Analysis
- geolocation tags
asiadelhiinindia - user interaction
yes - max time kernel
209s - max time network
201s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 10:31
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://roblox.com
Resource
win10v2004-20260513-en
12 signatures
150 seconds
General
- Target http://roblox.com
- Sample260808-mknlwaveka
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4468 chrome.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306587280041323" chrome.exe - Modifies registry class 6 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox" chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104" chrome.exe Key created \REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children chrome.exe Key created \REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{E7D26981-1117-4E69-965F-8635F74F359D} chrome.exe Key created \REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428 chrome.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 4280 chrome.exe 4280 chrome.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
pid Process 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe Token: SeShutdownPrivilege 2516 chrome.exe Token: SeCreatePagefilePrivilege 2516 chrome.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe 2516 chrome.exe - Suspicious use of WriteProcessMemory 22 IoCs
description pid Process procid_target PID 2516 wrote to memory of 740 2516 chrome.exe 85 PID 2516 wrote to memory of 448 2516 chrome.exe 86 PID 2516 wrote to memory of 448 2516 chrome.exe 86 PID 2516 wrote to memory of 4468 2516 chrome.exe 87 PID 2516 wrote to memory of 1372 2516 chrome.exe 88 PID 2516 wrote to memory of 1372 2516 chrome.exe 88 PID 2516 wrote to memory of 832 2516 chrome.exe 90 PID 2516 wrote to memory of 4224 2516 chrome.exe 91 PID 2516 wrote to memory of 832 2516 chrome.exe 90 PID 2516 wrote to memory of 4224 2516 chrome.exe 91 PID 2516 wrote to memory of 4348 2516 chrome.exe 96 PID 2516 wrote to memory of 3256 2516 chrome.exe 99 PID 2516 wrote to memory of 3256 2516 chrome.exe 99 PID 2516 wrote to memory of 3868 2516 chrome.exe 111 PID 2516 wrote to memory of 1112 2516 chrome.exe 112 PID 2516 wrote to memory of 4168 2516 chrome.exe 113 PID 2516 wrote to memory of 1516 2516 chrome.exe 121 PID 2516 wrote to memory of 2964 2516 chrome.exe 120 PID 2516 wrote to memory of 1516 2516 chrome.exe 121 PID 2516 wrote to memory of 4280 2516 chrome.exe 123 PID 2516 wrote to memory of 3948 2516 chrome.exe 124 PID 2516 wrote to memory of 3948 2516 chrome.exe 124
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://roblox.com1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2516 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8d9d9c728,0x7ff8d9d9c734,0x7ff8d9d9c7402⤵PID:740
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,870294646181074304,3538644845234768779,262144 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2036 /prefetch:22⤵PID:448
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2220,i,15742384279742079803,3793286960455596428,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2224 /prefetch:32⤵
- System Time Discovery
PID:4468
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=1880,i,16282833921595192750,454290418040138353,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2524 /prefetch:82⤵PID:1372
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3120,i,15807851218188799105,1273140710804426842,2097152 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3156 /prefetch:12⤵PID:832
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3148,i,3510500531767182919,18389180444412842931,2097152 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:12⤵PID:4224
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5148,i,6861488878675671124,13102459791897485784,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5152 /prefetch:82⤵PID:4348
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5148,i,12648358168610616607,1861003993008342977,2097152 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5180 /prefetch:12⤵PID:3256
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=208,i,9566250558025697635,16915552618685333687,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3292 /prefetch:82⤵PID:3868
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5212,i,9805240194970521668,13461107278302755352,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5196 /prefetch:82⤵PID:1112
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3068,i,2634935502177235829,13366366122945674052,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5240 /prefetch:82⤵PID:4168
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5400,i,1094517828587133820,3273128224821490932,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5648 /prefetch:82⤵
- Modifies registry class
PID:2964
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5660,i,15007550738705046317,14001924117552268477,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=728 /prefetch:82⤵PID:1516
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1004,i,13058614644924820591,8477907821043704290,262144 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3444 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4280
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3092,i,8919108657986513135,13138230958421443115,524288 --field-trial-handle=2044,i,12059438348827458660,903451825110133023,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5784 /prefetch:82⤵PID:3948
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2132
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4324
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\3f337730-faab-491f-9bb2-c5a831af277b.tmp
- Size 11KB
- SHA256 df3f3d7e8eb52eb11376e73179228426d3d2d5efef9c19d4d305887505e18b02
- MD5 cf7fedf8f7d2c16e2ee32aeccb0d6abd
- SHA1 c0965f169b36b690aaf700b8f80359944a908774
- SHA512 0f7e0c7f513e4fbb8754c44a17604a17a368e18bf06088e8c92d246667c4707e4e019b978bfef2975410552144093cebfb7ef11074676b8e4908dde7b23f6a1f
- SSDEEP 192:ee14K6IW7KxkXqK4I40pUZNCgVLHrKHfFKslEK2cXzKD/Ty+ErUkKN9H9IB3Wh/+:/1jbW7KxkXqKf/pUZNCgVLH2Hfgslqcx
- TLSH T16F32C727948D9A3F4FECD55CDC526F4F6DB1029272780C2896FB9C0403A97CE115A1AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 7b258c3e93a8474a12ef48bd6bd95a5398a1dfdae479942d51675f6a98ce66c3
- MD5 f97f5b5d0602ec470ac53a2917452af4
- SHA1 bde083ae3a66a9a868cde66c7cbc27183ad74b37
- SHA512 612a57e78ec7a519c64f5a23709a2595edef7ebf1f7f9628ead4750288dac09aed2ab0ff05234d5cda20ffbdfbddbc230c4a6661584c1bc0e694177826575dcb
- TLSH T121E02BB9CD61EC2B29FE1758A0618749FF12139B2640894B7E3C951C8FF1A3A5645C1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 65a1ce136d931cd3287de5d4b6560222ca51632b5979e9bdd3cabf8b88f109e3
- MD5 1eca9657c391d228714a2d6ea50e715e
- SHA1 5167b449e97771c6d4a3fbd93e3171c53647f3ac
- SHA512 c9401b134cac2e405462773dfa6bfa19d33713a5c222683a638a8316b4ee27af1cf6e369f72099357df4fd19856db885301bb4d649f870a4af833ca65f1c119c
- TLSH T1A6815D067AD3EC31EF508D7208A1AC27ABA80ADBA5C22F1FE502DC3079732D43E012C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 997aa6fee55df10ddf6bc14bc27b5b90d15e35c916df6604d9d0d83555cdb215
- MD5 04d4e6fb08922a8f295dc43c869b63af
- SHA1 5ee6bce181389d6374bb3135ce8786e9527793ce
- SHA512 60e6c4a1e8cc3fd50090b00b2851e31f9b15456b1d73a5798151922ed2cd7edc377b87946e9635d7d210c674cdbbc115f36ead5f7939a975f488400f79c7bdc2
- TLSH T1F7713C0A7AD3ED31EF944D7219A08C56ABA80ADB96D22F0FE541DC3038736D53E012C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 7d8a15b1aa034eea93f2425395c57d82ef1c8f5c8c8a113e3c3b908f290b80e0
- MD5 88e7ee1152d46a57c13fcf7c5ec80680
- SHA1 fcef2b29ec8823f7d8ad870df8fb9a69d920eae0
- SHA512 fa43c43106a7135ce62a5533eea6f3037e282a92bd50101151cfac14c1527f9da12a94f16b6ea802a268a10c10476e4212bbafcc2b9739567c8ba9181f9f8024
- TLSH T141713C0ABAD3ED31EF944C7219A48C53ABA80ADB56D22F0FF541DC2038736D53E112C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
- Size 387B
- SHA256 941e5b27ed236bf4217c7bad5c02ea34f46e9ac5fdc9949738ee1553bdab7c14
- MD5 91f8e453d07165cb848b1f2cd7bb3830
- SHA1 629fffce25e2b6f9fae544328ff1d64f4e7bd7f2
- SHA512 a88758ba78337bc9b2071d4df3f1c3b37748fb8e59d836ab380b140582852c2a57ab80d4ca6c83e8e871302d9b47d736a67ab51f0039bf171177a4f179b321b0
- TLSH T192E02BB8218EC69F7844405766BC7B0E96E37E0C9ADD9C825F01E820E1C040875F5770
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
- Size 347B
- SHA256 e372bed937334a9afde01c02440a30b723f02e87065fe33e7e7291069dcc3009
- MD5 3ec5b7427fad23994425c0b1bb72b698
- SHA1 d532aa54b8a4f231a5586f59637fe34d12d79840
- SHA512 cbb027f5c1e492459ecffda30d1088d3eb9e62565e2c34eb1a81ceb297c2b9698d67dd9ede21daa8db3ae59883d606cc12cd9a4996639b774d2754bda4198977
- TLSH T114E0D87895CADA5F255480B766387B0F9AD3690D9ADDAC864F81E410A0C540C54A9375
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8d8aa4ae-be9a-4f4a-95f4-f51a51aa07c9.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 9e2770eff7da269b70c07429451401f86a24f7b987bac95e854786a0eb06f65b
- MD5 293674004f277455a70f9c0aad55a627
- SHA1 de2dbfc173d1477bbbd03b7c612847cd53fc088b
- SHA512 c82eff32039203353efc2b45b4a93a857470bf5f1a0f5ed2d73d11791166c665836d31a22cecef88b4620f58572800563db623c43dfd9d52c64380ec21c68e5b
- TLSH T18C3168B7C7D8857D890156F5BB156E1FCE290D14532C3C5AC8D4EE0B53E18B1D24068F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 4KB
- SHA256 384e8423d5cddf62bf319555b2a70816b4374a70c1770e299f04d99b11673a56
- MD5 c1880112b0a73d5066f7a992d38ba243
- SHA1 336fe8bc5c744875d8049b4daacea948e67598d1
- SHA512 76e11e2f1fc2ff49210b676c25a61c262f9167f6797e9e9b1d03a91460d43376dd851a9c918307b0734eda2876a3bef5a68dd5e6e0ff6c43a45a33a5f0eb6ab7
- SSDEEP 96:DR+kVzUIaEavNMGH6HxqGgugHXf8jxQTHH/y:DR+kVzUIaEavNMGH6HxngugHXf8jxQTK
- TLSH T1B2A18BF353F5C96D9A1656F0AA05AE1BCE590524031C3876C5E0BE1793F35A2E201B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 5KB
- SHA256 c05b5e5e25c2665aade1a400f007f8dd18782e1ef0126fb166775c422d9a2434
- MD5 fb82b2c914d71f5c9ad6558f24bbbb0f
- SHA1 5d252208f8b0ddb31a9a003480ebdf1a6403dd32
- SHA512 798af13767b8df6042492c483a94a649da3e74758e8074bb11ae70a0ac2e0f030e41f4f242921a7fdfd1c5cc629fd25f41f2417b44e49f9b9725e521950e4950
- SSDEEP 96:DR+kVzIJIaEavNqGg9agP48fkShHjMuGHQHMbQTHn:DR+kVzIJIaEavNng9agP48fJhHjMuGHa
- TLSH T1EAB19CF353F5C56D9A1692F0AA05AE1BCE590534031C38B6C9E0BE2793F35A1E201B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 5KB
- SHA256 81ed10b5c848eaf20e67c966993ce6b9ea9cb662ff9bdf2a96790ecb9802a828
- MD5 5faf702a3c9d190516e8f64aa3c7363f
- SHA1 7a604d3084ae30f2b4203ee2036811f24ad4dee3
- SHA512 f857f36254421c7eb486c269cf65214dee64ae7c9ee84e7ee23fcd2f4f5864a79232bfbb876836ef2ff3dac4746dd72314a583eac8be066dec63afed05fceab2
- SSDEEP 96:DR+kVzIJIaEavNql9agP48fkShHjMuGPHMbQ0mx3gzHn:DR+kVzIJIaEavNQ9agP48fJhHjMuGPHM
- TLSH T1F7C1ABF343F5C96D9A1692F0AA05AE1BCE590530031C3876C9E0BE2793F35A1E201B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 cd69494d5c7a9e4623c814549b674b33c1402bf028346e1be822f8c534637af2
- MD5 c86f3703b02540eeb38133b701599198
- SHA1 a4f34d8846e37b6e59490ad5207319f3f1c6f993
- SHA512 2c7ee1fad001ba5d384bc5c4f34a133d9411fca1337d6e6ffdc6c476be498185892cd8622bd4a2dd0716896be378ebe1457180f1e3ecf1c61e8f33c8d9a5269b
- TLSH T1593168B7C7D8857D890156F5BB156E1FCE290D14532C3C5AC8D4EE0B53E18B1D24068F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 88a68a3969fc353b00dbc376ccc96fb92bb1074d849a64d1c7cc5a70afb08cd7
- MD5 01594d6d1e546def463a029a0a37cdf0
- SHA1 b04437f1d57aafba94bf8c117324b851185c0473
- SHA512 cd945ec8c908ea250d218b8bc8b9a6108ccf1681058d750f5201982274840020d5cb012561bcdd11838c479fe670ef45fcd5c853b7851c076b6188619a26da8e
- SSDEEP 192:6R+GHbyv7WvhPRp1q49THsb+WNnR3ITEekRsgOckw9JaU8yIsnAUgE:6R+G7eChXtFw51e8/DafE
- TLSH T1AF42D52EAD10293B5CDAD619F9257767E7F9103136D42F44EAFC8A2C24E79CC222741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 05b158766adb4030b1602b000541b203f16ff5f290fe48adf62fd34ea3565fe6
- MD5 56371cc68e262e2c1c1a796296b2bbcc
- SHA1 5b63432649014737ac618fbf473405d2e4759557
- SHA512 20f84d36a78167172d4037f522d0745fb3ca41d904c9c6c161eb8884196b546b29dac8d166ae5c6f884aa1ac9d9cfd882fa3447b0b18160716e1b5e6a0ea2403
- SSDEEP 192:6R+GHbEv72vAPRp2qv9THrTb+WNnR3Ib32hOckw9JalVyIsnAUge:6R+G7gC6X5FF5S2RDaTe
- TLSH T11542C52EAD20293B5DDAD219FA25776BE7F6103135D42F84EAFC8A2C14D75CC222741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 b321f1e9900fd6bf04bb1c88779688317bb4583b1cf406dc508e83e44c57c7a5
- MD5 d95717e410f18c195ab80f13747e9e7f
- SHA1 7da9f87851b404320f59afd6314167cffc4443b8
- SHA512 06499cdfd65c4f7ab3e2b98106eebb0267c493e3ab4870eeccdb7c0670041a1ad766d34b175423f5e982bebd2ae0bc1132ebe61249fe64762b2607742aa63625
- SSDEEP 192:6R+GHbIv7WvhPRp1qr9THsb+WNnR3IfLEsRsgOckw9JaU8yIsnAUgE:6R+G7UChXuFw56EE/DafE
- TLSH T1BC42F72EAD10293B5DDAD619F925776BE7FA103135D42F44EAFC8A2C24E75CC222701B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 0b6c23326ef549e514382d121f3805a457e0a57821454785f94c175cd19c8abe
- MD5 3fe177f5bee8831ca7554d8bb1afe1b2
- SHA1 61acfe49c286b2f2ca1d70ce0d505e45f56edd3f
- SHA512 7b930455640085309bafa1dcf6684d70284dd60dc4f6ecc731a097a1fe292fde8ddeb98101bb9688921f6c06b0c9c9fc5a9bfc15aeb54468fe418f0e3d4f2957
- SSDEEP 192:6R+GHbAv7WvhPRp1q49THsb+WNnR3ITEekRsgOckw9JaU8yIsnAUgE:6R+G7cChXtFw51e8/DafE
- TLSH T1C442D52EAD10293B5CDAD619F9257767E7F9103136D42F44EAFC8A2C24E79CC222741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 11KB
- SHA256 b5137f061c9e93de963c206c6f1223e9cf040e1a5c2bc5d02178dde2c8d1684d
- MD5 9705fe10d3cfcc48d28d787299cf0164
- SHA1 d4195fba6ae7ae6f7e1723f317a899f2f2beb1b3
- SHA512 adb48315f41e5e50a03e8e315ecb4f2e0fc6d3e772603af977230b822f71384591b3406639a1183c5b7a3eea51a0f769038946a9419978a5becb26a715a064e9
- SSDEEP 192:6R+GHb7v72vAPRp2qr9THsb+WNnR3I6ceSOckw9JalVyIsnAUge:6R+G7DC6X9Fw5qeMDaTe
- TLSH T1DC42D62EAD20293B5DDAD219FA257767E7F6103135D42F84EAFC8A2C24D75CC222741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 a0fe37908543f47ca8cc1b773f754605832ffbba3b03a76a194e06e841cb94ad
- MD5 796b82ad6778d37ed560bfc4488d71f1
- SHA1 647593ee3e2a98135d0285953cf0a2bb3871cdc3
- SHA512 5d63e2aeaef1a6e30092a9f664defda75f7e66224103b1e15d652e85a1eecc020dd3c42f7e574ab01112a02175a3628a36a120803b39af258794b6baf8d81868
- SSDEEP 192:6R+GHbDv72vAPRp2qr9THsb+WNnR3Ir/YtnOckw9JauVyIsnAUgE:6R+G77C6X9Fw5KYFDamE
- TLSH T1A142D62EAD20293B5DDAD619FA25775BE7F6103135D42F40EAFC8A2C24D75CC222741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 6fd8748ccbd6756837a2d39ccd6947cfcb2634d5e29a7770ca8a6857db5d65e9
- MD5 27cd2ddb950e88e5f3e0bc232afae9f9
- SHA1 e4462372c8456de7eaaa0fdad385f0a5faa953c9
- SHA512 10d90de81581f83b0fee74dc798c7ac8ba48e3525769aa1f5943debd4b909b1f349906ddb25bb333a8fe688b9e08c4b0410a0e9b0a3ccf320a6582607e50aaae
- SSDEEP 192:6R+GHbfv72vAPRp2qr9THsb+WNnR3IfLE5nOckw9Jau8yIsnAUgE:6R+G73C6X9Fw56ERDapE
- TLSH T1A542D62EAD10293B5DDAD619FA257757E7FA103135D42F80EAFC8A2C24D75CC222741B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 213KB
- SHA256 0eeeadbef453fd8547381fc80ab68dd30d73dd5dc2534e04cc402d1de428add5
- MD5 41a761ef6b0f699b08bb43050b2f1a90
- SHA1 a788b51c4e5e1b8350661d7a52b69d7541305be8
- SHA512 c82de578a9a580389432c60cf552f3a8d0d5551ab913935893444d821ca57a9e78e9e913c5821c627a22b58aea25698015ae419ca36f908fb0d8fa3e4b19451e
- SSDEEP 3072:U+YWzxg4oCLgyw2zyt76/+5e8s6Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:U+Yw2h2mn4tdm7Rkm1tYpBeh2BAom
- TLSH T1152412331D29EC7355A957AA748A1E2E2CF119E6CC31E942D8E57E0023DF7E9590F930
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 829d24f0667f14d0f9a12b7243a838413001d4347ec15adc1925bdba7bb2ca47
- MD5 c4cb2f541e28c0d143f398d23ff70ecc
- SHA1 694c704c1184fad51b9d38934ae23511d1e172d2
- SHA512 5618c770b8a6c222a37001aa99e81a73396d6f8b89a0a1f26fd00cf1b97a5bf7a8ac0a3ef50ee5c9adce5e5b4fe62b9c56dd232fe76446db021597f2b701aab1
- SSDEEP 3072:zGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:Km7Rkm1tYpBeh2BAom
- TLSH T1A9C3023B5D74A83759B9BB4EB04E0B1F1EF14AA6C920DE52C8D86E0437EA7CC1A45D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 0497536533e86fd56bb81312e1614aab6471581e32c5ab49ace6ba1ca82def5f
- MD5 92330e456a2797e68858571119022909
- SHA1 63d3400c1890a15a589d910f3197082e03641be8
- SHA512 0ce99d081cb9177a52354697c9561f8234e2baf1218c6189f1fd88ad48fb833aa137baeb8a343ff55bc0c70b349eb13eac3ad6fe0e403a634f09549be3def1ce
- SSDEEP 3072:dXGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:dWm7Rkm1tYpBeh2BAom
- TLSH T13EC3123B5D74A83759B9B75EB08E0B1F1EF14AA6C820DA52C8D86B0437EA7CC1A45D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 115KB
- SHA256 d55accbea5dff4b0173f4190d6a9eae2e73e3809cb5b4d07c419f274bfc1c053
- MD5 5c292e98e0d743f00dbd63e091c709f7
- SHA1 4d8168b9367e157401b9c2e8fc1d151eb99b3f26
- SHA512 da9df6e1d2263ac62e75a5e21e994c6e45bd1542d999d310b755b12ae5c9a8be5777f22e16656e87a0b0ff7c8e58ca29e88cf8890abbe84e5de2c9a847514509
- SSDEEP 3072:wGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:7m7Rkm1tYpBeh2BAom
- TLSH T1F3C3123B5E70A9775979B74EB08E0B1F1EF14AA2C930DA52C8D86A0437FA7CC1A45D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 6bfc67c43ccfa0fe690a34886f98587c7e55a9a6b3f0f8d69a75b99662ec9beb
- MD5 946e2bf44e7f55ae2a29016be0a3a143
- SHA1 a11ad2c198b3c0afdc528b3fc68e97c702ca0740
- SHA512 f864f6d289b2b260f4e7724f6116e97b8c4f4555a42fc1ec41ab2590e009e94a17f9e0d9dead9327ca75272b788cfe82d888756378f9cf84c2aa60bd9ad3a345
- SSDEEP 3072:GXGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMm:GWm7Rkm1tYpBeh2BAom
- TLSH T1B3C3123B5D74A83759B9B75EB08E0B1F1EF14AA6C820DE52C8D85B0437EA7CC1A45D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512