Malware Analysis Report

2025-08-10 23:21

Sample ID 241117-klnbdsvpcw
Target RobloxPlayerInstaller (1) (1).exe
SHA256 d0af716bd0939e74b9d64872e76da049ff30f1a199c64c3e9c5a5c99b587f015
Tags
discovery evasion persistence phishing privilege_escalation trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

d0af716bd0939e74b9d64872e76da049ff30f1a199c64c3e9c5a5c99b587f015

Threat Level: Likely malicious

The file RobloxPlayerInstaller (1) (1).exe was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion persistence phishing privilege_escalation trojan

Event Triggered Execution: Image File Execution Options Injection

Downloads MZ/PE file

A potential corporate email address has been identified in the URL: Montserratwght@600

Executes dropped EXE

Loads dropped DLL

Event Triggered Execution: Component Object Model Hijacking

Checks whether UAC is enabled

Checks installed software on the system

Checks system information in the registry

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtCreateThreadExHideFromDebugger

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

System Network Configuration Discovery: Internet Connection Discovery

Browser Information Discovery

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Enumerates system info in registry

Suspicious use of UnmapMainImage

Suspicious use of FindShellTrayWindow

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SendNotifyMessage

Suspicious use of AdjustPrivilegeToken

Modifies registry class

Modifies Internet Explorer settings

Modifies data under HKEY_USERS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-17 08:41

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-17 08:41

Reported

2024-11-17 08:49

Platform

win11-20241007-en

Max time kernel

466s

Max time network

468s

Command Line

"C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe"

Signatures

Downloads MZ/PE file

Event Triggered Execution: Image File Execution Options Injection

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A

A potential corporate email address has been identified in the URL: Montserratwght@600

phishing

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\MicrosoftEdge_X64_131.0.2903.51.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BCB9DE3E-D8CF-4BEF-B1F1-58E4E44B5E81}\MicrosoftEdgeUpdateSetup_X86_1.3.195.35.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Suspicious use of NtCreateThreadExHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\AnimationEditor\image_keyframe_bounce_unselected.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ViewSelector\top_zh_cn.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\StudioToolbox\SearchOptions.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\TerrainTools\mt_replace.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Chat\VRChatBackground.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\DesignSystem\ButtonR1.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\fonts\Arimo-Bold.ttf C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\fonts\zekton_rg.ttf C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\DefaultController\ButtonX.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\fonts\GrenzeGotisch-Regular.ttf C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\AvatarEditorImages\Stretch\bar-empty-mid.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\TextureViewer\refresh_dark_theme.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Chat\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\PlayStationController\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\PlayStationController\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Lobby\Buttons\glow_nine_slice.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\VoiceChat\SpeakerDark\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ViewSelector\left_hover_zh_cn.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\ErrorIconSmall.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\VRStatus\warning.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\period.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\PurchasePrompt\LeftButton.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Settings\Radial\TopLeft.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\ExtraContent\textures\ui\LuaApp\category\ic-top [email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.51\Locales\af.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\grid16.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\MaterialManager\Gradient_Hover_DT.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\MenuBar\icon_maximize.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\R15Migrator\ic-blue-arrow.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\ExtraContent\textures\ui\Gamepad\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\ExtraContent\textures\ui\LuaChat\icons\ic-game-pressed-24x24.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\fonts\families\RobotoMono.json C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\Debugger\Pause.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\VoiceChat\MicLight\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\msedgeupdateres_lo.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BCB9DE3E-D8CF-4BEF-B1F1-58E4E44B5E81}\MicrosoftEdgeUpdateSetup_X86_1.3.195.35.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.51\edge_game_assist\EdgeGameAssist.msix C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\AvatarImporter\img_dark_custom.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\DeveloperFramework\AssetRender\hierarchy.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\particles\forcefield_vortex_main.dds C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\common\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\MenuBar\icon__backpack.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\VoiceChat\RedSpeakerLight\Unmuted100.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\ExtraContent\textures\ui\LuaApp\ExternalSite\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\AnimationEditor\icon_warning.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\AvatarToolsShared\RoundedBackgroundLeft.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Emotes\Editor\TenFoot\OrangeHighlight.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.51\Locales\th.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\9SliceEditor\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\ExtraContent\textures\ui\LuaApp\icons\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\9SliceEditor\HorizontalDragger.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\msedgeupdateres_bg.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BCB9DE3E-D8CF-4BEF-B1F1-58E4E44B5E81}\MicrosoftEdgeUpdateSetup_X86_1.3.195.35.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\avatar\unification\AdapterReference.rbxm C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\XboxController\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\Controls\XboxController\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\ExtraContent\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.51\Locales\et.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\fonts\families\Merriweather.json C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\MenuBar\icon_leave.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ui\VoiceChat\New\Unmuted0.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\content\textures\ViewSelector\front.png C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\Crashpad\settings.dat C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\832d9d26-537f-49c3-b157-e0e4cc7b3a61.tmp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\msedge_installer.log C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\Crashpad\metadata C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BCB9DE3E-D8CF-4BEF-B1F1-58E4E44B5E81}\MicrosoftEdgeUpdateSetup_X86_1.3.195.35.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\ = "IProcessLauncher2" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ = "IBrowserHttpRequest2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1AFD8852-E87E-49F5-89B4-4214D0854576} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ = "IGoogleUpdateCore" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ = "IPolicyStatus4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\Elevation C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ = "IPolicyStatus4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{3316A154-AC5C-4126-9021-B201E9C33D7B}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassSvc\ = "Microsoft Edge Update Legacy On Demand" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.PolicyStatusMachine" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command\version = "version-32f36ac944b34913" C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService.1.0\CLSID\ = "{CECDDD22-2E72-4832-9606-A9B0E5E344B2}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods\ = "5" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ProxyStubClsid32\ = "{3316A154-AC5C-4126-9021-B201E9C33D7B}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ = "IGoogleUpdate" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\Elevation C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ = "IAppCommandWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8F09CD6C-5964-4573-82E3-EBFF7702865B}\VERSIONINDEPENDENTPROGID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\ = "IAppCommand2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\VersionIndependentProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods\ = "9" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ProxyStubClsid32\ = "{3316A154-AC5C-4126-9021-B201E9C33D7B}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\ProxyStubClsid32\ = "{3316A154-AC5C-4126-9021-B201E9C33D7B}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ = "IJobObserver2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\NumMethods\ = "6" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\ = "Microsoft Edge Update Process Launcher Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ = "ICurrentState" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{EA92A799-267E-4DF5-A6ED-6A7E0684BB8A}\ = "Microsoft Edge Update Update3Web" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 444 wrote to memory of 4772 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 4772 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 776 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 3956 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 3956 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 444 wrote to memory of 1928 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe

"C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (1) (1).exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff963fecc40,0x7ff963fecc4c,0x7ff963fecc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1800,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1796 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2076,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2120 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2164,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2388 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3016,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3096 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3024,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3120 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4116,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3508 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4820,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4832 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4864,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4132 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4856,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4956 /prefetch:8

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff66e8a4698,0x7ff66e8a46a4,0x7ff66e8a46b0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4952,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4944 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4860,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4916 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4996,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4280 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4916,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4828 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4576,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4300 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RThBNDAzNjMtMERGQS00Qzc4LTkyREUtOTU1NjYyRDdFOEQ1fSIgdXNlcmlkPSJ7NjE5QzhENzctNkYxNC00OEExLTg1RDgtNDk2MUNFMjkzNzNBfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntDQzg0RDkwRi0wMzdGLTRCRDItQTVDQS1DQUQ4NUY2N0FCQ0V9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjQ4ODQ3MTkyMjMiIGluc3RhbGxfdGltZV9tcz0iNjAxIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{E8A40363-0DFA-4C78-92DE-955662D7E8D5}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RThBNDAzNjMtMERGQS00Qzc4LTkyREUtOTU1NjYyRDdFOEQ1fSIgdXNlcmlkPSJ7NjE5QzhENzctNkYxNC00OEExLTg1RDgtNDk2MUNFMjkzNzNBfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1NUIzOEFGMy03NjlELTRDQzQtQkU3RC1EMzA4RjY2MEJGREV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMjMuMC42MzEyLjEyMyIgbmV4dHZlcnNpb249IjEyMy4wLjYzMTIuMTIzIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iNSIgc3lzdGVtX3VwdGltZV90aWNrcz0iNDg5MDIzOTM1MCIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\MicrosoftEdge_X64_131.0.2903.51.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\MicrosoftEdge_X64_131.0.2903.51.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\MicrosoftEdge_X64_131.0.2903.51.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=131.0.6778.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{189AE7BA-368A-433A-BD50-D099D6E64A3F}\EDGEMITMP_2BD25.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=131.0.2903.51 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x7ff735052918,0x7ff735052924,0x7ff735052930

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RThBNDAzNjMtMERGQS00Qzc4LTkyREUtOTU1NjYyRDdFOEQ1fSIgdXNlcmlkPSJ7NjE5QzhENzctNkYxNC00OEExLTg1RDgtNDk2MUNFMjkzNzNBfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InswMEU0MTQwMS1GODJELTRFRkUtOEM0RC04REJCNDlBQzQ5NTN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMzEuMC4yOTAzLjUxIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI0OTAxMTc5MDU2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\RobloxPlayerBeta.exe" -app -clientLaunchTimeEpochMs 0 -isInstallerLaunch 3644

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4848,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5168 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=2108,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3240 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3324,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3284 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=3028,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5616 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=3232,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5612 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=3284,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5436 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5752,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3196 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5424,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5476 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=5420,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4268 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=5624,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3148 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=5916,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4888 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=3256,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4536 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=5612,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4868 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6012,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6028 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=3688,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6108 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3684,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6008 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004E8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=6528,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6412 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=5660,i,5995362691186384238,8650905570472377931,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5952 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff963fecc40,0x7ff963fecc4c,0x7ff963fecc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1976,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=1972 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1804,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=2072 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2220,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=2236 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3104,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3232,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=3288 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3108,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=4452 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4728,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=4740 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4936,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=4924 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5052,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=5076 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3220,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=4864 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5016,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=3416 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BCB9DE3E-D8CF-4BEF-B1F1-58E4E44B5E81}\MicrosoftEdgeUpdateSetup_X86_1.3.195.35.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{BCB9DE3E-D8CF-4BEF-B1F1-58E4E44B5E81}\MicrosoftEdgeUpdateSetup_X86_1.3.195.35.exe" /update /sessionid "{A6B1E112-2A4D-410E-BDED-764A7B9A778D}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QTZCMUUxMTItMkE0RC00MTBFLUJERUQtNzY0QTdCOUE3NzhEfSIgdXNlcmlkPSJ7NjE5QzhENzctNkYxNC00OEExLTg1RDgtNDk2MUNFMjkzNzNBfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntCMEZDQzRFNy0yNURFLTQzNjUtOTk0Mi1FNjQxMkU3RTJCNDZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE5NS4zNSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-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-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-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9Ijg2OTc0OTc3NDYiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48cGluZyByPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0iezU2RUIxOEY4LUIwMDgtNENCRC1CNkQyLThDOTdGRTdFOTA2Mn0iIHZlcnNpb249IjkwLjAuODE4LjY2IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzcyNzc3NTkwMjcxMDA0MCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjEiIGE9Ii0xIiByPSItMSIgYWQ9Ii0xIiByZD0iLTEiLz48L2FwcD48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iMTMxLjAuMjkwMy41MSIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIHVwZGF0ZV9jb3VudD0iMSI-PHVwZGF0ZWNoZWNrLz48cGluZyByPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0iezQ1MjcwQjEyLTMwM0EtNDdBQy1BOEEzLTRENjk3MDA5MEM1QX0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EUB43F.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{A6B1E112-2A4D-410E-BDED-764A7B9A778D}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.195.35\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4312,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=5164 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3464,i,3432726945960867077,16806502001660907877,262144 --variations-seed-version=20241115-130113.202000 --mojo-platform-channel-handle=4036 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 ecsv2.roblox.com udp
GB 128.116.119.4:443 client-telemetry.roblox.com tcp
GB 128.116.119.4:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 4.119.116.128.in-addr.arpa udp
FR 13.249.9.54:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:49733 tcp
N/A 127.0.0.1:49737 tcp
N/A 127.0.0.1:49740 tcp
N/A 127.0.0.1:49755 tcp
FR 3.162.38.113:443 setup.rbxcdn.com tcp
FR 3.162.38.113:443 setup.rbxcdn.com tcp
FR 3.162.38.113:443 setup.rbxcdn.com tcp
GB 172.217.16.228:443 www.google.com tcp
US 8.8.8.8:53 228.16.217.172.in-addr.arpa udp
GB 172.217.16.228:443 www.google.com udp
GB 142.250.178.14:443 clients2.google.com tcp
N/A 224.0.0.251:5353 udp
GB 216.58.201.97:443 clients2.googleusercontent.com tcp
GB 172.217.16.234:443 firebaselogging-pa.googleapis.com tcp
IE 4.245.161.190:443 msedge.api.cdp.microsoft.com tcp
GB 104.91.71.140:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
GB 172.217.16.228:443 www.google.com udp
DE 142.250.185.163:443 beacons.gcp.gvt2.com tcp
GB 128.116.119.4:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:50755 tcp
N/A 127.0.0.1:50758 tcp
GB 128.116.119.4:443 client-telemetry.roblox.com tcp
DE 142.250.185.163:443 beacons.gcp.gvt2.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.234:443 firebaselogging-pa.googleapis.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.180.14:443 consent.google.com tcp
US 35.190.18.41:443 linkr.bio tcp
US 35.190.18.41:80 linkr.bio tcp
US 35.190.18.41:80 linkr.bio tcp
US 35.190.18.41:443 linkr.bio udp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
FR 13.249.9.107:443 js.stripe.com tcp
US 34.120.72.66:443 cdn.static.linkr.bio udp
US 8.8.8.8:53 api.linkr.com udp
US 35.201.109.101:443 api.linkr.com tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
GB 142.250.179.227:443 www.google.co.uk tcp
US 35.201.109.101:443 api.linkr.com udp
DE 142.250.185.163:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 227.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 154.167.233.64.in-addr.arpa udp
US 216.239.34.36:443 region1.analytics.google.com udp
NL 157.240.201.15:443 connect.facebook.net tcp
US 35.244.234.55:443 linkr.com tcp
NL 157.240.201.15:443 connect.facebook.net udp
US 35.201.109.101:443 api.linkr.com tcp
US 35.201.109.101:443 api.linkr.com tcp
IE 52.19.138.177:443 jnxmnq.coolgirlsdate.com tcp
GB 88.221.135.80:443 cdn-dimi.akamaized.net tcp
GB 88.221.135.80:443 cdn-dimi.akamaized.net tcp
GB 88.221.135.80:443 cdn-dimi.akamaized.net tcp
GB 88.221.135.80:443 cdn-dimi.akamaized.net tcp
GB 88.221.135.80:443 cdn-dimi.akamaized.net tcp
GB 88.221.135.80:443 cdn-dimi.akamaized.net tcp
FR 13.249.9.107:443 js.stripe.com tcp
FR 13.249.9.107:443 js.stripe.com udp
FR 3.165.136.128:443 m.stripe.network tcp
US 34.217.197.255:443 m.stripe.com tcp
US 35.190.18.41:443 linkr.bio udp
US 34.120.72.66:443 cdn.static.linkr.bio udp
US 34.120.72.66:443 cdn.static.linkr.bio udp
FR 13.249.9.107:443 js.stripe.com udp
US 35.201.109.101:443 api.linkr.com udp
US 34.120.72.66:443 cdn.static.linkr.bio udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 35.244.234.55:443 linkr.com udp
GB 142.250.179.227:443 www.google.co.uk udp
GB 142.250.178.10:443 firebaselogging-pa.googleapis.com udp
DE 142.250.185.195:443 beacons.gcp.gvt2.com udp
GB 172.217.16.228:443 www.google.com udp
US 35.244.234.55:443 linkr.com tcp
US 35.244.234.55:443 linkr.com udp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
US 34.120.72.66:443 cdn.static.linkr.bio tcp
GB 146.75.73.155:443 media.giphy.com tcp
US 34.120.72.66:443 cdn.static.linkr.bio udp
US 34.120.72.66:443 cdn.static.linkr.bio udp
US 151.101.0.176:443 js.stripe.com udp
NL 157.240.201.15:443 connect.facebook.net tcp
US 35.201.109.101:443 api.linkr.com tcp
US 35.201.109.101:443 api.linkr.com udp
NL 157.240.201.15:443 connect.facebook.net udp
GB 172.217.16.228:443 www.google.com udp
GB 172.217.16.228:443 www.google.com tcp
GB 142.250.178.14:443 clients2.google.com udp
GB 216.58.204.67:443 id.google.com tcp
GB 142.250.187.234:443 firebaselogging-pa.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.234:443 firebaselogging-pa.googleapis.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 encrypted-tbn1.gstatic.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com tcp
GB 216.58.212.206:443 encrypted-tbn3.gstatic.com tcp
GB 216.58.212.206:443 encrypted-tbn3.gstatic.com tcp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
US 151.101.65.140:443 www.reddit.com tcp
US 151.101.65.140:443 www.reddit.com tcp
US 151.101.1.140:443 www.reddit.com tcp
US 151.101.193.140:443 www.reddit.com tcp
US 151.101.193.140:443 www.reddit.com tcp
US 151.101.129.140:443 www.reddit.com tcp
US 151.101.1.140:443 www.reddit.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
GB 172.217.16.228:443 www.google.com tcp
GB 64.233.167.84:443 accounts.google.com tcp
GB 104.78.170.24:443 appleid.cdn-apple.com tcp
US 151.101.193.140:443 www.reddit.com tcp
US 151.101.193.140:443 www.reddit.com tcp
US 151.101.193.140:443 www.reddit.com tcp
US 151.101.193.140:443 www.reddit.com tcp
US 151.101.193.140:443 www.reddit.com tcp
US 151.101.193.140:443 www.reddit.com tcp
GB 172.217.16.228:443 www.google.com udp
GB 64.233.167.84:443 accounts.google.com udp
GB 64.233.167.84:443 accounts.google.com tcp
GB 172.217.16.228:443 www.google.com tcp
GB 172.217.16.228:443 www.google.com tcp
GB 216.58.201.106:443 firebaselogging-pa.googleapis.com tcp
GB 172.217.16.228:443 www.google.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com udp
GB 172.217.16.228:443 www.google.com udp
US 8.8.8.8:53 w3-reporting.reddit.com udp
US 52.252.28.242:443 msedge.api.cdp.microsoft.com tcp
GB 216.58.204.67:443 id.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.234:443 firebaselogging-pa.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.206:443 play.google.com udp
GB 88.221.134.73:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 66.254.114.79:443 www.youporn.com tcp
US 66.254.114.79:443 www.youporn.com tcp
GB 64.210.156.23:443 media.trafficjunky.net tcp
GB 64.210.156.23:443 media.trafficjunky.net tcp
GB 64.210.156.23:443 media.trafficjunky.net tcp
GB 64.210.156.23:443 media.trafficjunky.net tcp
GB 64.210.156.23:443 media.trafficjunky.net tcp
GB 64.210.156.23:443 media.trafficjunky.net tcp
GB 64.210.156.23:443 media.trafficjunky.net tcp
GB 64.210.156.23:443 media.trafficjunky.net tcp
US 8.8.8.8:53 ss.phncdn.com udp
GB 64.210.156.22:443 bi.phncdn.com tcp
GB 64.210.156.23:443 bi.phncdn.com tcp
GB 64.210.156.22:443 bi.phncdn.com tcp
US 8.8.8.8:53 eg-cdn.trafficjunky.net udp
GB 216.58.201.106:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 fi1-ph.ypncdn.com udp
GB 64.210.156.23:443 fi1-ph.ypncdn.com tcp
GB 64.210.156.23:443 fi1-ph.ypncdn.com tcp
PL 93.184.223.43:443 eg-cdn.trafficjunky.net tcp
PL 93.184.223.43:443 eg-cdn.trafficjunky.net tcp
US 216.18.168.30:443 ht.youporn.com tcp
BE 64.233.167.154:443 stats.g.doubleclick.net tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
GB 216.58.212.219:443 storage.googleapis.com tcp
GB 216.58.212.219:443 storage.googleapis.com udp
GB 216.58.201.106:443 jnn-pa.googleapis.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
GB 142.250.179.227:443 www.google.co.uk tcp
GB 64.210.156.2:443 ev-ph.ypncdn.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
GB 142.250.187.206:443 www.youtube.com udp
GB 142.250.187.214:443 i.ytimg.com tcp
GB 142.250.187.214:443 i.ytimg.com tcp
GB 172.217.169.46:443 www.youtube.com tcp
GB 216.58.212.206:443 www.youtube.com tcp
GB 216.58.212.206:443 www.youtube.com tcp
GB 216.58.212.206:443 www.youtube.com udp
GB 142.250.187.214:443 i.ytimg.com tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com udp
GB 172.217.169.46:443 www.youtube.com udp
GB 142.250.187.238:443 www.youtube.com tcp
US 35.206.35.210:443 e2c48.gcp.gvt2.com tcp

Files

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

MD5 7478745f2ffdcebdb1c5ccbd482312b8
SHA1 6f754125fdea66ca783875f7c6c0f96be14211d3
SHA256 ae19ae02450f9e885abbed2e40fbabf9992acf61fd206d6ec0da8fcc2ecfeecb
SHA512 9ff8e19eb3471d69654a9a83fdc62f9d340dfee344a1cc89802ab4924921edc2c4b1e4f6573143ac61cb61d970d6150ae694369c90ba453cfeb63966d85bf352

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\715a61e0af6aed269890ce49be4e58e9

MD5 715a61e0af6aed269890ce49be4e58e9
SHA1 6bcea2c00acfb910f99855865030a249081aed44
SHA256 37e44f58ac87c6110071229fe9a11a4f1c38bb7bed3a53f56206c03f29b40656
SHA512 2edf4db8be0df10721fade38eebb1a9c24494b9a76df35faae901512704b70cea8573d5ce6953ba286e69994011aaa28c55795a93a5500760c4ac923228e538d

\??\pipe\crashpad_444_APAHWZSXQWAAQWUT

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Temp\scoped_dir444_1414965309\47c19f0b-d621-4d75-97c5-47fb2775b80f.tmp

MD5 da75bb05d10acc967eecaac040d3d733
SHA1 95c08e067df713af8992db113f7e9aec84f17181
SHA256 33ae9b8f06dc777bb1a65a6ba6c3f2a01b25cd1afc291426b46d1df27ea6e7e2
SHA512 56533de53872f023809a20d1ea8532cdc2260d40b05c5a7012c8e61576ff092f006a197f759c92c6b8c429eeec4bb542073b491ddcfd5b22cd4ecbe1a8a7c6ef

C:\Users\Admin\AppData\Local\Temp\scoped_dir444_1414965309\CRX_INSTALL\_locales\en_CA\messages.json

MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\dasherSettingSchema.json

MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\_locales\en_CA\messages.json

MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 0430baca7d37b09ebf3aff6427720b87
SHA1 0ba41a90d8108f9d4d2a4bacb62606493a2d4a47
SHA256 17666007bb614b4b0a9bbd9b9e79d9c9442d972a4eb3e9db3817370e5758134f
SHA512 0f1dce23befc37a782eec8b3ac3220ffe117f1bfdb02e7b2c1578abe7a240a099b3bacad59a464feca38c53c091e4bef8bd4df8a505da18aa97c575c8b09961d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

MD5 e579aca9a74ae76669750d8879e16bf3
SHA1 0b8f462b46ec2b2dbaa728bea79d611411bae752
SHA256 6e51c7866705bf0098febfaf05cf4652f96e69ac806c837bfb1199b6e21e6aaf
SHA512 df22f1dff74631bc14433499d1f61609de71e425410067fd08ec193d100b70d98672228906081c309a06bcba03c097ace885240a3ce71e0da4fdb8a022fc9640

C:\Program Files (x86)\Roblox\Versions\version-32f36ac944b34913\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 45c5e2816850b2507f81dd9b9fa241c6
SHA1 dbf65e128e88f3ca25f0408d0250bee3fc8b6946
SHA256 dc7686b4363d24a4da8d753e6933bdd0a16eb89e03a6cb7d1ea31b80cfc7ce6e
SHA512 0c5642faaafe30cc55777cf314915a683cbe08544983063538a15b48cda56066cc1c6c6733e33d6e2ef7f42ee6f1df45bbfd7aa16a886be371de94033e33db02

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a625a35c9498508a233685af728b4bc0
SHA1 452323cf484f66b180f32f5f45872a32b9ba9f75
SHA256 31e6de7bbf7b65721241826c54dc259aa1cbe7af86cdcf5c29a522fd3ec10348
SHA512 da1ddd7014a446432691d63c6b9a991f3d0adf1e4b0798eeb15767bfe3f6a4a2ef15363bb9ea633e2649de55972cb729314628daf89d19c8f33e2b744a2cbf25

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_kk.dll

MD5 bcb1c5f3ef6c633e35603eade528c0f2
SHA1 84fac96d72341dc8238a0aa2b98eb7631b1eaf4e
SHA256 fdd6bffdb9eca4542975f3afe3ac68feac190b8963f0a7244b4b8fa6382381d1
SHA512 ecd79ddd9f3e6db1d0471132c453c324ab55bdead21de77392f418281bc8a2dd43e9009912896ffa3d55d4d3ef17b0aa847a084369b619eb04a2d2313641d520

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_ka.dll

MD5 3bc0d9dd2119a72a1dc705d794dc6507
SHA1 5c3947e9783b90805d4d3a305dd2d0f2b2e03461
SHA256 4449ee24c676e34fea4d151b3a752e8d0e7c82f419884e80da60d4d4c1b0f8cb
SHA512 8df01ad484bf2924892129c59317f3da4f79611be2ca29e208114e5ed2cb96a63f753511dc4fe97e281417366246f2fb576cc6ef2618a67803ae7ac01be7b067

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_ja.dll

MD5 b507a146eb5de3b02271106218223b93
SHA1 0f1faddb06d775bcabbe8c7d83840505e094b8d6
SHA256 5f4234e2b965656e3d6e127660f52e370dc133632d451ef04975f3b70194b2ed
SHA512 54864e9130b91b6fd68b1947968c446f45a582f22714716bfd70b6dc814841fffe939bc2f573a257ec8c62b4ff939643211fb29cabc0c45b78a6cc70eaa3752c

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_iw.dll

MD5 45e971cdc476b8ea951613dbd96e8943
SHA1 8d87b4edfce31dfa4eebdcc319268e81c1e01356
SHA256 fd5ba39c8b319c6ba2febf896c6947a0a7bae6aa0b4957bd124d55589f41849d
SHA512 f1c9fccf742fa450be249dbbf7e551a426c050ae4af3d2e909f9750068a2bdc801f618eb77a6a82d13421d27949c9f2a9681a44bcb410ccdeec66b24a70f6a9a

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_it.dll

MD5 497ca0a8950ae5c8c31c46eb91819f58
SHA1 01e7e61c04de64d2df73322c22208a87d6331fc8
SHA256 abe2360a585b6671ec3a69d14077b43ae8f9e92b6077b80a147dfe36792bb1b7
SHA512 070398af980f193ff90b4afaecb3822534ef3171eca7228bce395af11ca38364bc47cab7df1e71187ef291f90978bdc37a8611d2992b1800cd1de6aa7fda09d9

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_is.dll

MD5 5664c7a059ceb096d4cdaae6e2b96b8f
SHA1 bf0095cd7470bf4d7c9566ba0fd3b75c8b9e57ec
SHA256 a3a2947064267d17474c168d3189b0d372e36e53bf0efb9c228d314fc802d98e
SHA512 015dcb17b297a0aaad41c7b0b2199187e435855fd3977d16402be774622cc4f6b55d04ba9159a89e26e350c5602928c76dd9386be3974437b41888a0cfdddfa8

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_id.dll

MD5 03d4c35b188204f62fc1c46320e80802
SHA1 07efb737c8b072f71b3892b807df8c895b20868c
SHA256 192585d7f4a8a0cd95e338863c14233cdd8150f9f6f7dd8a405da0670110ee95
SHA512 7e67ea953ea58ff43e049ce519ae077eec631325604896479526627d688f2fa3bfc855a55ac23a76b1c9ef8cd75274265b8238423b95a2437be7250db0db31b1

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_hu.dll

MD5 f4976c580ba37fc9079693ebf5234fea
SHA1 7326d2aa8f6109084728323d44a7fb975fc1ed3f
SHA256 b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791
SHA512 e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_hr.dll

MD5 0b475965c311203bf3a592be2f5d5e00
SHA1 b5ff1957c0903a93737666dee0920b1043ddaf70
SHA256 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0
SHA512 bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_hi.dll

MD5 34cbaeb5ec7984362a3dabe5c14a08ec
SHA1 d88ec7ac1997b7355e81226444ec4740b69670d7
SHA256 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9
SHA512 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_gu.dll

MD5 f9646357cf6ce93d7ba9cfb3fa362928
SHA1 a072cc350ea8ea6d8a01af335691057132b04025
SHA256 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150
SHA512 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_gl.dll

MD5 84a1cea9a31be831155aa1e12518e446
SHA1 670f4edd4dc8df97af8925f56241375757afb3da
SHA256 e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57
SHA512 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_gd.dll

MD5 c90f33303c5bd706776e90c12aefabee
SHA1 1965550fe34b68ea37a24c8708eef1a0d561fb11
SHA256 e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c
SHA512 b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_ga.dll

MD5 3b8a5301c4cf21b439953c97bd3c441c
SHA1 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a
SHA256 abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0
SHA512 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_fr-CA.dll

MD5 b534e068001e8729faf212ad3c0da16c
SHA1 999fa33c5ea856d305cc359c18ea8e994a83f7a9
SHA256 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511
SHA512 e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_fr.dll

MD5 64c47a66830992f0bdfd05036a290498
SHA1 88b1b8faa511ee9f4a0e944a0289db48a8680640
SHA256 a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961
SHA512 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_fil.dll

MD5 7c66526dc65de144f3444556c3dba7b8
SHA1 6721a1f45ac779e82eecc9a584bcf4bcee365940
SHA256 e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d
SHA512 dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_fi.dll

MD5 d45f2d476ed78fa3e30f16e11c1c61ea
SHA1 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e
SHA256 acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2
SHA512 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_fa.dll

MD5 cbe3454843ce2f36201460e316af1404
SHA1 0883394c28cb60be8276cb690496318fcabea424
SHA256 c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59
SHA512 f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EUDC27.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 c422aa2c29190ebe2a447adc5f7b1a78
SHA1 91ab40d58d1575752c254d39dac332a3402f2405
SHA256 64997c25862e87c001aeebf374bc106405e4795c32ded5bd703044b31f8d14dd
SHA512 79ec5133059b2b55736f31106a9a6748e4610960a8823b4341782282bc7af4382ec0468f0ffe7292b91dd0961f28cdd83ea01e5c31df3b951d65f5d065a1d2a7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 83899ac1a077b5d52c94e67d155a09d1
SHA1 3f8f305b3fe07a1570183248119cb079e7b61a21
SHA256 9286b41538e2b864df5bd13bfd56a527422f3e9725f813590d5706e6f6697d5c
SHA512 f31bb3e7d01fd077ad368a735aef26f5d1ecb03ac07261aef365994502b31221a0d7231209ed8cbc23b4721749e8eebbc95ab4fc837bd48500da49dc7a9e9049

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 8b0c7c0263460f228d1fbb4af0fbb91d
SHA1 6cdafdbe409ba939e125a26430a7623ed577aa34
SHA256 09a9cbbdf210b37b856dd68040e18f984ba3c019a9caf4b948c6ab30a2b72159
SHA512 3eab3fff1c196286642547342c01290c43116ff17b77a158f1bd5dee19da9f70a8e2a6f0fe394ca2c8ff49abee6256b958803a3a1345aa5b023edfec29a598f7

memory/228-724-0x0000000000C40000-0x0000000000C75000-memory.dmp

memory/228-725-0x0000000072EA0000-0x00000000730B0000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5524f093963f32d02d9ddb3586492171
SHA1 51649dbecb3d71da29b534e947ea0a83ab15975a
SHA256 cb7527305a06211f6dfd5b60dada229c18dcc6d91b19d856df1874822384c5a8
SHA512 bab5b201ca61f1649e9918dbed819e4856f6dc33b572cd5fee9542768811a7cf398417fa77d9244ddf4ef6b0e58f217f0c1f08ec99d26680b717d4e6372a155a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 9133aa4e211d8ded900b689f82b13c06
SHA1 b2d345a1821ac8429874c03e266de3be324761ab
SHA256 ecfaf43f2c4a8fb554ed58add1ae3752d0fa729d7d8d659ad39ed54e4535613d
SHA512 71f8ef3012ce8fce521a3ecd6e5aaadbb345f9871a801aada23fb45f7ff66c7579655d0c1a506ccddc8d528881065dd2cefa2f7f0a7feff710eb55cda979b71f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b1a138b642a8f9dcfc308a20fd161dd2
SHA1 9a60e148d3cba11b983456a3d2bf0d43773afa49
SHA256 d0328480639703cb5225a5b205c78c0ccd391287c45af8ce4bfb9b7bd2dc4370
SHA512 f10562db4aaf9a133a08a9a14a674fdf2be112fd78bc0d2cf6c4622fc570100d4da4c812d3ef678953f491e551ff3ace72b49e7f9c85867a8e73c94f0e48dc82

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 af2bfe529ca0578f6effe81414441f58
SHA1 9b15e2050b52491284787c1bab4beadcc14cf25f
SHA256 6dec59e58e5e316a1a1c256f3401b3d153450ce02ac7f1d0371c9f4ad115da99
SHA512 deb35dadf5b7da0c4721d228e782795250891148e2ca0272de8b0d6e56272590f8f9f8f9f9753aef36310404ae8de9d208693ddd1dffb544c6031828ddff9926

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eb9889d73d1eeb8a5923b317836e8c97
SHA1 422365871e68835f7d88eea2fa2ec82858182c2d
SHA256 eba92c1e819a9b52089b7ba0f96bb833f2491d65af839f2f44905930ece2ae74
SHA512 00f25f94ee4f9bac708cd50022099291b9a5c8b36a6f85b96e636a83eeee69575ebe02d9f5817fac45a0640ec85d245544ae748f388aacc1a0915d79b062a2e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 c49470da6d387f6aa66d45498636148c
SHA1 8fee27fa7f830efe0187084ee67dfb7441812450
SHA256 e5f73568363ce70fe5f17c08082b8782f9022b33b62488b65a2978acae39cb4d
SHA512 7c4a6a81f91b1a950481820703178896bc1b8219e10a0aa11042070a18996b6ba9fad7a05798e23e595a1b94dbe818b134619bc1bef2e9f362cc592daa159c9f

C:\Program Files (x86)\Microsoft\EdgeCore\131.0.2903.51\Installer\setup.exe

MD5 e8ecc691b6b345c25ea749591911d934
SHA1 b54f8b8ece5c4221c4180edfdef39df38a36ba21
SHA256 e226aafcb47b85afe8962b885921dd982bbeb356ddd1c66e5a6f42be80dd052a
SHA512 9364268b3e7333a6d52e3ab1eedb15c9cee98d5139be0708790275ef05abba12f32c2a39546b4c81f799d7ee662d5f705af9de28b0fca12a64c72ebcccd4f066

memory/228-806-0x0000000072EA0000-0x00000000730B0000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ebe24c6930bb1ff375c352e56bf2c8e9
SHA1 dfe15f763f4837cc592e93f35be11019ce66c23e
SHA256 6d9321f384df635cafba5ae419d7dd563ad255cd12dea24f6aa8b456b654d529
SHA512 627bbaed9aad88f8be2f02b33dd6d2329b973be4196df6aa0cf62a767640d69334552d6b558d09f2bfd2eafded8afbcb56cc691d3852606c96ba138e8680f07e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 30d845e12c4dea736a2016ce8cf14d11
SHA1 da40b16c08ee46a7c68d861c737da19d0abe0b94
SHA256 329cf946a198c7962ab898ce83140c4a65d0f128ec32ec19e275ea2e6c0789ce
SHA512 1afa6fff5b05acf3ce6c72bc82a28972b1fbe80d61df4939bb1e08fcc4a39f0c49a3a7b4cf3cda3af9ebc189aba360b1b1b1859e005140e8cb0bee0ae59670ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 917e2ff1fc3515a7576b391f2b8445f9
SHA1 4bccdea8b75485b54095fb3fda0bdd2dd70ca1ac
SHA256 35eefa31af4cadf15a2be5ec23065130ced35264958bb442cf1e54e282f35ffd
SHA512 b850922305fcc2f32bd2293dadbaa63fbf9f716be4779118d5cace3aed537e774db03dc7ce715066a10131a718cceb1301273481960aae2711ea071a5f6a3e02

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fa8e59db58672c0bef8771a164dbb4f2
SHA1 b66b5a82580f720c479d0ebde8215fe509765215
SHA256 86ca8357b9356d0c09d56fb752c6db83bb8c7e49b908928e257ac2083e7285d1
SHA512 cd4a1bebcd552d5ec518cad6673b2179a8c8a1e156fbc72db586ccdc6c755fb986bead025276864914569dad8329ae65e00740d14afc0f0c9194cb45ddb0435d

memory/228-864-0x0000000000C40000-0x0000000000C75000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c15f80bfe7ef07c2d2db3356340fa5e4
SHA1 a2c33ba03dc70636f5cf632c8377ea19cd641373
SHA256 5c31e41da213c9cf191f724c6e918b0acf06adb83ef7c75fbb285e998bc90c9f
SHA512 15e5c137cd68f19c34e07b9e5ce4c4a90f07eeda531c9a7e041fbc9203234e69fe5fb4d3bc3a85cb98273741981ee58002e985223fa5ad5e41b9da030e5eaeea

memory/4032-879-0x00007FF973280000-0x00007FF973290000-memory.dmp

memory/4032-882-0x00007FF9733F0000-0x00007FF973420000-memory.dmp

memory/4032-887-0x00007FF973480000-0x00007FF973489000-memory.dmp

memory/4032-886-0x00007FF9733F0000-0x00007FF973420000-memory.dmp

memory/4032-897-0x00007FF971540000-0x00007FF97154C000-memory.dmp

memory/4032-903-0x00007FF970FA0000-0x00007FF970FB0000-memory.dmp

memory/4032-907-0x00007FF970FC0000-0x00007FF970FD0000-memory.dmp

memory/4032-924-0x00007FF9731B0000-0x00007FF9731B9000-memory.dmp

memory/4032-923-0x00007FF9731B0000-0x00007FF9731B9000-memory.dmp

memory/4032-922-0x00007FF9731B0000-0x00007FF9731B9000-memory.dmp

memory/4032-921-0x00007FF9731B0000-0x00007FF9731B9000-memory.dmp

memory/4032-920-0x00007FF9731B0000-0x00007FF9731B9000-memory.dmp

memory/4032-919-0x00007FF973190000-0x00007FF9731A0000-memory.dmp

memory/4032-918-0x00007FF973190000-0x00007FF9731A0000-memory.dmp

memory/4032-917-0x00007FF973190000-0x00007FF9731A0000-memory.dmp

memory/4032-916-0x00007FF972C40000-0x00007FF972C4D000-memory.dmp

memory/4032-915-0x00007FF972C40000-0x00007FF972C4D000-memory.dmp

memory/4032-914-0x00007FF972C40000-0x00007FF972C4D000-memory.dmp

memory/4032-913-0x00007FF972C40000-0x00007FF972C4D000-memory.dmp

memory/4032-912-0x00007FF972C40000-0x00007FF972C4D000-memory.dmp

memory/4032-911-0x00007FF972C00000-0x00007FF972C10000-memory.dmp

memory/4032-910-0x00007FF972C00000-0x00007FF972C10000-memory.dmp

memory/4032-909-0x00007FF972B90000-0x00007FF972BA0000-memory.dmp

memory/4032-908-0x00007FF972B90000-0x00007FF972BA0000-memory.dmp

memory/4032-906-0x00007FF970FC0000-0x00007FF970FD0000-memory.dmp

memory/4032-905-0x00007FF970FC0000-0x00007FF970FD0000-memory.dmp

memory/4032-904-0x00007FF970FA0000-0x00007FF970FB0000-memory.dmp

memory/4032-902-0x00007FF970FA0000-0x00007FF970FB0000-memory.dmp

memory/4032-901-0x00007FF970DF0000-0x00007FF970E00000-memory.dmp

memory/4032-900-0x00007FF970DF0000-0x00007FF970E00000-memory.dmp

memory/4032-899-0x00007FF970C80000-0x00007FF970C90000-memory.dmp

memory/4032-898-0x00007FF970C80000-0x00007FF970C90000-memory.dmp

memory/4032-896-0x00007FF971450000-0x00007FF971470000-memory.dmp

memory/4032-895-0x00007FF971450000-0x00007FF971470000-memory.dmp

memory/4032-894-0x00007FF971450000-0x00007FF971470000-memory.dmp

memory/4032-893-0x00007FF971450000-0x00007FF971470000-memory.dmp

memory/4032-892-0x00007FF971450000-0x00007FF971470000-memory.dmp

memory/4032-891-0x00007FF971430000-0x00007FF971440000-memory.dmp

memory/4032-890-0x00007FF971430000-0x00007FF971440000-memory.dmp

memory/4032-889-0x00007FF9713A0000-0x00007FF9713B0000-memory.dmp

memory/4032-888-0x00007FF9713A0000-0x00007FF9713B0000-memory.dmp

memory/4032-885-0x00007FF9733F0000-0x00007FF973420000-memory.dmp

memory/4032-884-0x00007FF9733F0000-0x00007FF973420000-memory.dmp

memory/4032-883-0x00007FF9733F0000-0x00007FF973420000-memory.dmp

memory/4032-881-0x00007FF9733A0000-0x00007FF9733B0000-memory.dmp

memory/4032-880-0x00007FF9733A0000-0x00007FF9733B0000-memory.dmp

memory/4032-878-0x00007FF973280000-0x00007FF973290000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 15a8f1cea1c5fba2737f25387e0d27f0
SHA1 7a9570628790359469d55b5327d85b7edeac945b
SHA256 7cdc65bd1aac34cadde3679c57cf08a38ff70d8135ffc2930a4ce6262623b234
SHA512 780b5deed0d7e0d77dfa5a5f68219c794119625668516ec1b20f7c112197723180b1a1def590b7e4c6698017c7fa2d05b8496fae34b48f3c1d606fe9e2512361

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e0b9d2a9e2e3036c1ae9f64e948b8f9a
SHA1 d058137b30b8cad7fd67e8a31213c48f6b8892ae
SHA256 80779b77ce476c3efbd5ab550c8460d082d64bcc91fb0d9dee5762751616c0a7
SHA512 3061a6c58d4045c3906e1ed4ccf0aaf6cca4af740767c05613c123904978a33e48fb62b6cb91749f7b4084f7b9b52f50d0a046ab8e34a1e6bdbc096deae520f6

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8ceb19dc7fe92f90915a6555f6f4e463
SHA1 38508986a62a9708ec8e3f1f94d6ebaef330f24d
SHA256 a0e3890bc055c001b48d98e723393b15d2689467da010db68756c0ea983727b0
SHA512 e7f78c003d4021fac62b667af38d838227190be07f38d326c69ba2dd88b60f1437e1568f5a5b9626691e782fbf2d6e98f350237b21947da6d3d866fe8a923ebe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8bf60606a5b27d5ba9ff76266705eb6a
SHA1 d0f5d23b4c7c08cd74e2721f086dcefca9c5e855
SHA256 a38fae14ab623f89c411f1097a041f4dfbe6d828cb5afb8a1c5804a0713f1cd3
SHA512 3b5af60c617b943829eaf772eccc63c700b8efd236315632274908db493c81409b9d4ce7004170ad1b0dd359627c7eacc06fdf47b84062eb91cfdb70c2ee8490

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 514190f7dbe3a3b6a207383ea11b5bb0
SHA1 ce6ee3afbe647a5004c2d8a6bc88eab6018fefa3
SHA256 796c60f0c7c9afe1534b3057c695744d59ae6cae1caf9e19b793add41a0d7fef
SHA512 4b509160c156f940d75f8bf5c3a285b1b3ed92de3ec932d3079db06b337a1901414edeaf6c614aced0354d9ab53109d3bdef5421320e495366926286d9e30bb1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 f09be5ec1451cece1460f0a340588a03
SHA1 97f104e10bc06810c1b87e9cb542b39c591a7b0d
SHA256 058f495228ed80c9f1838ed096cf102c46dcbaa1cbd05aaa5233418ba87f6d93
SHA512 78f84d7b44b62c942753e8ce498d113201fe04b86428a4b7e715fbff891fc20eefde2444357302a5d2c8dc0218321aef569b93a33892418efa4b185f50f5512c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f523412868b4093c31e159061090fd6b
SHA1 f2ea33994d545ca15e8fae6f12273d6744a5e192
SHA256 58dd7d4a741020b238d4efd9971c9052214a1e980dc0eabccc38a64cf0b91ed8
SHA512 0abe4bd2500d0c5665ff5ad7ac99081e39b9f299c4eadb879a730d62f79a7c41e7e74c6a5c568836f8e32a724ad56ddab681f24d5e00fdd42aaac56063c16a3b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b4b75423eb66d08cfabaabf695eb7ad3
SHA1 65faab88a28f112c007d4e68fa7740a5360ac3c5
SHA256 6850b03d82aed25f13ca93dfb71fc98a4fea058e785a52fdad486421566bc96d
SHA512 8f8c99515ce9ef3ae5aa8a736746150c16fb4072f2a9a9f071be5b25e6daf5cebdabea63209e6c55b5a644fc9ed97c29dc91351e4e4368c1212a3e6847989232

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 46e6fa0be73e46a8cf56d2b2515a442e
SHA1 be6de02c35d692b717cf1ad4bc26db52bdb8ed8b
SHA256 7ba5f4206f0dffee66ce5f8a993c530836839c2f283578d0d60fc1a574e584f7
SHA512 733ceb8314c06e4b1bb7739ae5ad8b2d8424cf7204a1427ffad159bf9a586a0e5f6a170eadb2e87f3c4d78a1a816c1b55d0b4540c398c46a71ae7bab1a6565fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a2126f20d94ea303aecb48bb6315d422
SHA1 988a9779e2760e0673c71274974c0c5ad4e0e348
SHA256 7a6adfb6eb993ed9fd2baa26a0f5bf2754c9a98240f9ab5512e5f9b2a8db40e4
SHA512 dfc2ead0452b71f0974f15895d1b577f0f942bad887bbce464b0bb7589175b8072616fb4b4e105ef7f6926fe9fde107f963018848fdadde56b9200f7ffdd35aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 dffbf87ab67f3ea324c2f8f3c9c4ef4b
SHA1 fababe1f53ccb0a6f9ea45d6c9da2703781f8ce5
SHA256 6b5a4c3c74d1d37f26857316fde99831c5cafc3b278312ee95e229ff992e10c5
SHA512 37a3373b2616e3e6c93469d5d230010db04d3688692d409c823fab25908de3997e25222533591addf09e29be15c9d0f820bc3fd214507fa5c2c7aa9d54f5c3be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2147b4bb22da4269ed800d4bd05e82bb
SHA1 bcea250a2795a4b66f2dd2c59f74ab3e96c3ec5c
SHA256 44f6d76c8d49bb045fe52600139a679007422432e5a2036d68aa1b879d287e85
SHA512 50746b2c1cc4287c545cc38da83be86da3b52dbba55946a3ee3bb1de1b03d1a31551e7cab938251ae2afc588c71e71f3c372a925d6e9d374ba8c06a568a4944b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_linkr.bio_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032

MD5 794e865f0af24497becaeade27bc58f8
SHA1 e49c4c20d76de36aab02964384dec206ea0227d4
SHA256 f6c0f210d572d68fb2fe7f3c3090066ed0dcd60c9f5552187f905402f62d9fd8
SHA512 5827cb61f4fe92f6b612843067466d9c87ca8b0ca272c6f9352e6f1aca402c403b4caebf40b79b1b248da271c6da6a9b4103ec887700851a11a502c037ca1d86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 a1455c20fff20e71fe34021920f53660
SHA1 d719799be1830f7411db4c129e55a686b38a886a
SHA256 ab1732d197d0bfc6e78e7ad340da021883f72e42c6e65ee4ddce56cc0bf145c7
SHA512 c2cfab0417558093595bac5ff229cea308db559c1fc26810d660a2e3f0c5b3c2bee5b15066eebeb9db01416171131eac02a18248bfb93515e45bccecd5832ae4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a2128595e6e2b04c700a07e74802f9b9
SHA1 47dacdc303f60062ca2dbdf265969399ffdb87a8
SHA256 e3bd06f4fd4f950de8c64b0ef214550d740ff3eb06df8a4c42c0eb135c234b97
SHA512 28f91d25afb4fba47ccf3a8c8bf945646e2d56ae8c9a84b3fb0c87774ef419a1a445f38e40c87f3b4f6bdb809fcce20e9cbec36e38bc770d8d25ba51622e6f8e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ab1f0f56fa331ac6bcec23822e7a47ea
SHA1 f95fadb127abfe793b023efcc965fed0e66da315
SHA256 5562954d3a6d51af3dd6b0d41a96cd227a4ad1713406f9073785930b3eaf5c51
SHA512 1018bb083b9717525289dd62c74cde79e749a9dfeaead973ab73e8799b7d5eb128c876ae98a7a1c5c69aebd362978d704c2e23555333fd76b7bdc286a1babef9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 01a01a8a7e9c5b936f8e8f01426b2bc6
SHA1 35c00fd28bcd2d867a291b5ecdd78c5eb19686ca
SHA256 97048ead1d096b905c22703f9f512a84be4ed2a0eab0e6bd8344f862f3f4cc93
SHA512 657ca514e4c40306374e0a0d38d72cec544a716d8ed10ad28a6465f338007cec9ae5362375ff59a0d60c5b1f62ec2ef396fea38b7ef608c3d478099edbf3788e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 48febb170dc275f590385aa40923b7aa
SHA1 f2d6803a700cf2525582f08bd9bc3bb5e4178442
SHA256 e6f217955f11e1a7f33751fa7f4ef50ff417e6977da594834a4444b67bdd4be9
SHA512 0af9900f4ca1eb6f0183fa88818fa6e48b0726cacd3ec062c553f28cfbf0af4611dc745ae3e32902cbd03197c0625ee99afceca640e342626d0cab47d29eb7af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 91fac1f11f47b7469425092776186fc0
SHA1 8085d660e94745f9da8a36deb11daa45ab29fbc5
SHA256 54e6273c0a7bf810ec019a3bf4be7bb71152f6e8475afef565458b0886f125d5
SHA512 8f4d20a5943d679f793d32ce24597d157105188392e93059312738777a8eaea9533b938e5e0485c9bea120f0afa15678b470f4b6b3ffadd42aeec2d41e524101

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 23124f2fba71c87d069e18f8f7be3c01
SHA1 6649db50891ed04771880235673150a0fa23b55e
SHA256 b7eda08381366f82dae2838f41578fff81fab68a05d3016b13e4b7cb640f68bf
SHA512 8003835b02a54b5e6c4bb1c25edee4b1febde9924b6da278235acb868b65ffd9c5ffa7756be961073917854ed8d1e231b68fe7ef2e4559f7f66fb8866c050a78

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fc226242e2e8cd23c650a5355b9e9c2d
SHA1 af0acb24e777290446a4e0c585a406ed8f6424dd
SHA256 acc2c927d92389609eee1bd7a34644a98993c3296b820f69fe2f3a279e61f652
SHA512 f1bc6b68d78c7dda998420bd92562df2a1b4d3142922a4503228b4d3e32919f164b6774cf83faa48f993c939471f436befbe3a281a8f10c9b3547305611d3154

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 11efc4f5d644f373a8c16792473fe995
SHA1 bd7d1241c425ceb41bc1839f86a24ca8e569c921
SHA256 fc1b8ae0c6ee25871610c16b6d8746d5dbb36d0f21170a647ce09082f47e7934
SHA512 f7f951c39231ea05a5a33d152c9365f771dc623a3ffcde7c3ace8974d0da9acbaed698996cc2ce83225ae645bde030be33f3c886f8f9199519a03d42efe51b14

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 77d000f8affa38405a435bc035ac3303
SHA1 9e2e27c0bd00035748422beffde1c195c40e9039
SHA256 02776b49bf6be1fea872021352052ee2f11cbf2dfffe1fe3fba2e3f58ca055e5
SHA512 81f02c01629374e72c6584d5693b2ad2c36573ee9cd9fc4f423c16c37dd6dcb187f7a5146f15fa024461110eae68f18fe093c47d328aee7dcc36926bb7c0c2a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6466ee84cf195906126f3a2be5c9102a
SHA1 7073cddb1826c4dd216cfbc861dcd9415b4acc58
SHA256 91cc09024b77e462bdd18484392fb4737bcc31919ba4735f30d1f7de70344ac3
SHA512 b88e39f95a6af736a08d1421b73b39265f9ceebc82fdd0848bf4517cd757738312a2a0b4b26567926ea8012c9bcef1d9d4d1cab209cb5421381b788f3feec08a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8b7363e470c99183a7ac83d7bb78af9c
SHA1 625986f899a9c92c8af6e14d1732ef74c57cd9c2
SHA256 22740962d856fe172b48fac279c4e8e39d693a5302f7362aeb544b909b578fa1
SHA512 cac2466f481b1c9127f510f48c3f53609499f7046025afca5423b7ed34fe0e61af72a18ee98a55a11bc4ac69f0566ce131808e299e0eec7ede34deb72c81313e

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 66eaf97213fe93aba21af4845d0bfd2b
SHA1 1c0cc3dfcb95f02d2ae12fd35e0e9de7ad07e1db
SHA256 34eba918c440c97a636effc960c6839e8c32fea599a0eccf038db41f6e09e197
SHA512 ff3cff73859b139b1b79b9dd68edc3fe2d029a011871a85ecd66c872fbe63691b08ef2ef1df31b54b0ee7f161d06f4972ae34cab6dd33bca901779d9fc5c88e1

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 f94248e262a4bf250d248961a20e9747
SHA1 2128ebad1e70cec656b054a376ba78f7e6a04173
SHA256 8deb8dbb6dfe62be811cd94cdd32ec6df1628faa73481ae8f56ec6fc0e278047
SHA512 02697d408a1a2d0e56bd09a4b7cee29ebc3f18748f41f838745523d1d714b876694d87d8937b73fd2819f5c73b1cbbdea9e773f5de10b7f5f65f84ba43c42874

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5 452b4b42a694431d334364ec034f3587
SHA1 f16e5ff0a495bf395445bf2541bea131a8fc04be
SHA256 013793487b46910397161fd1cf1666c44ea2495503fbf8a02dab83cfcff62a6a
SHA512 d03861a31da7a44483e6c8056f7f3618e72610e812c8276e177b16921d46cf12ccc871b0c6dc3678ca609a61ed9d237688770c8125503e2d9d56e8a60459c7b3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028

MD5 2d5e95a30e1c5c1108b1b535ad388903
SHA1 0e7eade07939193a3cf12799670e423e7780d728
SHA256 bcff52a455951e1de8abd7c69517d830edcbe5baa2e165abeeeb1314b38ade69
SHA512 e44e5697b388621058cb1cd91cac99fdbec84a82816b7f040b59a53fcb270bd3d2cdacee7216b62c3337301628cd86d99f7b0267b29af26763d19fa61b6354e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

MD5 e4285f19cff80f724075c3a4efda7852
SHA1 845e2c8e52f88402b088a4394b785af8c293d9bc
SHA256 4ef56b39a59d12a4cd1ff3e7f8135eeaa516286e396acdac9c71daab23486ce5
SHA512 a7187f4ddcd688f960141da1d1e02ac55d89d34fdb23f7ae19a4576faa24e5113e10e7aa10d472cf5ff7abf67fe55f5cbff40f5c3617bbe0e6be5cfd5e308a41

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

MD5 b34d3aacafd1608a16fb309463047d9b
SHA1 c892991cd021d53957ed1b8b680d18180263c685
SHA256 4b3139779bc1065dfa86003e5f36cf407f0a1a0cd3c09886b0f550eaa614c2cc
SHA512 da917297b25677a5906aee3f8115f3f7be4a821ffda0a0b9eb966f2aa838998296013e6d4f8420fbb5425901b3b88d19b5d85e54aef555066430d35dea50c897

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

MD5 038eac1b36ff9625bf4ed0910d1c1912
SHA1 d370bce5d7a61e981bf7d3f78c5ba491c99972bb
SHA256 f3025786c49a1c4b1822690ef50cc651a3f75ec82c5e26e3a728478a86e493d7
SHA512 c86a6f24fc4d9602045e0fc53bbf6e264290483534b316385d9326aacc42a2e437b1300a0bc3b6d7a26797510f76e5b980876ab3f78e55a350206e396f2cfd96

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b

MD5 4cfba7ec1805164ce0030c091bc5bd4d
SHA1 7c28c98006aaf9c804ef260f421f3697b4a6fabc
SHA256 c47022a55f4ea22832a4879c52faed9d3ce37b9de13f7a1e2c36ca6f9ffe3c24
SHA512 8e6ec23c2ceded2c08c5d1a1241baa8ea8a3206f881db8b348041561fdefdbb436833ac4b4fced7940d33a22bb4f5ec194b7df029be11156f870a31f104b6d80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a

MD5 2b5dd2be60b0235ef3704d86bd914f73
SHA1 e4ee42a2c05fd5e7614755ae6396ad07aa94ae1e
SHA256 9fc9eecd30fee084dfb153f038d506cb2266ec57036b5f261017c768779ef2ff
SHA512 a5f11c8222c33110c8a3e92622c17c0a06a2629c4f8cec7fd85bab870f11a757e6fe535ce50d2382783541b3cf73bad49722c77010d80f2c315af218936b7b25

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

MD5 62bc91d52761a429da0c9977bea1fce9
SHA1 f59e93eebf5087ec10ee491c5ea7811444d988b0
SHA256 be6ab9db0a96bbecae2c28546a6aa213c90863119e22df8a96ad49b8a774b7a2
SHA512 21570ebe2355adf069f92b9fa187c88f6d81ffa2aa81485a8a7f13bc1aefba77833f0ab68dd9cc0aa170933f656f1bb3c6d45f4e8eb1e50da084c3b92fe0dc3c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

MD5 cbd076357f6d0d68a4f696746dee40d2
SHA1 205620b36e4165c5346fc6c584da8a3456f710b1
SHA256 93e4b0ceecd886f5814ad458645a8bbf11678bac80ca5254952f54338ba91ebf
SHA512 b025df981d307845185659673cac9d10293ac6e2e98aff4d1cb1e1e480583d67fb53b55536a236cf8b853bae465cad3e6a09e478ae422fc4f9e6a6d7c78cdd5a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

MD5 e55737478441461d932c9c635bf10c50
SHA1 518d8c672958c3f2a317342a6f61938e72cf5fb7
SHA256 9c9ec4b28b4895a5a021bcb21987620c170c4fd8befb44254a284de1a0a3b936
SHA512 625cee458102c1c4f31516730728031c9a83c01b82a502523241ab5207fdc25aee38776d2894082a546c8e4b4eba78632ed89398ab2e9c363933ea088d417027

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049

MD5 c7e6578bf36ee1aa9c54dfce87a5f418
SHA1 0738c9fdcce1457aae375bddbbc94d738924d045
SHA256 6022373169ff22cd687d5187ebac538ce025e17fc468989a2e857ea21430fa0c
SHA512 8c5bb6de46b8a4ce88173f31e22574224c3387f128df47da7c2ef5a4f79871a513a397d87c34af8d21bd5f10e7e0bed3c2c2143f6631640b221dfa9b5d3326ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b

MD5 96998c3ef40e9d4a3f73354c35bd4dc1
SHA1 4b11c362ac94f0c79908503f498a5c905305ef6e
SHA256 d69c4e5d3b3de8a62fb5bdd814ff4fd7c96887030c84c2ac297541e140480fb2
SHA512 1e857f7bfc27c0b393a3f906d632662451da0176a76aaeb5c805dcf7092529f3859cfa56099028a92646b0398494c0df8f8289cc981fe75c8bd4ad85786b61c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043

MD5 c17c05baf6a9d5b556a4943094d42a6c
SHA1 76de688c181a84e5ccd61e36cb819785263bfbb6
SHA256 1565f11279618f06780d185f1e7ae27ffbef3a50e834bab1c2b91a0ea451e251
SHA512 e1bad358612f034b02776e20a6ca4051d1b800e8e4230eb19449937a1655db579926fa58d3d578a27793af1e5475c0335a9645a0261881e2392094bfd2e8b367

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 fef259079a5c925a23fb9acc64365625
SHA1 0fc6c9abb0663bdd7333e931a3ae8683de153294
SHA256 14500867219552f82e20f1701b38b717df279f1b22b22b1b62a6b7d7708963f5
SHA512 c37761cfa32ddb309255bf0b494a31edce9d56fbff37f795b0db93761ebc8ca0138b99c7cbbf52ada78f02603f17da4dd8e72c2acf27a8e550d0d6fec3f55b89

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3b67a3f4375734787cd95f085c43f32a
SHA1 290fdaeaa43f33b985efd6284238ff31382b6980
SHA256 7f4d0dd7f906a028b70d9a510df6acf370a1aa4e4c101a0848bd2bee23c0332f
SHA512 9832c3221789b5633282f8c1be00fd081bd5f23924ef17fbbdf21ec1e20a20f187debcbfd621fc507d8d3b01d5869f45ce5e06efbe9d5987bed9ede5d8401ff8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ac2160e345e21c31224db19d8b2025be
SHA1 0940f0c674327bc0cca5c2a512b53c50e7180449
SHA256 3c8c8e127b94cdbd24606f9de9159528c71f8e8b1440aa73e9955bc920f3c95c
SHA512 c519a27386484fa54013c6e8a36b884a0377b1524175c60680c0c2688d41539a6ea13b285c6bca35fb9d7acef02d704e9607618c2d46d008e913448e425f361f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6317931d3f8ef83a87a7cf43184788fa
SHA1 43d9eafabc706292ae729f9ce34fa2daab29ecb6
SHA256 4b8225e923093165de1fb8e6999cc756f5cc690c139e11e441c653aa2fab0558
SHA512 3b9a9355bdced484d94010a82d26b95e1520390e0b648932445ebf7819ceebb67194431a4fb8dda91f72845593d8f44645d6ee7f4d54890a81e407af591a2016

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 319df50f23d54b874616ca76bc94d790
SHA1 52765726218cc8bd5694f3c14e36d0d4099734d6
SHA256 9857a1e5164073b44fd0fbe80a870c29ff6f15aec006d53f015f8de491ab48fc
SHA512 24d03dfbc1fd2f97eaada37d3b210cae68c70843cce00eda05ed0c6a92ea7a9180fc50d1a6ec7aaf9e423e726e57dba7f8f91803b57e6992555c87cca5b157ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 74e614113b0bd4422a98c0fe2c7c2d07
SHA1 4ed55e313a6f3c2cef56a15d4f9f5e1a0d7a3798
SHA256 e550eec095ba7acdfe0328f6f48519074005b208c1859a7fba88e4308509cf01
SHA512 fa68de33ad1e27530cad53847a5e6f31b2f111bae43fa04a233072cdcc98d74d518862525e71c4cb5b4196397a5ed5428d5f05d8ca87947183faf52df1ecef1b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d12092571cdd2a9d81011542ca975e53
SHA1 b34867bd501ac979698596ae3e5c391963325e55
SHA256 e02c7888cabbbcd7c6ef06e4a756d4d37555f6259e30bf2f426ce88493cac8b5
SHA512 621a116a1a2eeb106b1b602d2fc21fe96e1176029dd64fcb8cd24a985a23ebebe1debc22edcaf60c809a8dda592f465ba14b05d409a7043c8dd7e326ac9b54f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

MD5 b52667c6fd7916e6fab701ee6a80a667
SHA1 cd91735d16b1038f10d98c03e07295fee63c0e53
SHA256 bb2f4c9a7443f9e1b5fb789aa4161895061e558ed19a8b3b7f757828e015bf1b
SHA512 7ad6e45a4553d7c6d639efeb6ee0bb1267804b0ac9ccfe86afede5a925d5db7613e2cdf90b7ed0b13f6293cf6ec24796b24ce019393dc17e22541bde0d002551

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 405dd156f0b697f2d0702afedb827b80
SHA1 41e7bd95b48a39edd67e751abf94c92b6617271a
SHA256 a764eb30b54d11ded5b23807bca8dee0a2a36b921de032d8923b11b5eb835e77
SHA512 981f35b0c8c9261a4ad7c6c4cf01c5e062f510c7e58affeea3d541510a8bff28f124a0a0142ced89502b4540b50161d201e61a5a0ba08b7504cb6560f5627d4b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2fb01df7-75b0-4690-9840-9a14683860cd.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\43e11f0d-4b47-4322-937f-b4f65306163b.tmp

MD5 2780807aa80330571849aeba8cba5628
SHA1 ce45dfc2009fd63cb218f9c8fb3d18628e07f761
SHA256 48ce4be37bcebbb4b8f795454896d1affe8797ec7d10f7d9e48e95cde4d8ce22
SHA512 4425f7520c807aa6eecd8c93ec13056b9dd4b5a39c0da6f88925f8877ade711b5d487ec90093999334661afd88ae50fc4afd80f0d6b4a7cf453ccb6788ac6bd7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 805e47124a98163a323df33bab1088f8
SHA1 fd829cc15098eefff0bcdb93ab83e1affda70fac
SHA256 af22f9826104571f63e67d570989b234a95a1af142cac9f10acfccb070f78750
SHA512 85eb3ad5a3cc1d58b6b3a329156ed2d612c936e631e5b5e996f2f2c58a37be30b168217fcce6dad118caded3962549d25017cf7c52ee562d2d5a6b283b6b5dc7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5256ff523efb66bf6787d4b8c52969ef
SHA1 ea7286f936caa7260a546739b260df2bc73bb89c
SHA256 d3ad7816eafee39a85ed7649d4f71fb9d5aaa1cfcb44c5efcb0c3714a2eb30b5
SHA512 759d4c65e0087cfed9c1d68be4034c7311710bad7feaae42f442305af8950322b7d56cc94e7cd65cb10db8ba78a32440b510cfa4f2dae0cdac8b14c131bf78b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 61cb5787a1b4d895a3c4081b9a5647da
SHA1 7f072c5a30b3a48aa6794ff9a4b99e3e4a206b8d
SHA256 e724e28c5b6be2b28fcf3a692cf611e1137e393282ef097cfae5692d553eaf0f
SHA512 b981b920f282317473ca1bb0d6d4d0a1c5e79c9bc065c1d0077838eed720bc270288a2762a533779892a2d35050cf18dbcf7a2a215ab4d3381d313599bfbd753

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000069

MD5 503766d5e5838b4fcadf8c3f72e43605
SHA1 6c8b2fa17150d77929b7dc183d8363f12ff81f59
SHA256 c53b8a39416067f4d70c21be02ca9c84724b1c525d34e7910482b64d8e301cf9
SHA512 5ead599ae1410a5c0e09ee73d0fdf8e8a75864ab6ce12f0777b2938fd54df62993767249f5121af97aa629d8f7c5eae182214b6f67117476e1e2b9a72f34e0b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cd593349e38e79163481cb5ce674648b
SHA1 43e35cb5a813ed6a1421df28c156dcf377abc12b
SHA256 44eea6836a14cd8197438fd8e2a1565300772c82d7de8cd853624b70e22e016d
SHA512 719c3b1c97b35446eae5847f931453cfdd726f5932bfdae9b16821f70ccf358a9ac6093b2e2cd8a053d2bd3deca9dcd98ca17606dbfba66a5f54c7915c3fe101

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 950f64e703f2f040e15f590210e5775c
SHA1 30d75d9893eb1ace60785d4ed9aa9c12244b502d
SHA256 8fa05481f500ca33756940e20480a7945b50f0e061bee197699da3b7a0fe68c3
SHA512 b41e3de624123b305ece6c14c013b1dbd99819ba991f667b5f7835940bad0718d0450f5b863b75942e1acafc49930b7c7d24909a499cbd35abfb171a852ef1c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 155a6ca2ef06ae02d824965e5d89bdf7
SHA1 958d905d9dcc5948e95941244fd654974018e324
SHA256 808db57bbc2c9f5b365f8bfe149867e6a357a4791c067e8bb5e344e46351ef87
SHA512 d55e4e35fa33f9d7cbd1d9ee9fc41ec449bfc6cf69745a5dcbbd0f71d5190d25f3ecc0f9c05c1e0a1725eb655f84b34b2a57b469092aab7a024e659de3d02cff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 77d1c48591c763327f60ef8ba7d0dbf5
SHA1 97eb43726e918f45a4b462fb119ea4b81f512d3c
SHA256 885218c8e20e9e1390e1ad86b79301c1ebabf35b3bfe1028f18a95d9dfe4b731
SHA512 112fd1000d7815d8f3c1a4df6ebb20677cd14df95dff291c4d70784c4ac62c3211fecd82c06a33eb3ba542b6054a52afa0cb9941fd4e70e51f549170ad159d95

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 24213cae2ef86c9861e4efbcd3d954db
SHA1 eb0682e416193b76a15169f74ad813b742f05560
SHA256 0d512acb80bed2471bca8248dd673a8872bce0046b3b5677c49df0323cc28383
SHA512 2e49306b5206cea6eaf4ff91df878b71365dd1640c2aa7a6875c5e6d25e4c3b9e092e77d3ec15f76aba12e5765c8f180c3b46da50872715b656303ee9b23864c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1135fd0645b1d972dfbd2950ac3b2d16
SHA1 bedd17550d3724e4057b6802317e20cfba95c378
SHA256 851d1dffe986bcbae5fc1f70fd7dd3b44629517ce08041d41fae8c219a1ab96a
SHA512 e5fdb27fff9e1a5c03dcd9a72ba1e8a660aec94026e9568493ebca0a581f484d99b255393c7385a160dff2aa8b977e953e62caa0da9fe7d7c9f6ca61d3f6dbad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b333ea795b8c5d7b643b0776fa288e0a
SHA1 da2d3408bf5924d188b3097cda3d6528642a1a69
SHA256 68b16e1fb3eb991610b974046196a8a150fbb57858dbdcd983a504a513a5fc49
SHA512 bf1aaf8ff8989be2c883bf628b48f9783c1df1d7e831676103a4ae2f2e0525d69343f85280dc2c5a87690880fd6e7a0992a8d71317c6aaf1f8b0eedde75278b2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 19a51f1ce3fe082221fda4805caae848
SHA1 9145e2b6cb2ef48f52e25107a538199a8c16451e
SHA256 b4f6bac94bded6b41b703e5be5926d709b7284692b4e16393da277753a634819
SHA512 cf71e64355728174f95d9ab30e21a49b3881aa90dd0c42cc9e715c1a60c26fbe5e2c91054927dcf112cacfaabed4a3f684e689e1289f620db5cc82cd93ee9a81

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3b0d905befd98e49edd5766bd624d8d8
SHA1 8488a0aa3781b415fc703b1f28a3d154e1597e66
SHA256 22c072367ef8cdce5bc0b85344f66e869587f39127980d318201b5ce43ab37a8
SHA512 028b8334ea29823b1a43a410f5ed9d12a7496abb8fdc0a6c4b34170bf69be300e3ad8bf6cf70da1e3c98e27e2012742f71422f57ee84c04cf6895da8945ed6f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b943f63e3ad9cbffa314080773192f98
SHA1 e009a47dd3ea7670ce827f9399dcd749802895c5
SHA256 5cfa2573c0e9895ceaf621e2fc05f4bb720609f72f4da16f74ab4cc8241d33f3
SHA512 883be7f1f194de0268e6a2a1b93ab92d9e2721d95d8d47e24e57428cad527eb3b38c8e422544255542c05c97482d9101ae64ce527d46efea3a9501a8f120b3b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 25957fc4a348eb54b041e910e933fdf5
SHA1 2caeabc1640171892dde8fdbb8cfb2eae6df3ab4
SHA256 7980f578507f98363a94fea93b801e73715c0cebc3a5d386cc2883f9eb5d9a67
SHA512 cf936b0fb73cb9ae71ade8cf2d40ed53be4e0c07d2141e69701642411fc7a311bd3f5d4e465e405426c575bd4967319d933a5f8c325b5f9e0f3a0c8e2d6fde9c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ccf3814203c11a6df1f11a6a96f4dbe0
SHA1 b15de85d1868f44c7a7cfda8c00eaf83d4bba332
SHA256 f0235186614a64e34de5995293b2bf055cbdd7bb0f51d911ce2d4c4e9697600e
SHA512 dcef9cb726477c6f1df22e45b6118ce855af66acfdeca6747b8ccb7e0e23e0946f4f419e8b3ef17792af3f85d559576d5e39610a243547adb7b1ba6bdad80a94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d44296c5942dca50b6abc2ca98d9f7a9
SHA1 913463c72d31b8762f95a0e22be24af588c1166d
SHA256 08d53205adfb164d98826e3432860870d84304f9c894fba4e9446d5326fc0948
SHA512 d4bc48799da35c17c99f74fc84c8275f5916de79a4fedffb278f19386d09e20cfb8027608a05c39220bac174143950075c5da76d5ba6455edf2f54057a5da17d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 54c73929ab6ac3b601f1585bceb3b7a9
SHA1 4a6e432e587458dc5e5527f14b45fb8f61af02db
SHA256 69122830cfb1a240d8bc014711b200f398c6c9bfd5ca1cdf2833bb5e19a8ea1a
SHA512 5272ac8e397c224f4523fc9f18dde5aad6536cfc632cbd7d8f0d8c893f2bbbbb78632e3b983d098438f1ea8df39b462b98156df437cb8be270fc617abba6c6c8

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.195.35\MicrosoftEdgeUpdateSetup_X86_1.3.195.35.exe

MD5 dc1543edd0dcd56536304bdf56ef93f1
SHA1 1a8b2c7791f2faa1eb0a98478edee1c45847075c
SHA256 ccbb3d9a4877999a55b2ca6b8128481e91c4b56780f581226f916c0fb2db0772
SHA512 2a6b4aa39bc3e4d234909077d5c6d75b9968c1778d505cc12431afd7aebd01eb65ed2f6f0c53c67f18eed7e97b67a93bab8c44574e3918ccd5cfcd8681767056

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 648bf44e0454d34428a68b26a8e8da29
SHA1 44d32afb375fb7a3a2059a85f64986189dbf4ef7
SHA256 66af97c444fe9774e985e49edb7989c46ca2f8bc35f0fb077975a1b8f2619881
SHA512 bef9f558351df0cf60c5e7cce704a6207bea5f2e1907e82e340a1b61617bcb30c9f8061d3c4e30ca084916687590900cf96fd9d98b9e37cfdf92da4737c5cf65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2185ab62599d56d7ed38e59d2b98b4a7
SHA1 34f6c539b94e0e0d601a88a0437588d251be8d40
SHA256 40af7e8f29f041bf8dcb58fd99d0c7ad7727b9a2f3fb0d66b3307301f3eca9d3
SHA512 3a6c9f9de4dba3989c639f366ab8ddbf06e684a1ebe0587ea825d8207151f7106e09009278a2adc6c41714bfad14b99059b1f188017984549f4c4ab4f4ff7770

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8965c0a598f14390c4a80ef7eb3140a4
SHA1 df3b09462c80ab2d2f42d52d8778bf7b1a8f454d
SHA256 1d3c228b687724910ee25a84f904cb1861533a3fc6c65b4be6f610821951e0ba
SHA512 839f28075749fcd8468733ff7fb97b9eb960e5b834485ffe97d7282df5404b842cf4e4ce411aea89b8bcc41596bda010dc631762c83d8c49dc4fdb82857b349c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000085

MD5 cc265e47078e2e54d63e412ec524de0d
SHA1 56f9b79561bd2aff9c3d88f5929c49ab49d57bf9
SHA256 a8a73feb62f908ce8beb2233267a2223695487d9aa8d70637550ac5d8ec65781
SHA512 977f914746644e98764840476f1da2dfc490138b3ee0db66f0f064926bc5191a7ec3946aabf0ebe55a4f712b045888b1eb54f284a9ed2ad89e16a4573d5cc911

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008a

MD5 0bba8206dc16c4bb82bd02be3e71cd4c
SHA1 4d18b364ffd045371b1ba0f99535a88485701278
SHA256 21b3fa6f7c562f51c46d901f0eba78fb4076bfbdaacf91aad4ddb42cf436a427
SHA512 05a2c4960887094f3a31331110cfe4d38751656879c9760b0817f102f9c4c947b8bc6985288ec3167463383dffee6f815d519b81062818f2fd597e472592b039

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d46cf55fb9f9e5bc_0

MD5 24b809e8af3db9a5aaff2f9de2e08cf1
SHA1 8cf36006447c11cd2ff61f9bfcc7c8e9870923d0
SHA256 cdeea693d82a00895146b4c442c76fff710789c9eb5893be7ffb1581b5f90226
SHA512 60258dd24ed8a920434f89ca5a6e3345a8c2643fe245c6c1ba088a87f48cb4fe73733c3fd2057dbcacf40c949abc24b90dd2ab9bb8a72c90cdc6e0985e42a735

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5f0cc20535b050d7_0

MD5 7bf2f56c3007f8bee04e04a803961306
SHA1 d4c9cd09f12ada8714d3ef331060872edd00c909
SHA256 c27fe09140c1fcd98ed8ca022fddee31d58877e0ec4f47c82db1fb99b631ffa2
SHA512 e083328d6af5aada939c0eabaebcf70b223144ae2db729edd25e92700b6c2f67dfe1eb3bb4c76876626ca917475f2866b52cb5d3a6a61eda12684d819afb7d0f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt

MD5 84936fe5235594f7e8e28c728416127a
SHA1 6cb9676704d2770c4335c758b74a2c7d1e97b69c
SHA256 e40a236e4e7952ade2b3434037777845f937243ba304dedd5b18a534367a5c03
SHA512 049975936c59c16cb62d7b8712d26c5e76d0ce0cfb3f2bb7e10dfd6a115d078bbc52e32aae4244dc17e74828c6ef5e3be297822a2bd9e90394d9288c51810e8d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt~RFe5e2604.TMP

MD5 a89c9896bff5d427d14e97d43a99da19
SHA1 51f3c570a290fed5a3436eb1cca3a471730eafd6
SHA256 15efccc12690f405700a091f913acdf96fe7d300083d8fa00d08a8d2b02abe7f
SHA512 adb42529df38fe5cb224d10be7e41195941f850c325e01df0097069913da39946654e2585f14a9aecd545f79f8f0772c6fc7f387f24f554d9b09ede0acc793b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4557c97b40a19ab3161bb5343d6d8a86
SHA1 291d5ab946a4840095df62549913afb64ef2fdd0
SHA256 db5a16e646527977bf69bd7fac50cf8b55142a31fe14734f9270841477190aa8
SHA512 cf22ad229b5c6640a937a93491f76c4142b86ccacbcdb6be3695075612537e02e630bc5be8e8b3d06d40d293e5b4a0a5471aa293bc0f0b3d93a074cf3107d420

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f7489c6c4979d0d3e75d46dc62e85928
SHA1 f2673b4b716f6ce1e42334c7a8d1d9403db6364d
SHA256 2638afa594f4597a58c9c6c2afedbd24c60fa6800ba43049aa53c1f978da9bac
SHA512 f15b93b3c752812250dd276438da942b79c398a6d473502052c4413d014c9fba0c382dce4b569396c749534855bec4a65d80e05758ef47f2ca3535f47480ced7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000083

MD5 de05b6ba303ffb05a7d532981c4049e2
SHA1 118aadec92f8d83f794af2711223212a8c782d37
SHA256 9bfb6b9708dd0aa8ea25acbf0f2ba3067bcdcc2de6a840780eb95344ffce0874
SHA512 4fdcb849d9f73e7549c60d79ea7096d07ce8d18ea28023110a2abf119333791689d50fea5c5544e2b45b4473a430c30df4a3f0c47fb1da225d0bb09eb784d6ba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3f3128912ac9d2ebba9ea792273f505b
SHA1 2364f120d642d1c9a28c179788bf3426efec81e9
SHA256 09e22df8fe43f0d72b16ac274a9e924b263d3f0998dd81e0d8c96a66aba6f430
SHA512 7fc22f09d12c9ebd0ea295ebb391711e7557c0a7fcedf920dfce4e67a8e084a9df063a045a7389958d0ab9df74e5cd29a502f7257474b116ca795152afb2aee8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b9feac4c422a8354841174f692ea8906
SHA1 ff8d4df816a726ae169e019f2e07d7e2bb475265
SHA256 f97306b540fdf0ddda8a7337f045458ae874985e9c26547f120dbe8ecb7e0705
SHA512 4502cd0f10abe0c8f0444e7931728616e079e8d3571bcac2365d137e7af63c6f43509670aa883d84a0784c2792437ddc16726f6dfb85973581a10fa5fd3c2421

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e99977a8df931f843b0241c0c6c3deb2
SHA1 a154fc2fadf9da4640ecd9970452ff1f4ec9013a
SHA256 0c0d743892e3f9ef366c08dbea5425f89ba4ecf65a2eab5cb6c614870294e33e
SHA512 2407638274baedcc9a2fd805efef272b1d6fd68a2c3e26836fe610bcaa1d5f1a4adadeb2d4e054d0dae308607211d5524aea7884579e0d466e1aecbf0ebfa3b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 792d32f9704580e45ff486f31baee06e
SHA1 c7093be748282479979b786ea44113f8ab191969
SHA256 769dc541b687dad78c3c3af20ff38f6463fe491d07358d11c63085bb6e954d47
SHA512 b8be144919b769c189713d62af396660b9e6b11e22f57cb9ee60982631a69221b6aeff431d7b0e7572672bde187cef42a0805f2da4ba2846709577d8e32628f7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 7ed1047de7d49e1c328af55df4dba1be
SHA1 a284ec88fa3d7957786370c1761d086adfece68c
SHA256 b4d7d1b17976411b306b33f0e447fed09e15d3abada7ffd8dc28941e5abbcb8a
SHA512 868873ee9cfbbead44929a58da3d89e6d5a474e99123951b89956da6c8b13930fa77561440b153c555693dc014a561c4294d7ed48494b304189d6de4bf8c8ab4