Analysis

  • max time kernel
    1050s
  • max time network
    1053s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    03-11-2024 17:56

General

  • Target

    RobloxPlayerInstaller (13).zip

  • Size

    1.2MB

  • MD5

    840ef91421c4400dc0a3e1e1f3ef1b92

  • SHA1

    07968814c9bf4a79095521a3d061479fb448b4f2

  • SHA256

    c37d667cca66b515320fa07eaae06bf71500e37710313768ee8c7aafdff1efc0

  • SHA512

    ab9d4e71ab658b234491cb26fce13f9cb26afc02507e7db9c0f394b3aac309e891beaa6e0924e643fc45cad5ab2b6cc486531f9f26df1682cb78ffd108d4838f

  • SSDEEP

    24576:xnyrKuNpHU/A6ujK2zC4MwKi4bKeInEAjlQm5JmDwwyV6CftEecaR3iU:xsBpHeVu2g/hqInPa9e6YEMRyU

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

wagnerpmc-45507.portmap.host:45507

Mutex

b0d8f3fc-8c2a-46fc-be6b-6d1d78af09d4

Attributes
  • encryption_key

    699AAFC4F1EEF370F320C33B8CBBB94DA90459E1

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Window Updater

  • subdirectory

    SubDir

Signatures

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

  • Quasar family
  • Quasar payload 2 IoCs
  • Executes dropped EXE 2 IoCs
  • Reads WinSCP keys stored on the system 2 TTPs

    Tries to access WinSCP stored sessions.

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Drops file in System32 directory 5 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 1 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 60 IoCs
  • Suspicious use of SendNotifyMessage 53 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller (13).zip"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:2492
  • C:\Users\Admin\Desktop\RobloxPlayerInstaller (13).exe
    "C:\Users\Admin\Desktop\RobloxPlayerInstaller (13).exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3220
    • C:\Windows\SYSTEM32\schtasks.exe
      "schtasks" /create /tn "Window Updater" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\SubDir\Client.exe" /rl HIGHEST /f
      2⤵
      • Scheduled Task/Job: Scheduled Task
      PID:656
    • C:\Users\Admin\AppData\Roaming\SubDir\Client.exe
      "C:\Users\Admin\AppData\Roaming\SubDir\Client.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:2656
      • C:\Windows\SYSTEM32\schtasks.exe
        "schtasks" /create /tn "Window Updater" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\SubDir\Client.exe" /rl HIGHEST /f
        3⤵
        • Scheduled Task/Job: Scheduled Task
        PID:2608
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4608
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ffbc1e1cc40,0x7ffbc1e1cc4c,0x7ffbc1e1cc58
      2⤵
        PID:3808
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2132,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=2128 /prefetch:2
        2⤵
          PID:1248
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1820,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=2172 /prefetch:3
          2⤵
            PID:2040
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2288,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=2328 /prefetch:8
            2⤵
              PID:100
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3156,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3204 /prefetch:1
              2⤵
                PID:2812
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3164,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3328 /prefetch:1
                2⤵
                  PID:2336
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4620,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4624 /prefetch:1
                  2⤵
                    PID:4444
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4052,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3728 /prefetch:8
                    2⤵
                      PID:1376
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4896,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4912 /prefetch:8
                      2⤵
                        PID:2436
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4908,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4828 /prefetch:8
                        2⤵
                          PID:1140
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4856,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5036 /prefetch:8
                          2⤵
                            PID:972
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=504,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5280 /prefetch:1
                            2⤵
                              PID:1264
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4592,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4868 /prefetch:1
                              2⤵
                                PID:228
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5356,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5360 /prefetch:1
                                2⤵
                                  PID:2272
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4932,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4728 /prefetch:8
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:60
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=1296,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4744 /prefetch:1
                                  2⤵
                                    PID:1632
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3472,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3568 /prefetch:8
                                    2⤵
                                      PID:1496
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3468,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5264 /prefetch:8
                                      2⤵
                                      • Modifies registry class
                                      PID:2644
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=2720,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=3420 /prefetch:1
                                      2⤵
                                        PID:4812
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5496,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4884 /prefetch:1
                                        2⤵
                                          PID:1032
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4768,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5864 /prefetch:8
                                          2⤵
                                            PID:3744
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5292,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=5920 /prefetch:8
                                            2⤵
                                              PID:1148
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5172,i,3140765851124280994,15717900386839038015,262144 --variations-seed-version=20241022-180310.361000 --mojo-platform-channel-handle=4520 /prefetch:1
                                              2⤵
                                                PID:3564
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                              1⤵
                                                PID:2244
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffbc1e1cc40,0x7ffbc1e1cc4c,0x7ffbc1e1cc58
                                                  2⤵
                                                    PID:3104
                                                • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                                  "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                                  1⤵
                                                    PID:4720
                                                  • C:\Windows\system32\svchost.exe
                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                    1⤵
                                                      PID:4644
                                                    • C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
                                                      "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
                                                      1⤵
                                                      • Drops file in System32 directory
                                                      • Checks processor information in registry
                                                      • Enumerates system info in registry
                                                      • Modifies data under HKEY_USERS
                                                      • Suspicious use of SetWindowsHookEx
                                                      PID:3880
                                                    • C:\Windows\System32\CredentialUIBroker.exe
                                                      "C:\Windows\System32\CredentialUIBroker.exe" NonAppContainerFailedMip -Embedding
                                                      1⤵
                                                      • Suspicious use of SetWindowsHookEx
                                                      PID:1524
                                                    • C:\Windows\system32\svchost.exe
                                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                      1⤵
                                                        PID:1136

                                                      Network

                                                      MITRE ATT&CK Enterprise v15

                                                      Replay Monitor

                                                      Loading Replay Monitor...

                                                      Downloads

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

                                                        Filesize

                                                        40B

                                                        MD5

                                                        51f387013b5aaf41d159a9bbfdfc2609

                                                        SHA1

                                                        7aab38edd394f8725a2e0b80bcd5c46f3d9cf45a

                                                        SHA256

                                                        de4896503b2ee893f841a696ce4eba75f69a5d2345d88a583e5065aef6b8274d

                                                        SHA512

                                                        d523bdfabbed63e8375234e1e7fce54691de886a3d7ac3313b8b7c77d32f874a94907e0d0f9fe2c57e8bda8812ae1e7e376383bcbfa469d48822d22bcdb3e9a4

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                                                        Filesize

                                                        649B

                                                        MD5

                                                        e751bb05d53a60837dcb0c4d02a20cd3

                                                        SHA1

                                                        7861732a8f748c304b28e5e577dc54e09f339383

                                                        SHA256

                                                        5c0dcec84131f1b79c5450e5a6a72c6439670ac82f1e127382fe4e39a41a4817

                                                        SHA512

                                                        3654b413b3b828f3e343ed04c6e98b52e052c94296397ba67d96c20b2472a343eb62fffc1a1b80b91a9c97ec6b1569f17b99980c33897e14526a4e0f7d484ccb

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024

                                                        Filesize

                                                        127KB

                                                        MD5

                                                        08a06d63e859264178f0783af752baba

                                                        SHA1

                                                        053bcbeca10527f505c13bda8fe182aef83264e0

                                                        SHA256

                                                        474f3bd3fe5fededcbe9027cfc9e3edc9af4bd0c495b8ef5a46dd2865e868f6f

                                                        SHA512

                                                        be58f926b11cf7389249154ef3d960b1152b7452e0a7ecc324df14f3bf7227f0a0ceebcef42938f5e29b001eee24b951226526d21e27124a8d23071367667a07

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000044

                                                        Filesize

                                                        25KB

                                                        MD5

                                                        ab513d120441be338c48c4e05ca1bbfd

                                                        SHA1

                                                        53b52401304c64d16988aea96c3a7f717772fbce

                                                        SHA256

                                                        dba0c9f80221b2d4a03bcd2c90cf7743cd3986b371034b258ef45438e73008e5

                                                        SHA512

                                                        cdf4b3ed4ba1f376aab68469e7a0478a8449087e26ac2afc6dcd3a3ec32f3c5662cbb6211aa9f7a0d6ab2dbbf67731f0efe3786c05866eb57c7e7a212cde9638

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000046

                                                        Filesize

                                                        36KB

                                                        MD5

                                                        0f1090afb8d701ed7bc2f04f57e72b7b

                                                        SHA1

                                                        959ce1eb0508f074ca98965713bbe01e0faf6079

                                                        SHA256

                                                        c523f204873631ecd4c4cc1895f41d5993581b77c18da6ba9ffd51349f6fbd03

                                                        SHA512

                                                        08a648dbd4a31dcac964a002453f2393d724f8a54039b3a280de45437f117b0e67ddbf20d07bcadfaad41da02fed054d18f8646a1f5abf3c2beffdcc8bd73f95

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047

                                                        Filesize

                                                        39KB

                                                        MD5

                                                        ef5fcc83ee6fb28f06e5503b2b016806

                                                        SHA1

                                                        9e571e76dfe624d7210aad95d78781cbf15a7079

                                                        SHA256

                                                        32007d4c9efc9889da70175f2624321aa8fddd12a5dd92ecf49de941d966e7fe

                                                        SHA512

                                                        4d260e5ea65f189a97637d04bd237ead2709567c7b31ff48688bbda82cc0240d0063f9c9036d79cf8879103c0bae0f288ddb1a156af30f85cb14a57fc83677f9

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048

                                                        Filesize

                                                        76KB

                                                        MD5

                                                        cdc6d5c476e23cf51fc19c01891a6594

                                                        SHA1

                                                        385a9d1ea18c6bc6bd5c37959c9b04b5dc421664

                                                        SHA256

                                                        a9952fd9061847cce9e60a7659c8b4d8a33f4a21fb99f1bfd53fb0560e52ac63

                                                        SHA512

                                                        3c997c390c7e24e4d0f7551ee26be3547002c475503761c845d9b23bcd6377d6f217397a6127308b70eec3feff47495af21d0863e111bf3c2afcc05ffee52429

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049

                                                        Filesize

                                                        80KB

                                                        MD5

                                                        7709df8d1b6e4a7c63a277a0be2148b4

                                                        SHA1

                                                        00095ad0403200a706477182c9396124ac780893

                                                        SHA256

                                                        f01d23a26eb64617f657fc3cdc84828636896a024c1c5b56c75af8984041add6

                                                        SHA512

                                                        807f4c9cb4aee50c37ec411eb21855c262e165f4159be021b533d96601a1ff52d6c2a210cd7cd54e5676979fd332b3ed6a6772db308dad333afcc99720f4cbe7

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

                                                        Filesize

                                                        4KB

                                                        MD5

                                                        bc2d230b0749d68e673cddfc26a0fc94

                                                        SHA1

                                                        77c0faf4dfa78bfb029ad0a7e110ddb8a7ef4d1a

                                                        SHA256

                                                        846e9159e2f744531e9dfa916ba03b7dcb2ab607297e63e2187f742b5342ddb0

                                                        SHA512

                                                        2a3e149ddf17fa1487910e4fcaf4cd332419cf8ee0d40e4e109be6167958ac1e75c34256304c059f8353aa026780307c4d6cdb8520fbc073ea4a66b864a9a12f

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                        Filesize

                                                        936B

                                                        MD5

                                                        a8399aa88a3fa645806e8e9fc1a4d98e

                                                        SHA1

                                                        8e3a3b558445197d40fd8200914fef79f9b11079

                                                        SHA256

                                                        e59744eb394bc438c586c90c4e39b2f95a728abb764e600702cb7ca7870072b1

                                                        SHA512

                                                        e7a6a083eb0c944a04bc6f35e0a5c96e5421a3f9458822d154c6981398864642dea07eb7139f4e5710b7166aa7bd82ab68cead23e27cfcc8f609643ab3e56229

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        40ec550ffabb87526156b18b007205f3

                                                        SHA1

                                                        85fd8be00828ff2c55f1b17a576179ec125e893c

                                                        SHA256

                                                        e32913da403440e7d74069898db11fb5009eb9b7e23f571565c7ce3969f82cea

                                                        SHA512

                                                        a8acbaaa88e1d7fa1769a278b902d628398ce8dd3a2dd4ce3b9af9bd07b0127f5405d5b70e74562c74f47e62b35977d57ac7d12b97132511c1796b82f9667ee9

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                        Filesize

                                                        2KB

                                                        MD5

                                                        22e4ae4f780698c45a95946f11470d98

                                                        SHA1

                                                        285ca36329a1b0889793497e2242152f7ffd1350

                                                        SHA256

                                                        4f358849f98727d5d6eee1e394b64d3704733f23a71b77e039f890ce8df88330

                                                        SHA512

                                                        f4562ed6dd61570b12d9e8a1e28b436245738df47d42a8240d8b6f07c9349e8b0be230e42fbf348be7aa63faa5f6c6a6fd327779a39ca5c54f0a714aefb03535

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT

                                                        Filesize

                                                        16B

                                                        MD5

                                                        46295cac801e5d4857d09837238a6394

                                                        SHA1

                                                        44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                        SHA256

                                                        0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                        SHA512

                                                        8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

                                                        Filesize

                                                        387B

                                                        MD5

                                                        9f6ce56712eb501a888deb2b722c781f

                                                        SHA1

                                                        a46d037df956075a30d6a4eec80f046d0c7c0561

                                                        SHA256

                                                        054f04693cd4b2cb1a2e7ca26b1876fc01f30ba6c0850303157aeb00090a9f76

                                                        SHA512

                                                        af352669a189638f8440954b052eb77879d624dfae0974ed47b17573de10172e80efa6d41f138a9cdf7f97ed3ae0375a10dfbc357f3a9b5892df43631f282ab8

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe5e3120.TMP

                                                        Filesize

                                                        669B

                                                        MD5

                                                        b0ee3eaa29cb464b5d8c8b44372dffd3

                                                        SHA1

                                                        99a18063dd0e86353f83bb29aa44d5eba90730c5

                                                        SHA256

                                                        3e796cee7964295b34034c07f42046420afb2360b969f59cc355579383a26a26

                                                        SHA512

                                                        e8c067a26dd41f943a2ec5eb47c6272a0dd596594fffb3e82ce2b1b7678eca0065e2efe7fee540b821c83df86f8a6665970b4932154ab7f89ae95c937f38b0b9

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

                                                        Filesize

                                                        100B

                                                        MD5

                                                        0625c2f22ce741d7e385b6667f527a9d

                                                        SHA1

                                                        b696ac8f6b97526e9117f10e2dd78db641120ca4

                                                        SHA256

                                                        ad01ec43332e541ccfffe367bbec6581d529faa9b160698ad417771279a07c0d

                                                        SHA512

                                                        2c3da846ac2e7314b769092ddce218d2c2e01dd28166c763acc65927bb2c052d5ca9ea72b5401f245eaab669d560b2c43e6c54271a789fd12dbce12e7f08dc93

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

                                                        Filesize

                                                        23B

                                                        MD5

                                                        3fd11ff447c1ee23538dc4d9724427a3

                                                        SHA1

                                                        1335e6f71cc4e3cf7025233523b4760f8893e9c9

                                                        SHA256

                                                        720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                                                        SHA512

                                                        10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                        Filesize

                                                        8KB

                                                        MD5

                                                        255b35c6e565d1166abdfe2a1e9bd659

                                                        SHA1

                                                        d51bcf0fec3d5a651aa960a7aecbc28415d21284

                                                        SHA256

                                                        c366f0f234dcf702537ecfa9e29e7dcc7fb2b476ba992c882eab9d1e06466ac3

                                                        SHA512

                                                        a87aabacb13a57896dfcece9f07f6d4133ca503e6ff594fe92af5f0b1c15f2551a7aeaae9112c4983ac66673e8b0ab35f9a4da0d5f77122b96c0e15c6581537f

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        9dec3bbf986cc9f80bed9be5f4284207

                                                        SHA1

                                                        317c601c1817a191ddbd193e549ed60d9a65f058

                                                        SHA256

                                                        2537914cb4d32cb04cc635d213d7d98e619335cbad065c8122cf070e482b074e

                                                        SHA512

                                                        d55a65b849cd801be3a7a950b8c8f4528ec45eecef61b0c3fdb1cebb7fcfecf33f733003ee1c2bded45606f225e62ad1e6379a8074929404dda467e431c59d7f

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                                        Filesize

                                                        2B

                                                        MD5

                                                        d751713988987e9331980363e24189ce

                                                        SHA1

                                                        97d170e1550eee4afc0af065b78cda302a97674c

                                                        SHA256

                                                        4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                        SHA512

                                                        b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        356B

                                                        MD5

                                                        614ce536e9e5f92c2b89d5e505de1431

                                                        SHA1

                                                        612b11ba51b259ee526e4fb330e5e9723480664b

                                                        SHA256

                                                        c751170b57a2e024ef51e5030673f32ca93eb37d5adf3d617b69ba5a93ee537c

                                                        SHA512

                                                        a928c6c6069f39030d00e810bf8de0e9d8198d7df0f2d4be89b87f4c4b8b088499a25f5705d509d0f02e92955daf466ec1e3307b009d44ccf5eebf8bcfbd283c

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        1KB

                                                        MD5

                                                        e3cc5e4f7e92af082f037f443982665e

                                                        SHA1

                                                        4d1c69d784bc34d88ec944a29f6dcdfffaae5e47

                                                        SHA256

                                                        6985e405e901c1a69ccc2d538b225d9001526a27a6236c646d4d32ccb0256b74

                                                        SHA512

                                                        606ff2d28d9c10ad4beeeb3aa3a6f2a8e1ff15fac2e7ea5901cd8df62a58a4bbdc2416553afe667e659816c38b5e2bb6ee1fa986b936646f8d09859cc267f82e

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        50a9b0d7afa6f65de907292961f02bcf

                                                        SHA1

                                                        bd75163dc74c0f00c10e07bbdb16228585e016df

                                                        SHA256

                                                        19dded2b3b458548cd081ed868055bc7d86708e7e0ceb87adb7124ff5b2972ad

                                                        SHA512

                                                        ceda51ada036478deae6004100581567d53248d7ab3735d37cf76718358fb9a7f655a0b22087cc54f204dfc6ab11c9c306677fbb13869e9bac5eeef9eee5ab28

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        290066d8908fa2f1f3f0437d99dc101c

                                                        SHA1

                                                        ef5b0bac89814909cc118119988273e5b25f4eab

                                                        SHA256

                                                        b00dbed2182259576ac2cfa6979e2d973a2ee704af2d7ce6d043bbda0cd4d4d3

                                                        SHA512

                                                        aae2257e4854cb567ebd6b8578db59eeea777ceb43c66e2a26d8837a65ee424a01b8914fc4e923a194b7d0521301e292963793131334062b7d0f1005cbf6ced1

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        566cb1b4c0893797021a45f0e9f952cf

                                                        SHA1

                                                        33e5a660d391da978f7c5d79be112e349c3c9cf3

                                                        SHA256

                                                        d2ffbf9a7243021905a9875f186fbe54ca75eccb767eb48bfc35857a3e6ef447

                                                        SHA512

                                                        b9de5e2b19385eb8eeba520c55bec941e2aed9a917543efd067f0b359d545991e8705b12086f75ba1e68c478010f145ecdf2e3a3073cd58175f7294e844a64b6

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        4a6ed314c1782258bb7e21491d7c63dc

                                                        SHA1

                                                        24a9919825cd048f2382b5dff70da3d87d8a6de1

                                                        SHA256

                                                        36c6a9aeec6350468369ba68f50bb99c874512156053018dd5dca59fcd993dec

                                                        SHA512

                                                        7af5bb3c442a548eb5f182de86534285850dd1caea2f47a62fe7f354289e0bacb2b4345483e3a65e94b7f27c1ec478e0c3d95a004a82f25d63e99f7c9a19c0cd

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        1KB

                                                        MD5

                                                        46fe7d42071dffce4a4c577ee419ccd2

                                                        SHA1

                                                        65ef82b3c647c64d56ddbeced16a1dbf2d710cbf

                                                        SHA256

                                                        c700fc3cdcb92ece47e13d217a960ba0930f5b80e711d963b31a23bfd43f5ea6

                                                        SHA512

                                                        4bcd5695b93911e42709d854c9608d769110b52a2cc91867de6e9ca4b87d27a330ebb60fb0858fa0564a740e68fa25f8358f4e6e4c2c5f4521d956f8c93f42b9

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        2KB

                                                        MD5

                                                        e942c0be890bbcdf2d77a0a6d9dbd4de

                                                        SHA1

                                                        7f55fff6b60ee7fad901d3d8d08ff8815a134e9b

                                                        SHA256

                                                        1994e2a5e8d4aff9a64395a40f09b13a2a7bdcc6247518f0e7e213a68463e255

                                                        SHA512

                                                        1f5feae81838bda5f05ab7c6c0c8e6d6fb994d4702643144bc564f0aa850d85190083d4f9354cd69a4943cef227b3771b6fb59baf8e1ef746161f3e5097773f2

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        a712c30efe62fc7e44770e265fca3909

                                                        SHA1

                                                        71095021cec6e8917887e8099616078a062da1ff

                                                        SHA256

                                                        43e1f77beb34e4bca71987b15ed3860f33ffcd2362c55ff2bfe6f0ba89a34e05

                                                        SHA512

                                                        dc06fd7b22caffa3e9c622281237cd7f64630eec82ead6531ffdd27913e8a27abe96d3bc590810079b3ab3ded59083fb92ea79f4e29f968df030b0dd14646ce4

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        a0d8b733018678460db85007365f12fd

                                                        SHA1

                                                        c3efe398668dec43a1169149413aa2e74880a256

                                                        SHA256

                                                        e1a8a9220d80d671748e0bb068a7dd0f19637da840ad166387635fc2fcb932d1

                                                        SHA512

                                                        e697a1076f294b216b4dcafde67949032a1c5e8e610e06b7b1b8030e0addd6c29a2aec7386a67e2e0bd66c6405b132375d079c5e52b693986c448c054c8fa266

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        95f89b671fe6732b42e24bac41f3a40c

                                                        SHA1

                                                        c9cc29a1bf2cb5a1542aba678eb4eecffaed5b6e

                                                        SHA256

                                                        62e692cf819dfc2fa439ef5cbdbc2e0fa34a3bcb754bd5da0311c150c6247711

                                                        SHA512

                                                        4ba13d988ddf4b6e2e67214c1cfc8730891b84ff7790f186e229ba5abed215e86e8239adea9c68444925d8bf570ce70104dda8971150d755128293a7cefeb32d

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        28f85614eee597ec09e9eb0677441119

                                                        SHA1

                                                        d1cc7c97c9f4f08c89291b0698b59f72ba4aad01

                                                        SHA256

                                                        7fbbdb59b447672a7079bd1d481fc0fcfcce20d80dff13e11a347e8c0ea8007c

                                                        SHA512

                                                        0afc9987ed24ebbeb9a37f99335ceba983afc1b515898668e5e184636f5c3006daea9437f6e6c7f0a81b360b4429935a2c66fd17c331726f867f30fc7f40be6e

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        1814cad981b67dadbcc814efb2bf2758

                                                        SHA1

                                                        3d2bff066ac0364df80cb6a101e93a9c38de13f0

                                                        SHA256

                                                        09312aac166dc2b9b81fa2c0781d0d1de172ee01cf3f6067003e7def4a4a5d69

                                                        SHA512

                                                        6df52c5469884d6dcf7784e2a9200889fc1713b2a33a59d5a9c9dc270d5b9c7c9bed463ea5ac1e1bb90dd71673780f04d39f9493d5d65821943c3c99b7375825

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        e306f7d3fe9ec1491e321d1959dd4fc9

                                                        SHA1

                                                        52f281227bc9185810c176ad0a5ce02082e3332b

                                                        SHA256

                                                        bb337b3cc37262ca75d05c66037dab720cca07808a089e722b4f95dd5e78aced

                                                        SHA512

                                                        077547ff70828014b3a64e8c8256389116c856d141eabd84ec068669a9f8b38e6f33ea2fc74eab3935af4f48e2941f982a34a22492299045e79bf8e02427ce43

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        2KB

                                                        MD5

                                                        4ccff3c6a29fbfa78201d7c9d0226b3f

                                                        SHA1

                                                        154784523af8f46b861bdc71b3ebdf4b65be90f1

                                                        SHA256

                                                        f477d04e8b2c26085a72d129bf92f12766cbc25abaae1b34ee902294b451ab31

                                                        SHA512

                                                        02b3ac16682df5e72d178dd4100cd7a61c9a964b49ae2c3a84a1fabd424ebbe03e344f10db0aa66c8d4ee73c3847d62a138e44b198d2615ca09cd49adc3c0eb8

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                        Filesize

                                                        3KB

                                                        MD5

                                                        f9dc8eb06cdd01a2b06cccd3f115a26f

                                                        SHA1

                                                        6be23b4be64f1fc4f5bfbd9ea5be4399f7531c56

                                                        SHA256

                                                        a0f3c11eb457c6c3043e0099258fe41b4b05542bd7c49adef442207217cb3166

                                                        SHA512

                                                        b851133563d671becc6368478fd2363f9bdecebaecaea423b51d51aeb35cc27b6d5db4d66125519910abd09db262f01c23e1eedb95d831eb1a562259f231b184

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d21ace74-f581-4499-89e2-548ac5122a7b.tmp

                                                        Filesize

                                                        8KB

                                                        MD5

                                                        a6f45afeed146a2b8aca4dee1c4f9590

                                                        SHA1

                                                        a78da3c8ea03d6af516f6c42fbd03b6753024e92

                                                        SHA256

                                                        7f0d60f5e3708e2667051900c8b7c0361d3d14c2692a9b35a63fdcac4930ff31

                                                        SHA512

                                                        ca14c091dad83cd02c8056c1e96822f0ec711078f03f985e9340f9d6d86b8835c95b9820f8574ca363e289f648cac36cec9a8263f53f1c7e7750bfd089784ad5

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        96b74256ecaf4cb530fc49c74f2f011e

                                                        SHA1

                                                        0bbad399caec4a9705007f589377e24024f322fc

                                                        SHA256

                                                        fe673ab4cf96dfd446a309eca753523deb908bceade0385370e69dc368ef1d22

                                                        SHA512

                                                        29521fb7dd51f7721e7b9995f6c680ab6b278305049871b66ea88495b672f5278218316c89d35bba0b6985632f4a2778088466150ab1a24f916786d2b3151ae6

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        88855c5934e4ebdf9f02a7c335dd8922

                                                        SHA1

                                                        7a1eab5c72d4cc90fc2e842659cea3b06ae9030d

                                                        SHA256

                                                        d6ca45f7692ab4596d43fe210905401480bdce09dd3b95fbda00b7f7f63c195b

                                                        SHA512

                                                        d59023488922359ac667c26ee21869f57bc1397423e5c99c1bcc4a5bb748301129f12d83e7ca093c8db2637bf8a61b2fb6a596265ca3adcd8bedf450942ffde5

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        9KB

                                                        MD5

                                                        9aef513f6e84ae02944ae54d0bf90ea8

                                                        SHA1

                                                        180865505093d38dceeed47190db9b8946ceaa3f

                                                        SHA256

                                                        0cf3133cd1b82513e7c4655aa12054b14d87014cad7e8a9758db3d858b8c0380

                                                        SHA512

                                                        28efc57046e2de80f8b8e061382541d2c1fadc151afc2ba808ccf39d2f33dca71e1461276005e0956d252270be46269e5476d0406887ff9cf048eb380430f477

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        8KB

                                                        MD5

                                                        33c40474f1e4c6bb2131c5a2ab9f8c31

                                                        SHA1

                                                        ded51593434a6db793febb057d5022bada80d241

                                                        SHA256

                                                        dd9462c146bad2e34fb21474eba8a60e2392208e433fe773c3d5bcf1c6c604a8

                                                        SHA512

                                                        69787edb3ffced53ad5e9dacd0a4198c7431ff6239eeae98374ea9df2123116878d1eeff499e75c649f1a313e939dba91b6577243d836dc76a7d2d8bea8c96a7

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        9KB

                                                        MD5

                                                        146299020cd2ba31fc6c175da41bb157

                                                        SHA1

                                                        aa213671540fee5921015783b6f68ed0e86d4423

                                                        SHA256

                                                        186dbe037222e00676ffd6842ccadb49155a846399cdbdd71d4cbd26dd97649e

                                                        SHA512

                                                        64f21a605433769816db8f0edbd1101c3d530e904141ac1bee095ba4488ed94f33d61f6c973021dc8edc523b360361669b311e6da4ac1998300d6dbdbbdb51c1

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        cf9d15b200a710a9216e770efa8e325f

                                                        SHA1

                                                        ac8f7b468be2f000c9007e1b3661ea8a08d1b8c0

                                                        SHA256

                                                        3320b7d31c74f8ea112bea119b546c51b393d5150b5106045646ad3c79956ca0

                                                        SHA512

                                                        6c7cb68ed66a62c4af9a0a007b94d4d4220aeb4647e98fc3d97b3956f97a8421ced4fea2e8181878e3e2ad7176cba394eee7059d6bfb67ffc3c3a7b507c6957c

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        be4fab8051b6f89fc3c36ae8ad689e71

                                                        SHA1

                                                        2317257bdc1dbd90daf3b450dde7dd8cd24aaaeb

                                                        SHA256

                                                        db12e5991840dcf86e3c44fff7bae5f506cfec32ab3f6192f72c73e78b5472bc

                                                        SHA512

                                                        f028f06620c7a5e3fadc6e1887a2b7f7b4284def64de703839cfc66e2fadd98e55e87d9e342a01bbe06536f92acbe16c469d91e6b7b79072e267057ce5fb7210

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        2d61c29049670116ca24345f7658290c

                                                        SHA1

                                                        f8322e14c6bb5088d7878330dc33ab0d66c37280

                                                        SHA256

                                                        83ad412391978337b00d0effe9cd22dfd431f7487528ce88282c09328b81ae0a

                                                        SHA512

                                                        e673d24a9b1f9e019310e25a4cc1819c4c03dc8ee778c0c413b79612661e19523a2309ead560304dfb3c3186676d9f6afbfda16070d5fc5948eb678843aa8f27

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        dac7e7acb6a186acaca72b6b9805d48d

                                                        SHA1

                                                        2c9eff4a6e336cc5cd02457f28a8391bda99d424

                                                        SHA256

                                                        93f20b81f772a973ed167f30781749881d54906d28f11893efd2f6e52a4a8423

                                                        SHA512

                                                        5f697c7434449a8413644feab3404b5b86004ad6710cfa767820f2180405c67f5c7a09e70d0b2497bc504b421c6e38c0f94ebd16d3ab8d44da00fe4a93dd25c0

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        798bc2bdbf7b476aa1b58b7fb09e6ea6

                                                        SHA1

                                                        791829fa5cea7416f6e5fb3bb3004ca2e36e575b

                                                        SHA256

                                                        b5affeff4f4bc0f22e167d41ca7a03458727ea264e5c79c0c446f41975fbf9cf

                                                        SHA512

                                                        45eeb9e2085178fb8e5fe1d4529bfa46862677f651aa2030c5645be58fd2b1bbaa8b1dce6206d5eb9287ef5f812d6e3f214e1534bceb5ad4e21064a255456937

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        650916e4b4787ada66b07df6d22bb4e9

                                                        SHA1

                                                        614a4ca9ed020d9a846daf2c11977192bb9003ce

                                                        SHA256

                                                        486ad2f18617b241883b47f2d5be1c7a763354aa9a24eb06c4f82b9d16b491e6

                                                        SHA512

                                                        6dcd6c0eb69f37adbdceb6711f42d6bce919054dc8b6a2d93f361f59ad5767577f665d5c32fc4e780a9523ebbe06dfcffe46ef2c54fcda0471a4a1afcdb3632f

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        885a29b53585c3b0191e7516db29774d

                                                        SHA1

                                                        5b5d365e0e5e2ce0cd13892ab26f305c683428ce

                                                        SHA256

                                                        249f5ba2265b4fd0955fa9be67ad877c21059aff18923c4f930a928479651824

                                                        SHA512

                                                        326dc9b48f6151067f3410a5ce5f05d8d1c2e366aa330d2d97931c0cbf3c85fb712ca1fa76b2b1c81f85e2eef6ce6c8660f8616e004c0eaad8e608e091af226c

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        afc543cb511200c2b0444c8191d69fbb

                                                        SHA1

                                                        11a335697dd665f323a348212cbbf6011e752073

                                                        SHA256

                                                        255161fe17699e45704900d24e0e2d8a7dd95c3a8fe7a2abce9fed362b68a49d

                                                        SHA512

                                                        7707a61b1974fd3b36a1eb48abf2bd94036780cca8a5c04c6e65cfc669996abde1abc3417fa4696febd0de32c8fde795d28874c12a89ea5744c1a7cd7fc49711

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        ae7b4ab306812f20ad64dfbfc62240d4

                                                        SHA1

                                                        6b7e474fbe83a9d51116be57c1e3bbc8002c3131

                                                        SHA256

                                                        f6ea942e11f8d482ba5661c5186931cbaf48f7d3f64238a92f9036e077987a9f

                                                        SHA512

                                                        38ef8c8f736d64e86a4e8933d56295f122ecae56c9b7ddb353fd33fe7fe9888ac0495a6df9b5144563ae25692c5563b106144e15b94b136926f553477a06f893

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        3a026c5c26478dd1ce8999607b1b91c8

                                                        SHA1

                                                        d42d17f8308ed775d501e38d48790c1c45380a70

                                                        SHA256

                                                        76c7ff8be9f78a33af215a18e42e6a649853c7d710ef41d847a2e74a4fb94010

                                                        SHA512

                                                        e11c89efe9ded17cb52fad1d1606b79a76a054819ef17169233a66dca15fadf939c5c3bf24e3a630ba631bf4e456ff5ec12a88f0c8bfa63cc31bc1b4262013ff

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        11KB

                                                        MD5

                                                        cc5d0a5144f0c992bc4bae4fedaaca1f

                                                        SHA1

                                                        39ff481a0b808b73cede28a982f983edb7768be8

                                                        SHA256

                                                        b92353815014cccaf07be8518ffd083f5b71f94761318df7b8aeafab3ca9844c

                                                        SHA512

                                                        440a26dc31b0fb76afdf35af5f359464919bf786580b8e1e9cece266020fdb03a7ab0d26925abf61cb1be92d92b0c92d5c701c8319184bd018ba59f362058e3f

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        ccc2b99db1f372b3309db32f2a2b17bb

                                                        SHA1

                                                        b68633d5c850091e0b171f33469c66a208da52fe

                                                        SHA256

                                                        cb063ca7cea4646f4d6f82ee81ab7f75ef56ab4cd8634767efccd1f44e79df35

                                                        SHA512

                                                        4532746474419900027618d1e6d1eb35ddd7f67cd5b5d09d1141f4f906265235b69767be77da97c1979e37e1b207cb6baf392f405ffac5d3ca2d90d6323f773a

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        11KB

                                                        MD5

                                                        9f8969a2dfa5f7b4b1e3df392e3d4beb

                                                        SHA1

                                                        a35de06f3c3e5a812c4e8c4891ac9ef5ca79cd08

                                                        SHA256

                                                        6a6fd668f530c1570163416e822645eb0d6cb617dbada052459ca56497b59268

                                                        SHA512

                                                        3e38c26fcd8268bd609a93ea03bc32137f403b29f14b97803ddb3109c5965998f97f4066bed599b36c151783468dd3f17335f0a309e21d08b85f915a036eace0

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        11KB

                                                        MD5

                                                        8224b60ed48e138ca5a26bca4bb9c3c5

                                                        SHA1

                                                        6d07851b7b9f68122e373da10c4a461969ac1c32

                                                        SHA256

                                                        4bcb5d445c0af2d1de11a393039495f0d60bf5cbb513b012b453f53c76e1b186

                                                        SHA512

                                                        c42a9cb60f1c3ec94e3b406e71e3860870f7667daf062bd21434a037e7c3554b74ea04f750e673f0fd9fb51ba8998c8401339f74b00ab126a75411e3c8cb4c9b

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                        Filesize

                                                        10KB

                                                        MD5

                                                        9ce0dcba2f1bbaba009885fc4a9fd041

                                                        SHA1

                                                        d6e493bf94fc933fbbed65648fb239aea5a4e4c4

                                                        SHA256

                                                        bf8628fa2821a178a498dc24ada2da8483f1c64309a631abb92b3858bf4dc485

                                                        SHA512

                                                        de0ac1dbab8b02f0a4b14599720c7a3a2529a71acd38edfc5ed77b7c4cfbe4a1167666e477ebf5f39aa06d15b008bd29750c87ae01c812a67f94594046c3e47a

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

                                                        Filesize

                                                        15KB

                                                        MD5

                                                        93bd3b1d0dfd9205d5c0dac569887144

                                                        SHA1

                                                        f7878252081a47cf9ae4cc83e41ad159347bd0cc

                                                        SHA256

                                                        6c3898d31d96184c7cb4ab61f225e3528bbaa527cd10eb023fe648349a06c069

                                                        SHA512

                                                        009175eec0a6b0a0b16813b76c584b372e117a93e86eed19277c246b20d97bcf809e06bfd8d22e973722ce6b07ccca3e94b6ea76d98d296d56bdf8107fd82148

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                        Filesize

                                                        232KB

                                                        MD5

                                                        5174c5aec4e12076168c9588ff5a9890

                                                        SHA1

                                                        bc4aba63ad90d1c4669745b1e3a89229b597d9b0

                                                        SHA256

                                                        5adcc02bb273f3afdc7a6b9cd7dabd6fce2fa9f03cfb4d9f454ce24d7eff5c4a

                                                        SHA512

                                                        00687a90ca15141f0951e865e0c73511a77291983d68c1995cacf12710b19070b4615622503c0e9eeb55b4cabfe72ed66a75f91a6c19c76cb1329b65526db534

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                        Filesize

                                                        232KB

                                                        MD5

                                                        9e0e58b635dd732cecce7840215dd090

                                                        SHA1

                                                        823108d5823008ca325c497496b58eb9005cb202

                                                        SHA256

                                                        ab8c5bfa6a462644ba986ae86b68cd30ec92e1dbb7775f9b4fe097846d612c7d

                                                        SHA512

                                                        0e66db05ba53fbf9bf5cc63225c7380b03709c647f168b5feee9d94280d3212f6027ed9e49bde5047791f062c424ab07c0d328008f315a586178f2c53297d09b

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                        Filesize

                                                        232KB

                                                        MD5

                                                        cb70bdaa1cd1e115cb524f9aac4dcda7

                                                        SHA1

                                                        b91dd4b6d710643aed78e1634e733c4786fd8fef

                                                        SHA256

                                                        2944b7213c1391c83fcb1fe3df5b0e6584a244b31193259637504ac723c95db1

                                                        SHA512

                                                        1506e456df6312653acc0aecd9f699f80860db1c20e8bb20accf6cf131bd0bafc30575b93d781c0a3d4fb03fc2c9c63d114246dc2189e73fa5f7afe8ee260f93

                                                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                        Filesize

                                                        232KB

                                                        MD5

                                                        0ec7ef9646ca123f48f2735a4a4b9623

                                                        SHA1

                                                        82986884e054fd37a85ef1354cc59c8e451b4337

                                                        SHA256

                                                        c5dbe501ce7e7326a262b70f6fe3a68882bd193e6a5fc92dcaf4a3e65616bb94

                                                        SHA512

                                                        9030e733060fcdd94f6f7bb6b6d900d65ca9d578a659f8c9d811d8e0cf1b58ce6498432583d1169cb867a04111728a64558172223ba4d429fac810753dbae912

                                                      • C:\Users\Admin\AppData\Local\Microsoft\Windows\1033\StructuredQuerySchema.bin

                                                        Filesize

                                                        414KB

                                                        MD5

                                                        ab79489e9704fc9cc9d8bee4f8e17ec5

                                                        SHA1

                                                        b2e19a89b43d537bb5b02ee9ca2418f027259c1e

                                                        SHA256

                                                        4d71760d6f3159849068b635ab4c39b9b747d899f03670533971a62d262c264e

                                                        SHA512

                                                        60d11ee023b9a045c4b59b88311f001fcf4856e27837a1ffd6ecab0203e5199ee077d85c5217e0f0b94e0bff93b14c3680816b6fbf9d42ee2eff5c23d9a13edd

                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                                        Filesize

                                                        2B

                                                        MD5

                                                        f3b25701fe362ec84616a93a45ce9998

                                                        SHA1

                                                        d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                                        SHA256

                                                        b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                                        SHA512

                                                        98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

                                                        Filesize

                                                        9KB

                                                        MD5

                                                        29f8e61e328c6d5904aeb38ad55e3ab8

                                                        SHA1

                                                        5abda7be4b3c2a67ff22772f418abdc3fc0af3ef

                                                        SHA256

                                                        24331be4d561ff9a89cd791caac86eff5cbecc8bfdc25abb6b470cb6e176825e

                                                        SHA512

                                                        e0d9e29ddbe28053c8c96dfa29771badf4122cc254452a83b45a0137dccc67ddfc67761570115bf5809805f0e83600e42fa6c58aa234f7689782d30e431ff74d

                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

                                                        Filesize

                                                        11KB

                                                        MD5

                                                        fe55bf207029bc71af2b2817ba081be6

                                                        SHA1

                                                        bf72242d5b558a1d51369d16309f1c76bb247882

                                                        SHA256

                                                        c92667b9b1d19522e21ac9fc1f5fd21fb2e2729201d7ddf9c7049576fa617429

                                                        SHA512

                                                        eced328c7e13bd59ea30e7ad43c607a36127364bc6ff4bb7446a0824f0400d3df38652a1ae9781d7eb9335d084d1f448bb02121fcf500516f39117e86537ace9

                                                      • C:\Users\Admin\Desktop\RobloxPlayerInstaller (13).exe

                                                        Filesize

                                                        3.1MB

                                                        MD5

                                                        71d857b3365c202ca55e34054b812473

                                                        SHA1

                                                        df86aece72fe4f2b3ed4d9516c804a18af00659f

                                                        SHA256

                                                        d90ba19df513abeecbdb32eff078161d01ea4f2836636063699974bba89e8596

                                                        SHA512

                                                        3dac64aa46dab7f259e9c971375e4745540dfdc2d39dc60c135de8d20dd183a5d35995dedcefeb216c481916591c13e68a478bf7ce31fed5fab845dfc9ff0c00

                                                      • \??\pipe\crashpad_4608_VIHRZCOASHVPNMSE

                                                        MD5

                                                        d41d8cd98f00b204e9800998ecf8427e

                                                        SHA1

                                                        da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                        SHA256

                                                        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                                        SHA512

                                                        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                                                      • memory/2656-11-0x000000001C7C0000-0x000000001C872000-memory.dmp

                                                        Filesize

                                                        712KB

                                                      • memory/2656-10-0x000000001C6B0000-0x000000001C700000-memory.dmp

                                                        Filesize

                                                        320KB

                                                      • memory/2656-15-0x000000001C760000-0x000000001C79C000-memory.dmp

                                                        Filesize

                                                        240KB

                                                      • memory/2656-14-0x000000001C700000-0x000000001C712000-memory.dmp

                                                        Filesize

                                                        72KB

                                                      • memory/3220-9-0x00007FFBA8EE0000-0x00007FFBA99A2000-memory.dmp

                                                        Filesize

                                                        10.8MB

                                                      • memory/3220-6-0x00007FFBA8EE0000-0x00007FFBA99A2000-memory.dmp

                                                        Filesize

                                                        10.8MB

                                                      • memory/3220-5-0x0000000000010000-0x0000000000334000-memory.dmp

                                                        Filesize

                                                        3.1MB

                                                      • memory/3220-4-0x00007FFBA8EE3000-0x00007FFBA8EE5000-memory.dmp

                                                        Filesize

                                                        8KB