Analysis

  • max time kernel
    388s
  • max time network
    401s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/04/2023, 16:04

General

  • Target

    RobloxPlayerLauncher.exe

  • Size

    2.0MB

  • MD5

    71044866abd760632917f89ac39451ac

  • SHA1

    feb7b02f1e7a3206698f8d3f2e554f0419a8f686

  • SHA256

    460cd2ae6aecc2633e3b12e55a2d9071cbffcab21d371539f0b1a802d5cd8270

  • SHA512

    98d741ee76e9cd082662be49c11b85408643dbfc39289f4194f0cb63d0d21cb3f986f28d2fc65600bbad4520e78cc57aca40fd43dd9cef3342f4b23565c67734

  • SSDEEP

    49152:EcYgTmNVji4o14YTkaac6ECCTnlMQPMQ3dS+LTLb6VYhZ9:ENgSNVjZo1+4b/

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 3 IoCs
  • Drops desktop.ini file(s) 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 55 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 52 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs
  • Suspicious use of WriteProcessMemory 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe"
    1⤵
    • Checks computer location settings
    • Checks whether UAC is enabled
    • Suspicious use of WriteProcessMemory
    PID:3252
    • C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe
      C:\Users\Admin\AppData\Local\Temp\RobloxPlayerLauncher.exe --crashpad --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --metrics-dir=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --url=https://upload.crashes.rbxinfra.com/post --annotation=RobloxChannel=production --annotation=RobloxGitHash=d4a4a4ad1cbd35850c37a672e5c216b9b80fbbae --annotation=UploadAttachmentKiloByteLimit=100 --annotation=UploadPercentage=100 --annotation=format=minidump --annotation=token=a2440b0bfdada85f34d79b43839f2b49ea6bba474bd7d126e844bc119271a1c3 --initial-client-data=0x7a8,0x7ac,0x7b0,0x6f0,0x6bc,0x127f748,0x127f758,0x127f768
      2⤵
        PID:1436
      • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe
        "C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe"
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Checks whether UAC is enabled
        • Drops file in Program Files directory
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4520
        • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe
          C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe --crashpad --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --metrics-dir=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --url=https://upload.crashes.rbxinfra.com/post --annotation=RobloxChannel=production --annotation=RobloxGitHash=e97527f1946dcde1ecf49aa2cf30d420185b368c --annotation=UploadAttachmentKiloByteLimit=100 --annotation=UploadPercentage=100 --annotation=format=minidump --annotation=token=a2440b0bfdada85f34d79b43839f2b49ea6bba474bd7d126e844bc119271a1c3 --initial-client-data=0x564,0x568,0x56c,0x544,0x5a8,0xe9d584,0xe9d594,0xe9d5a4
          3⤵
          • Executes dropped EXE
          PID:1700
    • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe
      "C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe" -app
      1⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:4920
      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe
        "C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe" --crashpad --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --metrics-dir=C:\Users\Admin\AppData\Local\Temp\crashpad_roblox --url=https://upload.crashes.rbxinfra.com/post --annotation=RobloxChannel=production --annotation=RobloxGitHash=e97527f1946dcde1ecf49aa2cf30d420185b368c --annotation=UploadAttachmentKiloByteLimit=100 --annotation=UploadPercentage=100 --annotation=format=minidump --annotation=token=a2440b0bfdada85f34d79b43839f2b49ea6bba474bd7d126e844bc119271a1c3 --initial-client-data=0x720,0x724,0x728,0x698,0x6f0,0xddd584,0xddd594,0xddd5a4
        2⤵
        • Executes dropped EXE
        PID:4472
      • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerBeta.exe
        "C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerBeta.exe" --app
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Modifies system certificate store
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        PID:3920
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x418 0x45c
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:3132
    • C:\Windows\System32\GameBarPresenceWriter.exe
      "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
      1⤵
        PID:1600
      • C:\Windows\system32\OpenWith.exe
        C:\Windows\system32\OpenWith.exe -Embedding
        1⤵
        • Suspicious use of SetWindowsHookEx
        PID:2016
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
        1⤵
        • Checks processor information in registry
        • Modifies data under HKEY_USERS
        PID:3424
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
        1⤵
        • Drops desktop.ini file(s)
        • Checks processor information in registry
        • Modifies registry class
        PID:2384

      Network

            MITRE ATT&CK Enterprise v6

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Program Files (x86)\Roblox\Versions\RobloxStudioLauncherBeta.exe

              Filesize

              2.0MB

              MD5

              3e1634906e576e71becf3b0084f3821d

              SHA1

              2fec3414a7f154e7166212bfcd0cb300fbf1a846

              SHA256

              c041f06838dc23831f5cda5e27ed0702f377df774ae03eedab0d8468fa902eac

              SHA512

              e084c0e0862952db7a77cef1c6a8d6ad647a61058ada42bae96c8c7e36ec417830a9b26f370f95a271db623cc861ab0f9a3f26f793478dbeb3b706e28370007f

            • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\AppSettings.xml

              Filesize

              149B

              MD5

              48f58abeaac832f838efd2beb25f4c90

              SHA1

              7878e28b62e5d9bc9042a3e44094e39668f03384

              SHA256

              893a58e7946728c9dd5caac10e5bdc306a465e406c1f979ded52a13dafebce2d

              SHA512

              c5e3025b63eead12a0f8192ea41afd1216dd87b14a07d22ebafc6d3d899a06e80da947b3fcd1b3f2cf53b89b3de9967f89c415394d66c277556373b620dc827e

            • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerBeta.exe

              Filesize

              57.7MB

              MD5

              e70ccea69526c0cb9992d55e3f0f3b4c

              SHA1

              900e9e18a5298ef875818d2ae5d8da786432b07d

              SHA256

              85151b45e6887347b5040ac3d6b220ec670ca860842c2a84f4dcefb880f09f7f

              SHA512

              0b957d02fc638c5fb66e5019602adae7bc7dd4ef51422b38c662b7036fabd11edb178aaf16338743570deb5277b5249c8d58096648a5e35463221b5b7abc1a35

            • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe

              Filesize

              2.0MB

              MD5

              c519783a8ff04c41f07f207c47fde116

              SHA1

              19d600c06cf47cb9450747a2a308058c35f4ede9

              SHA256

              431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

              SHA512

              0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

            • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe

              Filesize

              2.0MB

              MD5

              c519783a8ff04c41f07f207c47fde116

              SHA1

              19d600c06cf47cb9450747a2a308058c35f4ede9

              SHA256

              431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

              SHA512

              0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

            • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe

              Filesize

              2.0MB

              MD5

              c519783a8ff04c41f07f207c47fde116

              SHA1

              19d600c06cf47cb9450747a2a308058c35f4ede9

              SHA256

              431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

              SHA512

              0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

            • C:\Program Files (x86)\Roblox\Versions\version-9898fbc5d6bc4b1e\RobloxPlayerLauncher.exe

              Filesize

              2.0MB

              MD5

              c519783a8ff04c41f07f207c47fde116

              SHA1

              19d600c06cf47cb9450747a2a308058c35f4ede9

              SHA256

              431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

              SHA512

              0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

              Filesize

              2KB

              MD5

              4993983975d23a4a19f54c4375a1b069

              SHA1

              2911f22d572f7dfcfd9dd9c35fef296b4a03a94c

              SHA256

              328292a8d7c111f19477a60000934405272998292f91fc40e0c8ae50d0bf060e

              SHA512

              d6d27b1a2b42df789e0a74476ffbda48f361a5d290e4cb98f9154c4a1e811ab63162ba9c48dee50a537cf4200fb88bdaefe7c119748ef5bbb996912fd8b61a54

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

              Filesize

              1KB

              MD5

              50df1ab9504ee68f6919390b0a3627ac

              SHA1

              e5b414f26485dcbbeb23c889878461ee357d9052

              SHA256

              ed5220caa3361c20f493c0ee86d2da6d2e0da3f0bd0a3ecc11783e3174f27f4b

              SHA512

              b558ddee0ea6eb8ae850affa9ae88556d08b8d5c83597e4695fa4f579da8b412d9de5184fb4c7b0f0a0151498d5927fbce65c5626b0a9e9251316a7aa260d159

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

              Filesize

              1KB

              MD5

              c5ef651a9650eb044382ba31a7fa140f

              SHA1

              c2e582dd129512948a7f5212e948705d932e212e

              SHA256

              a8663f9d52be9bbd3d781dbbe9d090f93236765c1f1d85d74f753ae62781389c

              SHA512

              0d3c06e233c0d00ad599aba749125b4c59f0405e455a2cdf01ea6e009e49544ed8d66c017fb4b09ece5ad6bf62599bcf86578ee46c5cffe79fa6c664c5726f09

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

              Filesize

              471B

              MD5

              d0bc1c61a924cf83d7a5bcf94178a610

              SHA1

              3c1a66f11904b90e886f62aad84a9c0f33243090

              SHA256

              7c817122ae913316253b8b355ac07edaa4665b673d52f6498453e131ee589b24

              SHA512

              4cba54c2c2d5fdbb6c2352c3d5b0d0fa74457088202bbb4aeb59d8b093ef70e26804b5b90125818cc3a71ccbcd25b83168924c25d6307e01b3fe724ef8a2b42a

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

              Filesize

              1KB

              MD5

              1ada13ded981ead6b01d18dae1fad77e

              SHA1

              8a48b96802dafa10fb639799742f0bdb71b97b9d

              SHA256

              a47530a1f805be7619f14d7c79a5a997889ce2391205ab20c41c3c68fb00222a

              SHA512

              4acb7b00cdebebb96252f3ecbc3136ace3e594dd62226fc6318cd2cfbc7d6c4c67235170eccf80109b08dccbba5f88ff6da623b320dd153ced1d32a7c77d3cf6

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_BACC6CD2B29F18349081C9FD2343833B

              Filesize

              488B

              MD5

              42fd2a0abadab122f27d1fbedb6e7d52

              SHA1

              d5423aa7dd7b156f998f8c59e4c868cf3699dab5

              SHA256

              3bb83af31e17cb8b54183d5e2b04e661b890704dc44ac3776507abffbe764b87

              SHA512

              0972ea091708401a3263b0509949cbec3dda663b2c5f4e1c566d6d61f305dca09eb87af3f2ac8e6029adb92bbabc25694df527fc0ef09021ddd906d25581ef82

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771

              Filesize

              450B

              MD5

              61a180e1e853cd5953ee6bb6c317981a

              SHA1

              91f18b299536171b0a8bd0696d2a09d09524dc5f

              SHA256

              5bc126c83ed7881d3c84f9035ebc63fc774faaae36d7d682c78496424e9ffb0d

              SHA512

              ddbc50b70188ec73cde5fbe9e98eee810c979345631c6c5ca10d6c2bfe7b91e32c647e8447b550f0aa61d0d9e59fd0d88b5f28f14cd27a91383f38ff6a3f1b86

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

              Filesize

              482B

              MD5

              fdd3dee1ddb234810675c3b720aa91b9

              SHA1

              9144a73d16ab72e1f2440c9d33b46a1be7978604

              SHA256

              b795b73db2058083812eb1b05bac345b2aed08afe1877d51a1e397780eb69aff

              SHA512

              536ef602ad69364e41affef92bca66941a71591d46b896270d9a335867996e37e7bbf046782558d37a525a1d419d564bf6d76caf6c73fc34531061a5dd5ee2a8

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

              Filesize

              430B

              MD5

              a0c42647fe9a2378a06a314c302386df

              SHA1

              b237eef56710496379e0f206b28d3bb71c760324

              SHA256

              8496dd99eca79127663a6f123c63ce513f6d0e37948fe4ac6854d0aa6ac7808d

              SHA512

              366a357b8b5edead6d769e5a3c79f318db98bbdae4c3fd967b6d54724d0553267d729517ee4fb5693a9c2239976f5ba401f188384c6c2bea67b6a7c7257273f5

            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D

              Filesize

              458B

              MD5

              7ed7765a0bcfd20620fb1783b7601e9e

              SHA1

              0d4f466f1645a28d8f218c0abc258d241b80d056

              SHA256

              dc26a05e92bcebf18a68294a0feb4684e0ac1762e1cb4ba81dc52efdc20f45e7

              SHA512

              7e7de2b3b5205494c23c439e38f186b08fdfd34bfefc8fe28e2867467b5c6decef0c7bcb2dec8a27c33a2529e74da7970215d2754a3d367fe46dc3d61868e6a2

            • C:\Users\Admin\AppData\LocalLow\rbxcsettings.rbx

              Filesize

              176B

              MD5

              f25b72b440dbdffc4de2f447353f2de8

              SHA1

              572a04cf991dcaf056629b3646a45ac30af26e9f

              SHA256

              078ee243238a81fc1c7a4b9acba25f057f5b722114f062998a986c63d45b61e4

              SHA512

              d1b6e4b55b3de48a485ca22361d2bd84c49c7809a9f72bd1f9d645c7ead23f4024fc7206407b08edf9bfff0bbd1c980ae190614aca9d96c684a6bde53151ae62

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              94B

              MD5

              b24f3eec1bf85377c5885c2db94bd735

              SHA1

              88cef320f59c33f31237a812561f479d9ae4288f

              SHA256

              e4e8d9df097648504dae2751ff96a5699c697595124277860b18f3780a1d07a1

              SHA512

              f062705c679424f5657c577545a4c26eaccf102fbac646be568ab8667c436e475257e58408602615a915b785b573b57c9424cfa2a238e5d3783c931cf7678812

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              237B

              MD5

              958aaf92d9cded9190ef0c0882486ed6

              SHA1

              df4ff600f16744b3a23c3c6f5a4f98303aa68465

              SHA256

              4cf62624193a0c67179e10f22794bf1a99514d352fefc5ea1896e7063234d21f

              SHA512

              7b15f4b5be145db5388a21228d9b16ffdb7deca444c20b1b9d13f3f4328256717ddb31ba7ccb975190b2586c1352cd1609a94e8505bc7aed59b7344fbddd7df0

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              29600d0be4a409a34475931c8bdfb2e5

              SHA1

              f0b8f27cdde5cd06ec8c5df7b8034e0308e0379d

              SHA256

              5f0e06995ea4b0c39653a23aa5e23a04601151d0abceaaaa2e85f8e80568da59

              SHA512

              f10bdd0956c8afb5f431a2a6645f232824cb5d01c24563a378c57c49e50a63d2e4973e3e812a641593bc6d0c87ad31068f0cc1f7d4eadddb61efc0377a155a57

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              2c6b8ae5ad87f9d67a88a29e680566d5

              SHA1

              2d27aaf98066700a51829109899d038f9d186510

              SHA256

              5fa99f8bf136c448bee97a4faa3158d3269bc598de78754dd7ab133bee0f95bf

              SHA512

              d75ede1f627eac74abcf9d0d45592e1589b4774a8007cf901b94ca3345910d3c7cdf2b5d8d4ff3584f94644d3a273762472bc382bbac5d66af74c6adb1e7110d

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              2c6b8ae5ad87f9d67a88a29e680566d5

              SHA1

              2d27aaf98066700a51829109899d038f9d186510

              SHA256

              5fa99f8bf136c448bee97a4faa3158d3269bc598de78754dd7ab133bee0f95bf

              SHA512

              d75ede1f627eac74abcf9d0d45592e1589b4774a8007cf901b94ca3345910d3c7cdf2b5d8d4ff3584f94644d3a273762472bc382bbac5d66af74c6adb1e7110d

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              ad3cb8ce735a2dc5eb3ac816b6df51c0

              SHA1

              1be1c8a5e26a23fc0c6b4f583728a1688505b10c

              SHA256

              fab8fb4ac5ceb4abbd067eaacec7fc48c60174a9227343c77945147de730cab8

              SHA512

              753fc5f7916944e317df81f084dfb466c74b770f593876f6fc8532f9ef63e247bae35f4ad2ad2e5bf2915d67f44b7efb1206bd1a1d3c472b510d36949b012bc0

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              ad3cb8ce735a2dc5eb3ac816b6df51c0

              SHA1

              1be1c8a5e26a23fc0c6b4f583728a1688505b10c

              SHA256

              fab8fb4ac5ceb4abbd067eaacec7fc48c60174a9227343c77945147de730cab8

              SHA512

              753fc5f7916944e317df81f084dfb466c74b770f593876f6fc8532f9ef63e247bae35f4ad2ad2e5bf2915d67f44b7efb1206bd1a1d3c472b510d36949b012bc0

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              ad3cb8ce735a2dc5eb3ac816b6df51c0

              SHA1

              1be1c8a5e26a23fc0c6b4f583728a1688505b10c

              SHA256

              fab8fb4ac5ceb4abbd067eaacec7fc48c60174a9227343c77945147de730cab8

              SHA512

              753fc5f7916944e317df81f084dfb466c74b770f593876f6fc8532f9ef63e247bae35f4ad2ad2e5bf2915d67f44b7efb1206bd1a1d3c472b510d36949b012bc0

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              4c26d8da474f072318bb6e16ea7ddee3

              SHA1

              05a565a42019cc01e68c35e570bfc6043cddb3e2

              SHA256

              477d0b6400fd1a95370bce007117acc5f2a51d72635b00c20a72d58809e6348f

              SHA512

              7abe28cf1d744486f6304b2d606aff0b99c01b4ca78791a4a9cb804a3a07e36e282a7e64eb9c4ea1c23961e2fa6a79fad59855c36d855488986d1c032c7588c1

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              4c26d8da474f072318bb6e16ea7ddee3

              SHA1

              05a565a42019cc01e68c35e570bfc6043cddb3e2

              SHA256

              477d0b6400fd1a95370bce007117acc5f2a51d72635b00c20a72d58809e6348f

              SHA512

              7abe28cf1d744486f6304b2d606aff0b99c01b4ca78791a4a9cb804a3a07e36e282a7e64eb9c4ea1c23961e2fa6a79fad59855c36d855488986d1c032c7588c1

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              3af59052731d071b21dd57d89bcfb802

              SHA1

              2b9b12d5f78eef9cfa1f3151cf62275ca4ddd48d

              SHA256

              6aff5ad222cb027ad77fd0203e5d4c6931544b06bdda9a296b35edd4684ab23c

              SHA512

              f7e8dd4eb593c361d1c821f66d4054e6bf8288a9b84405fff5dbcc91d79d9336bbb9c98ee70b42d32d3e5bb495a9e5d691ed5f0cc0400c7232e4436abd165fe5

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              f030c219c1be4a4e32c6f55e2ce36b26

              SHA1

              2f8b34220bfd277b6aea26483addc0752917b114

              SHA256

              618e6b68c62f53d71370844f97fc997885ac4a52bfeae229e91b1b082a69905b

              SHA512

              fb40763a27c145fa57ca05029653a40cf76b04c9490903d2aab18b172af71c1fd4d4bd33f0a0bb3941534770559ce879050ae7950f41c18b9b18bec9225dc952

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              71fdad090d28d93721aff44a24e4195f

              SHA1

              ba15c36f116b1c53947463fa8bb234e078ec14a8

              SHA256

              652411221179aaf322dfc287682de915da5e187991e9d4fbccef36777a35003e

              SHA512

              7ea653521d796f9bb77f4b2525274a39628fcb5ce576bd9aa2e0d72cb1f411e6cef13734987f0ff951a1aa0a48175372bb87e3a6d774bcc6b1620e0839c3eba5

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              71fdad090d28d93721aff44a24e4195f

              SHA1

              ba15c36f116b1c53947463fa8bb234e078ec14a8

              SHA256

              652411221179aaf322dfc287682de915da5e187991e9d4fbccef36777a35003e

              SHA512

              7ea653521d796f9bb77f4b2525274a39628fcb5ce576bd9aa2e0d72cb1f411e6cef13734987f0ff951a1aa0a48175372bb87e3a6d774bcc6b1620e0839c3eba5

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              71fdad090d28d93721aff44a24e4195f

              SHA1

              ba15c36f116b1c53947463fa8bb234e078ec14a8

              SHA256

              652411221179aaf322dfc287682de915da5e187991e9d4fbccef36777a35003e

              SHA512

              7ea653521d796f9bb77f4b2525274a39628fcb5ce576bd9aa2e0d72cb1f411e6cef13734987f0ff951a1aa0a48175372bb87e3a6d774bcc6b1620e0839c3eba5

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              350B

              MD5

              98db933d526dc92297de05d457c4c81c

              SHA1

              5baa75bf09df5792df042a4a5eb57a58b25b4872

              SHA256

              dae8dddd892a53c0bf65e35974d3c6c07296bb26e639b60365111c138c52bcc0

              SHA512

              b28f6e92d36dcf92a78c18de94cfecd9af989ded001f0613ac3c05ec9a69700d94629a78b69fb8576a56df6d1d06ff25b53dc6dacf5bd28936229c9d3e731d1d

            • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZUMZT3BZ\www.roblox[1].xml

              Filesize

              549B

              MD5

              cf0d25f4ede8a3ee9e429508ddb920c0

              SHA1

              220d8a8f8b9fbe7891e3a4afb0e423a6ae150977

              SHA256

              0375fa9e212263cdb56efeb757083d836feaa6ad849c3b2717cbf09a9c5a6c3f

              SHA512

              96838e0eb13efb7cc44116b2823b4412bb1fa1329d9ed0610d13f0ff3723e06ac0f36c97dab69a40d5d9b97851bf30f1f74e10ce07e6b331440e93732c0813f0

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\772034db167d3f4260047db4a7f2b8a58cf448709327013541e47c8962b6e556[1].js

              Filesize

              129KB

              MD5

              9d820d1a7b2108579da7302ef37531b1

              SHA1

              091d2c110700001859da3d8c763ed7d08429d06b

              SHA256

              4d2f70d0cfb86f81cd532910fe1af8e18d7d2f029fc1e7cce680d2b8cd3a7679

              SHA512

              d23d0ce48f340dabd709dcfc79bb92286ae6bfe4f2ed78f093f7d14a49b4d9819083c03c7819c67c2bd7e8d483ad6b000f9987793248e855301fdb2cf5a213f6

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\828b482815c645cb8df79a5ef99fb7f86cfeb41a8076f4cf8ba2c07c6d315937[1].css

              Filesize

              787KB

              MD5

              182a16d42616300c39dc69c065cc73fe

              SHA1

              ac7febcbdb956fa3a1c54eb08bf34982171284f9

              SHA256

              75d13c787085c3be4fdefa435d3bc64c755fb76808e9fcc090e2e4fb06dda911

              SHA512

              b38a2744c7d0c5dd506e64c30342c37bb89360bbf69919e0c5da105d68837fff7ec1598a404b752fa6d41a2bf94c4c29897e9bafcaa2c3208e6903b05f5a4618

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\BatchIncrement[1].json

              Filesize

              163B

              MD5

              bedbf7d7d69748886e9b48f45c75fbbe

              SHA1

              aa0789d89bfbd44ca1bffe83851af95b6afb012c

              SHA256

              b4a55cfd050f4a62b1c4831ca0ab6ffadde1fe1c3f583917eade12f8c6726f61

              SHA512

              7dde268af9a2c678be8ec818ea4f12619ecc010cba39b4998d833602b42de505d36371393f33709c2eca788bc8c93634a4fd6bec29452098dbb2317f4c8847f6

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\version-9898fbc5d6bc4b1e-rbxPkgManifest[1].txt

              Filesize

              1KB

              MD5

              efddc002df45d541eafc2f0ef93ab267

              SHA1

              92372a6dedb33b285506d12205859a1b8d2fc212

              SHA256

              9cdb0d2f40797eccb39949ccee9c46638c721c8b1b1e6a0c6cfad59683780775

              SHA512

              ff99d29ee042d1c3368462b3ea1421cc7cdba22ca5d9cfb839c10c222d86fe07e13e3caea270d65f9173a914ad4636c781ec24dff0e35fc81d499586a41c82e8

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\5c779fadf28d7893108d5b896e092e0d-GothamSSm-Light[1].woff

              Filesize

              54KB

              MD5

              5c779fadf28d7893108d5b896e092e0d

              SHA1

              9e30dd79b35c884925d8f4b8dcfb4f30f062cd10

              SHA256

              dde254a5345aea2d61098d4cf6f89af4cf1fe11b69345ba7324655b254ac286a

              SHA512

              18ef9ed6f342f19ff2029f999798d7c8a0c68b022fd117b24b883f68adf85b1d1245078162a3d66db14cb92beddb5be718d23fbc4171f22da2f4e76faac81150

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\713e0b3a604ff4e44f55f9d1c100e8b5-GothamSSm-Book[1].woff

              Filesize

              55KB

              MD5

              713e0b3a604ff4e44f55f9d1c100e8b5

              SHA1

              b024711998cc92777241b1401ca39c82565f2d26

              SHA256

              7daea40b38c44630a22ed4ebdb0502847f58339094089865025e0909145deb01

              SHA512

              f6125a31fb7198ac12027235c92018fc085859423ab1c1ec4d2bb75aeba317b49e7a17727ed106539cd9938aaf6e4296862c228bffb841e1ce372a91df907c02

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\WindowsPlayer[1].json

              Filesize

              119B

              MD5

              cbc56e4a8fcd650f64413eff0c7b0e4a

              SHA1

              9dbfcb3527aa4726ca8eb1ae8c2930022c983039

              SHA256

              8cfc93f2c2f1bdcad9b46d7e99aeeba08d03c05d975e28e92b09abb02517486b

              SHA512

              62e266f8c5f2ad8b8edf18ecc503d957c4efe24a51e816981a17554a9844a230933762f2d2249d4ddb004322849d1ad95685fc0eec1c2622b9636f8af41d1673

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4VT6R2QM\WindowsPlayer[2].json

              Filesize

              119B

              MD5

              cbc56e4a8fcd650f64413eff0c7b0e4a

              SHA1

              9dbfcb3527aa4726ca8eb1ae8c2930022c983039

              SHA256

              8cfc93f2c2f1bdcad9b46d7e99aeeba08d03c05d975e28e92b09abb02517486b

              SHA512

              62e266f8c5f2ad8b8edf18ecc503d957c4efe24a51e816981a17554a9844a230933762f2d2249d4ddb004322849d1ad95685fc0eec1c2622b9636f8af41d1673

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EY3KXMB3\PCClientBootstrapper[1].json

              Filesize

              3KB

              MD5

              a92c2b1ef44241e1e021a9c28a6c7c7d

              SHA1

              1efe3059646d2ffa728ca30f73cedf2ef2ff4454

              SHA256

              2874d62a008552cab27f76125f061ded255e4b4de9ce481460941983e66e43ee

              SHA512

              9aca152933a0b528404c7cf294c6cbc1daa9468d897e343ad499a1cf698f65bfd1b261a4b6c1378a76c624078e0a3154bcc39b314f20b2bf2f542fe5e0569b76

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EY3KXMB3\fe0e9885efc341b17f7e600781493f69-GothamSSm-Bold[1].woff

              Filesize

              55KB

              MD5

              fe0e9885efc341b17f7e600781493f69

              SHA1

              424c8cf3af83a269579cfd4c040e6eb6f67316f9

              SHA256

              be7c8a03cf754daf4ede018bc98b4c58c6224b45dfb15e639996c9345e61d905

              SHA512

              f7152efaec206cbb518b1f48fe47b79c12a1b88136feb4dc0ed0e8f8b3fadb36e6994608e6481093883439e9f3c5792d86b4f64b13d4a3302b178e767abb885e

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EY3KXMB3\hsts[1].js

              Filesize

              256B

              MD5

              670828ec4d5bc925af5e231a21aca9b5

              SHA1

              e5b287e529c4cd2892df1ae31ff5ca3e4e820519

              SHA256

              60da31d144a496f76bc76caad2a7c809721440703e0cc41899d3275f47c808c5

              SHA512

              dac6169c8debb7f7bf605db7774bed66a949e5908ec9f8b53cb83e387aa0be3de46a3779a43e1a5e809dbef12992327e4c052f232529383da521ba5e06311fc1

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\U4IULL1L\2ed7693f8cf4d79466dd604c35502f76-GothamSSm-Medium[1].woff

              Filesize

              56KB

              MD5

              2ed7693f8cf4d79466dd604c35502f76

              SHA1

              50f205901b4b50b777ec024cf1142eff38b92d21

              SHA256

              24909631879a063171288611fba23cd68ab3bf99f5bb8646e297cb0bd7040379

              SHA512

              ecafec254da8765c894d359600e738e6c82d0da7bb1238723d86674d8d60b70d9f3c9ab881162f06a90aa3922b692817d7fd069b95cd654670a494dc5dfcac18

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\U4IULL1L\3ac436cddb043616a4059aa6fe3b0c0a-GothamSSm-Black[1].woff

              Filesize

              56KB

              MD5

              3ac436cddb043616a4059aa6fe3b0c0a

              SHA1

              feaedcd1f6a04c709c042d27e2989feb7fd8bbf3

              SHA256

              3507166f4e17a878edb60bf631000cf684894aec3e340627ab716c0da94b2743

              SHA512

              d15ccc385b87b170539b99a452b654c4479b12684dfa33e0cb1f85caae2c7a24f640354b9930d0867662bdd11085c227f46ab5a9b1b3d261f65ad33faab53ce4

            • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\U4IULL1L\4db2f741b7a3ec36d11fec999ce33f708ae85641cabfd27e11e0935928f7d9c4[1].js

              Filesize

              2KB

              MD5

              92ee80da236a62b17856c65a02e916a9

              SHA1

              00082c564f38b7fef6f5f013f79d44166009154c

              SHA256

              541c4f65e7c57a945b620885428d10bc30d0373c192302c9911541064718a4e8

              SHA512

              8cc7d463ae19febad1c023bf65612970e94d5798d88d50deffebf1a3665da956f7db5d946380eee5cb23d534837600c638ac3092f566465e422fb6b16adcace0

            • C:\Users\Admin\AppData\Local\Roblox\LocalStorage\appStorage.json

              Filesize

              9KB

              MD5

              e0788cbb58eeac6947cb690fd0daaf96

              SHA1

              2cb78621f57fa8069e8665de1a83d4c9ac03f804

              SHA256

              315f8ee8d93cc10e6ae3175efa62eb7b6879e664118a887a4ad4deb2106241cd

              SHA512

              7293e425d387eb8e447286b798d63f77927b8fce01f8b359bc7ed8020cdac66d003dbbb4d115a130d0a1999e7e429730ee4728aa15bda1b466725ccf1350eb57

            • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe

              Filesize

              2.0MB

              MD5

              c519783a8ff04c41f07f207c47fde116

              SHA1

              19d600c06cf47cb9450747a2a308058c35f4ede9

              SHA256

              431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

              SHA512

              0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

            • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe

              Filesize

              2.0MB

              MD5

              c519783a8ff04c41f07f207c47fde116

              SHA1

              19d600c06cf47cb9450747a2a308058c35f4ede9

              SHA256

              431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

              SHA512

              0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

            • C:\Users\Admin\AppData\Local\Temp\RBX-2B652422\RobloxPlayerLauncher.exe

              Filesize

              2.0MB

              MD5

              c519783a8ff04c41f07f207c47fde116

              SHA1

              19d600c06cf47cb9450747a2a308058c35f4ede9

              SHA256

              431b40284e85c47fe1c4bdca9d447e0c8487b39e45fa2a14e110f1223f0454d2

              SHA512

              0129cba7fece385a8ce048c195dafd8e9a86af692c02625a5112112bfd0f38c24c577bc3d0da9cf161d57d1f5ffbc674a84e737675bd8b09e43cbb92c2fe7cbe

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\1c0d450ab6a3eb0dd5ae53b661f27229

              Filesize

              684KB

              MD5

              ec4526d1aac6cecb618e7a42579b088f

              SHA1

              b4740f1ceae91308cc6368c86f21c3ab5ccee9d9

              SHA256

              895da36a527158437400cad87e11aee6cf88f491c99cb58edfc8d22aab1551a9

              SHA512

              c3d95846172b9c73f8006027607ace0e028c6361f91a8fded5dbe88a31a9f4391b21683d54245fc1bae930107a46c6bd2001e84bc1743f4118c4c3f0ace1db16

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\22dc685c6a57d3916f3d8ed74d2c7c90

              Filesize

              232KB

              MD5

              f877b0f4ae78be318bb806db22783a8a

              SHA1

              5c9b6fca12c6698b0c8e420f86f9e2ff85df87a0

              SHA256

              d7dd147efbe529c71099bd8f5befb46b051592eb1d257f750f69e01913daf0ac

              SHA512

              163299ba1901dd711e4810f95b03774140f12f72220b4795a2a293a5eb498b6caab912479d129cca817797cbda21997c59878a15fe24eca0f634bf6c02e15080

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\2e328237ade1b680339fece41df0cc5c

              Filesize

              8KB

              MD5

              d11a063575ca74ae21657c6741a79542

              SHA1

              192f87cbb407326d2c43fcd61319957be642404b

              SHA256

              776ee9452e1051719bf120b5912b97f74c75336061508a56b79af4acca2dabb1

              SHA512

              a62065f1f1283444f572f4beab415994ed5fef01aa1b9285987cac1d8455d26cdf7723b97b4e8efd919b12f6997727363282abebe105829b6ade91d157276efa

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\2ff3ffc21c247af8992b28efb3e75800

              Filesize

              684KB

              MD5

              b46bc5077ea7f1984837cb4dc7c1c402

              SHA1

              36747e25b72d0b092bb90507009fbb835db49f7c

              SHA256

              c7e118f5548c3082d55aeabafce04061a4c4597818ca477aea2f024d51f5c392

              SHA512

              88ce3b66e33050e3cb695e80d418cc642667c981600ec9aee3067f03988967ef27941c2b4ac47b47642e1e485377a29a180039a639aa8d0d1839364203f32dbb

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\40903ce89a8aab3f89d85d4dcb8d6043

              Filesize

              323KB

              MD5

              697ea0e544d4c4e016f03a34d9af8c24

              SHA1

              2644cab185a8b657ce99330f12a637cc0e92a552

              SHA256

              5b2b79b98e57db72a79a798bbe0f2944296bdf59946379d2042fca990dbf965d

              SHA512

              4ba1cf05b86cb8ad0c1c809130f3b449f8db3f1c12bc0f0f85b5b32b54538de15660f86e8cb93c65c3358c120121d4b234eff514a940b5ff09fe0bce79c2d2bf

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\45abd6d2abf1e1413ede1def5aeeaa1a

              Filesize

              1KB

              MD5

              1e583f8a03a2cc818e92939c793b1e80

              SHA1

              34b2ac7de29b2be27d219970c584f00f1593f951

              SHA256

              3c30aba22e101fb2aeba37f46503d90ddbdc674fd3d6cdff464aa1240e83cc0b

              SHA512

              b03de60428395c66d8569aa5c46c6227c034bb98e7219e0e1ccd7d189ea3a3f8b723be981dab28e2f907d91b63aa2732263d3f6ed9472af3358b84a8b7c6ec5d

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\497fe0b27a20cc46ee160048fd99d019

              Filesize

              32KB

              MD5

              cb630c720d45dbee3bfd10796490c79a

              SHA1

              a9478ae957cb6e8346f5d7579ac609879867902c

              SHA256

              fe9c2e6d761aa7d516dabeb3c4c0ff08e5a9b5f3eaa9c87242fafe5f611fd11e

              SHA512

              0c878fdc229ed5c7551e16d8fbd2926c933e1d154a8c563ae5ff85a049fb4c2709359d2dad6e56886fc36d0d11e8d426bd5b31e0dd31e1840ea63ea1c7713b6a

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c246d4baf10921e55e3dc430a5f579

              Filesize

              684KB

              MD5

              984b850ef5306cab64bdebccf04ead2d

              SHA1

              49df60678b2c7c198500cfc94516b7d36b9f7ec7

              SHA256

              7132489dde3729595a24da60d097aa52c92b6c1b3bdfa01987c019ba24adb6a1

              SHA512

              1da27b1c4200a8d1337c870d5e31bd6c72e5e566919e693de4716d4aa2ce76351b94664aa47bba623cf3b3d6ad849618a18936f6ab49da47d895052405d60582

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ea70367ca46aa008e938f3a0fbfdb73

              Filesize

              1KB

              MD5

              1234865adc35e05b2a1d9628d031a77e

              SHA1

              a3f643f5cb8be82045c2964c8458023cea2888d8

              SHA256

              75607e1960fcba826de9a0bd2cde19a434fbce2c5042dde58272d48c907a01cb

              SHA512

              87c45f524e90f243d3e6c96322c6e651483b69fdc0f0391cfea0245dbb363c232bad6a312c17bca558267a7092edefc622546c24c3db064f3119d5a42c46bab2

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX080428B53AD741C3AC61A0643C22841C

              Filesize

              91B

              MD5

              c2b9502c5f7c1abaf1c2908727249a92

              SHA1

              1eef10e62be499dfc8f674f684174ba076b46af2

              SHA256

              bace155faaee37f4bf7596101f0955de41bafdf2f18cb2f7213f9936b9cfa00e

              SHA512

              885710a947fa1fdbd03df4c7d8314b8fc4eaa5570d721fc5e99e46bffbffa6f60a91ed1ba2babf7893840cb1b189b2d7da04cc186badec5fec1d2226087789b6

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX1ABA0A70941F47538A7A13C75D40636E

              Filesize

              91B

              MD5

              684b54e39c40b9575c0bf8428361e3f3

              SHA1

              6ba06f3295f34eb3664e664db0bf686a9e7cad67

              SHA256

              c6a26e1b3bd3b3ec2d18072a6c0f6964acfbfadacbda5d71d4132dfed35b1586

              SHA512

              2f3a69fb146c18d6fcfce95cef026992582a73def283f807a1f2ed1cdf4be69ccbdeb565afe9ec5a8f13cde6bb0dc313f331074ad5b862e7c801915691158911

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX39883FBD18CD4AC7928EF8803943C439

              Filesize

              91B

              MD5

              eb2d657e7c218a6ac09244d3690032b2

              SHA1

              c1181dc0ec5cafaa1811db7c4899d82a271a485c

              SHA256

              a02732cf98663746c6694e79bec1e97e685587d20881e532f481402b08a93e00

              SHA512

              00e22642049bdf50fe5298da87696f57d4e38bf07a7f76719e8b45bdbbc8fef08a51320f3c1cdd76338995696e46f998180eca663f9929adb5601f7104346518

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX7CB17F2B1FFF4BD5AF63628D056ED4FD

              Filesize

              91B

              MD5

              511b8ff7f51d250f3b26079361ac392c

              SHA1

              833a31e7b02e66cc1f558cebe2abba0d02f44757

              SHA256

              c8663482def07ca3b48ca1c5b6ebaa5d1048b12d91a7b0636fff0cbef9c440fe

              SHA512

              d1cda891ccc54c2fead49c5e211e4267e741befa967d2b87489df9942ae0889e2caab1f9ff4ea21b17f2be0f243f5bb09504bb14ea1bdcb5982f02f19981b98e

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX7CCBADFCC0914D42B7A40A2D6C3B97C2

              Filesize

              91B

              MD5

              7289b841cd7147e47add357a6d6b8a44

              SHA1

              9831fe099effa38d472a96dda252c338788b4264

              SHA256

              b30e3c11e6e67fee007f26923e85808b980c8a89705d53864eafe8859da6eef0

              SHA512

              0b29d3ac1c3f01373426c52e7e4392f8fbec5b848fbe6c565378e316eb19d043f05266c53818b44b7b01635c696fa78a3a6323de802f65e9e8fe9dc99c97a9d0

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXB9AD79FC91CF4B38B674DA4C6F108FCA

              Filesize

              91B

              MD5

              6af25b555b6123f5818d03d1b8b645b5

              SHA1

              b9df864e1bf05b153bdac886cf7d65ebcfb8ed00

              SHA256

              d4fb85112f72cf50391b65e7538cbc49c2e959f90a62f89ff3cd115725fc7dc2

              SHA512

              db96cb6cdd8b21d612babbae710256acdff2572cdb8af1f32c4b2619643d6ab833b99b482e0976b84734f6ad2c6324d93d76f21c9eb2ed510eb31846545a9f7c

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXCEB110897CDA4F9FAD6B50D18628855F

              Filesize

              91B

              MD5

              5497ad0dd988f846fe2c33e2e2fda52d

              SHA1

              1fc37bf83f0814685f911d2a92495f18ba8f14a5

              SHA256

              240d3e6f7fe92e4fea46bf5f048086dd844b18caa5fae08bba62ae261f2ddea6

              SHA512

              072d8593502f748250a20f242f86a8789e334a6e7595fddaf058f2948efa5d77e6f873da70fedcc388d2f07ef9ba32ed5c38e05cb942ef556ac057e647016e0e

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\a0e9783cca86c2efb3366ac6e6f93eb1

              Filesize

              45KB

              MD5

              1a0822eaee326ae28755b3ddb4be74c9

              SHA1

              66246869304bbe9d5a11330fb39fddba779d56d5

              SHA256

              6519c58dc578c1de9df376b96bb208be170ee489edf4762b16e941849804f0c0

              SHA512

              c63bd8d7a092bbd65d5e63805126c877328dcae7f09163c2435e6d1c2788ab2676bd10ed4dae6726752c69d9944f2a0a7e08994252eff2c699aa1f0802df71f8

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\b7980b5d8c7cebec45c2665f52e6e983

              Filesize

              2KB

              MD5

              6e81cc6f26a42ca6bf70c809cc9b7a53

              SHA1

              e0580fcb9beaa540699ffd11c0f1d6293b7786cc

              SHA256

              6460bdc79e7f9049626e580259c5480172404c271ab99a2474fa851a47917661

              SHA512

              3641904f2815023803bf971f1dfd8554efcdef20c723180f1295ed2a40d4f289def2160f0f26ec7572191cbfddc1e78168547c194d325a49b51c028fca73e990

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9c1fd77ac90400d6858a5890296c908

              Filesize

              27KB

              MD5

              e6e72ceb00bb52f1f36b51ea3c335f20

              SHA1

              50a3c8f9bbc31b65fbdfe62ca232ba851988b807

              SHA256

              f2e57bc493993986448f55866376ed34056478ee192508e234da938f23ae5d4a

              SHA512

              3af3386d91ab17d5eee8d413aa7cadaaa2d4e1542b8dfe01c49fe71f7ad21af161f2670f7d27ddd2056286dc0a29894297ffafa88f28985584d31cf97fe1278d

            • C:\Users\Admin\AppData\Local\Temp\Roblox\http\ffe5e8f4018267825d1ac44f013d7722

              Filesize

              407KB

              MD5

              9aaace8e4a1fb374b157401cc85da34d

              SHA1

              43710f33af40566bcdf43caa7b86470add80b6d1

              SHA256

              f70d386d388473f836118f9bfded2b822c61339c4c4e2f8ed4452fc4c20e8fa6

              SHA512

              d2a89892debb40c2503c879080ef606601e3cf547fcafa0a7785776b930510521c76b9c682c04279f6efe864a522870c9693a412e489942cb521de91bedbd72d

            • C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXB62BDE51188F46A7B82B1F06956BC935

              Filesize

              4.1MB

              MD5

              24e99735c221318d8214481fe2a689a9

              SHA1

              e6776468d0cb555869a530dbcaae6d232d0b2291

              SHA256

              12bfc1d62c110fa8e99955ca82a4e1ef99af65f81d7b18cf6d4c84977faae813

              SHA512

              a285c44ea02a1867f13bc0ba500c730b18efb295202a6b729c4aec8a60b5fa494016a7a8f0bc5a0cfc4728fe7493dc21a8782f646fc515129c8f71bd63686826

            • C:\Users\Admin\AppData\Local\Temp\crashpad_roblox\settings.dat

              Filesize

              40B

              MD5

              707822e93bacf9f1ee0aae7d84237a55

              SHA1

              fcd49f956ec629e3770b897287b703591dbe863e

              SHA256

              a301b12d56895096904265c1a4fc5ed00c6988b602fcdd0a620922137a3c29c6

              SHA512

              d6babba85830dc2d2a127eb6e579bb819139cd3d619d21f23bc263f6aa553ccc48204c52acdca4757adf3c1eeeff0db4275784e152138c9acf312b9e0c049579

            • C:\Users\Admin\AppData\Local\Temp\crashpad_roblox\settings.dat

              Filesize

              40B

              MD5

              707822e93bacf9f1ee0aae7d84237a55

              SHA1

              fcd49f956ec629e3770b897287b703591dbe863e

              SHA256

              a301b12d56895096904265c1a4fc5ed00c6988b602fcdd0a620922137a3c29c6

              SHA512

              d6babba85830dc2d2a127eb6e579bb819139cd3d619d21f23bc263f6aa553ccc48204c52acdca4757adf3c1eeeff0db4275784e152138c9acf312b9e0c049579

            • C:\Users\Admin\Videos\Captures\desktop.ini

              Filesize

              190B

              MD5

              b0d27eaec71f1cd73b015f5ceeb15f9d

              SHA1

              62264f8b5c2f5034a1e4143df6e8c787165fbc2f

              SHA256

              86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2

              SHA512

              7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

            • memory/3920-372-0x00000000006C0000-0x00000000006C1000-memory.dmp

              Filesize

              4KB

            • memory/3920-371-0x0000000000690000-0x0000000000691000-memory.dmp

              Filesize

              4KB

            • memory/3920-373-0x00000000006D0000-0x00000000006D1000-memory.dmp

              Filesize

              4KB

            • memory/3920-7672-0x000000000BE60000-0x000000000BE79000-memory.dmp

              Filesize

              100KB

            • memory/3920-7673-0x000000000C300000-0x000000000C31E000-memory.dmp

              Filesize

              120KB

            • memory/3920-374-0x00000000006E0000-0x00000000006E1000-memory.dmp

              Filesize

              4KB

            • memory/3920-375-0x00000000006F0000-0x00000000006F1000-memory.dmp

              Filesize

              4KB

            • memory/3920-376-0x0000000000770000-0x0000000005EF8000-memory.dmp

              Filesize

              87.5MB

            • memory/3920-379-0x0000000000700000-0x0000000000701000-memory.dmp

              Filesize

              4KB

            • memory/3920-370-0x0000000000680000-0x0000000000681000-memory.dmp

              Filesize

              4KB