340c9103a94ded6f1db7a36dc8513d8f2a14f5dfaa3398c5f43f9739483b2dbf

Analysis

user interaction
yes
max time kernel
899s
max time network
891s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/04/2026, 10:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RobloxPlayerInstaller.exe
Size 9.5MB
Sample260426-mdd4vsdy2s
SHA256 340c9103a94ded6f1db7a36dc8513d8f2a14f5dfaa3398c5f43f9739483b2dbf
MD5 c45ae0d98270b32567b6a6dcc719dbfd
SHA1 c4a31f649ac8a8472352eaa680c5d4fa87922b18
SHA512 9b55935fee10357609fc69b2107db3b23ceba869d8503defe73dbf4572e427021320b7e01ff038cbb4f92c1d41bc88944430526715d030cb32800c2ec764231c
SSDEEP 196608:WeAMbzCW5uZ5Weyd2QLzdOIX6GPAXItWpyRaBnU64yYT:WKO5Mzd/XpPAXItWpeyXA
TLSH
T13DA6CE22F940C031E9D202B2A6BD6FB65D7D9A341B3948C767C45DB845305E33B3AB6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Executes dropped EXE 7 IoCs

pid	Process
2984	RobloxPlayerBeta.exe
2860	RobloxPlayerBeta.exe
3668	RobloxStudioInstaller.exe
1240	RobloxStudioInstaller.exe
1972	RobloxPlayerBeta.exe
2176	RobloxStudioBeta.exe
1292	RobloxCrashHandler.exe

Loads dropped DLL 24 IoCs

pid	Process
2984	RobloxPlayerBeta.exe
2860	RobloxPlayerBeta.exe
1972	RobloxPlayerBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
1292	RobloxCrashHandler.exe
1292	RobloxCrashHandler.exe
1292	RobloxCrashHandler.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 3 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxPlayerInstaller.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioBeta.exe

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\D:	RobloxStudioBeta.exe
File opened (read-only)	\??\F:	RobloxStudioBeta.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
5036	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 9 IoCs

pid	Process
2984	RobloxPlayerBeta.exe
2984	RobloxPlayerBeta.exe
2984	RobloxPlayerBeta.exe
2860	RobloxPlayerBeta.exe
2860	RobloxPlayerBeta.exe
2860	RobloxPlayerBeta.exe
1972	RobloxPlayerBeta.exe
1972	RobloxPlayerBeta.exe
1972	RobloxPlayerBeta.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\fonts\Jura-Regular.ttf	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\Dash\Dash\collect.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\RadioGroup\RadioGroup.code.md	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Enums\ColorMode.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\HttpRequest\HttpRequest\RequestFunctions\MockRequest.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\StudioContent\textures\GameSettings\Arrow.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Components\LuauHeap\LuauHeapViewStatEntry.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\ReactReconciler\Promise.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\ReactRoblox\LuauPolyfill.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\RoactNavigation\RoactNavigation\views\RobloxStackView\StackViewTransitionConfigs.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\Cryo\Cryo\List\getRange.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\ReactUtils\ReactUtils\rotriever.toml	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\RoactCompat\RoactCompat\RoactTree.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Dialog\Modal\getModalWindowWidth.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Lua\TagEditor\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\ExtraContent\textures\ui\ImageSet\LuaApp\img_set_3x_1.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\Utils\Utils\helpers.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\fonts\Montserrat-Regular.ttf	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\InsertableObjects\Dark\Large\LineForce.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\Path2D.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\Streaming\Light\Standard\IsStreaming.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\textures\StudioSharedUI\search.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\textures\ui\Controls\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\Console\Console\init.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\StudioContent\textures\Debugger\Step-In.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\BuiltInPlugins\Optimized_Embedded_Signature\AdaptiveAnimationSupport.rbxm	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\scripts\CoreScripts\Modules\SelfView\selfViewVisibilityUpdatedSignal.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\ReactReconciler\ReactReconciler\ReactFiberWorkInProgress.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\getFIntMeshDivisionNarrow.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\StudioContent\textures\StudioUIEditor\valueBoxRoundedRectangle.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\BuiltInStandalonePlugins\Optimized_Embedded_Signature\ExplorerPlugin.rbxm	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\InsertableObjects\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\PerformanceTools\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\textures\ui\Controls\DesignSystem\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\RoduxAliases\RoduxAliases\rotriever.toml	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\textures\AvatarEditorImages\gr-selection-border.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\textures\ui\VoiceChat\RedSpeakerDark\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\GraphqlTag\GraphqlTag\README.md	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\SocialLibraries\SocialLibraries\Logger.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\util\createIndividualBodyPartSchema.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\Alerts\Dark\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\textures\ui\Controls\XboxController\ButtonStart.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\ExtraContent\textures\ui\LuaChat\icons\ic-info.png	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\RoactNavigation\RoactNavigation\NavigationActions.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Lua\FindReplaceAll\Dark\Standard\ThreeDots.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\GenerativeAI\Light\Standard\ThumbsDown.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\Connection\FocusHighlightManager.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\scripts\CoreScripts\Modules\PlayerList\Flags\FFlagPlayerListFixMobileScrolling.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\scripts\CoreScripts\Modules\Settings\SettingsPageFactory.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\textures\ui\Controls\PlayStationController\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\textures\ui\Emotes\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\lumberyak\lumberyak\example\page\component.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\textures\ui\Settings\Radial\EmptyBottomRight.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\Packages\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\content\studio_svg_textures\Shared\Ribbon\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\models\AssetImporter\bonePreviewMesh.mesh	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\content\textures\ui\VoiceChat\New\[email protected]	RobloxPlayerInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\Cryo\Cryo\List\join.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\Empty\Empty.lua	RobloxStudioInstaller.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 1 IoCs

pid	pid_target	Process	procid_target
6116	3668	WerFault.exe	105

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RobloxPlayerInstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RobloxStudioInstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RobloxStudioInstaller.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerInstaller.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerInstaller.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies Internet Explorer settings 1 TTPs 11 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox	RobloxPlayerInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	RobloxStudioInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	RobloxStudioInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	RobloxPlayerInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	RobloxPlayerInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0"	RobloxPlayerInstaller.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\PROTOCOLEXECUTE\ROBLOX-STUDIO	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth	RobloxStudioInstaller.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134216728312978033"	msedgewebview2.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\RobloxStudioInstaller.exe"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\ = "URL: Roblox Protocol"	RobloxPlayerInstaller.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\ROBLOX-STUDIO\SHELL\OPEN\COMMAND	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\ = "URL: Roblox Protocol"	RobloxStudioInstaller.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\URL Protocol	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\ = "Roblox Place"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-0c771458892e42b7\\RobloxStudioBeta.exe"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-2e6461290a3541f5\\RobloxPlayerBeta.exe"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\version = "version-2e6461290a3541f5"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\RobloxStudioInstaller.exe\" %1"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\URL Protocol	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command\version = "version-2e6461290a3541f5"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\ = "Open"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-0c771458892e42b7\\RobloxStudioBeta.exe\" \"%1\""	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-0c771458892e42b7\\RobloxStudioBeta.exe\" %1"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\version = "version-0c771458892e42b7"	RobloxStudioInstaller.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-0c771458892e42b7\\RobloxStudioBeta.exe"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-2e6461290a3541f5\\RobloxPlayerBeta.exe\" %1"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\ = "URL: Roblox Protocol"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-0c771458892e42b7"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\DefaultIcon	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-2e6461290a3541f5\\RobloxPlayerBeta.exe\" %1"	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place\ShellNew	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\ = "Roblox.Place"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-2e6461290a3541f5\\RobloxPlayerBeta.exe"	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-0c771458892e42b7"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place\ShellNew	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell	RobloxPlayerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-0c771458892e42b7\\RobloxStudioBeta.exe\" %1"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\ = "Roblox.Place"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	RobloxPlayerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open	RobloxPlayerInstaller.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\ROBLOX-STUDIO\DEFAULTICON	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth	RobloxStudioInstaller.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2176	RobloxStudioBeta.exe

Suspicious behavior: EnumeratesProcesses 29 IoCs

pid	Process
4568	RobloxPlayerInstaller.exe
4568	RobloxPlayerInstaller.exe
2984	RobloxPlayerBeta.exe
2860	RobloxPlayerBeta.exe
1972	RobloxPlayerBeta.exe
1240	RobloxStudioInstaller.exe
1240	RobloxStudioInstaller.exe
1240	RobloxStudioInstaller.exe
1240	RobloxStudioInstaller.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe
4192	msedgewebview2.exe
4192	msedgewebview2.exe
2176	RobloxStudioBeta.exe
2176	RobloxStudioBeta.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2176	RobloxStudioBeta.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4148	msedgewebview2.exe
4148	msedgewebview2.exe
4148	msedgewebview2.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2176	RobloxStudioBeta.exe
1680	OpenWith.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 4568 wrote to memory of 2984	4568	RobloxPlayerInstaller.exe	88
PID 3668 wrote to memory of 1240	3668	RobloxStudioInstaller.exe	106
PID 1240 wrote to memory of 2176	1240	RobloxStudioInstaller.exe	114
PID 2176 wrote to memory of 1292	2176	RobloxStudioBeta.exe	115
PID 2176 wrote to memory of 4148	2176	RobloxStudioBeta.exe	118
PID 4148 wrote to memory of 4612	4148	msedgewebview2.exe	119
PID 4148 wrote to memory of 4584	4148	msedgewebview2.exe	120
PID 4148 wrote to memory of 4584	4148	msedgewebview2.exe	120
PID 4148 wrote to memory of 4584	4148	msedgewebview2.exe	120
PID 4148 wrote to memory of 5948	4148	msedgewebview2.exe	121
PID 4148 wrote to memory of 1744	4148	msedgewebview2.exe	122
PID 4148 wrote to memory of 1744	4148	msedgewebview2.exe	122
PID 4148 wrote to memory of 4616	4148	msedgewebview2.exe	123
PID 4148 wrote to memory of 4616	4148	msedgewebview2.exe	123
PID 4148 wrote to memory of 4616	4148	msedgewebview2.exe	123
PID 4148 wrote to memory of 2332	4148	msedgewebview2.exe	124
PID 4148 wrote to memory of 2332	4148	msedgewebview2.exe	124
PID 4148 wrote to memory of 2332	4148	msedgewebview2.exe	124
PID 4148 wrote to memory of 4412	4148	msedgewebview2.exe	125
PID 4148 wrote to memory of 4412	4148	msedgewebview2.exe	125
PID 4148 wrote to memory of 4412	4148	msedgewebview2.exe	125
PID 4148 wrote to memory of 4296	4148	msedgewebview2.exe	131
PID 4148 wrote to memory of 4296	4148	msedgewebview2.exe	131
PID 4148 wrote to memory of 5580	4148	msedgewebview2.exe	132
PID 4148 wrote to memory of 5580	4148	msedgewebview2.exe	132
PID 4148 wrote to memory of 4968	4148	msedgewebview2.exe	133
PID 4148 wrote to memory of 4968	4148	msedgewebview2.exe	133
PID 4148 wrote to memory of 4192	4148	msedgewebview2.exe	134
PID 4148 wrote to memory of 5128	4148	msedgewebview2.exe	135
PID 4148 wrote to memory of 5128	4148	msedgewebview2.exe	135
PID 4148 wrote to memory of 5860	4148	msedgewebview2.exe	136
PID 4148 wrote to memory of 5860	4148	msedgewebview2.exe	136
PID 4148 wrote to memory of 1088	4148	msedgewebview2.exe	137
PID 4148 wrote to memory of 1088	4148	msedgewebview2.exe	137
PID 4148 wrote to memory of 1612	4148	msedgewebview2.exe	138
PID 4148 wrote to memory of 1612	4148	msedgewebview2.exe	138
PID 4148 wrote to memory of 5960	4148	msedgewebview2.exe	141
PID 4148 wrote to memory of 5960	4148	msedgewebview2.exe	141
PID 4148 wrote to memory of 5128	4148	msedgewebview2.exe	142
PID 4148 wrote to memory of 5128	4148	msedgewebview2.exe	142
PID 4148 wrote to memory of 5344	4148	msedgewebview2.exe	143
PID 4148 wrote to memory of 5344	4148	msedgewebview2.exe	143
PID 4148 wrote to memory of 1852	4148	msedgewebview2.exe	144
PID 4148 wrote to memory of 1852	4148	msedgewebview2.exe	144

C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\RobloxPlayerInstaller.exe"
1⤵
- Checks whether UAC is enabled
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4568
- C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\RobloxPlayerBeta.exe
  "C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\RobloxPlayerBeta.exe" -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 4568
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Suspicious behavior: EnumeratesProcesses
  PID:2984

C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\RobloxPlayerBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2860

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe
"C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3668
- C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller.exe
  C:\Users\Admin\AppData\Local\Temp\Roblox\RobloxStudioInstaller.exe -relaunch
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1240
- - C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\RobloxStudioBeta.exe
    "C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Enumerates connected drives
    - Enumerates system info in registry
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:2176
  - - C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\RobloxCrashHandler.exe
      "C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 2176 --attachment=attachment_0.718.0.7181104_20260426T102658Z_Studio_83B94_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.718.0.7181104_20260426T102658Z_Studio_83B94_last.log --attachment=attachment_log_0.718.0.7181104_20260426T102658Z_Studio_83B94_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.718.0.7181104_20260426T102658Z_Studio_83B94_csg3.log --attachment=attachment_log_0.718.0.7181104_20260426T102658Z_Studio_83B94_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.718.0.7181104_20260426T102658Z_Studio_83B94_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.718.0.7181104 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=8fbbc5d2948dbdf50ed1a46b855224086c0abd18 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.718.0.7181104 --annotation=UniqueId=4419622397819319066 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.718.0.7181104 --annotation=host_arch=x86_64 --initial-client-data=0x430,0x434,0x438,0x40c,0x44c,0x7ff7621425c8,0x7ff7621425e0,0x7ff7621425f8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1292
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=2176.5908.7858699687751031958
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:4148
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x17c,0x180,0x184,0x158,0x40,0x7fff6c05b078,0x7fff6c05b084,0x7fff6c05b090
        5⤵
        
        PID:4612
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1740,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=1748 /prefetch:2
        5⤵
        
        PID:4584
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2068,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:3
        5⤵
        
        PID:5948
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2396,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:8
        5⤵
        
        PID:1744
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3624,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
        5⤵
        
        PID:4616
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3696,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
        5⤵
        
        PID:2332
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3936,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
        5⤵
        
        PID:4412
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2064,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:8
        5⤵
        
        PID:4296
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4960,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:8
        5⤵
        
        PID:5580
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=792,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=788 /prefetch:8
        5⤵
        
        PID:4968
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4740,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:8
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:4192
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4968,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:8
        5⤵
        
        PID:5128
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4568,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
        5⤵
        
        PID:5860
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5036,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
        5⤵
        
        PID:1088
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4836,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
        5⤵
        
        PID:1612
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2268,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:8
        5⤵
        
        PID:5960
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5012,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=1096 /prefetch:8
        5⤵
        
        PID:5128
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5068,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
        5⤵
        
        PID:5344
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 718, 0, 7181104" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4896,i,2062008877943189612,9120545250104786009,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
        5⤵
        
        PID:1852
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3668 -s 840
  2⤵
  - Program crash
  PID:6116

C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\RobloxPlayerBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:1972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3668 -ip 3668
1⤵
PID:2112

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1420

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x300 0x150
1⤵
PID:2880

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:5036

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:1680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Service Discovery

T1046

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

RobloxStudioInstaller.exe

Path C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe
Size 9.4MB
SHA256 08fa8ed4fbdd8434832d198ef981ec953a719dd7abb2d6ea0c2985d57c542089
MD5 2b68d224d3ae3760a24cb64b66c2de3e
SHA1 00fac07a9904e10e7ee39e025bbc89b2aa8259b3
SHA512 4ab3153e59baec2e088fe14ee902f14de69f26f6f9dc9036d0add7d1070236bce441f0553bd5961ebad0416f6beb33976a5a484589a4f9f0675dae900e131a8a
SSDEEP 196608:k/obnhP/XRX2H2B1RAjCq4IvzExFL+TABhDMQT0:kuVBXvAeJmzExFL+iwQg
TLSH
T137A6BE22B940C021E9D202B2A6FDAFB65D7C9A341B7944C767C45DBD45305E33B3AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppSettings.xml

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\AppSettings.xml
Size 144B
SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
MD5 431a6eb20932ec1c56682a1f60d231d3
SHA1 40bb32db040cabade103c21ba5b6f811dfb0773e
SHA512 0969b9484bb7c661d4e0452ff1c77396796333904b39f24c56d5a92ac4ed4ebde9b8981a985c6950b4af2852e8d9599e071a51ce4f9ef21ead778a2fdc76fcec
TLSH
T18AC09BA45351C4149795CF14977DF690E3B1797444504498D8A1785A0DC51D427D53A3
MD5 SHA1 SHA512 TLSH

Submit Download

qgif.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Plugins\Qt5\imageformats\qgif.dll
Size 42KB
SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
MD5 9600a70636894f6a934f2a7f14d6ae0a
SHA1 d0a4e0dc7e4c61bebbd91579bf15d260c1fc7230
SHA512 6a80ca6c6b8ba3fcb1be5de6ea39bf6a75a6206266112bf23a81a249684b567e50babf257d011d0272d28d3d345c501d0f3e576f397a22abdea8b94abb3412bf
SSDEEP 768:dVRwrbBk3Xj+7yFZxK7+WHUgnNx1+MhYWeEJPxUo:d3wrbej+G3U7+lgnNx4MhYWLPxr
TLSH
T1E9136B56AB7844D2E513C678D9AA4D2BE935FA305B6297CF432181780F323D23E3C66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qjpeg.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Plugins\Qt5\imageformats\qjpeg.dll
Size 447KB
SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
MD5 81b6df8cd8de9db1eeca252958ea9d1a
SHA1 e1ec20f7e3575d9595d38ca2ad8b5c521c7eccb4
SHA512 8cf35cc5b7a11aa7e7cdbc9dc626c5429b8f59079590092343b9b207839d34c46c1b9a2a7bbd4c5e136fae71396a698474c432428edcdc809825f003b6919231
SSDEEP 12288:/WbtMZ30x6oT93baQIYnMEMI3dZfsskUn5BLvUMCk//RFEciccjxRPCA4cTJF/eN:/WbtMZ3y1B
TLSH
T133A4A243F2605C87C7E54474EE6AC1A6E794B81CC7FB46F779C1ABD97A226F0B829100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindows.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Plugins\Qt5\platforms\qwindows.dll
Size 1.4MB
SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
MD5 e81f163cbeb67ec8414c2ab3b4119647
SHA1 065921e56683b78097e125da120420136258ec55
SHA512 6700efcdae09a40e1907f56ee4fe2308422ce53ef76a13c434d1cd57a77d934e0bd583c8d96ced0fd250fd0ba727be6d7258692a6bbe19053b88fb48d188b13d
SSDEEP 24576:BgRZTqnadX9G01nyfcdGxOsFciSKi3kmbe7WAiYdZs9UIrIqrtQQ:oTqnadXw0xyfcdN8JQbOWAE/
TLSH
T11F658D57A3A48298C26BC23DC65B8B17D7B1700503619BCF11A88E597F63BE3277EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindowsvistastyle.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Plugins\Qt5\styles\qwindowsvistastyle.dll
Size 144KB
SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
MD5 04a9a47fa806c912a22af17577566709
SHA1 2caca306233ef324d63ef3fd04937793ff2af912
SHA512 47c39a2e91f0444bec87055aa1592bea6b0fe5fa1996b4c1f3d38a1928381d8a536522e5f86cea3fb7c655920ccee66c468a1d02af152750a41fbe46c9aad032
SSDEEP 3072:AYfJgCoOdX7MNwr80krOTmUMVa/MFWxmqd0SQV8lWTxf:RBBXwL2Sa/MFWxmqd0SQVwWV
TLSH
T12BE34C13326602C6C463D2B8C55F0916F7B3B05853228BEF0667CEA92F533E27E79A55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Core.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Qt5Core.dll
Size 5.8MB
SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
MD5 f6c86aacc6126b0d2f442c6a88e57efe
SHA1 df1b891829c3005d045e3ba048292789d5e28fef
SHA512 8cb4d26c069074e2c5dd734e5d1cd085afd0742795024460d80b9b0b333dc01b5df7c5691c03ece34be20956daa63184eb8f028c5e1c27814124937ecb7c8ed5
SSDEEP 98304:kFO2h8E4EwNrZJsv6tWKFdu9CsViJQ8xqfSgw2:kFO2h8E4lNdJsv6tWKFdu9CsVOQ8xqfZ
TLSH
T10C569D8776AB0250D0B7C23CCAA7811BE672B8018B219BCF125CA7495EB77F1693F715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Gui.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Qt5Gui.dll
Size 6.5MB
SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
MD5 3bce6b45e07a747167349865b4bf4ac3
SHA1 d24d4b87ed035f897009cf0b5b711e6485533d89
SHA512 d7584ddd3c6cfc9bda1ddddd02b883aa974309770a478f138202f7540ae92b38cdc658149e4e8b4e76eb0280ab066e096558bd942367c20c018f0f716c09d1e4
SSDEEP 49152:jWM6LDUqcvRiHZHjTpTFpFEOPVQJqguaf5Q/J+5mkU7vo3qsJAGUD4topffcLnZN:wLDFv/+RmFaqBpfkCgnAiYCHecbp
TLSH
T18F662886725A6262C977E17D8B4F052EE1F3785283428BC748199B480F737EA1B7FE05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Network.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Qt5Network.dll
Size 1.0MB
SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
MD5 bb5ede48a003b21b63bb134435c4f5ff
SHA1 55d6cd8128d80c81a5fea49b9de4daa21d4a5ccc
SHA512 e5e62f3fbf1a9c82c13d0c192c1033d2c55d08ad3830ebbbe3b9252d0721651225ac39ab92d863ecd11bba62ac1c51f86422ffab9fcef6f5f20fdcf847a33afc
SSDEEP 24576:XKF0Nu0gZmVnhqMpH6Q7pX9U2BgrExZ8Wv:bNu04mVnf6cgrQf
TLSH
T10A355B67B36103A5D46AC1B8CA8B8502F67270018B669BDF5639DF693F737E1263E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Widgets.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Qt5Widgets.dll
Size 5.3MB
SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
MD5 5309de309fb00a4be24bb465f0053455
SHA1 a14ef29356dac72d882f663a426f16ab29bc3529
SHA512 0cebf0e1560f2ef8b140bfd4fba2b3d7a562923f1b45c84eff41dd02b5ce04a9402c937cb4708d4623ab02a8991bbe6a31acc3cbd17fe2079130313f33daa1e7
SSDEEP 49152:T8LcMQHZ/gD0bTG5/Zh4w0I6Lr86R21sQGxTkaeduxK6PBZrGBqfjoWjmqYjYhIb:qPQg6CHliIYKsonnYhIv7uP3S6x9W
TLSH
T122466B57B3A54184C16BD238CF8B8613D6B2700487628BDF256A8E592F737E22E7F705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Xml.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\Qt5Xml.dll
Size 215KB
SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
MD5 a24011ba1cba9e517da2d89d530329cd
SHA1 867f44a65128db05ec1c2842a52b2752ba22346e
SHA512 76d7115d7b5f57a609cae61e768b28cc873f30a4aea46a2b385e9c8be1e5bba7c73ce84731708fe12f28d691b06ec6dbb8579f5eb9eca92ecf83d94e97b98620
SSDEEP 3072:4rZx2zOZ+kzW8MWXJBPlGyGv+RQxm7uFkgs7pkV9p7RM7jJWTx/:4FxyOZtLMWXJBPlBbaxp6kV9p7CVWl
TLSH
T18C245B4777258596E427C238CE5B881BE673B85017628BEF81548B792F33BD2B87E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanBase.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\QtitanBase.dll
Size 1.1MB
SHA256 032d9354d574b6ee1dbd8a2232101fcb2e120b16d1804a314ddf509045dd1c88
MD5 770857396ad798c2ea2d0201261ea3a1
SHA1 6da2a5d47019a932b95e0ebcdcd4b379fa50b127
SHA512 b45631a805879980cd4074c62ac3958dc0b68f59150101026207916719290ebac636706a72c8a0c17ef3e5f6b0e5178d64c31cb12bd015e03a072cb706eb4cf1
SSDEEP 24576:bFHAUS5Uv+otWr8wY6S8dtuTbwQ0KQ0vsMe:ZHpSyvNdwVu/y0vsMe
TLSH
T1F145AE4B73964352E16FD278C68B8114F0773411974286FF9A1BEE6D1E332E0783BAA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanDocking.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\QtitanDocking.dll
Size 615KB
SHA256 72d0e686e9a91ed552dbbd30e82fd07d09b5b85a068b215fd6149e8229194364
MD5 5d377a4df57ee347d95dacfdd1af822b
SHA1 3fa55c71a9ccbdd4616ada61260746a92977b7ab
SHA512 ca3946e25a3b29493679c3cefda9ed0d4233f092bc103e0c98a86f38ea96ee1d1a48b73defcc06cb6b0ac893f679af6a5d46a60010876ed2564fa52a44eac97f
SSDEEP 6144:Xn6SfL96DspfZBxUAtD8ep+RYqJiP47Mh2lmIzLEFjP6CwYkh7BchglUSBYQ4ffi:X62g4mQDZgeuayl7TFhlz
TLSH
T1D0D43A5B72A90391E066D138CA67C226E4F77841036246EF7716DA2D6F33BE13A3E741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanRibbon.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\QtitanRibbon.dll
Size 3.1MB
SHA256 8f38b64f4aac1372403e1c05f883692dc0b739f80fb604b30b54b95da74d5ca2
MD5 13a0347245e6e18b106b0f8499ee128e
SHA1 f1f43cdca196d2200cd994e8feb1f827d4444bff
SHA512 1c682eb948acd84851cf0317f2bcb6d38dacae79541e77fba56bec3d67268e04612164368a0c679a56179b82e447aaa97737d668ddbfd5bb1c2dc8b834ca610d
SSDEEP 49152:fVd0MizLVyjq4LbhndL1ZsY0LUGGeVGvYEnCWPLn+XYGcv/RotRNC7C7C7C7C7CH:9aLUjbLnL1ZsY0LUGQjCWPL+IE
TLSH
T113E5DFCB73A90299D26AC23ED68B4255E1FB744183579EEF0526CD2A4F377E02C39B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxCrashHandler.exe

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\RobloxCrashHandler.exe
Size 11.6MB
SHA256 918a64e643f5fdd21fe10d6b4c74b6c6a74ac31861d9e67182abcbd43e965af2
MD5 64be3e935ed6252a20e2a0af87744648
SHA1 7feeeba0c37f873ec5b9538df098e2418574d90f
SHA512 aed2ae9718a37a4612a304d6f9d5847f3a697a596f85fa3e85e6121b91221f99f88fd056d55b4788a1e1fd216fce45106ed1260a5e7ff5d2616bb2e4f117d467
SSDEEP 196608:YvlyHOg/o4g+r9Q2xPegRC5qJeHh8O/DggZ:joAe2x1RC0JeyO7ggZ
TLSH
T190C69D6AB2B800E8D4BFD1BCC6469613E7B2741603709BDF16A486F61F63AD41E7E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\WebView2Loader.dll
Size 162KB
SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
MD5 e2f9d2ef3446e70b50de50f577c6939e
SHA1 48e7721704249cebd1267280459b7b36ce99e177
SHA512 f5d7790bb2eacc78405a91a65adc0f30a248542de22ed10cfe91bc87e4f953a93d738281c13480a070681e7169fca6ec49e20c5fb7b89d76f3a9bad912c6d87d
SSDEEP 3072:erQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Tv+EtJfy2aQutH:gMMTlTRTzWiThTNTFSzjiBM2h9P5oZNr
TLSH
T190F35B4772E5407BE16A8274C9A34A11E77774510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfbxsdk.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\libfbxsdk.dll
Size 9.7MB
SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
MD5 51d82c0e8ad65126413ed39246b5cf46
SHA1 f73c0b2248ee11f8fde172e04c64b40452051521
SHA512 c60362c4a67bd11ee330d36ecb1a58d7619989072b48b652f9411884797852fca4805ea1aab77546b1d7fc3c158beb30dc6aef0f7dbfb99322affdc8dfec014f
SSDEEP 98304:4Zrqd/tYrwiI8gpR241UnQQjHNA256IJymNfJjWfELI1u0/QHnq:4ZrGewiI3pRf1UXNAUiF
TLSH
T103A67C8B227642E9D1BBD13DC9974903E6F2304117369EDB02964A6E1F237E0AD3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\msvcp140.dll
Size 540KB
SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
MD5 4e3fa9bd90ef020c14359639dc19312b
SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
TLSH
T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\msvcp140_1.dll
Size 34KB
SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
MD5 d433b3e8aec25afb1c65cccd97ddc7b1
SHA1 ffebb57d0bf8cdae0449302a691920cc22ed4a72
SHA512 b1d48de56a595ddd6fed36574f0d6f20fb21d047ef7a6e93a487d660bcb1090e45c6aed43a99bda9897c1ef524bd8032b33e35a48c796d3f467caad33f5dcff9
SSDEEP 384:FKzh5dQS8DzxhK4KWcS5gWIZ1gr4iSt+eMifX7R9zUkJCWEIHRN7/PFbR9z181q:FAQRDzxg4FMgU9nF9zUet/b9z/
TLSH
T13FF26DC5FA688443D866483082DAEE47BC3DB7D25F6092DB1392F25C0D937C5EA35A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\vcruntime140.dll
Size 120KB
SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
MD5 0d35c5e99871b4f02c490b9fd9dace34
SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
TLSH
T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-0c771458892e42b7\vcruntime140_1.dll
Size 46KB
SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
MD5 03b43160d21c08de07a79d0a1c5ee81d
SHA1 0a449093006af667432b83303614b53b62fc0d05
SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
TLSH
T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerBeta.dll

Path C:\Program Files (x86)\Roblox\Versions\version-2e6461290a3541f5\RobloxPlayerBeta.dll
Size 15.4MB
SHA256 f937e00724f5ed12a0b662e2b4b07ec1f61a6204a34fe047f3b57530a730d9fe
MD5 580a2caefc86d689058d908dd6b07a36
SHA1 8b36c73d63e7fbf9fe8122c5a293597fbc3dc270
SHA512 b5a0fc7bb6436e4a57b3f0e97a469a1fa023738a13a6954541c2ea872a1c47b13a7b3abc2546d447b56699a53874b724577f4f15bf2d0098833337cfda6255c8
SSDEEP 98304:+M/piZg8dlnAC+YnbQMSTETspSgI4qB+xRmc/hyR9fDx/MEJ2mKzZec8DSbpR4SH:+M/pQlEyv/MEJ2jenD+R4S7OuK
TLSH
T133F6D04FB5E24C28E1729079903F33D7DA16718C4A186AF343D952503A7278D6A2DFAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1120961799\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1120961799\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1301517746\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1304376702\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1517516184\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1517516184\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1517516184\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1517516184\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1671645491\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1762363237\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_197275185\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_515700471\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_789202867\Sigma\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_789202867\manifest.json
Size 132B
SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
MD5 a4d9ab812da8b2906ff9d46f9ffc07c3
SHA1 48b428dc760bc008058e6df47a9f05f2f86b4abb
SHA512 5a2ba950ed85ee55bc1402d57d09ca8d54c0c2df5b43a402bb8bf3668920a40d584fa18d270376b046e23be00698bd1399ef6a0b695ee6c0b99fb454616b1cb6
TLSH
T1E8C09B115801797654DD77F00D29D7526672CB1D1494250546F5C218EC2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_936152441\manifest.json
Size 102B
SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
MD5 ee1ed8500e24dfe42b5be26a96d5fdfe
SHA1 f4b08becd340a875a34eb0dc3fff2024625643f6
SHA512 0b782a4871d0fde1c775237f9392f9ecf7355b886f50584a101a0764631ddf22a25d0d19a0041bd22d943d68529a86168e202c6276d0cc9c5751b580f4d2783e
TLSH
T1EDB01221EC10B4B31004036C086CC3D0632B2F072C4079280DE19F84E90D9EBE872529
MD5 SHA1 SHA512 TLSH

Submit Download

Roblox Studio.lnk

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roblox\Roblox Studio.lnk
Size 1KB
SHA256 7a0cefb1ee61e7a107cae5e8c1a7e65c492cc906530ea095cc2f3b29318ba618
MD5 248e112b3b8788902ad3ac5588d661f6
SHA1 572080ebd72483e367820606a16ccdf8a109568d
SHA512 181ea5ce9e733e4d2f720b04fe4d196ec564d52257500f1372410250cb462ae270855de4fa886ad17c44c3107781f85c197e2b55570ba6346fd0390f54ae7fde
TLSH
T14A213B140FE71B26F3F29A3579A10262EE337D01FA556F6A0085278D0A65204F9E9F6F
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

133aff3d0848579570639fe9564be495

Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\133aff3d0848579570639fe9564be495
Size 9.4MB
SHA256 b112a9fec58816f9ee176a31c0f52e3cf94b4dfec07975ed67ba9eb911fd951a
MD5 133aff3d0848579570639fe9564be495
SHA1 cdd7705ce581282e78079c55148ef4178f6cc25d
SHA512 660c2d31c79c2a9f4c49fc2482be8bc1fa2a4bd4fafce1b7f248c962759ac2e5c98f9ad48f0cb0c1a92a87453291fb776428405c89a39a8c253a78675ffff7f1
SSDEEP 196608:sfYe3Rcu2TzqUrREheMAF80c31NfEHsB1C5TJP:sOu2vl4I8H1NfEwCVJP
TLSH
T1AAA6BE22F940C031E5C102B2E6BDAFB65E7C9E240B7954C767C459BC59305E33A3AB6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallerInfo.log

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudioInstaller\InstallerInfo.log
Size 84B
SHA256 0012be900aa0fca62295c037ce57431094d56df7b7f2ea5c28a47c919d16ccb0
MD5 ef0eef18869635685a465dcb36ac021f
SHA1 cfa5f033d37b872fd557da545dec5dc8085f1986
SHA512 42cc87fdf34908bb5277471c8935c2f79db0d95ea716e0d8b27cd19907dd1034cd02817854437188f4a5df3d957f6ef06705057e520656b2c595c359ee2eaf1c
TLSH
T1DAA0025507C0415D99070157E1654FA791771C80F5584316588655CE05F059704DA9D6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 472bf0f51a0a1ea9ff1fe5c7a1a1cb1eaf495c8876408ad21f2c87cecc00803a
MD5 ff09e13fbe4829e6ff64f941b6e8dea3
SHA1 ba9cacaf20395b807234f677112c608fcf09fd8c
SHA512 8d64e3a4ac2402028188d34e8e4153db57d4d70d32a07dfd30a2ef4fed50fd6fc3f53f3d3fc5495934b71fd9b80090e693680c988890571f40308aff1b276673
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f733cb79ee2e21dfd64c20e5957a2f155396f01d2eb494d0ef842c553891d483
MD5 3f22d24864818c93136296e753494ae3
SHA1 f65620b9c6e685499b9b478bffe730af8564b160
SHA512 be11e47debd3fd9ec708b919473682f131e8385feefc99cfeb6dd40b46c6f3adcc8271fa4998ac86136a52eda5e20cf957973ff0892bb0e46530844b2880c0fb
TLSH
T169D0122233960178C02020331002F1081542C60B4109D4447C3C9AAE1A640500D03441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 1fdf4c690acc021552825608672f1935dece258d60890c1556a9d9e661155d04
MD5 8858bd024f0f3bbec3c719833a1cbc72
SHA1 18ef9d972db83618145d38a6237eee1d5c2d3f89
SHA512 81a0653a984b2b98fd49f06cd60fc78fea67377f75542d42676e91db6d1506875edb891d885fcac9ffde82cdf99ccf7d971f50b07e66e219ed38455f79926cd3
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 169045c1efe82d1cf8ffae34e6ec2ca3598305e2cf9176ef9bb12c34034e6ddd
MD5 e3acc8acde2b50cc60ba9d7503dfa7e7
SHA1 544322c4fbb3d76c59ebfc2116c422130b18a669
SHA512 a9f9fb5824d62fe6240b6b53602800ba651a294c2559856d1b4c2dd58aa1ada2c93e2bc152edfda240e9262ac507d694d1e886135d0706206db836ff608e7312
TLSH
T194414F33C7D0E8E3DF1D687504631D411F2A290C533B8B2BC1CC69A8A2931DDE72162C
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Action Predictor

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network Action Predictor
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 49186636dee5e77a6733b8c958f6ad089f254068609a879b1aa283d116fbf07f
MD5 7488ed9854f9e2d915e9e62f4d813a88
SHA1 28830bd411888da62c7543c4b10edaed7e3820d2
SHA512 02022df9d777caa74dfbf09b581b0dc63174a82beada4c3994b95a03b91ac47a74efc42208e5d1416b5e80964fb9ef5e92052e67924068cf238de634a6cd78e7
TLSH
T1DD1130F71370C9ADAB5682F42A199D17CF9D0030071C96B6D5D07E6393B36A2F210B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 981B
SHA256 66b320c2f10b7651524681ea563ce1b8563595c9c73391a365ad953d3894c040
MD5 e79bbf3a11b81a32df3ef8270640ef94
SHA1 6c41936f91384d35ea8c20fba3cf0d4d79843870
SHA512 12f28f18e4fb15c90b2e77a5eeb1ed552f5cd7837a1a55a043b2cb2b73bc9bcb0fdb0632ca30b65d85eb61c044e4644acfd01fd2c52601e346e374d5182a0ea5
TLSH
T1961131F71370C9ADAB5682F42A19AD17CF9D0030071C96B6D5D07E6393B36A2F210B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5c261d.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5c261d.TMP
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 09d6017e61f35d7477910e272c7ddf4c0861c91839de2e57bb9979df64afd968
MD5 333ce010ec01507767252aee6ee5b110
SHA1 743e5fd0d260cea06aa4fb4ce62eec0b87eb69bb
SHA512 12cb86a070f43602b482a1b670c0c76f7d38c5c3eba58d25a02226747c497f3c03fb59b0aeb6abd3d0778832d7844158c274cc1a8d275d1de800b7b71e3c92dd
TLSH
T13D314A9B97BBF857507C093B3D897E091AF6AC7411D2B4F8DAA2812D70C14F61B31572
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 bf1c551e5dee93d522968e55905655421c7a01288b8dd2d0469bad915fa99ec5
MD5 b7ba53297a68a565c44681f5e21bcbb3
SHA1 b1ba8aeb5481fc87d3b672b331b8da887de498bf
SHA512 63daf670efebfdf3cecc4a5fb82891615561025bcba574e26219a98ecf32518e1653789a58f7e8a3e17b4f858274a0fd902d7eb47815d8d569afa060d53d24b8
TLSH
T1E6312AAB97BBF45B507C097B2D897E091AF6AC7401D2B4F8DA62812D70C14F61B31572
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 8e2fc6f9189718a1deab2b2d900618437c65725da482cd1a0e50db592878b45e
MD5 b38f6a59dde0736562c5ba8d94c15332
SHA1 0b8fc71bf2c4cbbfe3a3bc2c35a70ebcfd7a5ef0
SHA512 a7599e1b9b8814c5e58088d727edecf5a90417caa38f4c1581d92dec7189253d5e9bb8764acff7d7c1a566d7af20e742bb881cd1523ede60429fdb9fbda47ef9
TLSH
T1E5314AAB97BBF41B50BC097B2D897E091AF6AC7501D2B8F8DA62812D70C14F21B31572
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 f37bd263f19dc32b1bdc37520880608c9f332db40852e429a7292a9e7e785ce3
MD5 4092125c2ab8cabdaa672cf8ac624e96
SHA1 29a5d4e5b93bc53487e8834cd1e68e3cd654e7f4
SHA512 48af2cbc4741467577d5d789a812419b4b771f95bbb24bcf50a51c9ce5ec3439dc0fa5a3e4568e7d5e6c6812e0f50170fcd8eeb151a7c678cafb5bc55ef4cd09
TLSH
T191314A9BD7BAF81710BC497B3D897E091AF6AC7401D2B8F8DA62812DB0C14F65B31572
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5c51b2.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5c51b2.TMP
Size 1KB
SHA256 f118d4467b290e68697e534cb73c443ff78eb8dd9e4cf0b8602af3eed659e6af
MD5 fd44e9f0f865af3b71eda5339c3cb9e8
SHA1 023faf11c382a7106879e837f60e77e861fd777e
SHA512 76f3acecc2fa97bc598199447c84c80b836ad55a9e66a8005f0bfe354960600fd7df24c0d9af977c6c03e88c8d9d3b9014893278b47f436e8a715edd0af33540
TLSH
T1CB314A9B97BBF45B507C093B2D897E491AF6AC7401D2B4F8DA63812D70C14F25B31572
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 947ce7f944511df5b9bd43b38f84361872a1af1716ea3310380a0695c8124577
MD5 5495bb51c1b5656c6ffa6ea3e83768f7
SHA1 fc36c672e6c594497ce2c0544a398d88c7300263
SHA512 6ed310989235d1ed429bbdafdd65a5490bf4c5a883bbb0c9d98bfe2dcb23784f5494853ea736fd060105bca63feaebcc23be56135b74b13741227a181e340130
SSDEEP 96:stpM76aYb9TqffTZ8i0vhEOkbpm/7qx+WVHMSm+uecRAE1idQjR+gEykMsB:stpQYqfLZ8paDs/S+WiTAEwdwJkME
TLSH
T173D1B7439E28AD774CC7E2197A25BB42E6FA502256D11E9CEFFC871C04E66DC531780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 279445174994e8053c1f3b00836693294c1d4d18e68e320da9021c492626f64d
MD5 388fd60fef990a16ff11271b67cd7c79
SHA1 9e31f56db2588bdcfbad97d7270666d7e289fa44
SHA512 f29734bf3bf534251128d48e05bb8f46d8bff05eaa2b8060d4b17ca33106aefb4e0cc8f899578f7bd0b31f5c348be572af65f1cfdd4edef25c7c0ccc11454f5e
SSDEEP 96:stpM76aYb96qffTZ8i0vhEOkbpm/7qx+WVHMSm+uecRAE1idQjR+gEbkMOB:stpQFqfLZ8paDs/S+WiTAEwdwekMC
TLSH
T105D1A7035E28AD774CC7E2197A35BB42E6FA102266D01D9CEFFC861C04D66DC531780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5c2581.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe5c2581.TMP
Size 5KB
SHA256 f9cd3da1e0cde812505819062917e1ab5c74b11598f837c81697557934eb26b9
MD5 736def9e1a1c1093ce28d70a7fefe7c3
SHA1 f2244bda29c9eefc833ea211dca317f9139e97df
SHA512 f5a904b7ca54b8babe0be3c7450eb94a3a87089aba83c95f4bbf988ec9e152009c00be9904ffd063bec22294d320e50c4830d8c45708bffe73be38ac4e606cba
SSDEEP 96:stt52sDzgb9lVEdZ8i0oEeklm/7qx+WVHMSm+uecadQjG+gQcKEB:sttpKoZ8pFA/S+Wi8dDOcK8
TLSH
T113C1B7475F2869778CCBE21CBA36BB42D6FE102226D51E5CEBFC861C08D95DC621790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 ca61715bb499d424cd5bfe0b5f2238f3fcc57075741e6cd7e8cea7705f9cf52f
MD5 402e0c90897becd3df6a39ed34754df9
SHA1 8f6666af53f69e984109f6722c01efb722410855
SHA512 6ba94650dc7ced24572beee47a4d8f7bb799a12e5dd0c16a6ae46959fc25f3b5ffe717e7f76fe3604e7bd4778a6ca6c5e4ffefcf5cf591fc3c806e6ffdbf8dd9
SSDEEP 96:HlmiGPlf/ROoKOpkF5d1mir7sMaTEv9V5h5pg5+eeCb37GbSiaQ9mg+UHSrTjJcl:H1qWGSH9l4eGKNFOVo
TLSH
T1EDD1B6A7492DC939AF409BDAEC397ECBDD66009F88DA4C05DBE1C54807C2EFD20DA495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences~RFe5c2581.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences~RFe5c2581.TMP
Size 6KB
SHA256 84b1bbcfcfcffd0e010473f1db0dc4c9eaa9d52bcf55dce6c2e8e50c1c51ca4d
MD5 b7092e4dbb8e5e4478101b6564e36701
SHA1 ec581ae0699b3d1b1e36cc1a27dae490aee58d5c
SHA512 5a08ceb9cc06b9dc5e8cd59550f3f12e3f6b523081fbcce195d08ba82d97a1d4af118728be699eb84fc7d987a3539e0bbb9a57769c2282c52f43a87ac9ab323e
SSDEEP 96:HlAiYPlf/ROoKOpkF5d1wiV7sMaTEv9V5h5pg5+eeCb37Gbr9mg+UHSrTjJcOl:HP8WGoV9l4efNFOVh
TLSH
T1F9D1C6A7492DC939BF444BDADC397ECBDD6A019F88CA4C1596E2C14807C2EFD20DA496
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 ef5916a2281cec94feaeb0ce1cc85f6cecadc825331a6f8acc79247547130bc1
MD5 f59fe488f7561c72e9e900aee5f5f2a5
SHA1 6c8df350bbf25b02b9dbf2b60b5faff8ecd3351f
SHA512 d823242a6aa76a4793621670ed76208fa84cd2fdf46659f8e91e8d1c45e45cdcb7711592f3a4e4266050115ca55a461493654c4bad35e70fa72a04121fd51c80
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 1KB
SHA256 11e51c78547cbae10cf7a48e4359f4da577818cdbdfcab9e9553c5484520efb3
MD5 d56ab2b62412eb023baabd607ae363cd
SHA1 60688e0c99c911b6e8bb21cd4e653e90afac6e09
SHA512 92fc590d48be7f431f039d1060a979aaf88e347b82cffda7773e1bd412402c25e4f9c01bc8d5c6cc90bd8d50e1a1c1d5738cd35ad6a07324ee69e99ccde4a870
TLSH
T1703185F7A8945B371C91A94171163B932E3A1079C3409F4CE6DD0B0C02D36DCA47BD32
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 2KB
SHA256 593fe3298a6208aee63e38e1a9b4a8ed2c880d864b0ecbb7b98edb0ced7141c7
MD5 a36fcd73d286ff0e92af6b9ad94b5483
SHA1 32e7a5de62a9a0703b69584c2f0ea15fff4c6fa4
SHA512 173028ebd7aa0226b5a80327b637e1bb85e4533bdcc032a6d12a5b71a512bdd3a375cde671930e1c23d6b65010f42a5bf1cb8f44ad07817ca516e31bf4af3e25
TLSH
T15851A7B36C549A3749E38904791A3F536E3E5165DB523F54DAED0B0C01C76AC2362C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 face3ce02ddaf76eb9f2b06d73eba27abaa79d0d764c43ad7a0e3322e29067ff
MD5 f075262ddd8c0a5c3d0518c7f4a432d1
SHA1 e56321e9715a35a95e72c9703c0d9c25d0498064
SHA512 9333fdf474796962b784dc1fd17983f12b28d828b40ae50429ed3379ecbcbd8c9d8f51b8a66ffec49ff95ca9b6a2cc122c19caa5b6bb57f2611d143bf7409b87
TLSH
T15E7196766964D93B0DE2D900B9853B127A6A5136D6813F98DAEC0F0C01C779823A2C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 16KB
SHA256 88a2fe0acf356239ea38f859ab382c118503d3397ca6c68e8bd1cbd2cadd9ce9
MD5 5fe087e1d239eb4dab74ac16a95c6399
SHA1 204bfc234fc6ba53dbcb78d7546d186669c89373
SHA512 c554c0aa1e71348411d53bff5fa48d55c3c45ca72022e68e48437929e83a78946a2ceba1b80ea9bc6473a731d5cb57be8f8946b631cedc23ce0fadd029d258e6
SSDEEP 384:zRfRE5BdEZfr0kuh9Rt/nP9yxNbfyMsG5+wuuQy:BRkurqhNsmgY8Qy
TLSH
T1A872AE63493499276CE78106390A2B4669F8845E96D23E98FDDD2F0D07C7BE913B3D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5bf98f.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5bf98f.TMP
Size 1KB
SHA256 46e85e1c46e38c6a149f493a2e5fd709ff7f7c89a5dac66f42c4e569ff6710c1
MD5 6d385a655df00b12de12138cf290fa6d
SHA1 f45ef60d42acbcf40402106ed56be2c224d04aff
SHA512 1f30a1ab25f8d5a7ba040b98a1d73929d3ae814385689703342249dd26a9280dcc9d5b7ab54059c589ea3bb9fdcdf98de7d35f10953b7ec33a35e867d36325d9
TLSH
T19B2165B7D8985A372851980171167B872E695479D3405F0CE6DD070D06C75AC95BBC32
MD5 SHA1 SHA512 TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\45.0.0.0\crs.pb
Size 233KB
SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
MD5 8265ec43991e2a046a7c7de702678282
SHA1 84b3ab55cfe6ee24909c74000a875c3d4118b450
SHA512 21c4cd80df8abc08db43ce9c2663cebf2ecf9a9e3c6276cc5280b8a3cea5ef5ffbd25bcabb9fd53b8ca2dd8bc6eea760c4692c47ebc8a1df21097a130bcff422
SSDEEP 6144:KKiD4b7BVpsrYRVW+J2i/P66k88yST+uUM:KBo9VpsrK2GeQY
TLSH
T11634AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\45.0.0.0\ct_config.pb
Size 16KB
SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
MD5 442440bc4c725cf395df7410e58d9653
SHA1 3d387b0a60fa20c9c4a22d5e8f6ed5f6ec8d1520
SHA512 28879ff61c3933068bc4212bfd9da3956971fe6e45f5a8379910328899acfb489353afa41b67e1c961d95534aee7f2c004ae04ea92286b43491595a7aad63252
SSDEEP 384:btomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:bl5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T15672D9BFA1169F000383E558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A967B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\45.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
MD5 d05686bdc79220049deee3d07b28c41b
SHA1 d59bd95593290a239f6d4538ed1674d1541c4017
SHA512 78163f8efa0bf534325087b08f31ce488bfdcf154b79ef6c53ea41c648b9f11bfef13de21a2233b89a4a6d89e45fdc9e261f780a568be9599b8e50571f1458bc
SSDEEP 96:rxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:21IDCrBnYQ5jlMacFwn2c9w
TLSH
T1302204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Advertising
Size 19KB
SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
MD5 3495430eefd1e96e8bd95b67ccab0f91
SHA1 54129d2d72e062ad36a66922331818e81bd34df3
SHA512 9197537719b70837ce997cd2b168c6bf6fe877811f81459a0c0f1363b7179960594761df147c85034c628b8e9a3463084ac26fb8bcc3fbc765089adfeea56f6b
SSDEEP 384:/jA5024xyUE2oAklQth8rYWepdFhgX/0lRwjTV2qh8NmrbijF4E5C65aNbC:q0WCoAklQcrJepdFeP0lmjTV2qSV9C6P
TLSH
T162925151887035622F2F50CEE0583F8E1199767540AEE6DE9FE48666F28C0F37494EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Analytics
Size 4KB
SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
MD5 db9a3dbc4820c8d84a0a569be1234dc0
SHA1 78fe9b49b800627cd2eb458cbe0251591a2a693a
SHA512 a6735713a801d28e644b31f34335e29d55a46d4b263e923cbec9b57fd18f8b0cecf9b78fab578065207080faa5e81156d04c8fbedb436b718893b6d17123742c
SSDEEP 96:2eHeEcb6eD0Hl1LJEmjwsi4RjBzGPeKkF7y5W4jNU/oyw:2/EcWeQ0d4OZkVkW4jNoo1
TLSH
T105817615A4A024423F2E5668E03C76F911E8253880F6F7D5EFB19975B30C0D778E497E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompatExceptions

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Content
Size 4KB
SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
MD5 26c006f350f70dbc8c18098b773c3d4c
SHA1 eb015f7010dd74c874675d0599e634027363b7b4
SHA512 0f56d119a5f89689d0e45a6163133048aa95255447c4156d4fb2565f45c32dbb95adc39666a833d2127ce57f3f4198ce45d2a174955ec088bcdd2f74f59b3f6b
SSDEEP 96:lApOOxO7bthcySBm1yJJzyEsQBCETe+yH:+xqT6mcJJz4QBXTeBH
TLSH
T13F91B8037E4409276E95D005C0ED209E2DB5ABB0C85DDDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
Size 668B
SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
MD5 95aa820d67ec466eb3444a9458eb7e56
SHA1 f93e178ff40310e071e4d596f0aff0514666f787
SHA512 15281c334f013f0200ca2d6faaaec81dc5602058cf3522b805e21ca5f031cb4ca68606d353e6745bfb86f07fdd6ccc892942aee5ad7cf0f9f0798a4d7f497a47
TLSH
T1FE01D3D7D86197676FE25AD1D02E73C9F04456F26050F7C10F55315857A8A432794CE8
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
Size 1KB
SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
MD5 3d90e5235a4bee8f1dccfc2aecf7c585
SHA1 5beb333084b3af33e7fbd8c83326e18650a87f85
SHA512 c81af723cadaa57f638b9dbc60aca5d2600cebb8282d78a7b86edc6b473bd3a1768c8fde1b11d50b6b967b2866495655de09577973778038434bf4b513ba74a7
TLSH
T180214F8685D038316E6E148CD55C3B9C12EA3A7040E6F6DCCEF486A0B50489F7280CA7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

TransparentAdvertisers

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Advertising
Size 20KB
SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
MD5 6959a6835772c67f4e72105e4be259a2
SHA1 72d1fe9070a5c0eed55d989cbd961dbc5442796c
SHA512 98085236a15e810642602e5dd475aa5a9532bb38917aef784e977bb398b3f9e39f7966370d39c1b554cf3e39858713e8b45bc27fbdb8a701b2a903e453a67591
SSDEEP 384:5z8Qpkm9jXUmEtMANAgFYNX8htrCoEeZCNyn9CbRqKi8iyZd0KE:1lb9TU/t9NAgFYNMhte1eZ0yn9is38iT
TLSH
T10292C261986035523EAF019DF1993FCD69A4633080E9FAE9CFA0C636B35D4D335948FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Analytics
Size 3KB
SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
MD5 e018dfa2df54c80ffbfd02c6d2ff5430
SHA1 de3f876b05355c6024d76f1bc24a552e532e2a2a
SHA512 b6d7886b4094837b271d1aa1f72b8c521970527552186604bcb83e17f85fa4a22e658628f79eca7d164ace781555abaa07c423a380fe87006aaed77f53e37838
TLSH
T16C61D918252024211F1B526AE55D3E8E69F4233904F8F7E08FF04EB5B10A4E738E5B77
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Content
Size 5KB
SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
MD5 dee2a727844dd3cea088941e82722406
SHA1 24ebec9b92eeb6af83841ab02e858f415580f719
SHA512 e48edf5f6dcbbd615f42f1b3181b2998bd700508094466009a6a48193a48c3e30e6c4d71cc43aae81d18a88ad9fd7e28eb50a0a52ca6889a270001fecdb64dfb
SSDEEP 96:PwYuGYJywH2R7pBBYy+wf0yhZ7RBJ1ja8nBwGhQmxpFD1Lcg:Pnf03H2/KwfNL7vNTBR
TLSH
T152B154B2855079922F7D01D2F9D6225088E482715CBEEBC747A1C61CCD1EDE735A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Entities
Size 106KB
SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
MD5 751e7cc660220e7464935a9b90643274
SHA1 05a725af45c74a9e129839b2fa7acca5d83066d8
SHA512 bc879a9bed224b6abdaed2581f948fcad53361b17dc76d5b5df10607ac893db2f39bc5ce5fbbe86e6392ae66f29fc93ac1079fd2d029b9338697b004325c4b36
SSDEEP 1536:PYNbfqJF3b6wgb6hh2Dgf+x8GC2kMYdSKySPxVMRjAxUR9Wv:Gbi3M6hjf+W2kMk26VMRjaUX4
TLSH
T131B3E73C9F70C4295EE7000B6C28B95846142BD59E87DDC4EEBF7A090272AF536A85F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
Size 2KB
SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
MD5 5330ccc991b45c6f2777d23c7d8afe8d
SHA1 d11187c035458fe1201608a91062962903de2e53
SHA512 2db42b7a6b7f2170f6cad2a26a606ff6357cb8c707ba9947baab14dd7f566df04a274e46e36cee72c43ee87ebf4d455b4af3f6da973f29bdbefeb0304f1d6f93
TLSH
T1A3414422581030617E7D49DCF59A3F0D29D9613A84C9F6D6DFE08936722E8E734A4896
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Other
Size 198B
SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
MD5 7bb2f4076e4f47781b77d811b21ef1ff
SHA1 fc0feddf6f52841bbd780d21b8e0ddff74fd70ac
SHA512 28356614bc38576ecb37218f9f6f631bd9e55573206c3aa854b91956a33fc828c71f42c7dc7dc6aa86540dab8e345b8f88bf9c6eb56e49824f492854c193b27b
TLSH
T1B4D01250151A5B0D6FEA41D1DA8055241DA19DF474CFF8CC5555B032E68895729C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Social
Size 3KB
SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
MD5 fbfc314bba2160b09a3376521c762772
SHA1 3566357486c5d466958334e813c90c0a97bfc985
SHA512 e4383491ce5170d0daf4abee61484c62611dfc604549b537d0080f24bfb8cf379ec3efbfb6caf10e7c066ec06457fb077832d5f780d226f0a957f624e0ba9383
TLSH
T17161DD36C590A9932E5D0C41EEC55E700DD8157ECCA6F4D287B082F8F0AD8977D94BAB
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\manifest.fingerprint
Size 66B
SHA256 f96cf59ef5cdf10cdebb367e16c6736d188af934062a8721eb9d60539556a2a9
MD5 0f487a41f1bb9a49dfc5814815dc8b1e
SHA1 39e5af8034fab47bdfbaa2a66455c74185756f0a
SHA512 bbbd1619eead82c70cdc0f72867db2ffdd4a45cb908c81e852eec8c1293bcafb90c554bc3d51afab7fd7e478efc15aa9ad90fe1b56a01d0012ecee493184d36a
TLSH
T1B0A0024A47C1F51A80D137495D771D41C91755E1BEDF91481A929F2266379C0586C454
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\TrustTokenKeyCommitments\2026.3.23.1\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerInstaller_C9D5A.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\RobloxPlayerInstaller_C9D5A.log
Size 7KB
SHA256 d43e8bc195d9653f9788aba18d03277cdb2fa87da8821a8f49983df2f14359fc
MD5 ca1e8305fc23e4f62f3dcb8849a8e92a
SHA1 bebc91838eafe9143bdefb296a576e6b6dd3ee0f
SHA512 34b5369bc10288132a35a517b1d27dff012108f3ca09fc347c01e2e3717a05791210e0ed5f30a926ed449d73e1e98e37ea89c8611fbf19a6dd3bf9a54463d17f
SSDEEP 96:KwCraSVEIHH4zk5eu1SMOh82a/tP/4kqSbW1MVh/El/YYi/eu73CMjaSQ2:NCrbxB2Ji047fjaSb
TLSH
T188F1F2BAC7A4887A711C524FC7534C295B133D01219AA2F5F7DF612FE38C2899AD53A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxStudioInstaller_C7D85.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\RobloxStudioInstaller_C7D85.log
Size 7KB
SHA256 a126002129c9654cb38a54bd7962d82a70bd3c89579f0ce0e0fec491114c4c82
MD5 a7d9efddfa61d3171abf7f30db8f4f11
SHA1 508f7fb2e363b4e0c0057168c07f0ec71e078d62
SHA512 95c7a038ab9911718299e2f05395a6324fb26b622fcc166f3d8e92bef3d5c2e8cb8a48b11167bf10d8b725d1ea91abfa2052b9d4a7a7cf1fcbe46cac718a768b
SSDEEP 96:KiZQ1ScS97f4HSHHUICIUzFYTudSKOhj26SRE8/Gl/id8BTLU/Ku2:zZQ0jDFos2AciBTLU/Kl
TLSH
T143F103BAC7A44879751D014F9B438C2E8B133C403195A2B4B3EFA24ED3DC7CBA5C9662
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxStudioInstaller_CCAA4.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\RobloxStudioInstaller_CCAA4.log
Size 1KB
SHA256 738e2b2abc77ab4354aecc937ff73f7c87dceb85f2d19587239be87b254f7aac
MD5 5d6d26d39f856f43e62c593b67d549a2
SHA1 29d1da1af194daf1b2f3da142fd48019ad02aacf
SHA512 98b3fd1a914a59d4d3c5d6a089b42670a2d9f92a7058664ff476de524749c6d0d358c119068b79d27c7e72c515b93e5e63a546efc35a85ac4b31f6648bafee25
TLSH
T127314C7EC2A54878220C464F97128C3B57133C4461F5F3B9A3DF724EB38E6CA64D1A62
MD5 SHA1 SHA512 TLSH

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
Size 223KB
SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
MD5 2ef00fa979161001a3a5cd5169a7de48
SHA1 0d3ee6044ef954db79d4db9984cad411dfd4c3c7
SHA512 f0b7f015d3e766b390a663ca5b1498175fa241259cad73f4b8d2b9646b56bc08a698fea7f5a28324b9a59af1622296ef79d77830a50bce14fd5f02f7f9228fdb
SSDEEP 6144:EqU9NgI6FdZL52dTOgwQh1hV1AP2A2FTR:knh6fZL5mOi1hXAP+9R
TLSH
T1E624AEAACF953C4A28E3F094C9AB037ED919C3629DDAB0B31D593845C78972D61FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8913724486d5e3c463c493b25346ca31

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
Size 64B
SHA256 183a69563a6f8c95b21a7732d38c58fec484e6b0a7ad887f76c4934d993c344c
MD5 e7392c48c25cc2b79a87a446c0c6e971
SHA1 e15974e6401a1677c7700ac075e3c44bf78b6803
SHA512 38c1d9d4ac12f01a9b14061fe6ed7c3acf8e0eaa75840f79f3b73d8506dece2052b95f7d520042f44ba76dabe4c3b7db306c4c509e95c048742ec19b8f942a74
TLSH
T104A002571128F556CE19C17A1E747F704625C5623C52390783D373424D0C502D81E602
MD5 SHA1 SHA512 TLSH

Submit Download

8913724486d5e3c463c493b25346ca31

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
Size 64B
SHA256 162b22ebe88f601e57d8463546f3e4560f038484c061d167d7d392889510ea80
MD5 d14d7f6e969deb63798c2d7070b09323
SHA1 5795d0bd4344a3163459f8b80ca36773c1f1a82d
SHA512 e65d5f889bea2e508eac7b6f354f2f2fe136d6063ba8d4f2d134d95007878ccc80e541ab743a66e4a9ef2e61766e5bc54d1db3a0c14157ce8f5acba9262cb424
TLSH
T179A00219155D7D5AC91951BF1E7437644714C2B124522115626762438D4C815D40DA07
MD5 SHA1 SHA512 TLSH

Submit Download

Roblox Studio.lnk

Path C:\Users\Admin\Desktop\Roblox Studio.lnk
Size 1KB
SHA256 a4fb8db91b143d4767c026eea150d1dc077f4b4212ba9f3ff6b445a3dd58b053
MD5 5608b92d51f31b58ef6440e166d92161
SHA1 00d31d6facc6cd1eb769e1c05ddf008b9591bb3a
SHA512 90abca8e2094fc376fcb03dffee3a0298b897fe13c4922c35467d35ea1d04fa0f6707e372e50977e2aa3fad125f6005d62fc3a0c11bdef624ee98a83b4fb4b47
TLSH
T139213F540FE70B26F2F2863579614262EE737C01FA156E6A0085274D0A62204E4EEF6F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1088-1604-0x00000219E39D0000-0x00000219E39FB000-memory.dmp

Download

memory/1088-1554-0x00000219E6780000-0x00000219E6781000-memory.dmp

Download

memory/1612-1679-0x000001E55A480000-0x000001E55A4AB000-memory.dmp

Download

memory/1612-1662-0x000001E55A4E0000-0x000001E55A4E1000-memory.dmp

Download

memory/1680-1066-0x000002AF04BB0000-0x000002AF04C5D000-memory.dmp

Download

memory/1680-1002-0x000002AF04BB0000-0x000002AF04C5D000-memory.dmp

Download

memory/1680-1799-0x000002AF04BB0000-0x000002AF04C5D000-memory.dmp

Download

memory/1680-2287-0x000002AF04BB0000-0x000002AF04C5D000-memory.dmp

Download

memory/1744-962-0x00000249481C0000-0x00000249481EB000-memory.dmp

Download

memory/1744-393-0x000002494AE40000-0x000002494AE41000-memory.dmp

Download

memory/1744-392-0x00007FFF8B6D0000-0x00007FFF8B6D1000-memory.dmp

Download

memory/1852-1978-0x000001F16E4E0000-0x000001F16E4E1000-memory.dmp

Download

memory/1852-2068-0x000001F16E480000-0x000001F16E4AB000-memory.dmp

Download

memory/1972-126-0x000001A250040000-0x000001A25004C000-memory.dmp

Download

memory/2176-314-0x000001E640170000-0x000001E640570000-memory.dmp

Download

memory/2176-228-0x00007FFF6D410000-0x00007FFF6D95C000-memory.dmp

Download

memory/2176-230-0x00007FF756350000-0x00007FF757350000-memory.dmp

Download

memory/2860-99-0x000001DF932F0000-0x000001DF932FC000-memory.dmp

Download

memory/2984-89-0x000002B871070000-0x000002B87107C000-memory.dmp

Download

memory/4148-1794-0x000001CE63C00000-0x000001CE63CAD000-memory.dmp

Download

memory/4148-1029-0x000001CE63C00000-0x000001CE63CAD000-memory.dmp

Download

memory/4148-2273-0x000001CE63C00000-0x000001CE63CAD000-memory.dmp

Download

memory/4148-948-0x000001CE63C00000-0x000001CE63CAD000-memory.dmp

Download

memory/4148-950-0x000001CE639F0000-0x000001CE639FC000-memory.dmp

Download

memory/4148-949-0x000001CE639B0000-0x000001CE639DC000-memory.dmp

Download

memory/4148-951-0x000001CE6D250000-0x000001CE6D277000-memory.dmp

Download

memory/4148-952-0x000001CE6D610000-0x000001CE6D64B000-memory.dmp

Download

memory/4192-1446-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1442-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1447-0x000001ED4B600000-0x000001ED4B6AD000-memory.dmp

Download

memory/4192-1434-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1436-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1435-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1440-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1443-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1441-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1445-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4192-1444-0x000001ED4E010000-0x000001ED4E011000-memory.dmp

Download

memory/4296-1085-0x0000020BF0450000-0x0000020BF0451000-memory.dmp

Download

memory/4296-1091-0x0000020BED7B0000-0x0000020BED7DB000-memory.dmp

Download

memory/4568-7-0x0000000003340000-0x0000000003348000-memory.dmp

Download

memory/4568-16-0x00000000032A0000-0x00000000032F2000-memory.dmp

Download

memory/4568-95-0x00000000032A0000-0x00000000032F2000-memory.dmp

Download

memory/4568-6-0x00000000032A0000-0x00000000032F2000-memory.dmp

Download

memory/4568-96-0x0000000003340000-0x0000000003348000-memory.dmp

Download

memory/4584-370-0x00007FFF8A940000-0x00007FFF8A941000-memory.dmp

Download

memory/4584-953-0x000002291C780000-0x000002291C82D000-memory.dmp

Download

memory/4616-491-0x00007FFF8A940000-0x00007FFF8A941000-memory.dmp

Download

memory/4968-1280-0x00000230DC550000-0x00000230DC57B000-memory.dmp

Download

memory/4968-1180-0x00000230DC630000-0x00000230DC631000-memory.dmp

Download

memory/5128-1823-0x0000025DA11C0000-0x0000025DA11EB000-memory.dmp

Download

memory/5128-1804-0x0000025DA3EF0000-0x0000025DA3EF1000-memory.dmp

Download

memory/5128-1452-0x0000024E39CE0000-0x0000024E39CE1000-memory.dmp

Download

memory/5128-1462-0x0000024E39C80000-0x0000024E39CAB000-memory.dmp

Download

memory/5344-1901-0x000002080D4E0000-0x000002080D4E1000-memory.dmp

Download

memory/5344-1918-0x000002080D480000-0x000002080D4AB000-memory.dmp

Download

memory/5580-1136-0x00000268C0CC0000-0x00000268C0CC1000-memory.dmp

Download

memory/5580-1151-0x00000268C0C60000-0x00000268C0C8B000-memory.dmp

Download

memory/5860-1511-0x0000025CAABD0000-0x0000025CAABFB000-memory.dmp

Download

memory/5860-1497-0x0000025CAD980000-0x0000025CAD981000-memory.dmp

Download

memory/5960-1741-0x00000272B7500000-0x00000272B752B000-memory.dmp

Download

memory/5960-1728-0x00000272B7560000-0x00000272B7561000-memory.dmp

Download