b2c1e8b7db3592879812ea30362ec58008a4e62d4ae36493ad7c325ab37d37eb9ffa749218a7550c8b5ac3760aa735ff6292c09e24c9d9310ae2c7d92cdbba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 1e01097ee56dec3b6127dd8bf8a75522
SHA1 58595a1ed09b0695a38dd2e7ab2d554461e73c73
SHA256 a9d132f53a0dc2684917d38d5f3d0b41a5979d4624d87dd2b760c9e06cdac0ee
SHA512 159ad7fbdbf46b8bd766619d8f6e47ad6fc1ccd40b661f8fb7b437a742550fefeb77a4f16e631440b375c41af65d02472ecc477c2ba09c59d42c4832078f1ca3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

MD5 a79469c931394e21fd91d657addfe87f
SHA1 2c0e5156dd3c08194bbb1aeb4c2a7445c3d6c29e
SHA256 4e1ba136a553bf7618e31d8e7389fd32c85aa38f71b83af3c92ab7b538c52c7b
SHA512 000dd2e03f41e4478b3d8ea47efb682576536ae5fb052f105542b7ebd4191884c4cd1d1e36d015a2c2e2bc3fe379efa54b6ed108f14f464bfc76767cd54d8ee9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c725cde624d8b9ff29dad70077bca00d
SHA1 785ed3711aaff737ab60ae3cd5cc4559f8c8c43e
SHA256 af7be9d2d23e9c3c37cf0610214f5241fce44e4291f9264927e4902e7912f430
SHA512 97626060ca3e2bf9a1d719d038356426804553a9b564b16ac2c5fc040502a156b95ffdd42a265070af0678f811bed39747cee561c076870282b222a9598642f2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 87ff357de052ee71054548c303ecae95
SHA1 059ddc9d71bf21d2839a9acfc04b049c0013c461
SHA256 69d392ebc84d621c0abb3ec782ae5a22e89aa2ebe5aa9c49bcd2e5b159965e6e
SHA512 a462a9f3220dc793b3217550441b587267ba460db2e231647ac940eb2cae61c3cf0ccbb3622f8383980bf79c782facc8e1535bb90d62f20ac33eb5ce8be4b95f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ff8925be11cc09944db13e4d86fdd868
SHA1 cddd97027b6b897d37118d91a5245ae019d9408e
SHA256 c42dc7acc3bd771e1ec75d3627356cc405c4bdbebe3002d7e249998fefa4dd3a
SHA512 32a4383bc167f11027189da73974821f539a6b9083778ebc6ed1c7e2728709b7407656bf5c29d0ab7e917c7e32f46bd18170552043450f3412f1f3f2f4b7916c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e2210301027a82c51a45d4b88cad7904
SHA1 4f58a5585f66f8177c62e8f3e356d9090ebe586c
SHA256 4ccabf584645c298c961d6e0aa1cc8702dcfa59318ecdf7efe57be395580176e
SHA512 cee2c8f3b7e401593a58d320087d6da800ea1c7c8151792c79e0fd8a85279e2a834d2d1d2107ffdfa46489f69274442e703064983d81847f15e8dac26f4663ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 eec3b705c4b7ee575c4dd03b3204b895
SHA1 c6686b5046bb6596559a46ebd022a84d55d6e988
SHA256 835d2e919a0e68aca5b9ef5f1d84cf3823328d568c70848d975cc6b2eb214c62
SHA512 005e01c28ac27b3c223e7f9b4e456f253cae3a1f9ac9b14dc80cfd6127c5dff0f59bfff9dee4c14c05804d56979cf58544f7d3aad11300eea6e434fb1da90636

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 341bc0ea1693f4194746ec15f9e79849
SHA1 97376fbce5bee704e13293576f9ac3bd51218325
SHA256 c0b5dc436c519a1cb30d2bc8467290e7b871b7ffd3807d73e7756b912ffc944a
SHA512 9d14bd284cb3ac6c120c8d64e95e551d4231277750c40f23f5fb8733dca24b95356b59575cd7436e229a5a55647f08219a748107b3616bbe38849afb45c67fed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 39a8bc671587d7e609c4168563bf3851
SHA1 a09457d8b6f5cf91b68a31764ade76bd927874ef
SHA256 08955757725a30410a20b38d2013b918074d1cea5b0dc5c6aaf71070e249ce4b
SHA512 2099dceb4db33d227301ebc86411967388aeebcb48df9f9cd0c109eb12a6e74be784c176d5fdd3e958919ec7fe0488306b0f972acd7d98c57c203b79aafd44cf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4bf181a37d80c62840067f6aa97c5397
SHA1 7064a055127b412c6c7f44e8f3281e717ea0a4cf
SHA256 6cc70026c59072869c227865a21a562507bb2d22336d97965270f55eef01f5d3
SHA512 2b58aabc544cb2da6f24bcaa2791a131441ae7dd978b128d092fbf406094572f972351f1056d96e67875cabd2ed07273907ffb0acb9bbfff825cd26113221c51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 88378620b8f895aecd362b6bb11e1692
SHA1 7187f2a091cc3ce68fa92cd6bcb359a9f1c5b82c
SHA256 e7fd420c2c9d28e94dd9aab466780456a941281e1a3661ce4f184da9fcda4098
SHA512 3e54d04cb19109c93839d47357a3bd550fb930bc0fba1ed112d34a7d4abe7acccdeaea85b0f5b2c024b1749bf2fc3b2978e4e44cc6fa88248703277387a1ce92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e3532749f80985123bb7ee6e46831c5b
SHA1 5f9c0f0dac2eed1583a85b5c98e3a557b56997d0
SHA256 9131eb42cae1f5dc849a62997f89989bc960e3ad5d3867d2f9c5163107f47634
SHA512 049a7a39b627e0be790abc116736542a00acfc409e90d660dafa5a0379b64eb54d8969567fe55b66fcc01225a89ec1b03d500a1444c652159ec7d3b1c61983a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 9d2ecd3c345a7c6e441f119e319be10d
SHA1 bd20b411671da85e8c9dffd6e4d30b6b265b20d1
SHA256 45fdec7718a5f25a60a11d2b5aea5f24609688d81e56fd04603b964716e35912
SHA512 b931fa612bc91bb5664e1cca08c2c380bb1b55ed6f6743af730c9d6cca709a5f828f6d3a778cba685a29fd679404f9383c69eeaa8a7259edb5713dba75047e4f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 77845e60fa7a21734ba2793e6a55bc31
SHA1 78d470620cd30f9e1336e5ab3075a06175e1856b
SHA256 a33410c15b54a023b3b5ea97c06d812db423cc1ea4a234c4a85161ae7051ed0c
SHA512 f82aa1199282a0d1530858cd8d3d52a371da79387d349fdb7ffacebc9807500172e426ee1aa620ecb4cbbbc64fd668f7c6597aed5a285c3cfd18290d84852807

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f6549cf5afda79875a99c68de4bd8bc4
SHA1 a96b1b43e210af09d63c26c1493761e32642dfde
SHA256 a7d2ae65780dee072e165e91e4682b7f59ccbf4da0c8f9be445ff553bae00f4d
SHA512 a7023adb086008a1f48060adf9e217b8e027020c98952f9f59016508229cde0921d2faf7c4e085e55b18efd22010ba051c119758fb40ab4e652db92cc81d7bd8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 38192ab4c77add73aec7a4c65812291a
SHA1 d4042d680b0c6b5988871a404d7b937ee2ba2087
SHA256 3d4ab05ad6bc415a78389991af99fd1624205a50149702e455ad8adcabf8e9cb
SHA512 d0222437689728588805446edcb4eb46b16f18dd5c4331635ccbdf3229e667e3cdf3f9d18199e6755437e9440b7c119390b2f0cd740e8ec709c4938982f80aa5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 429caebc941b4bcafed3ab83546332ab
SHA1 9b3e8b2ba02d64ff059930c2379cada30b57aebd
SHA256 e8dbcb3dc588f7315ad95a42b5557c8954a7a97d3ec64ca7f79902147560dd75
SHA512 1b08b3d1ee52c19700ddac020ae2adb94298c7625a142363401e526a672a9b67e9b5b7022cbba25e89668810801eb7e6ffd221c0a3260e4055bb343d2aec9d66

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 14d811c0a5b688d959f5e12091312152
SHA1 d7b7e69b09c4747d7a4f4ed080e01184ceea4f52
SHA256 0c96cd50526bcd4e2b07b6677bd4416cf94581437fc9da836dafbb0e10741889
SHA512 26cb19b7ea96831a109d88814b72c003286e80083a29b792c24bd414904080d4b362f8cd9df598b03eafceaafe690b8c203afafb4f58ec5a95e82e6330950538

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b3a15a8629daff9ce33aa8075528fc6f
SHA1 ff799b8a56687bcb5eff4601c712e08a04dffd41
SHA256 aa3996cf39a393e4b6c204856c8c3ed8223dcdcfa13047225cc393b956be07f2
SHA512 1183057450bbb00dcb504bfcd49fca4d8a8c98f3fde1aa5a25acf097ca6a59f4858731ffc51f4b914a9fc111f2132062d54c52d5410062a1d63b64f1cd365243

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 93e5d4e5e46bf6517f22b5d47a6aa7d0
SHA1 c491ab44f3d00f35a062751d30dd391a0372fce9
SHA256 f3d2c07a82cdd79978818bf2bc417aa5552b30ad5ca3cf95d4667a728cd754a6
SHA512 5b6dd5920b3a8fc671cd4607010ef5a4b68b97715ac97a0a99df90ca65300510b85518078a7e7f1ced24c56fdabf927f20996455a130f3bb383c82673058cff6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9dac41476d884bfb0ed8f4f96e998be7
SHA1 c51acc94b9374da6115cd7abf424a608bdf8bdeb
SHA256 64fa5a24e8abbea518d91bd318135c1e865941a71d7d848c1d8e2dc34cc86cd4
SHA512 dfd883b5139a590bc2c27c57380d46d7da7844d265e1ab45e87a4d127aa0cafba9f1ee13b07320e3130c0fe0e31bf0df178aeb3a6bb36f982d04edf189356d46

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 328ec41c02e61fe41d774fdaf2eef7e6
SHA1 0c8752e5129010eb8701af6a374c96a966ef3299
SHA256 57fb1986aa768207c09725b35a49b0543933af1b0777f4eabcf79db62d4d8614
SHA512 0d6b04fd22dbc6bcf8b8bed4bebca9dbbb4049c414271415fccf710b8a18ad30f244f39d44aa01b4cfc8716668d04a44ffa5e9641a10db18af2716ce56b35d2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c46d5ded5828cebcbb5a0a6849c751d4
SHA1 28ff144287255fc021b1ccdd0c48868f1e9825b3
SHA256 59abd27507b069cde8961756595d61757b7b5133876a820df913dc707f5d490c
SHA512 4203ee8ecfd7b9ed441d09b7d97005e267d54cfbb2d920a3c91e8c79237b1f6d1f2f3f7f27923d90694fddd9abf57a882a6ae21385a83388bb57635c3365b8da

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 933cf7601fddad35d4a3c9dc6cd3dec1
SHA1 f1435d5e7fe904713545b7d892fa7da56db334fd
SHA256 21afd1c78ce9700f9df43cc7a342ea21e29cb6a15c15f62e3a6c350b2917a738
SHA512 6aaf8deb6e3a555250d0d6cf61ef3f5ca4e9969a1c241bcf5df66c3bf1796609d2127f3c0fb35d228fce6aa8fd41a4f15a261feb0aa6990a4f92303a6e011922

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7b4206d6e61614babc1d8799b94f45c5
SHA1 6d6ed323d304f20d40408a13d4036387edf9692a
SHA256 a9b126809ac083849c34e7c1212b8d04f4b063fccfa572e149c78a6ffcd5ec25
SHA512 afe0077f56c26024437953a3e276e050120674e157f272e0bb7fe8a6817d7b1b209188d5e448a9a95ffdffdb41b73f308cd6c1196b18c5f088ae32590f178ad2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 345ec5ec03380b1910fdcdc5d0d5b2cb
SHA1 9d05433e09da3e8d14d4968e98cc8674c71e9870
SHA256 d04246f362bc4db9e843caefe783894036f5c43b434bfc1f31542db32714b219
SHA512 1a961f32e75667790fde74f8a7c9949783e768e4b133668915b9ca0f7ca995fe592eba88608e8ce6bbfb8e57504a0981012263fabf564b899686604aa60fc83e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 ff16cb84ac586e5dce2cc1a01873b811
SHA1 5831e894fa5dab5df7f90ff654fdcbb6cdd5d40d
SHA256 a6b07c0a0605aaa060b29157ca1afdf2b812b63f4d56e193cfa8d8da4503729b
SHA512 a2bf910af9f0f001d66df121211d5652ed7ace6df53bf17f1c3b875cc1bdd96601005d2acd778406f2be676df45e9bb4feedd5bdcf14d70c75f7caba501b92c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b1a4a146dd97f7e720ba54552b9af935
SHA1 ca967357844539ac5768d59b73a2c6cb52fea1a0
SHA256 af5b378a31e1b530c8572cbe1543f9cde86a4b2397b51bb0606b24f5f264d983
SHA512 4a4d84b4852361f9ebe0b6bd85ae7344bb6062b156cb3e8e6d3f1ae8ca415a2f9531447b1d75d66f56fa79e1628684aa29df55e4d87925d564fc516d9667224d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 66455d89046f0f51931b41c857e6ffd9
SHA1 beae20764c4fc3c4da7e381bdcd832f54f4d8cd2
SHA256 ea1fc6c661b00093c517c9fb1471f56b8feb754cc484b32204fca14449559749
SHA512 b5f4c371d48a891de664ce64e62cf91ca9a4fa4810ce74f31cc9d9ef421b7ccdbb40fc62f1ebe3c4597b64531efdbb968d1b953b8f44263860dd3d1c5951bab3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e3996221bb68c5a7659b536a05096693
SHA1 6d4301fdf8ce3feaa52c010b0d178a02214b5f3b
SHA256 6377a0c001601ddd47037c34d9bb80a40bea2b9b696198b239308c38a722b653
SHA512 0eba8d042aacdd6b0ac8f289e9e49467bd537da610d349304a55cd6cd6f978ad459c92f5619d601e8fd3ce9720d06d491bb604e3cdf7c98d0c66577d8bf3f10c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9da5470b8e3421dbf531767d16319a2f
SHA1 6389d8d4b4e060693d28b56cd636ee461d00fe19
SHA256 5121be8275f855354f9e8761fba7cc9d45825af37fb801c00e4b3f295bfce34d
SHA512 032149fe8f8429a2687c17edf662524f329bdeff0a978bfba14d3f75212529be263a3b53783ef2ee8944c554208d5119c17440ac62abfd943007e96eb72d466c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5a1c3028c6b265a167e1eb6b95c20d44
SHA1 4b3bfffd6d50ef8430d6822d3a9708e7eb98322e
SHA256 767badb8552fe71fd1b2179f8d94095bc6b49596391bc43dc9b0fc4f06ee9425
SHA512 a5092ad3b25615f318ef8ca06ab6aca9b218deff0a4c0fce10e05638372b3fd0abe67ad35116cba751aac4aa7b58d7ba1c1ef4814dc825d367334a6a5b8cf92e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 761c9eea6b65ba678d4dc4dcbc3693a8
SHA1 ee2d69f0deef6314486b6318d7eab2c3d167434e
SHA256 eacf7a9843b62aee58abdaa40e3d980a75bd27686af4140b88bad272e4946100
SHA512 c80dc25a51da52cffeca7afc028c284da4093841d9b2d155b06d14adc94f62a1fbe08b20d6fc43080ef12199ed6a7f4dbef872d3f538679ac8718bc3a3d0b0a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 42f119302bae97e8f0f5cbeb92131733
SHA1 48c28d923a21f9a7373e0ddce06eb1709f445e9e
SHA256 375a80152a5dc27a68aae2d210b89f970fc7e5f515f7c0fb1dbb9d1f5f4356a6
SHA512 e2606f7bae7e940c23d53d90bf55cd44dadec8d70b21f1132af3b30c1c430f598ebeb6cf09fb08071ae1d20bea196df4a245585dd39d5a2d1f0ad1a3346273f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6845f894fd00c8cee9d79f38139a5030
SHA1 2bfc3e389662ffee2ee87fe6946400cd5887216f
SHA256 eeb60c8cc8e530cba3b1a6c017f126791b3a75c4e1c5dc159c5ef7c02dfcb094
SHA512 297a84b5bd81a3a589b17d3b84d4624dea975f1910fe3ad89608fb9a60af2280e64ce2e4682e62c17042306148b727b82a51851f249715accd928bf792b9fde4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d3b5515827410fe1a219607053eb2237
SHA1 901cf63516829a1753185091a310b918d7febe4e
SHA256 19856710fcb86795e777a7fe8cdc6f7d120dfab7acd06951c11fbae4508ad257
SHA512 e323444f08bd19d0d53e8d231a0e23e3971bceb2429e3c97115397b3976caaea08bc9b9b8c40142088438b5e2945dd7788eddf9a7f8293b4bf62fd4fec126ced

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e75a128cd011b0b57f16b4ce03decade
SHA1 aa1ad554b5fcca320cdf2e7115fe5ff32a204011
SHA256 c768bf7817eea1c3334d89aab24304f01aeddce2cd6a1454da41d523fd7a6253
SHA512 650f036382c4e15899261c7173b02f1949d1b4546ed88d55d7148d1c452f26f1cbca71dabd49f42c8738d5728fc8dd06252cd43ef9397ca2edb53a007a28188b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 52817802ca92faa16c8974b9ede5820f
SHA1 6f8b888c987dee36825a39a33c8eaf5e1ac4b2f9
SHA256 0f8cd65cc26c0b369503ab244f3c2038192bd964b8f2eed0ed0c013b75cf6a55
SHA512 cee52d0e092f8fd2657201df5f6acff49084edd9fd2357ba35549cf0c0cb1b271ade36805325cd98b9eb92e8fd02c9dd2fd0750da77875233a892d6ab5135dad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d88191b8aaa4ca9e18ebf7362981cc35
SHA1 967fe922904e6f71da9c954789f385846c423887
SHA256 0ce70d892fa15297e1da8143f09236bfc28a4a38331709ebc55ced6a43508243
SHA512 82344ad61f1ea12fa7bd972407c571a841cfe8570d7d0d1714970eb2320d5d14468d2c743c961797cc9c5a94b8d54bd88c631e4cbc90efb95a8b14ac0f6d1192

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b95510478e9f216cc9083af7db3059ec
SHA1 8ad3228d2b256706863b0d2abe59e0bbf036b1cb
SHA256 645515e39c8b9935d751906eddb62194a60d45a4f22d787c19ca4556c150f01c
SHA512 3879032005f30ab80b1282b7f4236cf41577f4e07c3be6948f3fa399132fe1fec958a4bd9d0c9d60f7d83a8ad5f5df60de40787e99c91f5cecdbe1dc40d5430d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 aac9deff158793feb5d4ceb47e85b044
SHA1 04c6a7e9106f5f68d5038417b5f6e80efff5f5b2
SHA256 f4880a239225716886c25924023f8bd2f0698ef6aac83c6679915b7ccf7bf652
SHA512 14dbfc2165ee0815b8efd22a61598db55420a2da77439da1885943c18afe96029ffa5431d3b275d16a07dfbf4eee76a1dd3a7a0d76ffe321626f179e8610a4f2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe71d255.TMP

MD5 e444eb28735859893bdcfbf5c7005d5c
SHA1 a28d744dd2d564c013b85ed8760bd8b88170c77d
SHA256 dd5bac2d3edb961222147a947e1e3cebf0cff8e3d02e5ea28e5c57c79371c385
SHA512 15fbf590b4a3474a8ee32eba4501f4db5cbf102cca3a3f77992099b6417fa6d07cd9e79f27efe0e83ddb593a7f996e3d9d8153aabb331b85d3351466ff52ef45

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000065

MD5 588ee33c26fe83cb97ca65e3c66b2e87
SHA1 842429b803132c3e7827af42fe4dc7a66e736b37
SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
SHA512 6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt

MD5 cc5215204b9000a990b4ca6a06fa3513
SHA1 4736218add7a44f165e576faa4cf705c56ac5d37
SHA256 e978c11ee9cc041b0d4b3325066d6cd6a7ae12cb553c454f96ba10e0209561d2
SHA512 530436a5e8817c17265c6fde68ff8b773a3b008bb60887f600f47ade48365da197e27697c11f80c3b807614b2d374faf6d1d90c0d702519feec1d675a7a0fa1b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe71dc96.TMP

MD5 f5abf96c3f7cb5047154e38b9b434c21
SHA1 a2bd8a0b5d048052bf70dc315d7a85cb171c9d43
SHA256 34205658e1abd3705603c409a2d5f09cecb5398a2f70f1530d2976b25703725d
SHA512 8df7c20bea9b939443037bf4fe48f51d3d4967c1cc7e2bf3080db7028cd5502c85c705e8e81cde0b907346e16d94bc36abd16b3871858428b5a054f51c8fab50

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 18098abe67c07da8ba82a28c4f645264
SHA1 2a97539499c4cd3ad0225d9a42c711f2c26fbc7f
SHA256 dfdeb41bef53aae56766192b58232c13612ffeeb7fd0261956acca21d239f402
SHA512 8eb5efea4dc08b3bcba0cf06a6c183520d047570edb6984e0821bda40d90e61dd3ec1a5d54e906a33f4e7ec32d05ba1b8366330ea4e0da9f63ec8b7efb88e8e0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6434698a2e1da33149aa4ef275f60279
SHA1 48379fc8f849cbc4680432368a9f68c322180b18
SHA256 7e28a8ac2dd81125c79f87b5708c3c6fc333e738b6ce0632780afb18ba42ba13
SHA512 83c771e5f1acf031896aa09dbac72c45a129218286da5d58898249e40d9103f029b2bb144543647ef45e6364d63c40f7f357b569019bcd9fd5a918f1270a406b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1e9ffb0349482380aeb2eb19e3718475
SHA1 cde24d1729d5acbcafe9b833fb2c64c33621f4f6
SHA256 86d98aee8ef878f0e2b14b5eac77ac599f6f6687e6c6c6e1bafc5af06fe7cf3b
SHA512 5c041db78e8aa9638aa9abc71847ffebe9d55051118995dd515e5990718ea4fc92d8ed410440b312f499b25b104d61cbdf09bb4bb2d5e82089e8c2042ae1dc97

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000120

MD5 dbc0d30c45dccb60b617f6521a43d0ca
SHA1 e1b843f876f3099e3e49c438d38fec19893dbe46
SHA256 79367398298230d1edca4595195645de7ef9c53a3fea88f73ca305ca39d59707
SHA512 380dfc440c6995ad99f1f03c922cb51bca015abe165d701e4753a4068efc5c831ff7d494d4b8d24a49ec440060b002a632e6d121dbd4fa91e351ae04136476f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8cc5afdf1a4b72b20f41db5b6acaae1a
SHA1 31591dc2271ece6c50ababc2f178789c3dde4cbc
SHA256 87d02280211abd8fdc29993d5a5e55a8ecc441e3ea35861db4fed970e2eab7f1
SHA512 b6794f80865a129db4e789c1e14a5ed34bd9f9781a86728a9831da28e18499e4e047db7a7aa05a9089f8409a4d16e39c1cf7a4dca9705c9fc163f5615719926f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 208b7959cf8472152cf8aa2ad7eb270e
SHA1 a1ae6d8e8285716f2dbebe33705b3bdba6e7cc87
SHA256 47c4159f288c82e173b6aa15feae3b0ffc017beb17382ec8b8d93b6f22503431
SHA512 67b0c548b430fc9e3cedae3336108e41205b960b816fd24aed9dc37dd3d18df7bff87b0c0b539b23a259a067621972504739fec81463b99c5d55a7f970237536

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 c775025678f6425be354f4400e7121a0
SHA1 ff221757f39a9973a500c822b259fff84eb77ce2
SHA256 eeb6b5a4890e6b52d331584ea0fbfa2edd0252280edf574c713ecc57a731e8b0
SHA512 b73c97e3a329d860b764178ba1cc59bc6b80738f9bd42d54ce605d8f9d55a75c152e8daa32486efb61936dc3c289030133bf18df38adea550d21eb0345e597d0

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

MD5 53bf9ce3a608dbd2aac547f3631b9371
SHA1 e38159de923c6ac24da64b621feb8674f35c1b26
SHA256 27716319d0f118313f12725b1b978660b5229e4171f4b8bacd124a2bd8bb6507
SHA512 eb1e016188b6b42633737045c90f4f93968cd06ac2188f55033130a7baffa07f8a5a405fdd786fce822d7ee84f875b07398074d946d072d42ee4c0fe9d1068f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0823b96d69f07c43e9f929fa3a0c69a5
SHA1 0cd9e2cacc51bdbd920755af6088aeb6f244c093
SHA256 c54c7b42f065981be971716db22acee4a0810057e1d94d8d1a6c613a9f8d563a
SHA512 72855798c0e4be8d0092453d55a1ad5201fe6a57654bcb64119da42842276c260c71d5bf021b29b76e2a0886121e8df7b13d6f5087553d6756e3642b3f1ed566

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 52815847c778408f692e630829481f60
SHA1 4e09515c82f53f3be86597ac81e2de070ccead17
SHA256 c7aac21f133527e42d13a5d6fd08b656348fcda5b057174736c88256ed06940b
SHA512 1d05ba83e401b01c2c145993ac58ae27d5b2daa3509c657de6b703a861bd83990ab542bd68acb7c0750a168655808586ac88e64a0005ff461a7af85d2bb1d5c1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 937555efd3628f726dde3dbbeab7ee85
SHA1 228eca08573d0599752c63de29d2b17935b16086
SHA256 ad7650138b2d4796dfed4120be10ff944512357ed3c440ca47c0d09324cc0cd9
SHA512 4ad540aec815749a25158ae36c33ed99acb3cc49de1ec5bd41c70ff7db9308d83fcc7cdcacef7c6e88b9b293d3498d075e76bbeeb01fdf6e8e7545c4e3b8d896

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\10d16664eee718d21576ea5ef2b45eb5

MD5 10d16664eee718d21576ea5ef2b45eb5
SHA1 4bc0dcba5400c96054cf489f955db99e61eb2e1b
SHA256 a915322e5351f18b58213b710395992611329f870fc141c7cf2b60f36fc58f2f
SHA512 f388617bce7200efbb5633a3e5769735f74e908975bcf78a2a893f341552073305875715cf244617d00a2d39ac1e4b64e9c05411dd5accda52456eac0fc5e380

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 44dfb72d6af1941b4185bf7ce18a5f37
SHA1 aa6b37f6bfcaa172133caf7174e0d9a5c0907052
SHA256 2965fb64d38909530f44d2e4406d27df0d4e20c3300c62c1b348fb5c0e627017
SHA512 f58ad704a0a612044c5e6de631943c21f50606ca617516a3fe39ac2ac914829007f4b22371e2ac8601b76a93b513726724b809c44caf10b1ffe1b6ebde1c765d

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 26aad4d21ef4579564e360c5056007b2
SHA1 4b8379038822e374a46e6876a49d0ce7a7c86427
SHA256 c8b73535e5e81237a046a7bc9245ef6c74d2e8a884c73893fff2c6d0bcd73fff
SHA512 6f7436d7037a2a2230bce8c29e7448b18004f7de1c743674a13a8e9d5c6938138c2bb9376e41511e10b8e32eace1beac4e92b0f7260a3c302c8ded993d301500

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ef693605de7967b9a425d008ffb3dd47
SHA1 3d99914acb5e2d8a85dbfbbdb2c469cc707cec35
SHA256 e7cccc808b99f6d06a109143e465c3e8b7ec8916123de4b801ea1071e38172e1
SHA512 9529d1af35b0c52ef5660f85fe46e1377e1330eb8100b4754308875bdb9724c7eff2b5bee0b9bf462197b46b3c53ca9524edb7fd9131b49e2f37c1dd4b20c03c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2496b0744923c388c3bc0bc82036a0ee
SHA1 46ca784b111ff5d67ce7fb0c1d335c48f595ed17
SHA256 1dc434b8081fe225f402fbe91df71fc491e5f2ed5f4494b584a7f1768946e583
SHA512 2c371e8b06788de9f0d3ebd3852b4d4f1751ea560ec0400447e3745cd5198f519d849cbe2b885abfd30b506e0c5754ee2923ad7e4c3c334f5004ee4967267a3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6e07543669b2f76ef96b47d666d77458
SHA1 2f6ca5d60e57c39f3aa48894e3cc35b671ca29eb
SHA256 c2623cbf29ac81ca64c3c4a85baac7817be87559858d13c3984dbab39fab884f
SHA512 8d2b9bafea7a243b7d1844c63c64edc38ecd63b2b5870d449fd5afc0eb8375a8d094e17fe2645435b22198e77e40e4413c3bf9402937749fb3a8b85d0134c3cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 62334885e9ae5653adfada9033ae252a
SHA1 74759a16d4e5226fbe78bd7dd238131e73d3f2ab
SHA256 42b48764242de26f108ff1335e49eeba3cc18bed829e184908f5bd66952e72c7
SHA512 6b95d3435b36f7c8bbf089b48879063843e50f09683fb7de31f5508ad256dfa5fcf0562789234392c0abbba40bf89985783809db4f0fdc7eb9f4a2e1ddd10729

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c77d4435274354cfcbb4186a5d457b50
SHA1 e329567c1200dc74d701da156c4c1f0731c4d15c
SHA256 1ca4a6d0ddc312260b0af26e54c2458761f73a7972b8776e6d3098547e61d234
SHA512 05ca0863990211c7630af4dd3ea8c44cbc0ffa0c72d830b78fe79eb593f21ae6af5e78a42ac83d9502677e75e11489c407ba8ac0b11f2c5f892c7412ea873168

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cefdeeec4e236a92e0b270923d090d58
SHA1 12127b090b871c20e582e3467ab7d4b2c72312b9
SHA256 c5798683ee66bd2e1b51969682746707b5c6e6eb0b8a528012193124bb059501
SHA512 71baf56aeca6dcc1d3d1cee26a1d538638056d5aca7df8f42ee69012f1bc410a53f757d7ec53cb28268930e507e7061b630a9e73b42cc3aee357272e98e0f8b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fd89a71b53d65e9d078d7a6f7d317ac1
SHA1 91ad6e4baaba4b50ea816a7d99a0b957f2eca17f
SHA256 df0b114c633dab264e5caff216110092055d5e9a0f7f7c3f8ed2f0a965505f33
SHA512 46b614b997d8ed61b8f88480b31ef73b1177f9a6a5f2c50a8031b767e5a1efad58922e7031d77732e0d5f607fd7f19ed07ab325ea8371055af79d2fe9b0b98f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 29755b6fa8d3821a8204ae293183b4c0
SHA1 ee068a7237aea42b6c1e1977f909710ad21007e9
SHA256 9542833de702eab6b5427aaa784e17ee8f1b156511482e39a385a7414052daff
SHA512 d9446d10d7d99c5b9dd45b81ce189be1d230f9f8798035bd95229ca711ec3c65f4012c9d0b066d6dd51b576c2e2cf4e7fcdec4b0520e0887f302934c84e2bf96

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 198c4ae5ed746bcbc0d006e3c12d8f5f
SHA1 337a0c9b04eaa15fc962d963748812df604342da
SHA256 9a1bba97b5fd478e7f1af85b374edc4777104d6339ddc73487511c5764f635af
SHA512 120b3bd89dec6965a013372682ba610f4b2531498409e16fca5e8637c4c0530a629b06a464d20b69cd70c719743246e7006ba1171fa2605a798f122349a767a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1d47a7562da9d689cb8853615ec8d367
SHA1 d5bce3619c008861df70db95c3ca14e1a788dad3
SHA256 0db9f807cb3d2a464361f15a13b9d903fb76ffc2ded046f04ba0c2e7bcef422d
SHA512 de9089a175a4a9f7a6e48d83035b852d94663b5af51d854efbba82d6d0a07000d227ada09eee3a7e07d65f23632e2ffca5e8752de28682b7bdbf55cca9424901

C:\Program Files (x86)\Roblox\Versions\version-9b68669a3b644e31\RobloxStudioLauncherBeta.exe

MD5 c4a191e72d1bf1516995a3fb62743084
SHA1 8cbe4dd54b55ff5a96dfa60dc1e32dad11c89074
SHA256 1dc862c638a782ca47013bbde68d72dd4edd02128af21b80661335daa6406a1f
SHA512 3b55cc1fddad6031a8b72a357598a6b4a98d8dcfb9c3a88bf57c43633deba460aef381f17fc49ef561f27eaf47a6f922f2fa055e2b70161933cc0b3cb6e6e05d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7b53410607010ac881dedaeefc293898
SHA1 1098981726bf52fb89120182ff71bbffef888fe8
SHA256 592a783d305ef935671a94133507dda0c13c66ab5dd448b29344f0dcf6ce7770
SHA512 c5830dee0aa0a6f1a0b8dd7e347ba9ecfaef17141a6b0538d97c36642b4ac910329f392a2f25867422ef3bba44d2a3369ccf2b5910cca2a0bf63be4c703e6dd7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 950328db7a0c88993746a847fe2edee1
SHA1 e08e856188927af4afb6fe3ab69532ec0149d967
SHA256 7201c0f405c3dd3a11f6c49159f35d982f9abdc13b2760ff2753166b48ff9d2f
SHA512 129b831823bb24b4478548c9da19907a7db40331af6d7cfad89f6df5d65e91b816d2398df387da5731c2d0e5066e6c1784eb7e1f1d11c951a841335ea578eba7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 29c6bde5bb027bec1167878e2d9c2780
SHA1 3485c670c962c5cffd1eb55d2bb8bb863462c9fa
SHA256 fac3ba7063220df154a52ce967e06b79fcd61d2543afa369397a7ab8d79aefa9
SHA512 d8c8d86dc8afb26cdff9eacb667f6e10986fbc08a028cd7352f992ddd2f5245c8ea5e3a163031877b377388aa9ff37256b17c936e33da62a52bdc89960153af3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1d0dc3405465c2114ebc003ba824a8e6
SHA1 d4a65ade9c1f2574e4852d2146bf153fac1b7aac
SHA256 c3331b0203b4901b4feb6e0818aa04fbcd160b74bb0504ce95ab3bf185168176
SHA512 8853009c0d48e7b3f238c0611af91a60beccaeb1690c746f39cb3a104b1d9b4697724e65bf4dfef56d57a43ef6f64bc9be8488cb8b5a8b3fb3fd3c71d0448abb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f9cc921b0e81ec6739d11e59178c7905
SHA1 98893d9d9848f3ae522971ff9de23fa4d389528d
SHA256 186f3fe5075588b55d08f91352dd1dfab7a547cd0d6a5aeb113ae64ea2651364
SHA512 d484663c548bf5a82d3e9d5f9d776aa465ae4cf35764b23137523bf27a285417309821827fb98d8271cac87f2bac2ec37cb6a9855eec78392f556d4ef9283f2d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b8663786e74e15b600f74b2b7a432699
SHA1 810850fb6ad2e0e9b7e4b34a5faaf0cd2eb7b8e2
SHA256 abc3c59e9d09876cd798e33ac92d867d890055b835b07b3e5d160cfa13f363b6
SHA512 1ddade75913b0e4c08fc9ed497c7423a3368d54622ce7b78797bea1feec86269f6c056f833b7a4f040ea6577814f5fffeb994df9b742baf6b74cc072e6d77c63

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 60566b0cdd1cbac72d2e284758984230
SHA1 a26be4f3897c68423abd7f2f62cf934a5ce9d993
SHA256 318f96ee02212754185319751897da3811007dfd2f314a57af6a343f86a99b47
SHA512 31a53cb73c2e279668b8a644d9209a7defc5e8b2276d3fd30adb6ed7716cfe143b54b88953c73759cebf3ddaa7f2d5ab6f009862ddd96878a864903d50e08975

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fc5f00461f0574f2d2c01118f483dfe1
SHA1 c00c15c87e605fd789becebbac371f5ec75a843e
SHA256 8be3e018b1d054f5f8b8816736abe8830df6cb9202f449bfc846abc53bf3a281
SHA512 1ae0c5df4264b582c2e6aaf99d4edf8a33eb1cf8fe154b5bc9fca05f7e6ae9495c5010c648c73c1d07067cf5ab296e616e25833d0ae451cdc771fd7888914625

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 974f8e8e148176347041099f9d31bb4c
SHA1 edff758c5315834f30e7db555d01ebd9e050c2c0
SHA256 070521da2c178c06a3d6c7561dd56dbe461d74dcd0e5e7a798e8e649c397b4f1
SHA512 498665414c9abfe3a74930ca47b04eb2c04130ea3f594fe3f70a7f75ed026e6fd1510f54109376643bb19dd3d06382f9aaf8200a5c6385e100ff1c15a8722922

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 daf11e42bafdcff1709fdcedb10cebe3
SHA1 3ddc47a153ffe1ce1380bd3221653c941e416f43
SHA256 067901d08287bc6cd6abbae04ad755d2adb1cd387842186734569e61797722de
SHA512 659556ea4de0bc454b79ca4dcb98234987708b08a8a30e66ff98fc1dfc94c1dcd8330371db2a80ca01feb7819d010d92c7982c050be21beb925fe7e1af2b5b42

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5503bdf7d5d903ff859c4953e41764ed
SHA1 c364d6f242a8011fe7df25076b9535fb15e3113f
SHA256 9fc70feb506c356455a96a6da2a4b5d36aef5f5d3f0365a8cb6acd88ae846b7e
SHA512 d87984985617b6d3eba65c9002b0b87ff52f765c8aedfab9d03c41c32d8f608f7ca0ee358d28fd62c72c84733ef392d0f9fb1419e7de69ac7aa74c79f572a588

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133745226494796781.txt

MD5 bc1e7df78eafce81dad7ccc15e601b31
SHA1 02cd1a3b9062cd84c67caccf9660c16fef9b4aad
SHA256 2f45d2588d68f39a240ec98ee4facd935977d61872855a93ffe2558bd350bc72
SHA512 cb997b2ae70b4d88c1768bd84715be9e28eacb83cc7a0e4848d34b0c06df5d6f9c1155748453e19357d9272b055933f97df6b635718b334c7d528ab356748c49

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 33b0bac449717a353a04b5a969d8b694
SHA1 9da2df8bb908d50b531d1b4641f781dd3baf20b7
SHA256 135f2cde746865330a2619c6262ba131b7da20a0aa02cc234cb3ccc5212d7262
SHA512 a1f8bb3b3921c209dd9ef6e36ebf675286f2456add67c4316c92af3b8a5ca979b0a1a69774f5c6c2e5f653d22310728298eff4647c74ee698d511e3cd13ca889

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6ad8eeee4af92c1a470e652404ce016b
SHA1 b5a13cebb73a184b7f100f9939f9bbbc8be9859e
SHA256 d4ca4461bc9fd535c35a8866877f23a295d2246dc26d85e187d930e8421b4c09
SHA512 5b64d9d5c1009c11421315382bb780a3f8f87b06f34d4302847fc511acabd04d1c370b7609d8ffaf399a727df1e0fcabbfc16d53c85f8af2b9c1c1a5e3c7161b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2346aebb540bacba27b26105c42ebe00
SHA1 caf7c888e4db6e4c66b734e2a14b005f2a23b1e8
SHA256 2a062e6994ad01ac8020411a1f07a748e447767a2670d042cfdf588ca7f795eb
SHA512 fdd86c63168f9d1292bdbb1ac0e1d113cc2f1606d394961b6ec8e6fddb4d4be35c638bd7894bea25e2b3bfd033fc016758a116c8c54423b4f26968663fd1e4a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 6a7c8fddb3bf73cd47c7455128c1137b
SHA1 ba4ffc0617f9cc06e6f1d116c41782cd20689d3f
SHA256 996fa8c6d2ddf0a7427feafb75108445c25c30dd66b31bb23ae2baad47afa26e
SHA512 bb62a06af57c8e10e8f24c4089faf2ff53c6e261fd284af3f78d1516666d82b9d65e5716776805ccef5099f7d7808e2ece23225d43103314cd555f88c41a1c1c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 265a6fe812e9f0ea197de41f77799c1b
SHA1 b333c59f22c2d47f892bf9a240523b3e25273e77
SHA256 9854aefa3cce7577a580491ff3873e04aeb09fdeec7329d0dec6a883b65c3da3
SHA512 e036d9bd8222a567c13c49c53d12d7cfeccef328c7300a7da75a27e8e6e55814f929b5f082d0ef20b144d3594c2a5a55c19c3e6f359bf51d4fc3ba46e2109a42

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c74a77335b9d4a64e23bcd01fa5e45ae
SHA1 fe13cb38d2cc9070270ecfeb06b0f2933a3f80c8
SHA256 280033c0377f1bb5f963cccc55c722d255ae9c1ed5467abfc4c56b32eb1d3d4a
SHA512 f41204fcf5f28b1ebb9c29a3207353a2285bb90296db716ef301be58dd7c94e1e14c3dca7b175ae63d41dcaa6637981c5815a0027e6fbac44009389ffd0eba2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 723468bf65c6a82d8bffcda11a17dd6d
SHA1 5c51deca4580adbb7bfd88b3ba771ef346d4fdd0
SHA256 269bc08095a1082d4a813162c3ed20e45bd82199fb72b8382be7a4bc4faa6094
SHA512 b7763803a0f9170d3c6596fcd2cf66edfea6dd74f7e59e33bc3398fdbce3244d737225d9a65b982686146726fb9b1c773657bcdfe3c9e4c72a81fe8a426abadf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d339c957f5abb50e8809485aff26b6d0
SHA1 393484bc9937b47df58a78a6a1302737c9bfac1e
SHA256 7717738adc6f21d10f1d1b32d147020896e50a75f0f4042abddd9bdc478a8577
SHA512 8080709f76e651225d16b77da5ef8d5d73bd9c22d4b15cce41935a546c6251bacb712641029c13edd5eaea689281ac2b017772e0d3e65c45de53a798e5f281cd

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 996785757888a329f9795ec76b9c6905
SHA1 e6461c37fb3b03139f40887b259c31f0c0b25005
SHA256 cc6254350a748ce3cf92734426649bd8725e64fce1bbeb68db1bdf50a56b05c6
SHA512 7b125f61dde8136472663ce62bbc54732ae3c6f54e2a310e3d71708025237e050ef75f077eb7623a955a04f3a1bbf501f10ba1c6a7d09b0b68d6379413a98888

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c406e7be161c93ed1fd147f02c7cf259
SHA1 1316f3b37dbe43c865997ba0eebcca2a953a6b16
SHA256 7859f71c9039403aebf112d5c9ccda8f9da892ca6d37105c1158caeb4be96ba8
SHA512 c6deff72e414b7f7fd53855da28145f03449efbafc69c3b8a45f35665faeb73326cfd49d87cc90052ba69e123e7038951ff8a6628833444cda2bef02a777998e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 92686655ca173b0960cfdc8cc9f14b76
SHA1 737ff092dbf98d1a7a5949553930b8b4ea497630
SHA256 4e48184ba4a29b5ec96c29646a127fc83e59e1f49f4b60ad2b2166d205be339a
SHA512 cfa956b90765ff32cd047629dac5ec9f6fef49edf7452356639cf444a0f0016903eef22c118d31a0f629d3be59beb15c9292a9348e8e41303b0a9e27c64141eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 277215cc14422809d31be9b8c4a9f053
SHA1 a58514ab8cbc4042a54ce68110ab600702b7974d
SHA256 cd493aa4c60a73e072a8a8e0196097d3a650bcd50616044dc5798230869e151d
SHA512 5e5144f351dd6d8ddc0ded8044a09bf46414c027aeb2e1da9d8984439a82a7199c8b2660537f181c15d33e5a86a5ebc0752256bc588cc98b13be21d9a787dca0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a2924208490af971b67e039b37cfb23d
SHA1 d85c02d483d6d90a89fadf57f35447247c05c0ff
SHA256 c19a7f009b4f2ecf6a594f126f8499135d23c2a693a1fd18693889d610b37c14
SHA512 632ea181083511112990052218f3e85b55cb07b17e90224ef585c008321d46ad54aedf61cae51c2a9b1038023d11a24de286e1f6b644f7abc41839e5c1adac84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c39dabd49b3ff6883eb7ee142c57af85
SHA1 2378149c71e9cb61fae3dbf1960c0f3256550356
SHA256 5a35c810095e9300a7d79f7e0e322f6dfa94e019a83058a6659b7a076626b569
SHA512 15f420031db7b96b4175d2c7d211ad61891033809910d6dfb5d7a23b61f8c1e8bfb010042d73435e25a0f3faef67784b4a952e4853fd6eeeb9e20654209516a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3af485bd1f06ac7ff7955dfb1f5d63db
SHA1 9c9b500f62f33d2decc272c1c0d00e301cae9eb4
SHA256 3ae0282fd05745e8a4d22fbef89e5d44ee1a6c75fc6bd80e8091eeb73523de3b
SHA512 f4a8bfbc2cd18c71afd8ac14ddff2d509878f9da7cc351fc8fbf111ad7c82a3db94a3d3cab3245048d86e0526d058f3893017765863470fd449f7b22abdc1ed3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a78b8f7ae3968a27d35d82b3bd69e428
SHA1 59b4b40e8897293497d48fcdb599ee648224c158
SHA256 bf07b70c8081cac3849b9685bbc520677d519a76062189358d5ee976d7ae7119
SHA512 a6b8b21090ede24ab31e9954dd5a677f52d9bf0d9d1000d366a5886f60efc7ddf9d2a9460631d52cc7638dbbc2d0b95618c297e88224226de7e1c1f85595f1c1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a3249779f7c989cf3b2b5c676be1dadc
SHA1 db10df549af5f68a23f12e47c6d266ddb78d6dc3
SHA256 0a25235377e56402b29689554529dcc0e61daaedfbc8a5ca8d3af700b769105f
SHA512 dcdab7d126e8026c939943547d54f780847a3bfb3d20269811432e9981ff497ee7ea586284fe3eaac8bd1dcf2d729f6f6dc95f5c0323dd9be3de4e34ef0f2118

C:\Program Files (x86)\Microsoft\EdgeCore\130.0.2849.52\Installer\setup.exe

MD5 4b7b521f29da8e0138d90ef7f8983c24
SHA1 145f60a2686b724bd55f5f433a04e0f1c9e5adf7
SHA256 c4f2ceb49430fa117bd04737cb41bb6b52b27080a9de611aaac79bce3c1ea80f
SHA512 55ba45aeef8c50eb29b2782adcec29d6d9a8e1026ebd59e4585c056f2555d096b69487e033595c7dd6e7d354ca277f84c7ac64a3ef7df44a88cae3a659be0665

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 703cf4b7a60a1d5c43eee53e97f8982a
SHA1 2584eb9038bc5fd7f6f3af190318b5d1716d129a
SHA256 24bf0e2295e18a29bfc89d40aa983c55f6df3d433b00fbc583176822355da222
SHA512 b8e8b2e82fd603c28a23b4a3a086837f4a990ee16cfbce379f061fe6f997a126ce32bc0c4cdf526e729455aa20490ec95e8365b1f752869a67fc9a9161b98aed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d135b3f4-4611-40e3-8bac-e7c0dd390669.tmp

MD5 bd6ca074b58e3bd11c52fd768e4dd383
SHA1 f2cfb312a42971a9b293303f782803df7ee08ad7
SHA256 dd54b6ba635e3ce2b0955353a583c37f17931c6d3cecd6e028e251cf0559a6c4
SHA512 20ddb44e6e911b563ce82847322c94166cb5d6c92e8316702692db8a3036d000e55d51fe2454c95255eb4ac0183c5b6650e0b84e2bcd5ce038d82473c1aea0f2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0ed88a23e70ae3a06bb4dd5f0f4cdf36
SHA1 08cc97b7d370dbb903df8cf9b382908bc5d1a742
SHA256 2bf9adbae93ab3f1168e9fca76b621610a8dbcf69e77903c1f68561869eab1b0
SHA512 56f731361a17667bae4083dbfb3635790cbaa51f9481e73de8cc007b6eb150cff5e831d95ef4852535790ffdac2026c4c94d6421725e23f1712f0b53f1d0d4e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8cc279142ea8d63600e6612496851ca4
SHA1 2f6b371df93fe11c9d9ca831bee4a57fff9840a6
SHA256 0887afb242e32868d0747c60ffbdff61df5aa4e8dabe4aba9c48822508a79587
SHA512 38667ccabf0807596dcbda9d922aa5537375f22e357603fb203763f7b34cf793f0a41df2793d0bbf47e3df5e2411289f05e14e60b05f6f2a50b29890adc521d0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e212e0afa2f843bda5e4bd323cba26f2
SHA1 a1981c5546c2c972acb6892c241915c270fcf9e4
SHA256 1e73e677eb8bf69ae4f9b0917cd53c18162d2db6e6a56ae0ce89332bdeaa7bde
SHA512 62bd4bd1a187e7c6f035b3567284f7beea22cacc214e47625556ba99201e2d4adaa5b8af94ed9d3b7171e8a9e4a7a2d8787d0b6a577eb07de588b8d44d182138

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f0960d78eb249562e6e840daba3f7f60
SHA1 95ca13943869ae09fb8d2106a3fd7c7856581bf2
SHA256 51c6e5e049038279f26b4627b97f92ee4d96ee789a2fcdeada7f53da022eadc5
SHA512 adcaa991a1fa7999418753be0153fb8b8011a8a979b45442b4a9972d6068d5caf7614ae021a07c75a8ab3cdc1ce1a732edaa4ff06b7744c9f2066feb338feb88

memory/6600-9163-0x0000000000C00000-0x0000000000C35000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 311d0eec314b0984780b26005b9d87ae
SHA1 938e5e90012c199755b4a5121c24e32a3589c9de
SHA256 17aaf416b599849563ec11078e1a58f89d429020d0fe7804f8c09ea860f676d5
SHA512 0ea93b7f6c58f7adeef2f5a50a7c1b424558c3434d734dc12cfa526b51cb9c8b732178a3a7feff3e18bf1f5d750718d024fa23d7641e5e80c029f307cee593b4

memory/6964-9185-0x00007FFDB37C0000-0x00007FFDB37C9000-memory.dmp

memory/6964-9191-0x00007FFDB31C0000-0x00007FFDB31E0000-memory.dmp

memory/6964-9195-0x00007FFDB32B0000-0x00007FFDB32BC000-memory.dmp

memory/6964-9194-0x00007FFDB31C0000-0x00007FFDB31E0000-memory.dmp

memory/6964-9205-0x00007FFDB0EB0000-0x00007FFDB0EC0000-memory.dmp

memory/6964-9204-0x00007FFDB0EB0000-0x00007FFDB0EC0000-memory.dmp

memory/6964-9200-0x00007FFDB0E90000-0x00007FFDB0EA0000-memory.dmp

memory/6964-9203-0x00007FFDB0EB0000-0x00007FFDB0EC0000-memory.dmp

memory/6964-9202-0x00007FFDB0E90000-0x00007FFDB0EA0000-memory.dmp

memory/6964-9199-0x00007FFDB0CE0000-0x00007FFDB0CF0000-memory.dmp

memory/6964-9198-0x00007FFDB0CE0000-0x00007FFDB0CF0000-memory.dmp

memory/6964-9197-0x00007FFDB0B70000-0x00007FFDB0B80000-memory.dmp

memory/6964-9196-0x00007FFDB0B70000-0x00007FFDB0B80000-memory.dmp

memory/6964-9193-0x00007FFDB31C0000-0x00007FFDB31E0000-memory.dmp

memory/6964-9192-0x00007FFDB31C0000-0x00007FFDB31E0000-memory.dmp

memory/6964-9189-0x00007FFDB31A0000-0x00007FFDB31B0000-memory.dmp

memory/6964-9188-0x00007FFDB31A0000-0x00007FFDB31B0000-memory.dmp

memory/6964-9187-0x00007FFDB3110000-0x00007FFDB3120000-memory.dmp

memory/6964-9186-0x00007FFDB3110000-0x00007FFDB3120000-memory.dmp

memory/6964-9179-0x00007FFDB36E0000-0x00007FFDB36F0000-memory.dmp

memory/6964-9190-0x00007FFDB31C0000-0x00007FFDB31E0000-memory.dmp

memory/6964-9184-0x00007FFDB3730000-0x00007FFDB3760000-memory.dmp

memory/6964-9183-0x00007FFDB3730000-0x00007FFDB3760000-memory.dmp

memory/6964-9182-0x00007FFDB3730000-0x00007FFDB3760000-memory.dmp

memory/6964-9181-0x00007FFDB3730000-0x00007FFDB3760000-memory.dmp

memory/6964-9180-0x00007FFDB3730000-0x00007FFDB3760000-memory.dmp

memory/6964-9178-0x00007FFDB36E0000-0x00007FFDB36F0000-memory.dmp

memory/6964-9177-0x00007FFDB35C0000-0x00007FFDB35D0000-memory.dmp

memory/6964-9176-0x00007FFDB35C0000-0x00007FFDB35D0000-memory.dmp

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{48044DE7-1629-430F-93E8-32F2F9085D4A}\EDGEMITMP_3A322.tmp\SETUP.EX_

MD5 7e262ca6da4d512d4c9c57ff821eb477
SHA1 cf7267da588e50702b3d213421d413bc61b6a909
SHA256 3a29934ffed089779692b4de4258faa099dc81ec80b81c0adec9c88010df6ad2
SHA512 a5c03b86bf4444a0080eaac7ca872a825132b47d1a4741d5d740e931489b95b882675222d2c2ad813a3dfe3191fe7f38fe3253c2820fe34ea7ac5bd37450d680

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d719e4e0858c370449b7d8809f0cee3e
SHA1 90bfa16aeb12f093dd96b93642e44dea2189ce4b
SHA256 9da7b4f7c1deba017112929ab728a486a67203d2efc150849f6676e7dd927a43
SHA512 1a0d54c01ea3a05b76a531920b6e5b9a404a5c6779a2428b4d90cdf2fb97c69840a30ab283a805b6c055765ed5db3b5f489d1350320afe1c0503406d4cf3be42

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2c12a7c02083fecc6afc2e5130de412e
SHA1 e19836237f3c201bab7781206468bb2ee8693a5e
SHA256 e443829415ae0e3f20737c212a1b97b5168c42ba78177f0622c0e64ce9af5bf8
SHA512 57592e8be7b537d7288a1136a8614d9acb5df6997c746b867aed250649f552ee3e3fe421f9c0b7730d9e5bfda73e2d839ec960bb4012a4c8a39cb4d0b1b842c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a93224ab4dd04e6386ee94993223e32e
SHA1 8fa95443d7d30f6c08bc4bb5d21ce50964509f53
SHA256 48214c022bd13b1dcd3ac4d4be5765fae7fda8a141f8227733c20fdaf5990482
SHA512 1061b47857cbd865e70ce302c742ea1761db3b5b79180c18541454bd8755dfab2e9cb0cfe4e79a7956b02a6bc0ffb35f9bb19949678707d3e03b648924877d6b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 33107ed9e818f0e61bed6004bb77ddb7
SHA1 26b0193d1f5cf961e5d665f54bb65e8d1b95110c
SHA256 dbe59fd44e139f87262d4733af0a69c227ef8597bbbf2753ae4fa4088b703f90
SHA512 8f368ab531705006e075abfad898a6c2aa8344989a37b31a91e56c0c1f462a96288ab30772880a3f50493c9851a6eb0e3da7b0af8e84436db0b294404b1967ac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 956bd2c1e997457b996fcf3bfbba1692
SHA1 3129fbd4f3fc0fd24cebafb415c988f8b60df071
SHA256 2c22dce5d8c1b55b8c97576e7a4bed8ccf90b86138a2b0c1a8b4cf60afc5dedc
SHA512 9dca642a89949ad52d0f9b13c908629e9e85517dfaecdf324442c2f8d61f08dd1445dc7df4d03b48aa1ae3b9c1ca39356f1f0822cdccb58004e649c563f0b690

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bf6f56900aff17fff85e67c73f51715e
SHA1 5e1af5fb4587e7e4a03c8d0ca13aad500be57ec4
SHA256 69568cf098ae7c2a51b27c6df106b21edba6f494283e5ec6971da17608161a5a
SHA512 dff7d9a5a6a21d3217cf7ba244e4cc9a4de7107cdfe9c374a4c050e5357c6c247620e76823e52511db4b432ad03de910c7739b86ec9ed9edf54bdc39d842a384

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1576540fc39b6f8065dab78281e1bddd
SHA1 b0acc3069b77ce445fd9d6488d5b6521997ce506
SHA256 85f681352caf5414b6f5e7898b8cfa1f95cbbb0d8ce1e8a1b63ccceb7a7221c8
SHA512 65493fe06edae5e2fd2badc3be3aa55f628f639f54eed5b1d62c357cee637741d92e7898951188dfa52238cbebb88508a79dad0592feb15d4d53a6e66aa41e29

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 8a825e766ca1899771e2feba8fa0d165
SHA1 47a131d0e77619a3f610e4e45bda9595f7407a45
SHA256 951d67eb769b0af3bad520809ba14d6d11c910e77c828fc05feae91724b1348c
SHA512 4c9fc43b1318f851b9f682a5d58051da2e4f95260d76b31fa9d5fc9f4ce1d1e4649d21651330036c1d5fe062eb755d2576dbc1f45fc8fa5d1058abfa0607f1ac

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe787e28.TMP

MD5 30937c4fe78dce52173a2511178524ad
SHA1 1b0814e0ddd8649fb5066c63ab20a65dfc2a67db
SHA256 0f5909277258c059816c9adbc41d0491b666959a34b828008d346cb8927c212f
SHA512 bdd4c7b8b2373c5ce6f7c9ebdf6f9e0119c4e8c378f81b9b00f82274740bbb04ab54fbf0002ff3ad29e1147a510f0e4b4b0902f7e8003a66dc80a44503b2665f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 4f0411fb6cb520b82e5a9e014224f21c
SHA1 907ce41ed69e17ccd097d82fd04db22b55cfdb53
SHA256 cf4573d13932d81f1adc4f3e1a7e14f8fb3aab7760564f0e3dfb8449b6d522d5
SHA512 34ce991016edfe579a89f4cbe1bd67d753cef04fe6b320445060fa403fef6b56cc61b8203a7f6b27f2670093a4b6d8f4ca0a2bf9a9d4018ad855120dcde51ede

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 4113f2a7f366c0a0dc71b2bbbcc91d81
SHA1 277ec53424135e3cdea9410666ab042f75eb227d
SHA256 86095c62a300310f4b438c2eea945c03c3c05b2498908d36255cc1cad65be1f2
SHA512 3679f9074204e2dbbf5fc156cc5e056b27ec268f5c6485cf8e4117a5a474509ea277b0cdbba14a4bcf0cb554e22324d055685526804f11f7071f783c8c652a95

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 9533eb4c9318f0ad587b2f0f8b5458d3
SHA1 1289b5e928d8695c56e286c64a166a0b32c13c5a
SHA256 e87cefeae355b5ce21ca893a8cdace228bae3244a7c9775818e213da7ddb9e1a
SHA512 b0ae7d89c5126a36bdb943a7ecceebdf938dfcdb96440d39d914e0147da73aba50ae63cc9bcfea977ef74ccd2f315921bc60854381d718d1308dfbb66fbed8a3

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 dc94e8da7c84ea347b90992275f6f901
SHA1 dd749f5795398d116377b86dfa5b4d65fa71240c
SHA256 815876be72e94167577b065d92aab4b3fc25323dd8deb5e675bac73a7e24fca2
SHA512 5fcad7b4542244e068953814c96d07bb2005716252709cf630993a5242cc6f16249a55cf28bb79b9262250b1b88855b166ca0c1f3ed7b2018a3c878192ff223c

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_000007

MD5 5fe793df5a7679e0aaba54b015145996
SHA1 98d9df964d4a3dda76d3bff543896dff86d00ae9
SHA256 5b005cfe0ad12ff65f8d28de14950d13e0836b5788c531195d02ec32937b4793
SHA512 dddbf0506d8eea169a9c33ecfe80394241a0a9710a76693fc86638f404f7f089672210b7a5503b6ede233b33dfcdb50c38e09d39b5343efa244ea0339ab90007

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_000015

MD5 a47633dc02b289636749c9058043f240
SHA1 5cda7ce3c18af072a5df0dca383efb252bc86624
SHA256 3e6ad48b3a4018e7b8dbc5e22bb3b13168ec8febbd922032be7eb4623a039c69
SHA512 270f2ff5d3a54d80f5b1433dbcb60fd6ebfdcb092e7d891a59283ca7a4552aaa9dac91d819e4eefc5e7fad195878f95f93ba60a7d3ec779aa402e7a009ba33df

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_000017

MD5 b715a5dd019d1b8771a3031ff85c972b
SHA1 5768744eb85d3137d094458e4b7842c1c5c526cd
SHA256 e9ca7a8587bb3674824a28a8a80836e3483dc3bbe97c658bf7c984c5b424920a
SHA512 22e09e48a13ced3a3cd95a5f40b5e9ccbbad8abbd0d6af7dd4e411d63c662b09f1ad2453909a6c7a0d0ce34f250f2fbf0d7f076dced281f133ab7f21d2008d1a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

MD5 4829199e6a5f896653a07f378f420e20
SHA1 ea33810361856e36459b0da1d93267c6252b25fc
SHA256 f5d8f9bc07f91b59566bbcfa3c572d6d2ba2f35432b9ab89bcd7ad343cc61ebc
SHA512 83ba69988097dd4a39a19136ca5e68d0116305cc1d04fc519f59cb208ec0e8e5e592abe8fc9badffc701fc56bb6aa293c4089261f4d4a9b3d616026f000f48b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5 e0210d118b3139c5c77b0a3cdf07240c
SHA1 520912218ff8fb26d188dafe6eb7d53e4a1347b8
SHA256 09afbb320f0230e85ca0b2ad49ca106b3cc9bbacd2e45bb4e8faed3a3fe93444
SHA512 dd11395f2f830af1571beb0293e78a4ef01c252371194bf0e8154d6494d951e44b0e34219ab52ec8cc8ed47eed88b99592e9fbfe2c8d4cd65e26faa257a64550

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

MD5 5e2ec22e3837874c0cc5bb0f641ddaf5
SHA1 709b3b13793e22c7661d473ccb5661a57111ef1f
SHA256 f64bd4b8f50d6d9585efaf8646a0fa25f09de5b3b315a9ae47576b11d1cda75e
SHA512 b02dac49fbb92f3953f6bf87164c041f090bd25bce730a29a2eacf2dc3b2b4ff2f41288a167dba81a40964eb10e9fa08f9f07cf030f5c7825f2acd3e7c8bef4e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

MD5 2445cc5efa905faec5440a13dd254a6f
SHA1 a6d23bd5c456a889474c26648a9216367095f293
SHA256 1f29efac62b7b218531b984a94ee5744ea982f71d8ea6dad6d029941d6398023
SHA512 3094131a9c414b315eb0853916be03b422c2f33e394e0b4f111d7accdc02ffd65a7ae3c3bcab1470d34d7868a1e80e977602f004df6fc0596dca67f3beb19c74

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

MD5 99adec199701191fda80529b0506e475
SHA1 ba63a6135825ed9f463762fdb1fe8e4a3cab26e7
SHA256 86301cee42e07c559f6e99eb7e7270015f1b0617d1169feb1310508d4c6e004b
SHA512 c4ae0733870ef45a493685a3871c77dc2f9373d6104b429d38d508b5e6b0263114b0680e46e57ca20dc236cd45a4f6be4a1d1fd54945015f6bcfbd379e911267

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 32a59070cce46c2443d9e2010b6701da
SHA1 0c89f10ec0e3d3275e676dab8bbb971743b87f59
SHA256 1380d1d9c015b44987779b50f62d9be4a7b50f50bd0460ee8443073b4c658b53
SHA512 b97e93e67ac18229f6fb31091ae143c493360917b8d2b0e3d8a3f10b0776f61dd4ca0358fd527356b36a7b3b3ed5ed8841097af19a435ece0f02f075afe401d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

MD5 97a09aa4f4b80dece35061510ab8969d
SHA1 e5a6e838772cb4e8b7bbe73a302f71bb972d51c2
SHA256 657caab3365bf04728d83c35c710ed890130a83ed11c20333577eea591a662f4
SHA512 c4e05c200de14ffd86619f1fe99c78ddba58b22acdd61ea0260cd291a6283bd446b54d882b40427366769de76b56714bcb546330e7de96fe10a8ef49bd7e16ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 55f3239dc1b36fd526fe184afb6ce65e
SHA1 261f0a888c52b730997fadfe2e45d701ef842595
SHA256 6ce05c5cea55095e4a97326d6c0e52f0b9cbe9f5d54798c50186fa81aa5cc268
SHA512 78e0f7ed6e92c35c0fb3664b33def4a9fca8d942824bd96a80d441e11eb7d6105c52924637b976f520079658a62dfdaced25bd4885c2aa4b2e44fa726a556134

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

MD5 52a30eaf6f9171ab42fa2f4e746529a6
SHA1 d25e9ba467ba0c46e4ecc225ccc0b79603a15f3b
SHA256 cd627d2c91ebd8d52e0d75635ca44f653d48fb54c87686c78d698cf73e2f08ec
SHA512 e6459aae6da09e974d4c12e9e3c0eefaf072042cd8f9c0c6168d4a4494212e7ef4f89459b25fd4e4fe60617c91b3b274e09b10326e031ac14611eb86f41e2b08

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5 8226327996a67b56d47dbca42620a75d
SHA1 d604167574ee91bbf5a6e0aabed7591fee1cb41c
SHA256 70ac272dfb3bf6e7cd5869a4099a12670dd6762e76bd73df23858cde219e6afa
SHA512 959ffda13bd17451bb153225fcd72edea4ba3b0111d0f80d41f46da3e718127bea5f1a1674fe13840d8c0ce3fa5773bb8dee62b64937eacc16248f329424d57e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

MD5 e68c49fd30b218d571e5435773c46d89
SHA1 0107595579b3d17c8cc585b8a3b08ca7ad1814b9
SHA256 d1fc73a52c9ee2f44fe2bb46b0dce37af0a9709bb1c1c2992bf435d3aad7bda6
SHA512 ebf8476180427406119f6760919be8983f1fa322df3982a8fd7d81bd0b26ebc4505048d4e4cc281aafeb5046211c458637f11e8911a8fcd277019ab7e1c9e247

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 b5d230d64ec363aae8f2b15a7100048f
SHA1 0f0b8a1680d3a94dc434266068cc865d19e4140c
SHA256 c1124f3dfca9fd8249da22528ef8d85d930478e6d31e6fdc85d2721077f06e98
SHA512 55711d02fa53cdb8837913c2ef0565d823fb8a3570fd9a34f85c0a35a6c9762c97113aa44233fd6240a33508e8b9bc9475f47161262ab46bbfa535447cb8f1ea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016

MD5 867c65808ac64e7182fefae76139fd71
SHA1 45f0a48265d011e5c74d404147055815c31f8dfb
SHA256 bcdeac8e5eb5f93cc3ba9d000dd40502c11251c21559470290f7353c54b93578
SHA512 5fdab74043800b407e4c2052aa6e45252b2468f4e6b5f97cc24a086a488b35e6f06755feaa21d0646d333274644b62bdbe68f49589e257290f4bd203b7fe4355

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

MD5 58e0653b41ac9a6c6b0c9c1130dbc4f5
SHA1 76e2fd8d83ef892b9e1d7b6499d3c2fbc6636197
SHA256 515ab1ab1fd5d82a897f7c0d7401107f83b91ba3e3fea8c47650d570c4f78663
SHA512 3b04b61e42063a6c2483ca94c737220ae52270579e659980e968a794b5c56d8658e2f0166cee09d3bf6787b0ad271f8efe37fcc68501f5125bafd4be3cf49f84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5 3c188cc14fe618f99c5ff3b661bc866e
SHA1 487815efbae0d18f3a2ceff46b1540e45177aaff
SHA256 7ac2611a6f660f82b41f8a7e5da4c28cb6e6622c95df0c1580c9887bec00fc9b
SHA512 899e38d98c143ba39bb46917dfab719a8609384278d7186c83bc43d7b39cc662cd34fe288f16eec03ca3157fdef4f965fa1fad78626891441cb0560ac2fe8659

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

MD5 a63c5a6c1312ff4416da91f1ba045f68
SHA1 7785c59c41f2db7641d58f74fdeff80d9010cb00
SHA256 aac290dde49c6eb4506098e67d7bc5fb0ac4ad262c4ae5349621bd5aedbbeaf2
SHA512 f6db9f91b73dcb47410319747dc1db849771ccc0e8dac56c9bf8397288edd28041145e82a9056ef3ebe6f5cadc2bff5b14ffc458fece0258ef47349f56e2531c

C:\Users\Admin\AppData\Local\Temp\{A0BFF110-1121-43BE-87D6-E8483FD73CEB}-MicrosoftEdgeUpdateSetup_X86_1.3.195.25.exe

MD5 5a58f85ff61912d9cc7c6d78c05ea70e
SHA1 fda7b075d211e4311206f00990514e4cd75a62c0
SHA256 eee99f71bf20c98b3eb770c463c4e9f6959ea607ec0857e37d5852fc637516b3
SHA512 1cfc81337975124485aad6c3b5cffc43e69fb98add9c74bc37d89022972766e9eb82c56a00f9d17c37815693a431f410befeed900184044ec47a9c79a38b879c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000005.ldb

MD5 b3ec210b162a2e12643d5c4fd1ce5913
SHA1 06de7d9e24a154f83518db1859dbf4f0106697af
SHA256 a602cd70b283f8d578b176622e250488c5087b53266b6104f34ba1851c63d10d
SHA512 a3aae09a77aae3d89758db11edd14b130759c01a77f6ad5c734f55311a44ac90cd4bc13156fc081b3762249022f9f14e26ed1d56a125f78149bfda04120c577b

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 9fe1bce2cfadad3eb904d252bc1f2f5c
SHA1 bdc8931d8bea56237e4f4af4d411f27b4f187fc0
SHA256 5acff5e8dbd5029c083374e83152a9ece7f3684320d4639e67bdea9ccfee1aeb
SHA512 2a9d2c764e5e897c27e6924167636cff3461163aa1b841028615eba63fd2e6a9c8fff648d34632b5c84aa2dfc32133c2208495c1986020d185e574a304465983

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9511b7bff353294c902a9219616eaf21
SHA1 936fdf81e896bb4e1de2b239698ed65e51c5af8b
SHA256 e0cce1042fee9609b338574989e5a3687d2d3d5068e5fc87bd073c6b36a1de58
SHA512 64cd63da69de46a4002d87286f26c5307e85c5353ebf66bae8254e9f5ddf3814f9a1ee00c1177d30527264f40b7e5e3cc60ecb4b5f2fdda4eb2b6b22f6a35473

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 463f37b65ef4d1ad134a1b5722702e47
SHA1 a0b0a0b2a892db8d938c3764550ca46d63f149c8
SHA256 067c8505b216290d7e396f52a08b2e6f00b54aa6ac56d314f15ebf39e29ba7b5
SHA512 b926bb591eec6b97b40fa721a0ba512ee1249ddc18bee77edfd17e47078a80a9bcdfb014b8eb29bcad8347e3d07475adf504540307832339c06b39cca3ec0bf2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f9775636d8abd71540be6b7c21857c30
SHA1 d0618833ecfb6cfd5d736d708d5867b3546222a1
SHA256 3174603a2cc43d2a00ba075d4485f90517216ebe3e558819de6c5fceaa5411a8
SHA512 900b86526a1fd68e9364d66f7f6249a1c09d9cecf28c7171785211317d6037c87e501026c1fd248d51bfc79e331406feb803135c8c22ac5e88328c9eaeb7df13

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_00001b

MD5 4d9f61dec491d099125ae5d312140f84
SHA1 14e5ee4186b4b821ef2c30ee5c7af4211c7455c1
SHA256 d5dc5e1ef682a934becba383129389c8ea10a3f5223fe4baeb24638c0bd851cd
SHA512 4ea77e17303c900eecb5b8106cf984dc8387afd613ac70b7e441f4858032a5ed7624b7daacb9f3d89cfa14fa5e8e40cc182ea4073c9527176e1771896769fd5e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_00001c

MD5 640c6c3e97bb55cf788d48dd8162b153
SHA1 e5a650a30267148a107151c0151d6322f00a3ded
SHA256 cae0912cff016d1a1840c61f7fde8803daad861be9eb01827b4cccb8b763ab72
SHA512 ed223154e72c6589531a21c067b39569726b42a4d715114f184a749b4dcbc0d3df691de8e820d82e472c09b7bf994468e9d8b7358320021d25e1729e192eb318

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_00001d

MD5 e0b4f97c0f580709478360f92ee025a6
SHA1 69247c7856bbcc4f7aa3d3116e2500bd15d5651e
SHA256 f6145cfa38e41ab0baa8a3de2182a2f56e6017103bc8a3dc32fad16f72f32e32
SHA512 f1c73cc32b736f36c9381ae3d6de361b0e18f1d41749ce04403c5cfd34d371c485d8895f893aab4015f38a7661c8e220c308b7e9ba7e78ae6eeae73420e39131

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_000020

MD5 3ac55aa2eb577c48c9a8faa6971cc6a4
SHA1 77c605770913d62e93daa25992910e20bbb3e554
SHA256 bb883450282b8a95c4c187d84121419602794eadb9dbdc6bdb999eac156c598a
SHA512 1107354736d57bec22704a7e5f3bf42a7b482c7abca0afe9db263fad3f3b439c62f58f7cb27ed792a2d66c4545a51ad6eeb2cab6dc1b566caf968edb5afe69e7

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_00001e

MD5 6ca72fb7c3849169103e39223bf89649
SHA1 1da521ef5c0530e235ebcc746541477f81eddbf5
SHA256 018bfaebaefd3051348743cdce858d124971b2ca1341230e2c0168c5272d6c28
SHA512 2476a5ad464d24279043c7c41be8bbcd7882f55b2ad10b8c9ee0d68eaf93490f09209685695c733b19873b433d17332711204f3544f31d1c28442737cf7434ff

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 639e530a3aaaa150de36049e9abd063c
SHA1 48a82b9850a1ec9cc082f96c19260464cbf3dae3
SHA256 59380288d57a378f962aa7e450a3cc34891286b388232fa5b109f146add69690
SHA512 0184c6a08463db43f8e2953fb28480c7f7a6f3db0c71633fdd6e618fd76df75794db15d7f7327da8d16b5969376f9797556a6add6b164e4e508b9c6e05780395

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe78d5be.TMP

MD5 24e8c5d72a8eefa2aa928a97c64b01e5
SHA1 a1d54c5a848197c6bbec9e795261340ca5d98dc5
SHA256 21ce48ffb0865af19089c573ce977c5057a27471968115525416c56c20879367
SHA512 c502e261fb0b6d388ab8bbed5bc2f754cdc30639015230a8ebbc9801c04c93fac7ac9c7e8434eedd9a6b2eb8b53c5ebb14f68e1828945762eccb0b3f2082984a

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 f3c92c5e102828c56b2d55a9556ecdef
SHA1 b0cc7e1ffa371f5636f495822e7f66f5760d61da
SHA256 56705e68fd09ebae710b8ab517142135b18e828c1e40631d8b3358f3ce6f1cdf
SHA512 03fe111181788697c126f1b77a27e6b2589fd3dec440214ed2351dbbe085f6714f29750b5f67ac511c4403a0a89391dce78ec43acbfa44f78e72efbbbab1bdba

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe78d8db.TMP

MD5 3f13f243709f5dd335de3b9ff89e71c0
SHA1 355fd10e4eb4c365bf5682608f1b8dd7bafa135d
SHA256 af78bf05436b4b9515549569be90b6546eff2b48e221d2bd0e7af2357a9d122f
SHA512 16370fa655499fd7cfaf91b2576afdc26d5a5da43c6df2775b0b0b8037505eaa1d34e398649452e6d9ad75fa76d930878d4d997fb9fdb358506babf1a9c25575

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 12323ffb53c1b50f1cbcc122530841a8
SHA1 f438e5af0e0699f14d71616a0e108cdce18e8700
SHA256 9965b51cbec21877e14079b8bb42d48ca1aec50937cafae573d372c6fdc60aac
SHA512 21614ef2102c8a97d41b504d28e48b34310d054f9348ebaba067fefafedf497890c3c598040283fd37245084808fc22164c3aee274497f69cbf9a3f29aaa218d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a7a536f7b445dd5114673a5984ec9549
SHA1 c7b434b4e39948b278c638e7d0f6ea09d25539ee
SHA256 dbd2bcc86d528dfc3fc87fc37e37ffbf8c30ffcf2b6bca6cff45667358d57b8a
SHA512 abaa5ecba2280b399aecf799f5b4ad57809bdbfed8cf1540af63f28471db86f7c36875d1a89a3307ff9a44ec6dcfafd65e86189162a70046a330d6d4b0fa2c06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 683295264843d84ce1041a6899adc776
SHA1 fb2bce4536ed733ba73467f2c96911e4757af6aa
SHA256 a7e9b8bf35e06f033c8dafeba146e7dfb7d25dd68104947a9e9868d8e5be9f5b
SHA512 5e4412244b5ff1aadf852155b666c88eeab9dd5f708184592ce8393ab6674c45331a7dd2ed59ea13d7901ec8ee8a1c2bb9381161c0927fa2abe989c8821eda44

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 92bf2a3bdc88ff2c2ad745705200928c
SHA1 9cef79b6dbcf85cc833dd9b629b5582948c27f95
SHA256 d1563044ba224e24d5e3386bb9b6a9317351de80c5e9081a484d22484fbce1a5
SHA512 6251e3ed4e15d0c11a8fe5b5bf6440e7387a75fa01b19b1dcc8f806b4256a48c072535d8d07360c7f0063626c869a2c7e22fa65022f9b03484e91e715d980e4a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3ff315ee0fae2fc5f0432f1daf58ad7f
SHA1 84fd5e6e2c930d4b9d519531430b860ca490a050
SHA256 e25689349e1d80a5189935b4fa1c430a80e5410fd82c419d9e8b0449b46e137a
SHA512 0ce148c0c46203cc2d7f31c94dec9fd0a04fb7dff280c641d5a284d233fa2d7d06f5eabee1d54662656e265bfe44be5a583bb0e375580b7c95dee0bf3225e1a7

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe7922b5.TMP

MD5 5b6c77c75c303f5b9df8e517663f1e09
SHA1 331dd4ea79865a6e200ba0afe7bae88f6a3fe8b7
SHA256 deb34db331946922e92814ccc7d1a603b41b4c0b717b932a8baff847cebcf6d2
SHA512 4f087cf11ad9696fda840117b24d332fbe2441163cb476d23cc7b6f92c8ab3ecf5a4b1cbc5b2670a1a453fda255be0e51a5d617b962dda249715d34705c7275f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 16071df396cf4b07cd6871014dc56f9f
SHA1 8abce50ef2016dfceb3cbd914c4592ad50e81e9e
SHA256 e18b846544840e7b5dc327accac50f83a91300abe552002c991eb7e4ea90ae11
SHA512 6a38224ff29fefab9e085eae06d4122173d391d80ddb1c79d1d8c9fc2d2b153dc485d03a32290c3e8a291e3fd36eea7e22a0d0718413388563f89c050bbf56e4

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 49e1b2b3f5f088188727f74f862e23db
SHA1 745412e89f9554db2e06463e9d3bab2a7965eab3
SHA256 4629a854e8e1913142014eb0bdbbff87f80d9d8eaf346e9f5621bdc80f37a763
SHA512 fe09533ffe4baacfdffe03dfd29fdb3555c6e0f9d23e447ad80fe3c97802803a8fbc1074f25451128303e1b13f33884b79db28c8f43b7fbb5fa044d83c32c636

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 308777351aa4b46929920713fc2f5051
SHA1 508093c78368c9215b6ce44c0ab1a0bb4dbd3f97
SHA256 7624213424d5f9a74b184caaa783f7fd6c4cccfe32933c58ef2d68f06d6f30a5
SHA512 b8e1ee363bb851b25960a0f45e8a529b684c40b74e9d69753f0f3c9d8ff836ce9d18f3934381583a8076d6898b719ddcd4a34e8cb8878d2c49fbb844793e291b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d02a759a48723bdbee4d940c3cfabe73
SHA1 fcc43758d42c6fa8e1151435b6d25571696144bf
SHA256 4c809f16cc98b88c99d20c46faeed4880449b2997553e4d3fe1c3d8d58338055
SHA512 ba301248d96f55ac1943b4019dba27ccf27e372b7407a38fc979065d94741dc24d20839a340d76ee956800e3df8f442a689d542dd3f6bd8a51ac4419cf3e2770

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a1aabbe1-8960-485b-8a1d-9386dda74c77.tmp

MD5 c705fc861e6c5c45a27269313b034fb3
SHA1 18acb3cd74211ecb12aa3978134c994d83352895
SHA256 7deb5ab76f140ae2a64db4c073adec7b69f425d43f0f04bbc4db3357aa7414c7
SHA512 b57e06cbb9ed48cb5cdcb56b909265f6f8a3fc9f635f43bb2984f5cd098af060bd153620580a13dfe015a675a35949dbec48689d28e701984b1d26ba226333ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3549b62d4161e7121c28be59b5d771f3
SHA1 ff1c1dbbf1cd05a8b3ca0bd2998ac6b316d1ede1
SHA256 f4b30183b63db8acaa7705e9f26cf702bb6fbe67e8b3dcb969f1515917531413
SHA512 1b6fe3590625723fc8bc31c5e5463a946b3ccaadbe8c9b86a0f63c58c168fa989bebc1bc72024d4efe27307d9adbd02ce244e30ae68ab0628a83b1310a0a7117

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0309fa6314d83f7d2fbfc30560fd0da2
SHA1 f2076cbd029df24a6f6590e268c3f173ec64eea7
SHA256 1a192e9842bba4f8e9d36a7d672364ee5e3e28a76c0555a721ddf01a001f2ecb
SHA512 d404e2a2aa3e1bbe0f915db8131e405f719112270ed8a1002e76832be3b920b7c8e10bfd1a7e4d9d06b88e3171c2fc49c99f3a39916ef9ed9d69726cddfcbab1

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 592fe7ae1ef373a7baccbb7f45623530
SHA1 775164228196bcade4f9e4eafdd316d6e73e9fbf
SHA256 5b1f76eae4131a80b27b13523dee8436efdf3a47cb1c44668d0fe4983605e093
SHA512 11e5c76e5d91b9c283d8cf8bc05298b4520906af66f926e74c343ec0ce2e76f60fee4936faee39362546f934d2fa4a67489d912339062ac3b777992cf0f2ffc9

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe799787.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f33689087e1176151311d79c94e5e6be
SHA1 11ac3dc6cf866ac435091854b33114953aac8f9c
SHA256 5b2baeeee53eecfb0150d05627eb14af80834afebcf1d417fa6aadf8815abd70
SHA512 fc51fb9473eb8979603cf1818fbc02fa519b23966419e14fda278b36e30a92373cf96d3cd54f61d73548f3a3827ef846e97e6b4f377c90f073e230462206085f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\hyphen-data\101.0.4906.0\hyph-as.hyb

MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-hi.hyb

MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\hyph-nb.hyb

MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_735021049\manifest.json

MD5 273755bb7d5cc315c91f47cab6d88db9
SHA1 c933c95cc07b91294c65016d76b5fa0fa25b323b
SHA256 0e22719a850c49b3fba3f23f69c8ff785ce3dee233030ed1ad6e6563c75a9902
SHA512 0e375846a5b10cc29b7846b20a5a9193ea55ff802f668336519ff275fb3d179d8d6654fe1d410764992b85a309a3e001cede2f4acdec697957eb71bdeb234bd8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 df54ffd6df19ec9238538c95a62dd098
SHA1 3fb69247d5387968445ca7a3271c40d74819b341
SHA256 2634013d81332219dc916de8f2d3a33d273a8c2901525e270f9225d3f5628b62
SHA512 97e7cd23b81195c64fa32297e9d860aaeb1837838f2f718faf060d6a1b666824c1554d7bc9937a9c75ad1d86f9b1aa7279dd843bccb93f30054c30d72eb4e02f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5bd8da14937083b305093e8e38758f18
SHA1 5c2f157e72f05968870e0b95246ed1ef2d294729
SHA256 f4e217af05aac05597077e20f17a1f138df55f6a9539d0656eea5e40ca46d5a4
SHA512 528785280c682b516a215e81a9c726388f0ee33aa8ce5a8ebd93a9b163385a12835fca35705b57391f5d06815efdf631fe548faa83169c35d2b7ab5dd50d9883

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a6c2b9218bd4d8d6c48d0b700aed1007
SHA1 f698521d5734b8831e40a9b77f8d22858f49c64b
SHA256 fa0cd9974821797371dc18697f131769446da0dc3043e67c89836effcefbcd49
SHA512 99e1a6057b38c50cbec2ad3b156b570b9d9284b26e5feb2ece86e4eaf72c132e0c0e63e81d9b709d324c10d0ce7ba24ca009d98aea558d0a298aac651cbf561a

C:\Users\Admin\Downloads\PROJECT TRANSFUR.rbxl

MD5 b936665aa293e98cab8d7499c8485178
SHA1 61c1b916a4966fccda5945eed5e344ae272f5266
SHA256 e9e7c6a42a331491eda40d4e2d9c3082ec78d1e78600ad99b7cdfa6f04c432ca
SHA512 e66c4146434bb71013ddf4d7a3c9ff202b1c94912aeaf9fb3a4eaea70eb7135a45c8aa3bf1e436c46507ad464588fd1897cf002ba33697febf4df700e07c8e7c

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 a0cab4415bf3191488570732d2b77023
SHA1 0ca77f26214e24842d59fc54664f5c1b399582ce
SHA256 59abb892e5d492d0a3b21be38ee07c7b9828f31ff6de7106a9657906c00884be
SHA512 1de2aa3946845dd9964f2ea488b67f103964a7e0c2e0bc0207c80763ee8451c4e3efa0a80ff70f3185560f7638f42169d144192bb8ba87d7acc644ea1c249953

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_000022

MD5 526716363f388acbc91d62f5a985aa96
SHA1 629d93f6c443d18e179a5e73fd381e3e16ec4689
SHA256 412bba1a16862d6ec11339b210c09767453d4d7a0a0411aa4a68aae28b377eab
SHA512 b8120c389f1675713d04d5fb7ed3c554c332497b388f5f8a7ccd6be0203086e16f3f4590d26a55bdba8e3b991b72e226b4c861704f8d4b88d8d2216e30d815f2

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_000021

MD5 aa4d1b2be9c13c0f0d832dd96f12e623
SHA1 a7741baba162632f26152b1271b6c3c66c79e63a
SHA256 ed69b61e9551e10ba94ca4cff9f3194046ff14bb3acb0d80a0fad6d1694c3e3a
SHA512 cfdf7575ac8dcaf4c4d5b89039b72fe06d95e3d9607235e126958eefd17c0b4c2287540f7aecf128a2e06df3acd3641f31ce6d53b0611a88e3c98811cbc5fdd9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 54a255a66ce85dcdc22726b2b49bf1de
SHA1 c47b1bbd6d5782bfa5b67d2030110bdfdf181316
SHA256 07895bb3df4b3daf2e998b13285830e7e4de06f56d526a7a913cfbb0a6bd8d2d
SHA512 1978ae8ef8ad63b549b4a162944508ce963b1d7072149322a8effb9df652da752792dd4e3589bd9ec9cf8c1ab1fbbea49cc9c865b98f5dee3a2f08041aa838c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7a641683bf625b7ecef59789f8a8e3dc
SHA1 30626a293851d1e31d6275baac1313ca2c977b8c
SHA256 9d461beecd6fe5b4daa753ceacb3a61a9325903d1ef1628f1fa199bef7e4fa27
SHA512 84c304c81494afc69f66c124aa3d383a4e927e515ebcf953842cba0cfcfd25988902b0e601a8c07fe7d21d0496fc5709941d1d7045d5decb4985d151d99febae

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_2052027102\manifest.json

MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 904ce4ab559e73f32190e33bdbcc1a60
SHA1 1e09bd984094928adc4b75d2d493ab7e2099de86
SHA256 96d0ab47dd63bb622407a8ccb4ab3f8d3e4c6bbf20b13bf2d38cc847c30fee23
SHA512 6c0447250f01311c2c5407a5c9338237b1f92729014bf676381347ebe9344fb5b29de3e16704f531fc0e2055b339994a86162bf306a6ad22b28ba907d0325eee

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 925a949d926d909107f9eb23277af48c
SHA1 7979d0cc20b2a3e0fb2e0fcb130abd3dfa11ae22
SHA256 e9441db19ddbeb9f5b1a89f3adcfdf32a8272cb36bf5f96b6c085bc4809f51e7
SHA512 b83f52c5fc467810eb73297f9b6161ea87e9957eca8f1078ce2f3939052baa6e57bffb0445f20b305b80c55068b99ca92e20f121e2e1211fd3b22141da9f4682

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 34159c510512b40689e15e702a2a4385
SHA1 de05390fbbcc8f25f168eacda53f526591d75265
SHA256 9a8bf6a15f6921b98f23135d95b3553dc80463b1102ec139ee7fec99eb89a8ec
SHA512 68f30ce7b44d57ee2a6033b26c1b5b320e3748716fa43af3fef646a6a2712ed1e7133c28ebea63f941e02b11de140780a83db8a502cc5bbbe33bd34422e6c201

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 65d5f4480b7737e137a1224557e1b061
SHA1 c7e472882e14fe37c4b4b53dfb21c022a1d3320b
SHA256 73e3e25dacbc3559ef7fb73177a0d74c000753748eb3833f5490a144cb0ff819
SHA512 56bcdfecd3efa81d454cf65e30505dbe916e574f86fb4902e72bf8ddabd9d6f841f791f43571b3c540d7214784ba5e62b3eb1556443814dfa056f8380a60d9d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b150e888c41701e095812d74e67263bc
SHA1 941fc084269f5efd8e8a132b8486b270e14d0544
SHA256 53a5a83964a5564e0d22b237221300ba0d1689e44031d482bcf4eb31b6533a00
SHA512 f4df669d5c449d807dda7be987bdeecd0c92ebd3db13bb30d1d20fa07216d8f404b01d102eb7a5096c18c53815b7b29b6838daca044484d27eb96cff0092ce61

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 2be22325a0ec5b787518f0c6f0aeb808
SHA1 74bccf387caa662cd7e103dfe143260842f690e5
SHA256 e8a620bb0fcf97dee9ce45efb5ebfec38efbd26a79f96a1917f1dca11b317753
SHA512 05426fad693eb6a6207b7e0941e533c9913e6a3bc67b5845031f8ba0c7f872781961b0744dd0adc82aecb9bf2b005ba18ae231b3289a6395eee2f0726b4f5348

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 171b9850e0c9d8b1a02f1dd6726e47df
SHA1 e1d1040d0b7c5bb4d67e786b7eca1300ec27936a
SHA256 ab3910c74e4bbd9a6c6080fd0f990d9ef0ce258568fac4d2fa6d51b2f07b16d2
SHA512 fff4b36daf753b7dc49679c8be86fe7ff950d0bd0be582b7bb9fa649d9daf5d9eaf12871df0be5c5a9fe69829a8959c09a2fafbee4046af056f8dcd2f2f3ee67

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 f0f33dbfb79f0d4a95550ace817fd2ca
SHA1 0c6b8daec9b301a6b01d45a91f8b6c88119e1804
SHA256 21089eae046d1c1f3a1653eb66b68b2a038d4de0529702d4d65e7870bb17fe8b
SHA512 8248f9026d7058543e63e6672523d9b1d226735bcc6ea1876587ff56ad421f5c90065bc8073c7a3f6b8c5638b38591a28b4e900dbba893c8169f92af1078c058

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 67f5b828495994b2e1728ed5987d8811
SHA1 adc3bb0caf3827b8b78b4fd4975fc8c7252a7806
SHA256 a9e270f6e01ef4cbf428251fcbf3958a6fc906c59e4d02f697cb2306e430eba5
SHA512 baa279ee290f6718b77cc5d72e0eb2a3e6ecb3dcd40a56998c4d654be0cfeee59d38eab1d8ccad91c248bbf2ae070d8d442e0112e3eee5730da051d89baf84d8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 37b9606f5afc412621e86ebe635026ff
SHA1 285e71d7d41343ecf534e10998dcd0d7cf934e22
SHA256 bb5baf06ad58f0dfe433c3298163e65655dd1b967446f51b0d46c16dbc49c179
SHA512 8e697ad869229c7773c766deb6cb9c2fe4b478bc3f613a440b2075723171da450c18bda4527b1172fb44c2c0f55cbef27cf2cc5b22c66bd145d9f7ba8b6e21ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a4c8943b936d1e9b1f4344513da84e1d
SHA1 41eb0d8efabe42c6ae06a077da15904beedb9522
SHA256 e97e687af8346070e435d7425cc1764b9a86b1965744d04060f2902e6c4c7651
SHA512 bd655f328d3f023498815dd19f7070daedc411bb8f15ece1bf19bdf585d33f88b40c7d6412a054b078ca168cc2e00bd4140248e2935fcc18a3735ae653170be0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 26b6a6c8f634fb312706a1ced5bee21f
SHA1 57c62e7390c0b094e013f3c4bc5a6e78fa0e7caf
SHA256 a933393f900e8c8842d1960e072ac4cdcadd6d95e6b431278e3838c544690ff0
SHA512 bc767ab6ce5c223ca50057d726243991502577ef11ea8528ffa00250e724100505f91c07ba2795a93cb38af8b59d2c3d5655061d207cb6f4deda33a22793e019

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 8d7e62a14160db6ab551bd0f03393e8e
SHA1 3426216e60468f89471926f382996e618d4746ab
SHA256 79afe36adb0f07bf740f0be9d40482819eed8604434a375b817b34931cca6c4b
SHA512 7aecea9bbd8f33d8ea46a4b8fbb920d5509e755255485e55674b285d89c7ca563046b05665a95d9c8642bea344341c890840c0717ec25954d59b49ccdc263a34

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 3d8469930ac7e5beedf0398210f1563f
SHA1 6e321a766831be1cbb5fcf667e143a0296028523
SHA256 7767dceb201b945bad8d3e36d99e9d21597bab017839730cbffbf3c3e6de6341
SHA512 c69937f44908a1a6358a2d3065bcf551445cb8a8fd9571435cfc618fe83bbe18f4139080c5db15ddedab00173403fbb6d875063ca7ad79d0778258a43296c6eb

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_576067424\manifest.json

MD5 e39cecf91d50b976575112bafefe9393
SHA1 82e2d1c3cdc771a02ae8989a89dfd1f61647b8b3
SHA256 f7d0ba2c20ffcf2fa230225b4a309a0eb52741eeeb29725b01c289d0067984d6
SHA512 0a63fcb2109d878013ee79fe0789817d9df4445eaec4bb27d663237ada6d035d28946e9a4c2ae0238413f5d404b56536c4095bedbbe6528ba36bbb5f24bcfd02

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.55\LICENSE

MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.55\Filtering Rules

MD5 a97ea939d1b6d363d1a41c4ab55b9ecb
SHA1 3669e6477eddf2521e874269769b69b042620332
SHA256 97115a369f33b66a7ffcfb3d67c935c1e7a24fc723bb8380ad01971c447cfa9f
SHA512 399cb37e5790effcd4d62b9b09f706c4fb19eb2ab220f1089698f1e1c6f1efdd2f55d9f4c6d58ddbcc64d7a7cf689ab0dbbfae52ce96d5baa53c43775e018279

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 886952d16d4518d9bea40ae3eb729bb8
SHA1 190cb22943a1619ec3a59ef74511644fc6d98d6e
SHA256 c4fbf4bc7a50e17caadfb04bbbb83350f036332df98e74539f574fa054d73372
SHA512 2d79f85b66b878694467190deba5073a04025fb3ae04175ffd3e2dcf7ed7455f086f09a88c8c318fea3bfff659e52c5f3e7515e1e1af30b64ba3a2aee77c0b4e

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_889656417\manifest.json

MD5 b3b44a03c34b2073a11aedbf7ff45827
SHA1 c35c52cc86d64e3ae31efe9ef4a59c8bdce5e694
SHA256 e3649c54fd5e44cbb5ba80ef343c91fd6d314c4a2660f4a82ec9409eea165aa7
SHA512 efa957a1979d4c815ecb91e01d17fa14f51fafdde1ab77ba78ea000ca13ec2d768f57a969aaf6260e8fd68820fd294da712f734753c0c0eda58577fe86cfe2c5

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\14.0.0.1\ct_config.pb

MD5 f9d04f6b65d1a463f1a01ec39b77622c
SHA1 8f13311afc943d362dbb332b1c0fb289a722547f
SHA256 b42a2649782caefe33aa7f546a02b69bb292a0d4c8ca48602bd9c8dc623b3588
SHA512 16b6419a5d1848abbc668fff08b767af3e01abd71a94341baad7344c0dafa5951ba8e3bbe8561d79fecab03b720e0293e22b49659961d82587d3c7956addd71a

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\14.0.0.1\kp_pinslist.pb

MD5 fb4c5e847d5f30be002702ffab8e928a
SHA1 30adae5ee6799e233e29cb6825bde492ae6dea98
SHA256 2fa10f05494714d062dbac514989f544036509e4181af8352bf7f8c3b7ff2fe0
SHA512 6c0792c37f44835a10e412dc889e64bfb740337c0a94ae360149c7987216cee168f4b70a428fa9a63a99fa0d35640727450e1fcde735b42c6108ee3f9457f72f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\14.0.0.1\crs.pb

MD5 5533fc3f4c1820b787df3ec6fdc2ef1a
SHA1 f39ff89fcc1af711e8127c52ba55c8ad347e84a2
SHA256 56711adeba4ecafe298eab09cf0ef2f1d7f3260a2aa4366b927029781d270938
SHA512 5194c0562b8cb8e23fde7b561b00dd6bed93782f2e9253324a8e8ef05b69b66a549f2061ff3a9010a73a1412cc64889bc93931d0f212b8a68e39838dabd8e811

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0d28ef35de437a587c50a6fc16f3bd62
SHA1 e7d9e7a51730717125255c938eda667bb79ad629
SHA256 e83ac2d047067f0f8dca6d4ba76325c4ac5cdee2faf939ee01d2d9adf7931430
SHA512 466c9e3c3f9abf5a5ae6bcd9f834622ec36e02afaffb269d36bd80a76a291236809d9a2b23374f6d1b688020129ebdede067c1ba3def5b53094f841afe77c6e9

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\TrustTokenKeyCommitments\2024.10.11.1\keys.json

MD5 052b398cc49648660aaff778d897c6de
SHA1 d4fdd81f2ee4c8a4572affbfd1830a0c574a8715
SHA256 47ec07ddf9bbd0082b3a2dfea39491090e73a09106945982e395a9f3cb6d88ae
SHA512 ed53d0804a2ef1bc779af76aa39f5eb8ce2edc7f301f365eeaa0cf5a9ab49f2a21a24f52dd0eb07c480078ce2dd03c7fbb088082aea9b7cdd88a6482ae072037

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_598209306\manifest.json

MD5 077da41a01dde0173ebbf70d3b7210e2
SHA1 4b3c3deeb9522ca4ef4e42efcf63b2674f6a5c07
SHA256 23bed5c8ebea0c376483374bad7baf633a7e52f3e0a609371c518e06e645bda0
SHA512 2822d02e2b3c6306e6d71fa62e7f472b4c3cdf0cbe499b70ac60a0a50e547ed47c394d7de88bbef2e6015920442b9d30cbc0d6869d154e02ec251712f918deec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a556df115a15f4838df69e271623355f
SHA1 85806c0c5121b66fdf3ff7f288bbacd0c80705c9
SHA256 f2242ff61e02cf30a3884b5398621be1cfaa57d3bd9f6d34b5f4c080f3bb6378
SHA512 fd2b645812b47378d2695a7c000ef27379ae1eb92ce9e31480f00a67157a0e4a65c65e7b1fd15d9b38617c5c285d7013718775e7e86fad16a5ca8f2500ddf4df

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_1969467262\manifest.json

MD5 55cf847309615667a4165f3796268958
SHA1 097d7d123cb0658c6de187e42c653ad7d5bbf527
SHA256 54f5c87c918f69861d93ed21544aac7d38645d10a890fc5b903730eb16d9a877
SHA512 53c71b860711561015c09c5000804f3713651ba2db57ccf434aebee07c56e5a162bdf317ce8de55926e34899812b42c994c3ce50870487bfa1803033db9452b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a5da425671ff29e900f4c13df678d552
SHA1 b4f971f5f144da0720061b5636a3a625cdbe61e1
SHA256 0fda3d858647fbf59ddb7208e37bb41f11422962a72472cca3c2aeb66a50d8f9
SHA512 e33ade511eb6de935ccba1160ec1933dde6bf66b4fa33419500e6129adc2d83ea301881c675d0f69354033cdfa266d30ba5a8e3543bd047c07a882111d63a6f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e7f9816f7a96b3e9a9de4ccdb6328efd
SHA1 87b88713d0387273752581c90b8f405a5e8edd1b
SHA256 e1e4ee540d71606cf5c83231dbb8f6bcfc33f7e4ad3d8a9de05397d84b662863
SHA512 a4d7fe3a7f095370c85d1e4b29437dae8188107b6dbf2d0eb75cf7f18956870b007bd93569e57b357f1d99566821360d480f6368cb8a06c541d95758417f538a

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_268150618\manifest.json

MD5 58d3ca1189df439d0538a75912496bcf
SHA1 99af5b6a006a6929cc08744d1b54e3623fec2f36
SHA256 a946db31a6a985bdb64ea9f403294b479571ca3c22215742bdc26ea1cf123437
SHA512 afd7f140e89472d4827156ec1c48da488b0d06daaa737351c7bec6bc12edfc4443460c4ac169287350934ca66fb2f883347ed8084c62caf9f883a736243194a2

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.8\protocols.json

MD5 6bbb18bb210b0af189f5d76a65f7ad80
SHA1 87b804075e78af64293611a637504273fadfe718
SHA256 01594d510a1bbc016897ec89402553eca423dfdc8b82bafbc5653bf0c976f57c
SHA512 4788edcfa3911c3bb2be8fc447166c330e8ac389f74e8c44e13238ead2fa45c8538aee325bd0d1cc40d91ad47dea1aa94a92148a62983144fdecff2130ee120d

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 c246ebb8ea213549b704d0017e484e34
SHA1 7f7cd7a2ecdc5d50bafbe4380c59f17c680987bc
SHA256 e44c49ba7abe2d1f406668c6015af7d9b7033b6962839b4801fb57c9ab8f3155
SHA512 55111250095a81646aed9627ba942324468106f6ffc739aa1026758f5686daf18821ececf7ce490d1a4067681d9eb042503a5699fbfd72270f67e6398632ce37

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

MD5 fcd0bf66ba9c46bce566d74c0cd81e8e
SHA1 8722e3f744cb9a04b3ab45d64ad2ca1d1e86d2cc
SHA256 bd82c3cf3086da8be3e1888da5066b2c9b4f836c23ab48695160c24346707757
SHA512 7c040692556ebed927010888335f450f51a82a67d6c88fe52ac1e0ccce1f2be54c5826c2d62adc5a493a132f74a97e7370109cbdc304671dd62c176e767be555

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8a30d06cb0a3b39be6148ac029731d25
SHA1 b667c3cc2d7e748f182a8a481ac805732498f847
SHA256 1e5f50a444682a9d08ca41e713a52c0475d2b7ddf64455571dc35acff8398778
SHA512 5a90750cbb08cb4476494576b6f9aa2f9e8858f27c226175a5ebc7e060216037c07c61f8c21d3518df0d3ae0534791ae4bd52c998049d503dbde310b5c2ce9e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6743f121df49735e00ba6da1e9e15cd4
SHA1 89ebf777120ab4a9733b9d676799fd81ab268ac5
SHA256 f0799530139efdf5e6f94342424c33a074184aac6b83b3483581e2c3990cfaad
SHA512 67788827e4efad485e494d65db86154345c9ca1d4f740776a2a4cdd002e67736795009dd7dbb98952b216ad10fa040620dac4b789f6b8561ed11968499568be0

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 d65cd2203afe0c4cc35832b404441751
SHA1 591d1a6b1bd5b6fc75a81b80450bae804f06268f
SHA256 4ced2a95945bd79996f9ff17f880c50356438c91021df6d67007f210171842c5
SHA512 fe6cb80e651549ac409c8175adcff4749d82bba55731d8863e86d73e046f811c7bb2c514f28e09cd6ed17bfc99088af43185c2a62daa12b61e0a20fcfb27b9e2

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3456_217173638\manifest.json

MD5 b6911958067e8d96526537faed1bb9ef
SHA1 a47b5be4fe5bc13948f891d8f92917e3a11ebb6e
SHA256 341b28d49c6b736574539180dd6de17c20831995fe29e7bc986449fbc5caa648
SHA512 62802f6f6481acb8b99a21631365c50a58eaf8ffdf7d9287d492a7b815c837d6a6377342e24350805fb8a01b7e67816c333ec98dcd16854894aeb7271ea39062

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\CertificateRevocation\6498.2023.8.1\crl-set

MD5 d246e8dc614619ad838c649e09969503
SHA1 70b7cf937136e17d8cf325b7212f58cba5975b53
SHA256 9dd9fba7c78050b841643e8d12e58ba9cca9084c98039f1ebff13245655652e1
SHA512 736933316ee05520e7839db46da466ef94e5624ba61b414452b818b47d18dcd80d3404b750269da04912dde8f23118f6dfc9752c7bdf1afc5e07016d9c055fdb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 9006eb0010682a54b970ce3268283f34
SHA1 957f28a11f2c9820e65e186e1ec226e7cd07eedf
SHA256 7484865e23545980b6ea269bb1634605875eb3707e2356a65ebd506fb47eae97
SHA512 9c0b8d60b405e82a2fad711f91c88eaf707fdd5884f3437de82560056009a7a815c9c8f4518ec0a08d80360b47b4b8b8474544124ca3c28c21bb05b1889f1854

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fb196e4f0910b95946480457d2164e8b
SHA1 7ce980b73db66ae7487c177467442ce8fa856775
SHA256 15e90fde87985f68f65428ac6abc180a8379d6bd15e29ca2a3da260eaec9b7b8
SHA512 1a0e03bc2bd0efe875f97b916d6e00f5efd1a27d433ebe9899b26661846d2e20ca9765ef810454ae8d3d1bc31284ece40f5b00d7c20bd3441aff2f99fb2b39ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 59bb522f30cea3b5a8e0cd26e8c30b64
SHA1 f9cfa3753be323b0f76612f2b68ff9deac2f493f
SHA256 215af9b90df0ad206d014d896b0275991305a283b4454d99a88e1a8022548077
SHA512 bacbc5d694553ab4d9a6dda140f828a3a4cd05236f9ec16e3fde852ba0b16bfaa8b793f0592cf92704c4191180a2cc460474a20ef6b75cc91fcad1dba48d12ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 bf129a90f70f2a4605c28d17962fed7b
SHA1 7a87c91431c4cf3d9bcbb3c19250e7e2204138c4
SHA256 47bf70c479bb4173a2fceabddfc3920abbc5e57b025647e283ebaae6fd54e88e
SHA512 7f005324a9896242b5cb714bacbdb84d880b57912b07d2e186f82fa7ecb32e17a27381b381cc30a574d2fe06466f06764dc82e989a55cebaaccb864770e81cd7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00015b

MD5 2e23d6e099f830cf0b14356b3c3443ce
SHA1 027db4ff48118566db039d6b5f574a8ac73002bc
SHA256 7238196a5bf79e1b83cacb9ed4a82bf40b32cd789c30ef790e4eac0bbf438885
SHA512 165b1de091bfe0dd9deff0f8a3968268113d95edc9fd7a8081b525e0910f4442cfb3b4f5ac58ecfa41991d9dcabe5aa8b69f7f1c77e202cd17dd774931662717

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 59dff8ee083c33e3eb92cd764e8b6abc
SHA1 3376fe45f2f3d1280472926c577452e933dc17bf
SHA256 dc1512dca2ac8a1c40c7cc8f5e6bdfa9141e1644cf2cc00f7b6b00454d6ffe8b
SHA512 d8d18639f100aa8af9e8d61e64bdbdba46afd075335aeefc8f75a4ae4058e6d4c1381749c160198044f10635f5efe3912904fd26f8289d1ddd508a3f0e3fef43

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 148596f64cf934fe38e856f764e46803
SHA1 1965117a9c23c060cb18705336ed13af5fae7b9a
SHA256 3bd79fdd3f612dbc0b291bc06b0e2fbd788ece9d94028bd90e1973827762b39a
SHA512 accb76bf8d32a5f3301b4e442a61ff273454a8242941fdab52e33ef5666fe0854c7eb7acf64b980a99e69b0020c85bcd76aa3eb5770ca15ceeb549c0ce4c3182

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 5df9baadcad0cd68138fc4e51ba41459
SHA1 eccd6a874febabc57fd089f510608ac3b78ccf5d
SHA256 a39018fc03355eaf2cad061d2deb64969534280c02b1965ce29efa740416a5e1
SHA512 9f5a8ef6dbf9f27ddc0d11ee31c96cd3f4f9e57293eea56ba85356cb8d3e8dafffdcb1b9edf66881e9d5633402da104ff7504ab906e64a7a49f12d66ebe02010

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fffd2bf75a200ca0015af39547d58ed8
SHA1 f1ed2179e94c26113afd02075861180c61b969e5
SHA256 7d3ed7db30750ff87973aabbc93cb589a6f3fc2b0a73489ddc848318c29ffdac
SHA512 f67ac73d720ba90a0d1b370609ff63e3299ece815bb6628c46a4df5eb8bc9b9dab2f5bc4ba470e6853252a43513434ec84afc6cf2059c30ed9d3d212aa88649d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000168

MD5 a65f7f00889531aa44dda3b0bd4f4da2
SHA1 c8be192464c7e60d4d5699f6b3dabf01b3a9d1d3
SHA256 0dcf11ca854f5c350637f7f53cccdaf95492dbbf779b905138e26b1ec1dc91e3
SHA512 6f48f0f7cc1a35a9068c1284579db065e0fd4b2651355d68a8ff5ae9df86090be3f6e5ac4589585166829087c8bd3c37431a7066358eaced0cdb6c5a0d544fae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00016a

MD5 2389054bc92fc6a9b9d21997feabb1cd
SHA1 d46b4bece5021bbb060dceef4273475b879c75de
SHA256 5c38b4d4f6b902a99e4eb9cd922a2a2a37b549388bb4dda0b756bf6d5887d6da
SHA512 5525a4228fe65d25f0084fcde29dce0b97b80126e36875d226549f379e56ae52c0b2ae12752b188fb9715812d14d740f1ebf35f3ebb5c1b4e3b564836ed30b0c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 160e79d276dedc02cfc0a8f25db5e6ed
SHA1 f37dd614fc1aa3d6dcaa232281c8cb35771562a0
SHA256 6c98712de01615a93b5acba0ab9da418ac6ab80dce01df21bbb306224f37fc6a
SHA512 6d50c27ba22474b7699138b094f3e23ed86327f91323f72db0b2219ff504848fc68e9ab5a8812ac33a55ea3a0441d35152edec7be3bb53f51656961455f49096

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cc1b89d73f8ba82d38ab63d93c9df2e6
SHA1 3484e92768b9a9a36175390798c41a12387072dd
SHA256 0d2f0fc8b95dd12ce3946df8c89c350e8ac99489b373ebbb5b044edd0f9b0641
SHA512 0713539c16132a584c70d4e170cac859174ffb994f2770cfd623291afd3acde7ea2bff7363a68d6425c7ec59ebd7644ef8edcf54b34e7286e23ad39f94657512

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 31cd78c3dd2eeb105a35caec624648e9
SHA1 e25338d65c8f2ecceb7cd6598212f44e4b57bc4c
SHA256 df8b505a12b5c7fa2938cc887387a38f03bf5ccb676dd252a65820a0254306c2
SHA512 496901f269dd1d535692a69e277ad312ba0d7042be3052f60f953a2ccae250f48348a9dc8b2fe34ac8f23b1032bd9ef62c7e99fe2ec5d56e54931ef4a9c1f0ea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 50a1378f52717504a1c70470748d9066
SHA1 4288412d1f69b317515c615225fc3c7af4afdc17
SHA256 29e37c99d87439b17ecf414f724541d340ba132d73ab28e3d8df722d18499386
SHA512 32acf8408cbf8b820cb8e24a35d7bcf41f5c5693eac2f135d36babda8d39820b177dff0b26c4a948d0b40191a7c640f417759a4022b839fc14019cacf36713a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e60524956cf097194a1b4dfb64164cc3
SHA1 bae72b9c5a27b2514512edc6548207b27b7b116d
SHA256 638fa8181dc378e55ad91d981c0d164af3af2cc7b78dba1ba3f357d1f07f6184
SHA512 32ed3fff6aa48c6361951741cae9e43ca0b69fd258574f9411685aabb6eafe452726d9cc21e79ba8e21ea4ce23209e07b2a7d5f84ec6ed554f300968db0f3939

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 94e882a72c45e43223e6ceacca3c655c
SHA1 03dead0284f78b97db26fc6186d6a2b5f858a9a6
SHA256 02101c6568507f3899fe0e6774025a3e923cd71cf1e7b5ed13fe04843ef0b402
SHA512 7674097a8c2edf35c8e3faf8b03c279654114f7e2e8ce383be1e897b32cd767d6c39f23fde47810ab17deb5bd7637dbbe93b4e089ca208eee1e3078b2fa287f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ad98ce08bfc6b1d649ea9ce7e4761b51
SHA1 e021ad303a6ffc9fdf8ad391e0190d58498fa021
SHA256 0f2eb982a78bd82c2b34be8a01107bc881e5646ed314e786bbbeaac1f6178dc8
SHA512 671e0ff04d5364d09b6e8daa2e7c762c8f18373676b4b54e06abcf2db4768619ea61912b9e032d5e164dea772e06f141c8e5513f6f63af73604d0b89193d8a92

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ecffba13bc279fc1ee240e314becf734
SHA1 ecf27f0bfd68962b6405e7388f5cc6f3084e4fc5
SHA256 11edac13fa1645511f7d0f9dfbeb61477cbfaaf384c7843fb5fa542d68c30f0d
SHA512 a093b3a425414acf84f92491d548656f08dbd2b079c58ea2604c8246cc79d79d15e43f027d7941bd161b66b7acadf04ea4eb49a25e4f51c96c964eb616c3e23d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 757f19e83ab573c170f406707ff51505
SHA1 77773799959ead3f6302f960ca2aa8a5f1b3cfae
SHA256 704079b0e74c6b020cea8c23e68c6d8a6bb4a310eba2dc000700fca2124da883
SHA512 30bc768e254d7f55a99c3361616c937339fa871d0e006c13c61a375a1e21e24bf5c42b178495e256640fbba719c101d43e87ef793abc68b3199dca1e5210603e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3c2a8e3fbedfb2e8adb4cb2c0e254139
SHA1 3fea5bf420ccf599a178631c7fbae286ea68d97c
SHA256 da59f511ef957dfe75a69d1edaaeb38570de8f7a903cb47519db81d9e611e387
SHA512 ae6a59f761410645bd7f4c81ed8c55036da0c45c3cff661784fd5d32fea774b430e131c8d67a0bbd4c6f8e80acba7f1678189cadcd0dbbf2bb8b98d1ad48dc69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c540d08ad8842400d76b0d1b51e5c6a3
SHA1 038ae786491145f74bee866a8f9fc2b087af8936
SHA256 2ff0d92cb835c7facdd042c781a13b94ddb90d0e54b541b50fa16e4dd341b3a6
SHA512 f7dc271353844505ea03f6949176e94fa8999a254dfcb95f0ce8fe5b6e676facb235bd039e293de7ecd74456e89d3b403e6ccba29af4d179d974b622a665c1fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2624824d04b9255db29af7487a5ba54c
SHA1 244bc6c168e637354f6c446b469bf0a27511f2c4
SHA256 696a9a9f304ed496bd499af63edf02c9a678ee6060ced92ebe246345ad75a52a
SHA512 82fe5c8da677dbcfbd7fd116eee24235504fd4601ae2d3248f58382500ba486fd95dd6f2a2073d4ceb20e3bb90e63978a1e63ec8c867368792a8b7300230015c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6ea1f72d2a3048f4387f14178730313c
SHA1 9be8e0b9f3c08c3ea09c56757a248405b26c001f
SHA256 7abaeb22ae6d54939ab48f77efa10c8a8dd3235a0c51854c98f4a3f5ed0e0cd0
SHA512 544c475d9592dd8d1503ae4b8fd21528798ae1e12e5e7f694749647c4aa7f73e08f1d4b92222016172bb9a469a5e6457438af0c60fe18b536ff884e40ad87044

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00017f

MD5 ca6407fc2a59224e4115a049726f86ee
SHA1 ca4a1602816271ef454c890f7795ec49450209da
SHA256 88b6661775266256d3ebdcebd20d963fda50c0de3c8fd3165f72c83a765ce8e9
SHA512 7597c519e95fad3c5bf0f00c716d13b5bafdbf98ef5f58f260282c6b57c1bce040537efbf67aead42bae8e98b5fc2e18e071928063a9d1bed0d6648c57e70180

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a202bb4f9e30fc29b5fc09180d610e94
SHA1 17b25a972a6a5d78bfa58a0ae3f1e95415977df1
SHA256 e97fd3b54b225c65c956d3f5d9d84b811c943cceee1cb9bb33b883db8012fa70
SHA512 b27a935e6e1669d2855fea74d6bdf34c7c217df8cc22cd386b7780f18f6cfd72c3d7ecd23a06a7fe1cc37b333f8e124bfdd263425a032e29f3f1b2e3f7d083a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ea9aaf5f6c027ea8d2743fb68c468872
SHA1 e4cd82330df3dfa9b859710f6f712dd37532a8a0
SHA256 21211c5eff0452c2eda88c6add1466d5935b060905f72d6b693c0f643f0a6038
SHA512 626a3d10aeb3108c128282c5b9fc8fe7a6f85768021cf5987e32f36616271bc934d9ad3a8e8c75cdd658e921e86c4f34a852858702cee09447fc431b4d8bf9f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000192

MD5 54f20de8a9081fccaa118be5bf3aa347
SHA1 9a6f5952bca06500c4df3f5a26a54955e55ccc14
SHA256 b47847a633f51ffc2135e83796b686532acbb5876025eac6d20a083502315834
SHA512 488522b5d5dc119f11e33f295fc3a2537cfe8360287ba619eae02d70629d6bacf7ea9f8e85a05a1b9d84a0688922e97c7d754c42d5428363253765fee35f6d63

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000191

MD5 6d08ff4f36771456b447137905151406
SHA1 8eee103d7f57667fcb71afc516d291cc6bca9661
SHA256 d93fb092d54627b08e5374c7215c392ab8cd5502c4f5e8666a5f63ecbf731292
SHA512 14c4aed7452ce89efe8063092f72d16355998bcdad4c09fcc69ebdc579688f88500b4c6d4f04c3f43be0a2972db1c02c8dbc70bf04f01b642f58102beeec6a7e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 7b2429e287d59d99587bd9aaba1920f0
SHA1 a6768beb834297fcde76368588d379dcc8031570
SHA256 3f94c7c467eea4be39422ca0f5d5438edc7c6d3ad42c7d2bd285d98fc55d802d
SHA512 73ab69d78e133e30b69bcc955b2e2b393144545f0bb087522883c6c36fe9033c563f405dc3bb0766b188bee0efe70bd6c7bbc9f04437ba06000c71bd911e9d1d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00018e

MD5 f85a52738e1eecbbd780234b719227d8
SHA1 fcf516cf198dabbe8297ff497a7c56cb436aa950
SHA256 fd104379d8348961292f3730ea6a8663f5aa69e40294f399613d5b6370a9bccf
SHA512 b5b80abe111c8326cc336bd08b3354f7616a9fd0416009da64e608c86e94a9c38ddd92ae94c7e2f00df5c6485a43a302daa51672f671504c792dc6ff0e9276af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001ac

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 498133e07f4b697711db92526dab3baa
SHA1 4fca627318d0581f5e466d69b47208b4ab6ae467
SHA256 a17bb31edbd691409858134279a8936a6797333c3b51403f2a8b385909e2dbc0
SHA512 8674b9a5be77f7fc03641e5c0fc4cd960b10d44196ffbc989aba296a6421c755499c3497df7e46cf8e3f1191b068425c1b77c2eb1334e82b94385fc50f2d3a80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001b1

MD5 1d4815175b5ae11e2f5ae08a59a25fa6
SHA1 6ba34a017d857a1f849915e25e0b4f7e0f895d3c
SHA256 a0629fdaea0f7bede6e84b281f7ea6dee84cdd2e1a5f4b1e30010b2e8a3da7fc
SHA512 a25874f7e66957888e5a2110a0ac4342f4bed2619792ec7f3e452bdf272f9fdfe5767e190c62fcc8e52f36106c8bbc851ae89ff3cfed8c0bd75ee0f313cb261c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001b5

MD5 89a574ff00e6b0ec61d995d059ce6e65
SHA1 aea09e96808ab77165ffa712eaa58b8f056d0bb6
SHA256 e5c29c139842fd487473d0824f2c01b374680fb35d22fa929686d17896602a44
SHA512 30d0d40bd680e61968273155b740901cdfa66670fc2af6f23e44c6b998b67cc1fcd0b51bd5f9470f209f188e75d071355e592b2a7c97f4bfd15d07d455e0909d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001b8

MD5 015c126a3520c9a8f6a27979d0266e96
SHA1 2acf956561d44434a6d84204670cf849d3215d5f
SHA256 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
SHA512 02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001b9

MD5 8b79fd04ba7702060a17622d22a8dce9
SHA1 d6dfb8ef9a4d7d6b6c3454d94405722be0619421
SHA256 0a7a02c929df2d7f23261c275677d9f744b55b505595d8bc4309e65d826f403b
SHA512 bb40155a691145076c84a5c5574556edf1efbed80db4535c179976665e04a8e7c83e8a6ed91f67591aab0682d88d2e602445518490e6343039395ae0f12979e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\dcef81c5629f763e_0

MD5 958adfd1df0bd29f84c01b2978bc4c72
SHA1 955946d8bff0b3e0ad60be2f8862544e61739139
SHA256 878b971f04db690dc1a929081ccb54b2f926d9269e35d2b5f981db7aec051ee2
SHA512 8d5af215d6ae75cb22db2660b035b2e3ca2a600fc69fa64d1b0cfe1de42cc75159c013bd3803df5426123763e9273d0ed77ac204d746bb1a39f24c29f1c9520c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1f553328f9bd61b5_0

MD5 157b24008914e401503b8d2794011814
SHA1 87e0ba1caa1ea7a6f91587ecd2745fa1f23766cd
SHA256 9f3f852f46a699e7ac1ecddfff81626569f5c5e029a53a6dab4d13b82d50f52e
SHA512 0c95bf67991f66271c00d88f9d67ad3e6cb35db128c017319cb13899f0f9afb95e0d1111122e83dcda2c917a7c7d4b4109f4521805e5212dce1bc8685f0ca519

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 48d551cd2536cac0b15d99069b2e8d96
SHA1 e827d65f9264f43ec66b0bce3e261d5ead5dcba7
SHA256 1f83b325bac6e2a4ad6b18856e835f47d646047e6cf48c93e89638b241ddb6ba
SHA512 a82332a099d0bae3db3064729c75409001e986c471c0428807bc93a7b2cca4d95c087b89c07d25f070cf88c47054ce45df11f03d98339d4110a05334b481260f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0001cd

MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 67025474f7352a3772db7825530c44a9
SHA1 25ce583e0e26e8ad8db6e74dea86ed9584c8e7d0
SHA256 28e47bd10f7495e8dacabc9b1eefd140e61bcfed65a912475fad17a899fcbd3e
SHA512 bc26b8aef370d8be550efc10f7ad1594a9da8767d53ec404a0b20329dce1f41cda85f3855c53658e369ddabb2dec9f63fe3d2ae6b807d1b59eecfe9dd913e795

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b90e4836b61eeeaac7c11ade468d413f
SHA1 e7340f2b8c1fce2c06a998e95fd101e5c36979ea
SHA256 3b10b38a6ac9e31291203ee3f393ebd0b725d74c9dedd1b215c2149b9fc42d6b
SHA512 60413755eae7f4236ff6496d11da9343d677f38fa12fee2d95c94a95d3ccf3a27245d38179bfcc50379cad369c522b8942c81be2ec1d1b6105295e91d2924e92

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000156

MD5 2766b860b167839e5722e40659620a47
SHA1 47766dc72bcace431ee8debed7efcf066dcd2b59
SHA256 725a5e52a501bcd107624aafa44a857c00d02286fde07be774afeac2efed68c3
SHA512 a97f77977518ca755e9460cac34e0b5358ba98b3624c53f0e1ef7b947e62a6f3f99caf2852fb3132c822525d88b67b9c1ed778b3e40083d9df36028c85f73ae8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000157

MD5 c67ee59476ed03e32d0aeb3abd3b1d95
SHA1 8b66a81cd4c7100c925e2b70d29b3fdbd50f8d9b
SHA256 2d35ec95c10e30f0bddbfb37173697d6f23cd343398c85a9442c8d946d0660e3
SHA512 421d50524bd743d746071aaad698616e727271fdf21ee28517763a429dcb6839a7ad77f7575b13c6294dc64d255df9b0a64eb09c9d3b2349fef49b883899d931

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00015d

MD5 cfff8fc00d16fc868cf319409948c243
SHA1 b7e2e2a6656c77a19d9819a7d782a981d9e16d44
SHA256 51266cbe2741a46507d1bb758669d6de3c2246f650829774f7433bc734688a5a
SHA512 9d127abfdf3850998fd0d2fb6bd106b5a40506398eb9c5474933ff5309cdc18c07052592281dbe1f15ea9d6cb245d08ff09873b374777d71bbbc6e0594bde39b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000163

MD5 2940076ef5b451648e126653123622ea
SHA1 46adb402ebad36dc277bc281d15b4b9643c4cb6e
SHA256 2766045315b53c22ce78b0c83624a7f52000765c55061a9deae19ca67897d664
SHA512 f695bdf186be90f1df6d303bf5beb5bec9c71a069978fb6adb23b68c893ef7ca0c5da2cdc32d39cdc9a8f0bbcf0050abeb3cc02c75a2861d9434591ac8680922

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000161

MD5 76d82c7d8c864c474936304e74ce3f4c
SHA1 8447bf273d15b973b48937326a90c60baa2903bf
SHA256 3329378951655530764aaa1f820b0db86aa0f00834fd7f51a48ad752610d60c8
SHA512 a0fc55af7f35ad5f8ac24cea6b9688698909a2e1345460d35e7133142a918d9925fc260e08d0015ec6fa7721fbeae90a4457caa97d6ce01b4ff46109f4cd5a46

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000158

MD5 c130e937317e64edd4335e53b17d55a2
SHA1 51bfff9dee11ab5a8c43198c0d6178799ed9433b
SHA256 46025a134ebdd6c6464ff422818e60938fc41af735f7951f4febe29f57612a49
SHA512 68e5fa69101a7347028ad30d7c004dafabcbd8f8009df90d0471b19a36741075d72da56a2b1693c2067902630584bda5536f0702302db5d69f407424d4a964de

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00015e

MD5 b376c55a7ba31e51dd8e8255789fe89a
SHA1 439c757d3520f276a8d313f8c337aa90ddbab16b
SHA256 97eab72e32402a938305438fa0682cbaf45b75af692793bd35bf9134782e3bef
SHA512 99b31f6378611df26a3dc827aa24709e0854f2a1595097482530087cc26761db5efd6be323005e49b89563de1169d44d86888c98eed8e9ffe880f516281a9c0b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e8665640689b5861efdeb65a46620f03
SHA1 b6d0c332d3f0bc5bbb94dca092ce2ebd615ecb5d
SHA256 2e6da377a114040f642dd15a3698357ec8cfa02c6c5995643044d2039f58de9a
SHA512 a80b4ca340b5a10b755143a92a008ee0ee3becd491fe3bef5b475a71d70c48f50dd7946ad9fa603e96d6850cc57f220f4e7b5ae2b583525b504bf50476593f8f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f55809e589caff49bcd81808405b61d3
SHA1 e9bcc9f5edf9e78057b38b2097ca121b87eafc64
SHA256 6ef04212e9f1e2678664f41553d70eea7bc54cb4d991f8b3ee19cb4039afb815
SHA512 4bd751f3006183283d418366be683df24da535eb83786400266ec444d5d2c395db35b574d6dee55aee444b52eee271dc2edc6e8eded79d30e782ab12bee681f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 82f9eb67a9724090d5640ee8b7e86e97
SHA1 3a24aa0520e007c4bd16427d9b75dadfed2e9e21
SHA256 5ce29107d1c9e3874b2e2b687f209f59dee319d6729e9dd9072fde55eb5b05da
SHA512 cb38a4cc77ddd887d18260330b8e82d10146bba54879bf43c70d83fceb5aed81f498078f5034f2f19a9c982dee502fda4ba3842ea475a4f19d729cb7d5e2eff9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000167

MD5 9f35ba270e9ea92ab439941460109ef9
SHA1 699dd11d06d2d5925cc91c2df7e4fca4acab56b2
SHA256 344f84869c6a5fea3a0ba409a9716b2d5e83b27bd295603d72bdfd6f8af98f24
SHA512 8660fcca9cf7ca63ccedd93e9606b5362babb0d2b7525248d2530a1656043aaddfbd71d4e21cefbc1669f97efc2e54f6f5e60a2da51084997dcc56f02ef4e750

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 03187d0517f1dbbb2e38417111502cd2
SHA1 8ba5ad39b385dbcd4529fadcd3ac0a3d31cd1bee
SHA256 434c99e8b01aa930d0b05c5e6a4449f43d1c82981722d355040c4aabac133957
SHA512 eb29b7e79493c2e0b523b850da119efe2644e18cc4b26f372d709188c95bedf8776435fd02a3a6c958bc534f46a7f8ae00d9a5bcad36ddb46c144d392f6a1b65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f0c5185b5aa96e033781af8ba87acd90
SHA1 9cb00bb25280235990cec32f54f232815a04daf0
SHA256 2763b602b097c1dfd58450f81e23385c22ae9c0d2891cca71f2560dea9046e9f
SHA512 f18ea339f8a2461bdd6f9f4cf48b26fc73db3439660c17d7702a33415560dbc490372e5562eea69d578c41f4e2954796a157e82bf0345a3a62f3ef333cf5f3ab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 83d65f7934cca170178884eecf8227e9
SHA1 217722b542cc9c8bad96975d4449eb29ac9a9c27
SHA256 d289ea4eb466ad360d99fe161b77c8f5ec8a05de6a9a80152f4fb6a8f4270f3b
SHA512 cbbb63d37ddbfc6e441aad939d8474bb92e0bdbcf85fc3c51217acf0f9b3d689596f338b7bebd0ef6eff0021535b3afe8bc39d3085966fe378e25cc5c5ca4628

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 53ecec18719e54bdf6744f50f47822a7
SHA1 ccd444d7f3205bbbc7ead5e76bd90b3b42a50344
SHA256 b8a62d8a41f6ebc7362a91580ab166a1bc192e231fffc39b931a448bde481097
SHA512 33211a9c108412724e6382ca1231051e885d1bd889d47858fa490f56afdc9953de3813a285240be1671194f5a60cb40a55175c05dcd55ff2df7a6ca95b6ac0fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0705cdca8254d927ed0a19915f7e39fa
SHA1 955e092a2308750d3e4c989fbfe57763204b3b9f
SHA256 a6514d7c201b624bd3799ee4ab29c728770b5ce141e4861a7e8c9a1f4cbc20e4
SHA512 c341582389af5abd5b37ccaa691d409315f2eb43e7a6b8507c49af444b8a016d80ddcd5f325594f68ff8132bede6a48fc8f23cbd5885e1084941bb317d96eb44

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 eb7170d8ba9139787e8109df74e77ca7
SHA1 633711bfec0957b99023fb3832dfa90d4faf8288
SHA256 9f8559196a2f483e9bbe315592a490a45c4cc7ed46dca1bcee1a5b4735e574d8
SHA512 dcc1ae2aa4e05dadbea3a4130ee40f2ac00401a3a042b58fbddd552a134e735ff0b0ad736de92a4925c5e06de3cfa00b4b4a6609567e5f23f0aa3c024c5a7386

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f2b6ca7e3ced5ec0d65ee229fce8ffbb
SHA1 a76779040b604230c1e4b96883cbb16952796daa
SHA256 9bbbc253074e1eb400eed775191bef7214d3a6ddb640f50a5097db15f83d4ec0
SHA512 18046f2383b87a50240812529f3c17e88bfab1898eef4e4fd03bcaafdfabdf423adc5b30917cc9b210e3f63ed2ec1fbd88e4cdd35d481768be59b53563acfd4e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d5667bf87cc6b1b8_0

MD5 ac3c78eae47cea6388e680981466c70e
SHA1 34b7351df14faa5780ea6a6c0ff4363e35550a0e
SHA256 63094881c8468b39ff51daa706b5c439a5c60440b83521b40edfc2639edca21a
SHA512 e4b9f4f5d60cdb81fa74d471fd5825cce611716babf73c18fd0e23d8385be03050dc68179b0deab86764bec779ab5ea2c9edfe7134dab8f004a1abf91dbf8f95

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fb77cdbeca77f865_0

MD5 528f3dfdd9bd182dd41a1b889bda2a27
SHA1 cf635b9cd001488a17fbf04e18bdaf8bd9ede5f5
SHA256 310d53ca1f91cb13b5aae086ea9cf0038dcd9bccf20ff68d3b2cbbe8803e4716
SHA512 1fd6dc4c7aba0a195c3789700ed9f56474661f459c57709f353b7a8b1b85335a0c67cb2d8c4e9966ce3b184c050d930adeeef9fa9159f0da42faabd57794cc2f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\aa22ed8fc94af805_0

MD5 cf0959713c696573be0ba2e6fdedad74
SHA1 9c501d378fca903b1c21fd9f9e27e8c6e0e29472
SHA256 7ffd366c7a66a54700487af23d07c382689756f0b0e30b3eddd9d02be36eee8c
SHA512 d2eea4c1204dfb5ae9ec407d57df384e89f6a603986eb89f3bf58c46a9d697ec1987f500a6b78dfea3a14f4e259263bf86ba0f9715900744d42addb02619d977

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d6ee81079c1cbac4_0

MD5 790e935a54ae5694d8b985b1dd26378e
SHA1 b4db1918350f3c591919701470d715368214dbb0
SHA256 be7ccbb3cf60c938e9e575b341cc86bfa1082b2f9021259a94972fa8b92b1c27
SHA512 868da41d62b0d7ec146e020dabe3fdfaac5745ddf3e981c1cef11f75fc076c07bdbeba1bc321470ba17c77374421c2c17910e11e78bf66582070d362937d5e10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4bc6bf5847160a1a_0

MD5 2c41835f35ff82b8e91135408b4a9b32
SHA1 251362772445dceb99ea32e3f43a1fb71801c50d
SHA256 0ea847112d279d7f77c81e0375a4ae8c95ad2eaea5ff782a6f453177ac09c339
SHA512 6030dc5b90e7dad9610f823c49f3fbcc47aa8b7ab550d9a4c03d005e87c82e108cc3dde58ab50257de44fc91fe948860dac01c18f8f4f8e832da725379a1282f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c269c15b67e9cb28_0

MD5 03525064e4774d08026c21a1bde9a0c0
SHA1 84bea5631adc82501effac38ef3663e7aab405f4
SHA256 7163d1ea6266ac88ee52c14bf82483c96d30c042127db37e4eead01ccce5d562
SHA512 74ec4944c2038d7f9e1585563a1f075be4fe0afb07dc4caaa82e8f56f108ead75b52ce64f4ab77f1a8f5421a13d36f0ebcd0adc62517f5162aa76782b5371c0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c4f2da4e4b4dba36_0

MD5 bd0aead1c602db9af129f72bb1c7c021
SHA1 0aa66c696d9f542831436740b3f88a318e7e3583
SHA256 482d05b881bebaae43277bebed6140323de609027af2dc2f65bf30acbc13d596
SHA512 c301c81f6aa8a8068df85d1b62a72538c6e667c5ba13cdca07127341cb4715c192c571d004589a5ae7f9b02257b50d172ab664332e38499ff013842029dee16c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0fb117f87b64c673667be057f0d7ff4f
SHA1 8ca23b62db6cdfc663a22e947fec1de853ca499b
SHA256 7e322a1acc68ddb08178344f577583a00a8c9989f4ccd94dacbdcb9944eb89e3
SHA512 159b69fa814fb60c327b13d6d8407f5b25aa6cd2d6e9057954669c695fbffbb46d51fccdfaadcdf1a81ceb8d36c018183db7f6f7e1c1459c6fe20f506d7090ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 221a3ad1073db250d2e46caf353be205
SHA1 3af5363964bbcf7318a675bd24f0447489ce40e7
SHA256 f3b5b40ee68ac6f825521bc7ff46f3aa2968bd09c9169db9a0a7d87ebf314210
SHA512 569c3ae444b714ad98aafa9977acb38c97d5002db62c123ca0ef31417f8ef3afae6d0019b8c79c56167ec0e74a26b2fe196a5859f5271209339eca7848824f86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 49199a8245cc3a491e0c09f919178fcc
SHA1 9304b5ed70842cc55bd31f56da4d695880dcf9e7
SHA256 fd50937526046a6ce7ba99390f50b1fbf96b9147855ba2c254903628c68012bf
SHA512 511cc6f20dd8f37bd7a00b031323a7632c299af1c9115764b4c532618744867435e00af0ba9374c179ecaf9d79ccdf8cd78b9de666c6c28ef559363dcfb542c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d19bab25eac51db48730f45094b07031
SHA1 081ddc18fc939afcc26e00eb65ea7999e773a89c
SHA256 c58d847b6b028e44eb4114a0f99b9113ef1c51bedea8de50947e37dd2f385157
SHA512 51c8e12c358036a2fcaa6ad39e593673f628832ee3b8fada7ebc663dce6fd4d7eb661dc97bb195e16b21ccf710efc5b8ee318cd14a5c952107c3ebfb7fc33275

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4e442c8190d2e06cb35c356f4cb4750f
SHA1 64570c9d24e69e505972d7b56a77d0ca79e196f0
SHA256 0e62e93d265cb6688157bd0c2bff8a007da53d696e2778c1c4426c8be2e482ef
SHA512 3a26c3fda6d6c0dad4f4fd9ffb961be503c160c18fb3d6e02c6057dc3dda7b620a1e0f179b734144cb8a1f2cb8402a76f6de4499d339cad287fb8bb54a7eb590

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 101d2535c3f54dbc0cbd8b40a134518e
SHA1 7486f9f6c9860f55a51c21c3e941eaa6e3df5db8
SHA256 b6bea0fecefcf27378256ed70d9c56503315669cbacb41dceac2b77de1f4edd8
SHA512 9907342c456f00ed35902eccaecaa938749c7bd5cbce7507f47e791346818cc9fe09f07bbab3e5ca715378cc37d8dc68832b5008dac2e10c92dd948da9f18d13

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9990ca3fd0daed722064eaf155e89383
SHA1 9ad6c1f940c65377b0e2730d6bb82540db6cb7bb
SHA256 0edbe2c406417d10071724160bdc76fd0e35aaf1673008a71e5a78c672146472
SHA512 f242daa23ec473851f7f8015576d2b493ec2041ee04324ff520edb3927254d5bed04b9c401ab6fd670b8a7779f1c06c8c21bcdd21b8a2b2a7440441275efafdb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9a50254c4a5e6af93b493943008d6f3f
SHA1 01824ff1e5ac7710f891543ade19e1ec7e5af1ab
SHA256 3996f49ad33fecbe7ec9adad8ef8985c4ea6bb81e21149a80eec3dc83b12da12
SHA512 e6856e97e9c7a324b71fe81eaafba85283317c535e37b1ddfb0b5c53c51271ebf84281c665f4751d94ab33394a9e3947a972a23700b018dad1c34570aee954f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 0d88c46bf3ac226a2dcae2f27412d86d
SHA1 da3b7ac0fbcb5f572cda4dffc706dc11c9d0ba72
SHA256 c326b27d58b220dff23eb2d39d41d3ce86fb56b73c709ca06b275fdaa52c80ef
SHA512 d7814c83d633b0e36a805e69773f911166dd7f20bb4beb48ca528b793016f13f79bf85e05bd9da65b87eb8c44934639cc334e6ea268885edb7a084c407f37212

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5e6fc857dba7cb6a9214284d706ac30c
SHA1 d6e4d25f8460683d6bb93edf3b74759dc4191e6d
SHA256 b0744fa23978b894d075eb345729d26a5f88d852bf2af03ad634e8676f3dafb2
SHA512 9fd9d3085f996984b3977d8cbcc75cee28d22d1c641b81587fea6a2f7af26203a70dd376380172b8d7dab297dfe99f2840bc022597c7dc9fc3d6c1e405361571

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9110d3679bcb172a10b3333396decbea
SHA1 be3527326f5a8a3553eeb9fc6c838a4a51b08824
SHA256 16a10837851dc0e7a5f23fb8b592cbab885472610fd4d84aef40b38983d1ac0c
SHA512 3e94f81380ff2bf0f370d8a5c9f7aa1fc6abc70f68677200a97c081e6f9ceeebcdf5eb62c806145cdea83001c999405a277a9bcca14c67c9c341531bd2dbdb5d

C:\Program Files (x86)\Microsoft\EdgeCore\130.0.2849.56\Installer\setup.exe

MD5 9a98f71bb7812ab88c517ba0d278d4c9
SHA1 459b635444042ad0eeb453cdba5078c52ddba161
SHA256 273f8406a9622ddd0e92762837af4598770b5efe6aa8a999da809e77b7b7882f
SHA512 5685717b2192b477b5c5708687462aa2d23999f565a43b7d67388f48eb9a3d33d9a3da54474ce632a0aee1bc4de8a6172a818239033d4a035f045e15947868f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 23f93401ad4d0d6876d2d4ddee33ff27
SHA1 453e061b018c155935614a4c5b4e5ab0ba4b2756
SHA256 59f0cb0f45e8751c1394916d1af3bd68172f3e05ecb744d05554a8e776bc2db1
SHA512 22e85a0af3cca5ddee00ae08a42f75b747e4129ecbde7cc4d02a5642f4457850369e774856fa7ab9789e6d3a864b1f99c74d35523c02eeb92ea9343ea9aa2920

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c10cb512921a184ebd4786cbc118f084
SHA1 8364d856abb6f84d22396bd50d84c54b2e55e350
SHA256 88e60c9a3de3195a3c1d59aa9149fd80756ac5e59c223af01f0436b80aa9cfae
SHA512 70428955679354bf9e15892f0bc50eee1dab9e5027883783a1ea1366649a84a7e7cb4ce6c3a4263cc303e8d9e90f008c6bdfd7ea473e555369782949cc0e72fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035

MD5 c2aff226dc0e429be7c1ea0f1747f05d
SHA1 6fc3b888a8974e9b9e948cad2be5eb2327a17f80
SHA256 c5afcd065785a602eafed3149f17ec551800e76c6aa29695f17b250834f76229
SHA512 b79086d14fc2efef42c932ffd54bc05bc071945c2f172152bbef0ba1264763d19547ad7d88e767ceffc133037a0c27c402a8bbeb089f899e61e10c40e694ecb7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036

MD5 171859f5fd617ad6abab3609c06ece93
SHA1 0dcf587f9696a6d9b10a7c46a4b091b8b5d8df45
SHA256 46cc81c6ca0cdd4097aaca43d0bff433b1df515328e25f79e4fbe69cee8f91a7
SHA512 47cdf474e5400644dcabf3495fb1c91154c40a49a692103514f22f8a1bbb190136a61db64d3c15233f854c12dfd289c880e0aa1d7ed7c48fc9c128a705c1e491

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000129

MD5 8be019693b8657fc17f2f01322bc1531
SHA1 e5781d30a284640fd4aef3ccdbc8d9be3cb451c3
SHA256 d3ade28bdb1c64522475ffa2ca99daf353e4b4068cc6f9e21b53ea93c131fc29
SHA512 7e929bfef99a21608f0e6b30a1e33c76c631d612a3d6ed21952c3ce2c0ce730296e77aac583190aada835206fcb64486553c7c05f09834154f8283437a73257d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00012b

MD5 72f917e0080ad7aac8ec5554123710b6
SHA1 df7c1358b9b200b95e438bf3a33cffbbf5fed34b
SHA256 823dff989f439b61cd2a2d9440b620987a844621bf725e65f24321386ce32f4a
SHA512 a2bf24a5070b4836facfe38fa7ac01791e6ba9767b6a8dd26f4bd09d210f67c8ef41a5ad612963e3d6d2c7f478be63b5b5b54ccc3fc184d2726b886a28f6656f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00012a

MD5 bc2ae26fad1e628d27e06461fa6d33bc
SHA1 8e0a7a19a884ac94a441caa37bfb2ce7244978c4
SHA256 74ec376187f07a60503495a779a67c682dfbe183bf62835896404cfd57bf176d
SHA512 e8c69b29d3e9f14528ccaa24a0f6e1f749a9d562790ceab2b67d6e3bfbdf68e42f278a7a5e9ca0c5f169df605ad49d30e4f3a1405060767b2ed9931a26e2df56

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00012d

MD5 f2ad3626dc3266239a6dc6dc577adc3d
SHA1 51f048e1e76bae1ee0ceec0ec51dd2accf7e6adc
SHA256 579d47e85073862ca7ca94a72e9b66f1b1c316ca1a2b3584059024719d7bc285
SHA512 591a90bf39df41b6f3ab5cc2713f23ec44d0e0a661fb3512080416042444cf8df98b34a9388b90d81619c516e1014ceb441fbbc1e2f4222f9499c2f3a00ae235

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000212

MD5 33fff7fb6a016023c955ee8b15e6555b
SHA1 cc9bb7c769f9a4bc6153e49e71ce6992cd053401
SHA256 63bbca6e2eff30a0dd9170127b02028449a9156c53787478bf96b907bab1875b
SHA512 590a5900b0e8729c09137aeae9a15e92058efaf23028ff46a8354edeacba748ad95037d84ff27dc3f035c23d219a1f91034efcffc7aaa6278b280a18198ae40d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt

MD5 045f4b9f05286e858b91597a00ce5115
SHA1 c1b4b36fabcd626fa081979a8a1f19b9e4ced0d2
SHA256 33b09500cd590f25006943acaff157242b7b09a8aefb7e74cda1b567bfa0554e
SHA512 8d007219565d12162cfccceaebe93e406365b8d209f1f560ce4c880cae1b3902e3b9d51bd68ae5c953462b26f02254530ce1af41e87c9d4379fc38e0e4a56907

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe7fda8e.TMP

MD5 bc370a09f3f7e59b330cd75c7ae07856
SHA1 adb1d3d9552dbf936abeeec0758e0025968ba749
SHA256 daa55ef769f33bc8ad0e069ea4d89f206ea727a89a32095eba8aa8ffc7880dbe
SHA512 48bb2f9699496767bb3e5bc426dcd5d76d4af45d84705319d5fac9b60842a24a6fbad773eeb36612bf058ecc507d394a09ffb3981ae6b28b02f6c7cbdeaaaac3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6bd38c1f767d21a53bd1dbfaba149438
SHA1 2eecababc0eb0225ca8fbe3cc75975afbda38e16
SHA256 bc00cdcf8756bd929b15446c5f59fc9125ceac6179fd21c6ea971c6cdfa85c5d
SHA512 58fca4b49c1fe4a3934b2c64bc4f56e8cb5cfde15ca51532c2c09820900bb235833fe381b75ed81767404ced5cfcf47929df90718bfc8faf45b0175de4e15c65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 91da8249f2fdc3f62f4055afcfef51cc
SHA1 59178dfd9d27e9fa2ae31f26156456b9c7fc37e3
SHA256 130ea563bfdf17c6526a0ac58b7a122cf0c9d75983ef3de9a94c1c733736e1fe
SHA512 ef20ec17b411aa4396ec6b721f16cc2e7b997ee2f73a6d75b58ef393270f9800c480d160044679ddd796be62c763be7b179bf7ff7ace9d8e999617fbc19e5c10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3ae247aaeb59e33ef5485876cb362210
SHA1 e4261f14c537e2f40ff204e2775dcfb08d6d0f69
SHA256 51386d2224762f9fde1db4d0face77f2d01c7d8689d4737be3474542b90460a6
SHA512 e686916bf4a718cde8c238995011f014cf85c48d4a4112a3d040df07d92965f0035c3b1407f4ec50e41c6c64706acec4221262686cbdaa26d88eeb82e04a43a1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b052fbebeb1318a0841fff65105d2e0a
SHA1 b17b46548fcbdaa4e57cd3caf96d47ed626e66bf
SHA256 b14df33d0bf58abc1e5b74360e93e7a0d845b14196e7478ceb78af9cd60f130c
SHA512 5f7cf69dfaa6ec3b3b648b8b23431b25514e9fc1bf69af7916c8af0524a848a582bfba6b1d257cc9da0db14335efbc1ce2a1a2862d5341c47b0283241815cdf6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 80b061c97c93937b31b723d3c6dac2f4
SHA1 f803b132b91f6fd10a8a4662fc27251a1153ca1f
SHA256 77e0269291a39a6abad67f844c2dc0b4d6957cdc91840bbff021abdb71a8c9a3
SHA512 cf4e1b9d5124b96ee20899f039fb4feca9ac9abb7d29ea817a9cdfb3679ac7505be0730710e16c2e9909be45a1f9290cf90aee8e3dac590436b6666d9b328f84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 14e92f80e3151880e56e21665a5b2125
SHA1 c0e8d651a2b55fdb5156a3cfe0e9b0d075d8c7a9
SHA256 dc7019c094f8c0ced802d359f1ab6f1619ae8182eaf87660efb3c71f2bf957b6
SHA512 744400c01fe6ef0459d10ccde7c0314c8ff30530c1c9ffb5f171b8148b137e52e1d8cb6e14c9792ff67b89ada81904b342648ba4b6049ddfdf338db684481935

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 31900b3adf47aafffa29d113f8c86707
SHA1 26dd829d8f2f78424a21bbecb14df82740a6e351
SHA256 44c21c25eaa17c34864245e51ed76353d83ab94359fabfcb12d6da091b5e4919
SHA512 e32f109c94902f34709d3112f313d276c1e06c1d7988a78ac54ac5deaeb03da1d53c9482bda1254f7f3971e3403f78592205a28c0e70605e7f8d04d64be925bf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 69a71519c9902aceae72b164dc6cd755
SHA1 6038b2682606a22774edd162f2111c23954fd346
SHA256 c7ab28f9b42dff403f8a37cab298b5370232f392c3fd73eb66726730cbaf6ed8
SHA512 944455475735e296b2495d715b0655016489a2755b6867b73b996d6b82b3d4c3cca331b60c216f4daca2cf2f27188c5c0abd9bd5d206397dcca80a5ebfb8c1d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\860250ef-7936-49dc-8327-38269facdee3.tmp

MD5 92aa4850a88cf148eef78f28757d472a
SHA1 011034e342cbf5dfd4e8ce4cb84d06dffe2bf1ba
SHA256 8401d2ca0110eddef35e032ae815b0756a3637dae3120789bf8ec2c4b8ef5cfe
SHA512 d91378c0d27333cb9fc8aafa87ed3cda939fe2db88ebdf5fe110c0f9dc13ec5d716b667468851161527a13e8ac2bd38c9a8a1d72f847534f74aec476e7da5d17

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fce94fb0334630cc5979a387be548f21
SHA1 5960060586045f9bd89c0064bebd15989f10c636
SHA256 c02f59896154214b220d939c0ba708e5d0a7f00224a23d8844688c4e3d60f0c7
SHA512 e073672852a639987099c4394f7ab7bedc2b8442acd21d5cb5ef04da0edf5f225272ba4758388f604b4bc83eae997ed60bc20d24a0d12cf125e2dda0f2c46551

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a914edbdec258cfa38d32e112512ebcc
SHA1 84784745af761f56e409ce15be514a200125a084
SHA256 ebd9bc4c0050ac7a159a909ffd638c1bc2324efa6ec94fba85bcbd5f208231ea
SHA512 c089fbc1e65a7ebd187b577eef76c17a27f9b442f23f653bc6a1658172e0f5264d0b49261568bf05ff83ad5a3fd877916e2b91f174c05fcd54eda52060066284