Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    388s
  • max time network
    401s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/04/2023, 16:04

General

  • Target

    RobloxPlayerLauncher.exe

  • Size

    2.0MB

  • MD5

    71044866abd760632917f89ac39451ac

  • SHA1

    feb7b02f1e7a3206698f8d3f2e554f0419a8f686

  • SHA256

    460cd2ae6aecc2633e3b12e55a2d9071cbffcab21d371539f0b1a802d5cd8270

  • SHA512

    98d741ee76e9cd082662be49c11b85408643dbfc39289f4194f0cb63d0d21cb3f986f28d2fc65600bbad4520e78cc57aca40fd43dd9cef3342f4b23565c67734

  • SSDEEP

    49152:EcYgTmNVji4o14YTkaac6ECCTnlMQPMQ3dS+LTLb6VYhZ9:ENgSNVjZo1+4b/

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 3 IoCs
  • Drops desktop.ini file(s) 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 55 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 52 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs
  • Suspicious use of WriteProcessMemory 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe"
    1⤵
    • Checks computer location settings
    • Checks whether UAC is enabled
    • Suspicious use of WriteProcessMemory
    PID:3252
    • C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe
      C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe --crashpad --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --metrics-dir=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --url=https://upload.crashes.rbxinfra.com/post --annotation=RobloxChannel=production --annotation=RobloxGitHash=d4a4a4ad1cbd35850c37a672e5c216b9b80fbbae --annotation=UploadAttachmentKiloByteLimit=100 --annotation=UploadPercentage=100 --annotation=format=minidump --annotation=token=a2440b0bfdada85f34d79b43839f2b49ea6bba474bd7d126e844bc119271a1c3 --initial-client-data=0x7a8,0x7ac,0x7b0,0x6f0,0x6bc,0x127f748,0x127f758,0x127f768
      2⤵
        PID:1436
      • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe
        "C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe"
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Checks whether UAC is enabled
        • Drops file in Program Files directory
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4520
        • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe
          C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe --crashpad --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --metrics-dir=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --url=https://upload.crashes.rbxinfra.com/post --annotation=RobloxChannel=production --annotation=RobloxGitHash=e97527f1946dcde1ecf49aa2cf30d420185b368c --annotation=UploadAttachmentKiloByteLimit=100 --annotation=UploadPercentage=100 --annotation=format=minidump --annotation=token=a2440b0bfdada85f34d79b43839f2b49ea6bba474bd7d126e844bc119271a1c3 --initial-client-data=0x564,0x568,0x56c,0x544,0x5a8,0xe9d584,0xe9d594,0xe9d5a4
          3⤵
          • Executes dropped EXE
          PID:1700
    • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe
      "C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe" -app
      1⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:4920
      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe
        "C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe" --crashpad --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --metrics-dir=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --url=https://upload.crashes.rbxinfra.com/post --annotation=RobloxChannel=production --annotation=RobloxGitHash=e97527f1946dcde1ecf49aa2cf30d420185b368c --annotation=UploadAttachmentKiloByteLimit=100 --annotation=UploadPercentage=100 --annotation=format=minidump --annotation=token=a2440b0bfdada85f34d79b43839f2b49ea6bba474bd7d126e844bc119271a1c3 --initial-client-data=0x720,0x724,0x728,0x698,0x6f0,0xddd584,0xddd594,0xddd5a4
        2⤵
        • Executes dropped EXE
        PID:4472
      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerBeta.exe
        "C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerBeta.exe" --app
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Modifies system certificate store
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        PID:3920
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x418 0x45c
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:3132
    • C:\Windows\System32\GameBarPresenceWriter.exe
      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
      1⤵
        PID:1600
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:2016
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
        1⤵
        • Checks processor information in registry
        • Modifies data under HKEY_USERS
        PID:3424
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
        1⤵
        • Drops desktop.ini file(s)
        • Checks processor information in registry
        • Modifies registry class
        PID:2384

      Network

      MITRE ATT&CK Enterprise v6

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Program Files (x86)\Roblox\Versions\RobloxStudioLauncherBeta.exe

        Filesize

        2.0MB

        MD5

        3e1634906e576e71becf3b0084f3821d

        SHA1

        2fec3414a7f154e7166212bfcd0cb300fbf1a846

        SHA256

        c041f06838dc23831f5cda5e27ed0702f377df774ae03eedab0d8468fa902eac

        SHA512

        e084c0e0862952db7a77cef1c6a8d6ad647a61058ada42bae96c8c7e36ec417830a9b26f370f95a271db623cc861ab0f9a3f26f793478dbeb3b706e28370007f

      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\AppSettings.xml

        Filesize

        149B

        MD5

        48f58abeaac832f838efd2beb25f4c90

        SHA1

        7878e28b62e5d9bc9042a3e44094e39668f03384

        SHA256

        893a58e7946728c9dd5caac10e5bdc306a465e406c1f979ded52a13dafebce2d

        SHA512

        c5e3025b63eead12a0f8192ea41afd1216dd87b14a07d22ebafc6d3d899a06e80da947b3fcd1b3f2cf53b89b3de9967f89c415394d66c277556373b620dc827e

      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerBeta.exe

        Filesize

        57.7MB

        MD5

        e70ccea69526c0cb9992d55e3f0f3b4c

        SHA1

        900e9e18a5298ef875818d2ae5d8da786432b07d

        SHA256

        85151b45e6887347b5040ac3d6b220ec670ca860842c2a84f4dcefb880f09f7f

        SHA512

        0b957d02fc638c5fb66e5019602adae7bc7dd4ef51422b38c662b7036fabd11edb178aaf16338743570deb5277b5249c8d58096648a5e35463221b5b7abc1a35

      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe

        Filesize

        2.0MB

        MD5

        c519783a8ff04c41f07f207c47fde116

        SHA1

        19d600c06cf47cb9450747a2a308058c35f4ede9

        SHA256

        431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

        SHA512

        0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe

        Filesize

        2.0MB

        MD5

        c519783a8ff04c41f07f207c47fde116

        SHA1

        19d600c06cf47cb9450747a2a308058c35f4ede9

        SHA256

        431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

        SHA512

        0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe

        Filesize

        2.0MB

        MD5

        c519783a8ff04c41f07f207c47fde116

        SHA1

        19d600c06cf47cb9450747a2a308058c35f4ede9

        SHA256

        431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

        SHA512

        0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe

        Filesize

        2.0MB

        MD5

        c519783a8ff04c41f07f207c47fde116

        SHA1

        19d600c06cf47cb9450747a2a308058c35f4ede9

        SHA256

        431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

        SHA512

        0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

        Filesize

        2KB

        MD5

        4993983975d23a4a19f54c4375a1b069

        SHA1

        2911f22d572f7dfcfd9dd9c35fef296b4a03a94c

        SHA256

        328292a8d7c111f19477a60000934405272998292f91fc40e0c8ae50d0bf060e

        SHA512

        d6d27b1a2b42df789e0a74476ffbda48f361a5d290e4cb98f9154c4a1e811ab63162ba9c48dee50a537cf4200fb88bdaefe7c119748ef5bbb996912fd8b61a54

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

        Filesize

        1KB

        MD5

        50df1ab9504ee68f6919390b0a3627ac

        SHA1

        e5b414f26485dcbbeb23c889878461ee357d9052

        SHA256

        ed5220caa3361c20f493c0ee86d2da6d2e0da3f0bd0a3ecc11783e3174f27f4b

        SHA512

        b558ddee0ea6eb8ae850affa9ae88556d08b8d5c83597e4695fa4f579da8b412d9de5184fb4c7b0f0a0151498d5927fbce65c5626b0a9e9251316a7aa260d159

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

        Filesize

        1KB

        MD5

        c5ef651a9650eb044382ba31a7fa140f

        SHA1

        c2e582dd129512948a7f5212e948705d932e212e

        SHA256

        a8663f9d52be9bbd3d781dbbe9d090f93236765c1f1d85d74f753ae62781389c

        SHA512

        0d3c06e233c0d00ad599aba749125b4c59f0405e455a2cdf01ea6e009e49544ed8d66c017fb4b09ece5ad6bf62599bcf86578ee46c5cffe79fa6c664c5726f09

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

        Filesize

        471B

        MD5

        d0bc1c61a924cf83d7a5bcf94178a610

        SHA1

        3c1a66f11904b90e886f62aad84a9c0f33243090

        SHA256

        7c817122ae913316253b8b355ac07edaa4665b673d52f6498453e131ee589b24

        SHA512

        4cba54c2c2d5fdbb6c2352c3d5b0d0fa74457088202bbb4aeb59d8b093ef70e26804b5b90125818cc3a71ccbcd25b83168924c25d6307e01b3fe724ef8a2b42a

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

        Filesize

        1KB

        MD5

        1ada13ded981ead6b01d18dae1fad77e

        SHA1

        8a48b96802dafa10fb639799742f0bdb71b97b9d

        SHA256

        a47530a1f805be7619f14d7c79a5a997889ce2391205ab20c41c3c68fb00222a

        SHA512

        4acb7b00cdebebb96252f3ecbc3136ace3e594dd62226fc6318cd2cfbc7d6c4c67235170eccf80109b08dccbba5f88ff6da623b320dd153ced1d32a7c77d3cf6

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

        Filesize

        488B

        MD5

        42fd2a0abadab122f27d1fbedb6e7d52

        SHA1

        d5423aa7dd7b156f998f8c59e4c868cf3699dab5

        SHA256

        3bb83af31e17cb8b54183d5e2b04e661b890704dc44ac3776507abffbe764b87

        SHA512

        0972ea091708401a3263b0509949cbec3dda663b2c5f4e1c566d6d61f305dca09eb87af3f2ac8e6029adb92bbabc25694df527fc0ef09021ddd906d25581ef82

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

        Filesize

        450B

        MD5

        61a180e1e853cd5953ee6bb6c317981a

        SHA1

        91f18b299536171b0a8bd0696d2a09d09524dc5f

        SHA256

        5bc126c83ed7881d3c84f9035ebc63fc774faaae36d7d682c78496424e9ffb0d

        SHA512

        ddbc50b70188ec73cde5fbe9e98eee810c979345631c6c5ca10d6c2bfe7b91e32c647e8447b550f0aa61d0d9e59fd0d88b5f28f14cd27a91383f38ff6a3f1b86

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

        Filesize

        482B

        MD5

        fdd3dee1ddb234810675c3b720aa91b9

        SHA1

        9144a73d16ab72e1f2440c9d33b46a1be7978604

        SHA256

        b795b73db2058083812eb1b05bac345b2aed08afe1877d51a1e397780eb69aff

        SHA512

        536ef602ad69364e41affef92bca66941a71591d46b896270d9a335867996e37e7bbf046782558d37a525a1d419d564bf6d76caf6c73fc34531061a5dd5ee2a8

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

        Filesize

        430B

        MD5

        a0c42647fe9a2378a06a314c302386df

        SHA1

        b237eef56710496379e0f206b28d3bb71c760324

        SHA256

        8496dd99eca79127663a6f123c63ce513f6d0e37948fe4ac6854d0aa6ac7808d

        SHA512

        366a357b8b5edead6d769e5a3c79f318db98bbdae4c3fd967b6d54724d0553267d729517ee4fb5693a9c2239976f5ba401f188384c6c2bea67b6a7c7257273f5

      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

        Filesize

        458B

        MD5

        7ed7765a0bcfd20620fb1783b7601e9e

        SHA1

        0d4f466f1645a28d8f218c0abc258d241b80d056

        SHA256

        dc26a05e92bcebf18a68294a0feb4684e0ac1762e1cb4ba81dc52efdc20f45e7

        SHA512

        7e7de2b3b5205494c23c439e38f186b08fdfd34bfefc8fe28e2867467b5c6decef0c7bcb2dec8a27c33a2529e74da7970215d2754a3d367fe46dc3d61868e6a2

      • C:\Users\Admin\AppData\LocalLow\rbxcsettings.rbx

        Filesize

        176B

        MD5

        f25b72b440dbdffc4de2f447353f2de8

        SHA1

        572a04cf991dcaf056629b3646a45ac30af26e9f

        SHA256

        078ee243238a81fc1c7a4b9acba25f057f5b722114f062998a986c63d45b61e4

        SHA512

        d1b6e4b55b3de48a485ca22361d2bd84c49c7809a9f72bd1f9d645c7ead23f4024fc7206407b08edf9bfff0bbd1c980ae190614aca9d96c684a6bde53151ae62

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        94B

        MD5

        b24f3eec1bf85377c5885c2db94bd735

        SHA1

        88cef320f59c33f31237a812561f479d9ae4288f

        SHA256

        e4e8d9df097648504dae2751ff96a5699c697595124277860b18f3780a1d07a1

        SHA512

        f062705c679424f5657c577545a4c26eaccf102fbac646be568ab8667c436e475257e58408602615a915b785b573b57c9424cfa2a238e5d3783c931cf7678812

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        237B

        MD5

        958aaf92d9cded9190ef0c0882486ed6

        SHA1

        df4ff600f16744b3a23c3c6f5a4f98303aa68465

        SHA256

        4cf62624193a0c67179e10f22794bf1a99514d352fefc5ea1896e7063234d21f

        SHA512

        7b15f4b5be145db5388a21228d9b16ffdb7deca444c20b1b9d13f3f4328256717ddb31ba7ccb975190b2586c1352cd1609a94e8505bc7aed59b7344fbddd7df0

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        29600d0be4a409a34475931c8bdfb2e5

        SHA1

        f0b8f27cdde5cd06ec8c5df7b8034e0308e0379d

        SHA256

        5f0e06995ea4b0c39653a23aa5e23a04601151d0abceaaaa2e85f8e80568da59

        SHA512

        f10bdd0956c8afb5f431a2a6645f232824cb5d01c24563a378c57c49e50a63d2e4973e3e812a641593bc6d0c87ad31068f0cc1f7d4eadddb61efc0377a155a57

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        2c6b8ae5ad87f9d67a88a29e680566d5

        SHA1

        2d27aaf98066700a51829109899d038f9d186510

        SHA256

        5fa99f8bf136c448bee97a4faa3158d3269bc598de78754dd7ab133bee0f95bf

        SHA512

        d75ede1f627eac74abcf9d0d45592e1589b4774a8007cf901b94ca3345910d3c7cdf2b5d8d4ff3584f94644d3a273762472bc382bbac5d66af74c6adb1e7110d

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        2c6b8ae5ad87f9d67a88a29e680566d5

        SHA1

        2d27aaf98066700a51829109899d038f9d186510

        SHA256

        5fa99f8bf136c448bee97a4faa3158d3269bc598de78754dd7ab133bee0f95bf

        SHA512

        d75ede1f627eac74abcf9d0d45592e1589b4774a8007cf901b94ca3345910d3c7cdf2b5d8d4ff3584f94644d3a273762472bc382bbac5d66af74c6adb1e7110d

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        ad3cb8ce735a2dc5eb3ac816b6df51c0

        SHA1

        1be1c8a5e26a23fc0c6b4f583728a1688505b10c

        SHA256

        fab8fb4ac5ceb4abbd067eaacec7fc48c60174a9227343c77945147de730cab8

        SHA512

        753fc5f7916944e317df81f084dfb466c74b770f593876f6fc8532f9ef63e247bae35f4ad2ad2e5bf2915d67f44b7efb1206bd1a1d3c472b510d36949b012bc0

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        ad3cb8ce735a2dc5eb3ac816b6df51c0

        SHA1

        1be1c8a5e26a23fc0c6b4f583728a1688505b10c

        SHA256

        fab8fb4ac5ceb4abbd067eaacec7fc48c60174a9227343c77945147de730cab8

        SHA512

        753fc5f7916944e317df81f084dfb466c74b770f593876f6fc8532f9ef63e247bae35f4ad2ad2e5bf2915d67f44b7efb1206bd1a1d3c472b510d36949b012bc0

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        ad3cb8ce735a2dc5eb3ac816b6df51c0

        SHA1

        1be1c8a5e26a23fc0c6b4f583728a1688505b10c

        SHA256

        fab8fb4ac5ceb4abbd067eaacec7fc48c60174a9227343c77945147de730cab8

        SHA512

        753fc5f7916944e317df81f084dfb466c74b770f593876f6fc8532f9ef63e247bae35f4ad2ad2e5bf2915d67f44b7efb1206bd1a1d3c472b510d36949b012bc0

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        4c26d8da474f072318bb6e16ea7ddee3

        SHA1

        05a565a42019cc01e68c35e570bfc6043cddb3e2

        SHA256

        477d0b6400fd1a95370bce007117acc5f2a51d72635b00c20a72d58809e6348f

        SHA512

        7abe28cf1d744486f6304b2d606aff0b99c01b4ca78791a4a9cb804a3a07e36e282a7e64eb9c4ea1c23961e2fa6a79fad59855c36d855488986d1c032c7588c1

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        4c26d8da474f072318bb6e16ea7ddee3

        SHA1

        05a565a42019cc01e68c35e570bfc6043cddb3e2

        SHA256

        477d0b6400fd1a95370bce007117acc5f2a51d72635b00c20a72d58809e6348f

        SHA512

        7abe28cf1d744486f6304b2d606aff0b99c01b4ca78791a4a9cb804a3a07e36e282a7e64eb9c4ea1c23961e2fa6a79fad59855c36d855488986d1c032c7588c1

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        3af59052731d071b21dd57d89bcfb802

        SHA1

        2b9b12d5f78eef9cfa1f3151cf62275ca4ddd48d

        SHA256

        6aff5ad222cb027ad77fd0203e5d4c6931544b06bdda9a296b35edd4684ab23c

        SHA512

        f7e8dd4eb593c361d1c821f66d4054e6bf8288a9b84405fff5dbcc91d79d9336bbb9c98ee70b42d32d3e5bb495a9e5d691ed5f0cc0400c7232e4436abd165fe5

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        f030c219c1be4a4e32c6f55e2ce36b26

        SHA1

        2f8b34220bfd277b6aea26483addc0752917b114

        SHA256

        618e6b68c62f53d71370844f97fc997885ac4a52bfeae229e91b1b082a69905b

        SHA512

        fb40763a27c145fa57ca05029653a40cf76b04c9490903d2aab18b172af71c1fd4d4bd33f0a0bb3941534770559ce879050ae7950f41c18b9b18bec9225dc952

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        71fdad090d28d93721aff44a24e4195f

        SHA1

        ba15c36f116b1c53947463fa8bb234e078ec14a8

        SHA256

        652411221179aaf322dfc287682de915da5e187991e9d4fbccef36777a35003e

        SHA512

        7ea653521d796f9bb77f4b2525274a39628fcb5ce576bd9aa2e0d72cb1f411e6cef13734987f0ff951a1aa0a48175372bb87e3a6d774bcc6b1620e0839c3eba5

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        71fdad090d28d93721aff44a24e4195f

        SHA1

        ba15c36f116b1c53947463fa8bb234e078ec14a8

        SHA256

        652411221179aaf322dfc287682de915da5e187991e9d4fbccef36777a35003e

        SHA512

        7ea653521d796f9bb77f4b2525274a39628fcb5ce576bd9aa2e0d72cb1f411e6cef13734987f0ff951a1aa0a48175372bb87e3a6d774bcc6b1620e0839c3eba5

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        71fdad090d28d93721aff44a24e4195f

        SHA1

        ba15c36f116b1c53947463fa8bb234e078ec14a8

        SHA256

        652411221179aaf322dfc287682de915da5e187991e9d4fbccef36777a35003e

        SHA512

        7ea653521d796f9bb77f4b2525274a39628fcb5ce576bd9aa2e0d72cb1f411e6cef13734987f0ff951a1aa0a48175372bb87e3a6d774bcc6b1620e0839c3eba5

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        350B

        MD5

        98db933d526dc92297de05d457c4c81c

        SHA1

        5baa75bf09df5792df042a4a5eb57a58b25b4872

        SHA256

        dae8dddd892a53c0bf65e35974d3c6c07296bb26e639b60365111c138c52bcc0

        SHA512

        b28f6e92d36dcf92a78c18de94cfecd9af989ded001f0613ac3c05ec9a69700d94629a78b69fb8576a56df6d1d06ff25b53dc6dacf5bd28936229c9d3e731d1d

      • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

        Filesize

        549B

        MD5

        cf0d25f4ede8a3ee9e429508ddb920c0

        SHA1

        220d8a8f8b9fbe7891e3a4afb0e423a6ae150977

        SHA256

        0375fa9e212263cdb56efeb757083d836feaa6ad849c3b2717cbf09a9c5a6c3f

        SHA512

        96838e0eb13efb7cc44116b2823b4412bb1fa1329d9ed0610d13f0ff3723e06ac0f36c97dab69a40d5d9b97851bf30f1f74e10ce07e6b331440e93732c0813f0

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\772034db167d3f4260047db4a7f2b8a58cf448709327013541e47c8962b6e556[1].js

        Filesize

        129KB

        MD5

        9d820d1a7b2108579da7302ef37531b1

        SHA1

        091d2c110700001859da3d8c763ed7d08429d06b

        SHA256

        4d2f70d0cfb86f81cd532910fe1af8e18d7d2f029fc1e7cce680d2b8cd3a7679

        SHA512

        d23d0ce48f340dabd709dcfc79bb92286ae6bfe4f2ed78f093f7d14a49b4d9819083c03c7819c67c2bd7e8d483ad6b000f9987793248e855301fdb2cf5a213f6

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\828b482815c645cb8df79a5ef99fb7f86cfeb41a8076f4cf8ba2c07c6d315937[1].css

        Filesize

        787KB

        MD5

        182a16d42616300c39dc69c065cc73fe

        SHA1

        ac7febcbdb956fa3a1c54eb08bf34982171284f9

        SHA256

        75d13c787085c3be4fdefa435d3bc64c755fb76808e9fcc090e2e4fb06dda911

        SHA512

        b38a2744c7d0c5dd506e64c30342c37bb89360bbf69919e0c5da105d68837fff7ec1598a404b752fa6d41a2bf94c4c29897e9bafcaa2c3208e6903b05f5a4618

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\BatchIncrement[1].json

        Filesize

        163B

        MD5

        bedbf7d7d69748886e9b48f45c75fbbe

        SHA1

        aa0789d89bfbd44ca1bffe83851af95b6afb012c

        SHA256

        b4a55cfd050f4a62b1c4831ca0ab6ffadde1fe1c3f583917eade12f8c6726f61

        SHA512

        7dde268af9a2c678be8ec818ea4f12619ecc010cba39b4998d833602b42de505d36371393f33709c2eca788bc8c93634a4fd6bec29452098dbb2317f4c8847f6

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\version-9898fbc5d6bc4b1e-rbxPkgManifest[1].txt

        Filesize

        1KB

        MD5

        efddc002df45d541eafc2f0ef93ab267

        SHA1

        92372a6dedb33b285506d12205859a1b8d2fc212

        SHA256

        9cdb0d2f40797eccb39949ccee9c46638c721c8b1b1e6a0c6cfad59683780775

        SHA512

        ff99d29ee042d1c3368462b3ea1421cc7cdba22ca5d9cfb839c10c222d86fe07e13e3caea270d65f9173a914ad4636c781ec24dff0e35fc81d499586a41c82e8

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\5c779fadf28d7893108d5b896e092e0d-GothamSSm-Light[1].woff

        Filesize

        54KB

        MD5

        5c779fadf28d7893108d5b896e092e0d

        SHA1

        9e30dd79b35c884925d8f4b8dcfb4f30f062cd10

        SHA256

        dde254a5345aea2d61098d4cf6f89af4cf1fe11b69345ba7324655b254ac286a

        SHA512

        18ef9ed6f342f19ff2029f999798d7c8a0c68b022fd117b24b883f68adf85b1d1245078162a3d66db14cb92beddb5be718d23fbc4171f22da2f4e76faac81150

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\713e0b3a604ff4e44f55f9d1c100e8b5-GothamSSm-Book[1].woff

        Filesize

        55KB

        MD5

        713e0b3a604ff4e44f55f9d1c100e8b5

        SHA1

        b024711998cc92777241b1401ca39c82565f2d26

        SHA256

        7daea40b38c44630a22ed4ebdb0502847f58339094089865025e0909145deb01

        SHA512

        f6125a31fb7198ac12027235c92018fc085859423ab1c1ec4d2bb75aeba317b49e7a17727ed106539cd9938aaf6e4296862c228bffb841e1ce372a91df907c02

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\WindowsPlayer[1].json

        Filesize

        119B

        MD5

        cbc56e4a8fcd650f64413eff0c7b0e4a

        SHA1

        9dbfcb3527aa4726ca8eb1ae8c2930022c983039

        SHA256

        8cfc93f2c2f1bdcad9b46d7e99aeeba08d03c05d975e28e92b09abb02517486b

        SHA512

        62e266f8c5f2ad8b8edf18ecc503d957c4efe24a51e816981a17554a9844a230933762f2d2249d4ddb004322849d1ad95685fc0eec1c2622b9636f8af41d1673

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\WindowsPlayer[2].json

        Filesize

        119B

        MD5

        cbc56e4a8fcd650f64413eff0c7b0e4a

        SHA1

        9dbfcb3527aa4726ca8eb1ae8c2930022c983039

        SHA256

        8cfc93f2c2f1bdcad9b46d7e99aeeba08d03c05d975e28e92b09abb02517486b

        SHA512

        62e266f8c5f2ad8b8edf18ecc503d957c4efe24a51e816981a17554a9844a230933762f2d2249d4ddb004322849d1ad95685fc0eec1c2622b9636f8af41d1673

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EY3KXMB3\PCClientBootstrapper[1].json

        Filesize

        3KB

        MD5

        a92c2b1ef44241e1e021a9c28a6c7c7d

        SHA1

        1efe3059646d2ffa728ca30f73cedf2ef2ff4454

        SHA256

        2874d62a008552cab27f76125f061ded255e4b4de9ce481460941983e66e43ee

        SHA512

        9aca152933a0b528404c7cf294c6cbc1daa9468d897e343ad499a1cf698f65bfd1b261a4b6c1378a76c624078e0a3154bcc39b314f20b2bf2f542fe5e0569b76

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EY3KXMB3\fe0e9885efc341b17f7e600781493f69-GothamSSm-Bold[1].woff

        Filesize

        55KB

        MD5

        fe0e9885efc341b17f7e600781493f69

        SHA1

        424c8cf3af83a269579cfd4c040e6eb6f67316f9

        SHA256

        be7c8a03cf754daf4ede018bc98b4c58c6224b45dfb15e639996c9345e61d905

        SHA512

        f7152efaec206cbb518b1f48fe47b79c12a1b88136feb4dc0ed0e8f8b3fadb36e6994608e6481093883439e9f3c5792d86b4f64b13d4a3302b178e767abb885e

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EY3KXMB3\hsts[1].js

        Filesize

        256B

        MD5

        670828ec4d5bc925af5e231a21aca9b5

        SHA1

        e5b287e529c4cd2892df1ae31ff5ca3e4e820519

        SHA256

        60da31d144a496f76bc76caad2a7c809721440703e0cc41899d3275f47c808c5

        SHA512

        dac6169c8debb7f7bf605db7774bed66a949e5908ec9f8b53cb83e387aa0be3de46a3779a43e1a5e809dbef12992327e4c052f232529383da521ba5e06311fc1

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\U4IULL1L\2ed7693f8cf4d79466dd604c35502f76-GothamSSm-Medium[1].woff

        Filesize

        56KB

        MD5

        2ed7693f8cf4d79466dd604c35502f76

        SHA1

        50f205901b4b50b777ec024cf1142eff38b92d21

        SHA256

        24909631879a063171288611fba23cd68ab3bf99f5bb8646e297cb0bd7040379

        SHA512

        ecafec254da8765c894d359600e738e6c82d0da7bb1238723d86674d8d60b70d9f3c9ab881162f06a90aa3922b692817d7fd069b95cd654670a494dc5dfcac18

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\U4IULL1L\3ac436cddb043616a4059aa6fe3b0c0a-GothamSSm-Black[1].woff

        Filesize

        56KB

        MD5

        3ac436cddb043616a4059aa6fe3b0c0a

        SHA1

        feaedcd1f6a04c709c042d27e2989feb7fd8bbf3

        SHA256

        3507166f4e17a878edb60bf631000cf684894aec3e340627ab716c0da94b2743

        SHA512

        d15ccc385b87b170539b99a452b654c4479b12684dfa33e0cb1f85caae2c7a24f640354b9930d0867662bdd11085c227f46ab5a9b1b3d261f65ad33faab53ce4

      • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\U4IULL1L\4db2f741b7a3ec36d11fec999ce33f708ae85641cabfd27e11e0935928f7d9c4[1].js

        Filesize

        2KB

        MD5

        92ee80da236a62b17856c65a02e916a9

        SHA1

        00082c564f38b7fef6f5f013f79d44166009154c

        SHA256

        541c4f65e7c57a945b620885428d10bc30d0373c192302c9911541064718a4e8

        SHA512

        8cc7d463ae19febad1c023bf65612970e94d5798d88d50deffebf1a3665da956f7db5d946380eee5cb23d534837600c638ac3092f566465e422fb6b16adcace0

      • C:\Users\Admin\AppData\Local\Roblox\LocalStorage\appStorage.json

        Filesize

        9KB

        MD5

        e0788cbb58eeac6947cb690fd0daaf96

        SHA1

        2cb78621f57fa8069e8665de1a83d4c9ac03f804

        SHA256

        315f8ee8d93cc10e6ae3175efa62eb7b6879e664118a887a4ad4deb2106241cd

        SHA512

        7293e425d387eb8e447286b798d63f77927b8fce01f8b359bc7ed8020cdac66d003dbbb4d115a130d0a1999e7e429730ee4728aa15bda1b466725ccf1350eb57

      • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe

        Filesize

        2.0MB

        MD5

        c519783a8ff04c41f07f207c47fde116

        SHA1

        19d600c06cf47cb9450747a2a308058c35f4ede9

        SHA256

        431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

        SHA512

        0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

      • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe

        Filesize

        2.0MB

        MD5

        c519783a8ff04c41f07f207c47fde116

        SHA1

        19d600c06cf47cb9450747a2a308058c35f4ede9

        SHA256

        431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

        SHA512

        0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

      • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe

        Filesize

        2.0MB

        MD5

        c519783a8ff04c41f07f207c47fde116

        SHA1

        19d600c06cf47cb9450747a2a308058c35f4ede9

        SHA256

        431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

        SHA512

        0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\1c0d450ab6a3eb0dd5ae53b661f27229

        Filesize

        684KB

        MD5

        ec4526d1aac6cecb618e7a42579b088f

        SHA1

        b4740f1ceae91308cc6368c86f21c3ab5ccee9d9

        SHA256

        895da36a527158437400cad87e11aee6cf88f491c99cb58edfc8d22aab1551a9

        SHA512

        c3d95846172b9c73f8006027607ace0e028c6361f91a8fded5dbe88a31a9f4391b21683d54245fc1bae930107a46c6bd2001e84bc1743f4118c4c3f0ace1db16

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\22dc685c6a57d3916f3d8ed74d2c7c90

        Filesize

        232KB

        MD5

        f877b0f4ae78be318bb806db22783a8a

        SHA1

        5c9b6fca12c6698b0c8e420f86f9e2ff85df87a0

        SHA256

        d7dd147efbe529c71099bd8f5befb46b051592eb1d257f750f69e01913daf0ac

        SHA512

        163299ba1901dd711e4810f95b03774140f12f72220b4795a2a293a5eb498b6caab912479d129cca817797cbda21997c59878a15fe24eca0f634bf6c02e15080

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\2e328237ade1b680339fece41df0cc5c

        Filesize

        8KB

        MD5

        d11a063575ca74ae21657c6741a79542

        SHA1

        192f87cbb407326d2c43fcd61319957be642404b

        SHA256

        776ee9452e1051719bf120b5912b97f74c75336061508a56b79af4acca2dabb1

        SHA512

        a62065f1f1283444f572f4beab415994ed5fef01aa1b9285987cac1d8455d26cdf7723b97b4e8efd919b12f6997727363282abebe105829b6ade91d157276efa

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\2ff3ffc21c247af8992b28efb3e75800

        Filesize

        684KB

        MD5

        b46bc5077ea7f1984837cb4dc7c1c402

        SHA1

        36747e25b72d0b092bb90507009fbb835db49f7c

        SHA256

        c7e118f5548c3082d55aeabafce04061a4c4597818ca477aea2f024d51f5c392

        SHA512

        88ce3b66e33050e3cb695e80d418cc642667c981600ec9aee3067f03988967ef27941c2b4ac47b47642e1e485377a29a180039a639aa8d0d1839364203f32dbb

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\40903ce89a8aab3f89d85d4dcb8d6043

        Filesize

        323KB

        MD5

        697ea0e544d4c4e016f03a34d9af8c24

        SHA1

        2644cab185a8b657ce99330f12a637cc0e92a552

        SHA256

        5b2b79b98e57db72a79a798bbe0f2944296bdf59946379d2042fca990dbf965d

        SHA512

        4ba1cf05b86cb8ad0c1c809130f3b449f8db3f1c12bc0f0f85b5b32b54538de15660f86e8cb93c65c3358c120121d4b234eff514a940b5ff09fe0bce79c2d2bf

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\45abd6d2abf1e1413ede1def5aeeaa1a

        Filesize

        1KB

        MD5

        1e583f8a03a2cc818e92939c793b1e80

        SHA1

        34b2ac7de29b2be27d219970c584f00f1593f951

        SHA256

        3c30aba22e101fb2aeba37f46503d90ddbdc674fd3d6cdff464aa1240e83cc0b

        SHA512

        b03de60428395c66d8569aa5c46c6227c034bb98e7219e0e1ccd7d189ea3a3f8b723be981dab28e2f907d91b63aa2732263d3f6ed9472af3358b84a8b7c6ec5d

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\497fe0b27a20cc46ee160048fd99d019

        Filesize

        32KB

        MD5

        cb630c720d45dbee3bfd10796490c79a

        SHA1

        a9478ae957cb6e8346f5d7579ac609879867902c

        SHA256

        fe9c2e6d761aa7d516dabeb3c4c0ff08e5a9b5f3eaa9c87242fafe5f611fd11e

        SHA512

        0c878fdc229ed5c7551e16d8fbd2926c933e1d154a8c563ae5ff85a049fb4c2709359d2dad6e56886fc36d0d11e8d426bd5b31e0dd31e1840ea63ea1c7713b6a

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c246d4baf10921e55e3dc430a5f579

        Filesize

        684KB

        MD5

        984b850ef5306cab64bdebccf04ead2d

        SHA1

        49df60678b2c7c198500cfc94516b7d36b9f7ec7

        SHA256

        7132489dde3729595a24da60d097aa52c92b6c1b3bdfa01987c019ba24adb6a1

        SHA512

        1da27b1c4200a8d1337c870d5e31bd6c72e5e566919e693de4716d4aa2ce76351b94664aa47bba623cf3b3d6ad849618a18936f6ab49da47d895052405d60582

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ea70367ca46aa008e938f3a0fbfdb73

        Filesize

        1KB

        MD5

        1234865adc35e05b2a1d9628d031a77e

        SHA1

        a3f643f5cb8be82045c2964c8458023cea2888d8

        SHA256

        75607e1960fcba826de9a0bd2cde19a434fbce2c5042dde58272d48c907a01cb

        SHA512

        87c45f524e90f243d3e6c96322c6e651483b69fdc0f0391cfea0245dbb363c232bad6a312c17bca558267a7092edefc622546c24c3db064f3119d5a42c46bab2

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX080428B53AD741C3AC61A0643C22841C

        Filesize

        91B

        MD5

        c2b9502c5f7c1abaf1c2908727249a92

        SHA1

        1eef10e62be499dfc8f674f684174ba076b46af2

        SHA256

        bace155faaee37f4bf7596101f0955de41bafdf2f18cb2f7213f9936b9cfa00e

        SHA512

        885710a947fa1fdbd03df4c7d8314b8fc4eaa5570d721fc5e99e46bffbffa6f60a91ed1ba2babf7893840cb1b189b2d7da04cc186badec5fec1d2226087789b6

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX1ABA0A70941F47538A7A13C75D40636E

        Filesize

        91B

        MD5

        684b54e39c40b9575c0bf8428361e3f3

        SHA1

        6ba06f3295f34eb3664e664db0bf686a9e7cad67

        SHA256

        c6a26e1b3bd3b3ec2d18072a6c0f6964acfbfadacbda5d71d4132dfed35b1586

        SHA512

        2f3a69fb146c18d6fcfce95cef026992582a73def283f807a1f2ed1cdf4be69ccbdeb565afe9ec5a8f13cde6bb0dc313f331074ad5b862e7c801915691158911

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX39883FBD18CD4AC7928EF8803943C439

        Filesize

        91B

        MD5

        eb2d657e7c218a6ac09244d3690032b2

        SHA1

        c1181dc0ec5cafaa1811db7c4899d82a271a485c

        SHA256

        a02732cf98663746c6694e79bec1e97e685587d20881e532f481402b08a93e00

        SHA512

        00e22642049bdf50fe5298da87696f57d4e38bf07a7f76719e8b45bdbbc8fef08a51320f3c1cdd76338995696e46f998180eca663f9929adb5601f7104346518

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX7CB17F2B1FFF4BD5AF63628D056ED4FD

        Filesize

        91B

        MD5

        511b8ff7f51d250f3b26079361ac392c

        SHA1

        833a31e7b02e66cc1f558cebe2abba0d02f44757

        SHA256

        c8663482def07ca3b48ca1c5b6ebaa5d1048b12d91a7b0636fff0cbef9c440fe

        SHA512

        d1cda891ccc54c2fead49c5e211e4267e741befa967d2b87489df9942ae0889e2caab1f9ff4ea21b17f2be0f243f5bb09504bb14ea1bdcb5982f02f19981b98e

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX7CCBADFCC0914D42B7A40A2D6C3B97C2

        Filesize

        91B

        MD5

        7289b841cd7147e47add357a6d6b8a44

        SHA1

        9831fe099effa38d472a96dda252c338788b4264

        SHA256

        b30e3c11e6e67fee007f26923e85808b980c8a89705d53864eafe8859da6eef0

        SHA512

        0b29d3ac1c3f01373426c52e7e4392f8fbec5b848fbe6c565378e316eb19d043f05266c53818b44b7b01635c696fa78a3a6323de802f65e9e8fe9dc99c97a9d0

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXB9AD79FC91CF4B38B674DA4C6F108FCA

        Filesize

        91B

        MD5

        6af25b555b6123f5818d03d1b8b645b5

        SHA1

        b9df864e1bf05b153bdac886cf7d65ebcfb8ed00

        SHA256

        d4fb85112f72cf50391b65e7538cbc49c2e959f90a62f89ff3cd115725fc7dc2

        SHA512

        db96cb6cdd8b21d612babbae710256acdff2572cdb8af1f32c4b2619643d6ab833b99b482e0976b84734f6ad2c6324d93d76f21c9eb2ed510eb31846545a9f7c

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXCEB110897CDA4F9FAD6B50D18628855F

        Filesize

        91B

        MD5

        5497ad0dd988f846fe2c33e2e2fda52d

        SHA1

        1fc37bf83f0814685f911d2a92495f18ba8f14a5

        SHA256

        240d3e6f7fe92e4fea46bf5f048086dd844b18caa5fae08bba62ae261f2ddea6

        SHA512

        072d8593502f748250a20f242f86a8789e334a6e7595fddaf058f2948efa5d77e6f873da70fedcc388d2f07ef9ba32ed5c38e05cb942ef556ac057e647016e0e

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\a0e9783cca86c2efb3366ac6e6f93eb1

        Filesize

        45KB

        MD5

        1a0822eaee326ae28755b3ddb4be74c9

        SHA1

        66246869304bbe9d5a11330fb39fddba779d56d5

        SHA256

        6519c58dc578c1de9df376b96bb208be170ee489edf4762b16e941849804f0c0

        SHA512

        c63bd8d7a092bbd65d5e63805126c877328dcae7f09163c2435e6d1c2788ab2676bd10ed4dae6726752c69d9944f2a0a7e08994252eff2c699aa1f0802df71f8

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\b7980b5d8c7cebec45c2665f52e6e983

        Filesize

        2KB

        MD5

        6e81cc6f26a42ca6bf70c809cc9b7a53

        SHA1

        e0580fcb9beaa540699ffd11c0f1d6293b7786cc

        SHA256

        6460bdc79e7f9049626e580259c5480172404c271ab99a2474fa851a47917661

        SHA512

        3641904f2815023803bf971f1dfd8554efcdef20c723180f1295ed2a40d4f289def2160f0f26ec7572191cbfddc1e78168547c194d325a49b51c028fca73e990

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9c1fd77ac90400d6858a5890296c908

        Filesize

        27KB

        MD5

        e6e72ceb00bb52f1f36b51ea3c335f20

        SHA1

        50a3c8f9bbc31b65fbdfe62ca232ba851988b807

        SHA256

        f2e57bc493993986448f55866376ed34056478ee192508e234da938f23ae5d4a

        SHA512

        3af3386d91ab17d5eee8d413aa7cadaaa2d4e1542b8dfe01c49fe71f7ad21af161f2670f7d27ddd2056286dc0a29894297ffafa88f28985584d31cf97fe1278d

      • C:\Users\Admin\AppData\Local\Temp\Roblox\http\ffe5e8f4018267825d1ac44f013d7722

        Filesize

        407KB

        MD5

        9aaace8e4a1fb374b157401cc85da34d

        SHA1

        43710f33af40566bcdf43caa7b86470add80b6d1

        SHA256

        f70d386d388473f836118f9bfded2b822c61339c4c4e2f8ed4452fc4c20e8fa6

        SHA512

        d2a89892debb40c2503c879080ef606601e3cf547fcafa0a7785776b930510521c76b9c682c04279f6efe864a522870c9693a412e489942cb521de91bedbd72d

      • C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXB62BDE51188F46A7B82B1F06956BC935

        Filesize

        4.1MB

        MD5

        24e99735c221318d8214481fe2a689a9

        SHA1

        e6776468d0cb555869a530dbcaae6d232d0b2291

        SHA256

        12bfc1d62c110fa8e99955ca82a4e1ef99af65f81d7b18cf6d4c84977faae813

        SHA512

        a285c44ea02a1867f13bc0ba500c730b18efb295202a6b729c4aec8a60b5fa494016a7a8f0bc5a0cfc4728fe7493dc21a8782f646fc515129c8f71bd63686826

      • C:\Users\Admin\AppData\Local\Temp\crashpad_roblox\settings.dat

        Filesize

        40B

        MD5

        707822e93bacf9f1ee0aae7d84237a55

        SHA1

        fcd49f956ec629e3770b897287b703591dbe863e

        SHA256

        a301b12d56895096904265c1a4fc5ed00c6988b602fcdd0a620922137a3c29c6

        SHA512

        d6babba85830dc2d2a127eb6e579bb819139cd3d619d21f23bc263f6aa553ccc48204c52acdca4757adf3c1eeeff0db4275784e152138c9acf312b9e0c049579

      • C:\Users\Admin\AppData\Local\Temp\crashpad_roblox\settings.dat

        Filesize

        40B

        MD5

        707822e93bacf9f1ee0aae7d84237a55

        SHA1

        fcd49f956ec629e3770b897287b703591dbe863e

        SHA256

        a301b12d56895096904265c1a4fc5ed00c6988b602fcdd0a620922137a3c29c6

        SHA512

        d6babba85830dc2d2a127eb6e579bb819139cd3d619d21f23bc263f6aa553ccc48204c52acdca4757adf3c1eeeff0db4275784e152138c9acf312b9e0c049579

      • C:\Users\Admin\Videos\Captures\desktop.ini

        Filesize

        190B

        MD5

        b0d27eaec71f1cd73b015f5ceeb15f9d

        SHA1

        62264f8b5c2f5034a1e4143df6e8c787165fbc2f

        SHA256

        86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

        SHA512

        7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

      • memory/3920-372-0x00000000006C0000-0x00000000006C1000-memory.dmp

        Filesize

        4KB

      • memory/3920-371-0x0000000000690000-0x0000000000691000-memory.dmp

        Filesize

        4KB

      • memory/3920-373-0x00000000006D0000-0x00000000006D1000-memory.dmp

        Filesize

        4KB

      • memory/3920-7672-0x000000000BE60000-0x000000000BE79000-memory.dmp

        Filesize

        100KB

      • memory/3920-7673-0x000000000C300000-0x000000000C31E000-memory.dmp

        Filesize

        120KB

      • memory/3920-374-0x00000000006E0000-0x00000000006E1000-memory.dmp

        Filesize

        4KB

      • memory/3920-375-0x00000000006F0000-0x00000000006F1000-memory.dmp

        Filesize

        4KB

      • memory/3920-376-0x0000000000770000-0x0000000005EF8000-memory.dmp

        Filesize

        87.5MB

      • memory/3920-379-0x0000000000700000-0x0000000000701000-memory.dmp

        Filesize

        4KB

      • memory/3920-370-0x0000000000680000-0x0000000000681000-memory.dmp

        Filesize

        4KB