hxxps://github[.]com/ic3w0lf22/Roblox-Account-Manager/releases/download/3[.]6[.]1/Roblox[.]Account[.]Manager[.]3[.]6[.]1[.]zip

Analysis

max time kernel
299s
max time network
285s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
20/07/2024, 13:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/ic3w0lf22/Roblox-Account-Manager/releases/download/3.6.1/Roblox.Account.Manager.3.6.1.zip

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF	chrome.exe
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF	chrome.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133659546262283860"	chrome.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Roblox.Account.Manager.3.6.1.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4040	chrome.exe
4040	chrome.exe
2796	chrome.exe
2796	chrome.exe
2796	chrome.exe
2796	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4040	chrome.exe
4040	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe
Token: SeShutdownPrivilege	4040	chrome.exe
Token: SeCreatePagefilePrivilege	4040	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe
4040	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4040 wrote to memory of 2816	4040	chrome.exe	80
PID 4040 wrote to memory of 2816	4040	chrome.exe	80
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2328	4040	chrome.exe	83
PID 4040 wrote to memory of 2184	4040	chrome.exe	84
PID 4040 wrote to memory of 2184	4040	chrome.exe	84
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85
PID 4040 wrote to memory of 1360	4040	chrome.exe	85

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/ic3w0lf22/Roblox-Account-Manager/releases/download/3.6.1/Roblox.Account.Manager.3.6.1.zip
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff90a55cc40,0x7ff90a55cc4c,0x7ff90a55cc58
  2⤵
  PID:2816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1940,i,15048091370357860568,2978235957046559672,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:2328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1716,i,15048091370357860568,2978235957046559672,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=1972 /prefetch:3
  2⤵
  PID:2184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2184,i,15048091370357860568,2978235957046559672,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2200 /prefetch:8
  2⤵
  PID:1360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3064,i,15048091370357860568,2978235957046559672,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3112 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3076,i,15048091370357860568,2978235957046559672,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4732,i,15048091370357860568,2978235957046559672,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4668,i,15048091370357860568,2978235957046559672,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  - NTFS ADS
  PID:3388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4324,i,15048091370357860568,2978235957046559672,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  PID:2796

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
1⤵
PID:3036

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Filesize
64KB

MD5
b5ad5caaaee00cb8cf445427975ae66c

SHA1
dcde6527290a326e048f9c3a85280d3fa71e1e22

SHA256
b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

SHA512
92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Filesize
4B

MD5
f49655f856acb8884cc0ace29216f511

SHA1
cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

SHA256
7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

SHA512
599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Filesize
1008B

MD5
d222b77a61527f2c177b0869e7babc24

SHA1
3f23acb984307a4aeba41ebbb70439c97ad1f268

SHA256
80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

SHA512
d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
d079b4ea6215168870cba394b4da1c79

SHA1
28c6054ec4b95ec5e8b2bcb1c444bcc1d44c330b

SHA256
7e5dc38a76fb96b9cb52cb15641f702759ed65e93e705469fd4fd5910b945311

SHA512
d7a5019fbfc3d917a786afd8974753684fb48cb7821ee0ebed0b3536781cd4b330e9481b7e0ecc04ee74b2375c34d0a1b6835fea93f0c0646f89e313f66c2a91

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
5d85c50a57b035f61e52ee93488260f5

SHA1
c20680a5ba1f85be81fd23bbf1fa1c4f5e5fe8fa

SHA256
2aeafed06c97fd800f9673c67548d3ea72587d913bd000f0f917ab6e60f331f1

SHA512
f1de67f9ef718a3c7ba3a4e1d7304cb13a16a8c6a5ebdf781c7f80867b019543f08bf0a5f95edc7ce206c2b8118083e8b117ba9714cdd014633eaa9a86e2eac6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
fe5e6f53fd182ccd1c8e19a5ddb0e899

SHA1
9e04072cefe28094319c4849f40597825820ce22

SHA256
cfcc7ec083cfd9b4054a8edeb2667fad9a0130ca6460bdc809f0d2b53841d400

SHA512
3424485c17bd6668ae55a2dea5561670af4929f5f51c94f92c6c231b20560f6875be5530dc2224ad2277df8923ee08996446cccd14b39e006597035f76d52c59

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
fa256f4ec2e34c90e00e5705b54f09ed

SHA1
c1c1bfb3b808604e3f58b49519f7be36f759eb51

SHA256
42d3b3d20ff726781c9987a6bbf2ac34a9375dba6cc5f0bfe582f49556b3c85a

SHA512
8edb795c914ad5b0433483e5d126654458ba2d79a7bb126f3e7dcebefaf08190dd503779e58e0acc218394063bf88b5dbebd3c8433908969d4791b33b7422fad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
c5f96deafe3d525c80409584da42b96a

SHA1
afff9f42422a168b229744a49f455a5d63f5316d

SHA256
7ab8ddcbe3681b4553f373c80e564e49b2aee4a66bf2ba379fa6f29fcaa3ec56

SHA512
c5064096a3b9d16ba0588a40783279a63b9bc362d07734097a0596adc310a456de3a0cfec34178e0105639d3de3a0306105f3b715546b27fb64373ca93f0e38c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
521B

MD5
005ef4f7a1ee044070d3638d31e29e31

SHA1
d6b2ca4e5bedf369e2abdd823ca6b5b91cb9eac9

SHA256
68b2e862dd69fbbc111a63e10b3b5109020c06d6f7114c2a2ad9b7672550e205

SHA512
f5779fa67152d3d5f20c084a3625737f75d8a45263113d67ade81c3ba7a1942a57729476986ad0b003ff8c45d7ef36a522d3130e4886c24577987354d7541196

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
55d63fed88c26b1f623b7cac0305f87e

SHA1
c23cd86a2ae44fe7b035df7a0bf7d3e8d98a16de

SHA256
1334ce580bd4a1ff1d18c87669039ce95302313cd8abc935ff7f9fa1ab4e92f3

SHA512
eecd0419c221a3fe098d5e3800f0d2376db848c7644dc6b2cc444796c5be2c061432e4ad2d8fb36406a24b3901533039941246828fe8c1d8288d04aa7af621e0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
83b0acf1d392ba4a3baeb734bee7e8a1

SHA1
e9c2622bd3fd6d5a769fc5f2dfdd05f6907815b7

SHA256
350aa32ed3d1d7ec781ae5dd3ac33df229dd75edfac1611979223b66d9a4647e

SHA512
7658a09226d903c5e6ff40e39b1f823096b14647d45494802c090fee1ef3ce7263a165fc30c62046caf4ac500b027348e3d15f5bf5bd13b97b7be38d8e563665

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5ff38ef15c77f9cfa8ad4354130c937a

SHA1
6105a2018b81c6b8480e2b57e7a3eaabb07a66d2

SHA256
870ccd3dadc895268db3a745547fea84ef54af5d4555ef4dc2053271d741c99e

SHA512
146d9eb40b4fe4f4176d00c013c801e67f557624a08bf1f292075cdcb9370ef5d71a49279336cc34d25eaad708aad02cb469e38d1955f7b615f03ca657f16d36

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
fdf2f41e25da105379f4f07e53510b62

SHA1
cab47647a015f463e0f2eda1249328b7badd3f20

SHA256
6b74ddf6ded377b6fabea2f203813f9581ecff989a130306181962139b95b29d

SHA512
a4079f304876b59b123ff6d71e1ecf2fe323e38cc3f239c37ec7cce0d8bfdc12209014754636d663cc41146ff19559ee7b4491418d61d552275b2f109102f5f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
6ba4689983da7aea724bdc88cca1869c

SHA1
f269a65e90d1a3332966bb99a75c4956599c0a44

SHA256
6d40fc941f74527e1d51b1b56d44c78f300e18d7eb88da12f4dd838c8e7be071

SHA512
e1fd61d7213339167c8d57a22aaa71751052a56be6374ac8f0113227bab177e23b38dfe376ea230179dd3ea7abae86d0cdc306df3cde6233b7be748dda115356

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
46ebd9ccf1c85635a6759803742ac4a1

SHA1
dc866dbe4f5f2bdd34fd3df72f16fc308d97610d

SHA256
b20ecad5d6f7804691f00e21cb98afb8df19089d5133ce20efa75372e39642bd

SHA512
792d51abec30ae7d694691d01d826ebf389dc665e050963700a18cc0e5d16daf9ac089ac9c8ebc80462bb484ad4aa8559814496b82f9b3ad2066489f5690a670

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
008d911b1737046f6d6d01a9d20e09e1

SHA1
09b3f3704ebd6fa07471cd7feed99af54e044883

SHA256
348e1c8c6141f26f507a8f7f6416414ad7b51007fc2787a56f71ac5dafe39a0c

SHA512
caef6560a913594ff13f8119fed528a7f84f18dbd2500b725b5bbc99d4a28a5637c316d3e98b3fe84c7bc57d9a86c6fd4dbf57494aa393ad5b6f5e57772ec3a6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f807fa2fb514d651230c06f3a7ed87a7

SHA1
284aec21f318bdbe913963320e93ee71f55e1440

SHA256
0458ff6d04e59c7ddb296accb6e96a3149c8d69a10ec227f6771b08d905eb7bc

SHA512
7fb967effd9dc1cb3f1ef3f01f4183423cf951d0e2c4bc66c5c9f1705c11882831ad088d5e52bab4e2de3435f2a5c6b24daf757610390dfeec412de4ba7e1dcc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
cb6e4123aea05e037ad2b9c6a3882d5a

SHA1
72b6ff275176615feba52ed54bf135c786831e90

SHA256
c3cbfc366b37f289ae1ac985853a7c1069768f8c0501919fab6bbba59b962288

SHA512
4c05fe17135742f33dcbe0b7fc8a96c0893fac3892140504f826fe44a4f2cc47ceb1603f62fe351e9d71f2f7de5bf460eb7d4bf2d9436754bcf308b025966464

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
92KB

MD5
167f325ca6214725ac3ea9afb5cc903d

SHA1
c149345b7ea5f8926887f9c3a92613d10abac65f

SHA256
17fa7ae24e30c5a39ca72e357b8a39c38f638be51d11fc71bcd8ff1b61ff1614

SHA512
38b70ffa731403d1eeca07825723c180c1093e5554bef93266a81d910e64f5160c184ca63f94b5512b67a06f4674602e955805f263b64320f4066d3bc951f78f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
92KB

MD5
f2b0a8a5bbfbbe179aa4d10064be56b0

SHA1
f94b354a27e191ba9eb304439d9a3657c5c91b61

SHA256
008fd202f303b0809217f6fa76ed73801636934b402ba5f7833ff47a845fb36e

SHA512
91175f23ef2bd7cadadee905e5c3c644d7997f384c83b44e6865b0ea4f6fa553853a4ec3a198327e7d9302a537db1d1a3f0b5aa4c8d632cd8690a7901768e46b

Download Submit
C:\Users\Admin\Downloads\Roblox.Account.Manager.3.6.1.zip.crdownload

Filesize
4.0MB

MD5
acc4818f58f1a1d2d2844a05f1aece19

SHA1
e3038c4501bb62415c18bfacca92167ebc4d623b

SHA256
1b94210a7a05ce8379db7b8c11d41f84bc868cbdcd0685733754728678bb5fa2

SHA512
1ca986d1ea6c8c87c590d891b3f29d5123e565e8ba2031728aa2c4b96892a18f00b478b6589ea73f056ec04ff0d07830fa5393c366eb849e80515971d6089207

Download Submit
C:\Users\Admin\Downloads\Roblox.Account.Manager.3.6.1.zip:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit