hxxps://create[.]roblox[.]com/

Analysis

user interaction
yes
max time kernel
561s
max time network
563s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 23:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://create.roblox.com/
Sample260728-3w2wmscf49

Score

8^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
138	6128	chrome.exe

Executes dropped EXE 3 IoCs

pid	Process
2736	RobloxStudioInstaller.exe
4176	RobloxStudioBeta.exe
3584	RobloxCrashHandler.exe

Loads dropped DLL 23 IoCs

pid	Process
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
3584	RobloxCrashHandler.exe
3584	RobloxCrashHandler.exe
3584	RobloxCrashHandler.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioBeta.exe

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\D:	RobloxStudioBeta.exe
File opened (read-only)	\??\F:	RobloxStudioBeta.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
4280	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\AvatarSettings\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\StartPage\Dark\Medium\Alert.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Dark\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\NetworkingAccountInformation\NetworkingAccountInformation\ACCOUNT_INFORMATION_URL.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\MeshPart.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\RibbonAvatarSettings.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\WidgetIcons\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\DevConsole\Close.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\RibbonCanvasGroup.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\Settings\Flags\FIntMenuButtonsThrottleHundredthsPercent.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\RoduxUserPermissions\Dash.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\getFIntUGCValidationLegThresholdSide.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\StartPage\Light\Medium\Home.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Button\ActionBar.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\GenerativeAI\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\FacialAnimationStreaming\FacialAnimationStreamingHeartbeatStats.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\Motion-31ab8d40-0.0.7\RoactCompat.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\Signals\Signals\callUserSpace.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Navigation\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\NetworkingGames\NetworkingGames\networkRequests\createGetExperiencesDetails.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\Chrome\Integrations\FtuxTooltipAnchor.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\Utils\Utils\getOperationASTFromRequest.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Utility\useIconSize.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\GraphqlTag\GraphqlTag\rotriever.toml	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\PlayerScripts\StarterPlayerScripts_old\ControlScript\PathDisplay.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\RoactGamepad\t.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\AvatarSettings\Light\consistent-lightx1.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\GameSettings\ArrowLeft.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\PlayerList\Components\.robloxrc	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\AvatarSettings\Light\player-choice_lightx1.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\FileSync\Dark\Standard\Export.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\Toggles\Dark\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\avatar\unification\v2\AdaptCharacterPropertiesAndPhysics.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\CoreScripts\DefaultListenerLocation.test.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\VoiceChatService.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\Foundation\UsageTracker.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Utility\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\DeveloperFramework\AudioPlayer\audioPlay_BG.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\TagEditor\huesatgradient.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\TerrainTools\mtrl_air.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\Moments\Reactions\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\FindReplaceAll\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\StudioSharedUI\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\LegacyRbxGui\CloseButton.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\PlaceAnnotations\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\textures\ui\Controls\DesignSystem\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\Settings\Players\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Debugger\Dark\Standard\DeleteAllBreakpoints.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\DraggerTools\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\AvatarEditorPrompts\GetCurrentHumanoidDescription.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\MomentsCommon\MomentsCommon\Hooks\useSelector.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\Debugger\Breakpoints\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\LegacyRbxGui\health_greenBar.png	RobloxStudioInstaller.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RobloxStudioInstaller.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6128	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 13 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioInstaller.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies Internet Explorer settings 1 TTPs 4 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth	RobloxStudioInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	RobloxStudioInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	RobloxStudioInstaller.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297564198978746"	chrome.exe

Modifies registry class 45 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe\" %1"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\ = "Roblox Place"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place\ShellNew	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe,0"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\ = "Open"	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\version = "version-ff6341faef444107"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place\ShellNew	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\ = "Roblox.Place"	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe\" %1"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe\" \"%1\""	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{1F116A8B-4748-469C-8AAF-8E80205BE1E9}	svchost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\ = "URL: Roblox Protocol"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\URL Protocol	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{6DCACF83-2A06-42FE-B87B-48D6680C5197}	msedgewebview2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\ = "Roblox.Place"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-ff6341faef444107"	RobloxStudioInstaller.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4176	RobloxStudioBeta.exe

Suspicious behavior: EnumeratesProcesses 46 IoCs

pid	Process
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
2764	chrome.exe
2764	chrome.exe
2736	RobloxStudioInstaller.exe
2736	RobloxStudioInstaller.exe
2736	RobloxStudioInstaller.exe
2736	RobloxStudioInstaller.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4588	msedgewebview2.exe
4588	msedgewebview2.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4176	RobloxStudioBeta.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
5288	msedgewebview2.exe
5288	msedgewebview2.exe
5288	msedgewebview2.exe
4700	msedgewebview2.exe
4700	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe
Token: SeShutdownPrivilege	1656	chrome.exe
Token: SeCreatePagefilePrivilege	1656	chrome.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe
1656	chrome.exe

Suspicious use of SetWindowsHookEx 16 IoCs

pid	Process
4176	RobloxStudioBeta.exe
2316	OpenWith.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe
4176	RobloxStudioBeta.exe

Suspicious use of WriteProcessMemory 60 IoCs

description	pid	Process	procid_target
PID 1656 wrote to memory of 4720	1656	chrome.exe	84
PID 1656 wrote to memory of 2868	1656	chrome.exe	85
PID 1656 wrote to memory of 2868	1656	chrome.exe	85
PID 1656 wrote to memory of 6128	1656	chrome.exe	86
PID 1656 wrote to memory of 5832	1656	chrome.exe	87
PID 1656 wrote to memory of 5832	1656	chrome.exe	87
PID 1656 wrote to memory of 1540	1656	chrome.exe	88
PID 1656 wrote to memory of 1540	1656	chrome.exe	88
PID 1656 wrote to memory of 624	1656	chrome.exe	89
PID 1656 wrote to memory of 624	1656	chrome.exe	89
PID 1656 wrote to memory of 2212	1656	chrome.exe	91
PID 1656 wrote to memory of 2212	1656	chrome.exe	91
PID 1656 wrote to memory of 2668	1656	chrome.exe	104
PID 1656 wrote to memory of 3668	1656	chrome.exe	114
PID 1656 wrote to memory of 1820	1656	chrome.exe	115
PID 1656 wrote to memory of 2236	1656	chrome.exe	116
PID 1656 wrote to memory of 4664	1656	chrome.exe	121
PID 1656 wrote to memory of 4664	1656	chrome.exe	121
PID 1656 wrote to memory of 5924	1656	chrome.exe	122
PID 1656 wrote to memory of 2764	1656	chrome.exe	123
PID 1656 wrote to memory of 2736	1656	chrome.exe	124
PID 1656 wrote to memory of 5908	1656	chrome.exe	127
PID 1656 wrote to memory of 5908	1656	chrome.exe	127
PID 2736 wrote to memory of 4176	2736	RobloxStudioInstaller.exe	128
PID 4176 wrote to memory of 3584	4176	RobloxStudioBeta.exe	129
PID 4176 wrote to memory of 5288	4176	RobloxStudioBeta.exe	136
PID 5288 wrote to memory of 1744	5288	msedgewebview2.exe	137
PID 5288 wrote to memory of 3876	5288	msedgewebview2.exe	138
PID 5288 wrote to memory of 3876	5288	msedgewebview2.exe	138
PID 5288 wrote to memory of 3876	5288	msedgewebview2.exe	138
PID 5288 wrote to memory of 1040	5288	msedgewebview2.exe	139
PID 5288 wrote to memory of 6008	5288	msedgewebview2.exe	140
PID 5288 wrote to memory of 6008	5288	msedgewebview2.exe	140
PID 5288 wrote to memory of 4580	5288	msedgewebview2.exe	142
PID 5288 wrote to memory of 4580	5288	msedgewebview2.exe	142
PID 5288 wrote to memory of 4580	5288	msedgewebview2.exe	142
PID 5288 wrote to memory of 5492	5288	msedgewebview2.exe	143
PID 5288 wrote to memory of 5492	5288	msedgewebview2.exe	143
PID 5288 wrote to memory of 5492	5288	msedgewebview2.exe	143
PID 5288 wrote to memory of 5268	5288	msedgewebview2.exe	144
PID 5288 wrote to memory of 5268	5288	msedgewebview2.exe	144
PID 5288 wrote to memory of 5268	5288	msedgewebview2.exe	144
PID 5288 wrote to memory of 3352	5288	msedgewebview2.exe	148
PID 5288 wrote to memory of 3352	5288	msedgewebview2.exe	148
PID 5288 wrote to memory of 672	5288	msedgewebview2.exe	149
PID 4176 wrote to memory of 4700	4176	RobloxStudioBeta.exe	150
PID 4700 wrote to memory of 3012	4700	msedgewebview2.exe	151
PID 4700 wrote to memory of 5756	4700	msedgewebview2.exe	152
PID 4700 wrote to memory of 5756	4700	msedgewebview2.exe	152
PID 4700 wrote to memory of 5756	4700	msedgewebview2.exe	152
PID 4700 wrote to memory of 5892	4700	msedgewebview2.exe	153
PID 4700 wrote to memory of 4356	4700	msedgewebview2.exe	154
PID 4700 wrote to memory of 4356	4700	msedgewebview2.exe	154
PID 4700 wrote to memory of 5628	4700	msedgewebview2.exe	155
PID 4700 wrote to memory of 5628	4700	msedgewebview2.exe	155
PID 4700 wrote to memory of 5628	4700	msedgewebview2.exe	155
PID 4700 wrote to memory of 3528	4700	msedgewebview2.exe	157
PID 4700 wrote to memory of 3528	4700	msedgewebview2.exe	157
PID 4700 wrote to memory of 3528	4700	msedgewebview2.exe	157
PID 4700 wrote to memory of 4588	4700	msedgewebview2.exe	158

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://create.roblox.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9889ec728,0x7ff9889ec734,0x7ff9889ec740
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,13930220753911506668,9648834908930975551,262144 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1940 /prefetch:2
  2⤵
  PID:2868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1576,i,10907063932226023996,2450185479709690993,524288 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2348,i,14316893117102513803,2408910422850116346,524288 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2524 /prefetch:8
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,9825780738505927309,5967251895929515043,2097152 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,12141843522337696509,15315810496183271319,2097152 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4516,i,16258109458636587104,4421693574936685860,2097152 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4524 /prefetch:2
  2⤵
  PID:2212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,7848848956748474642,1325347172028425573,524288 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4952,i,1713245124751162720,11139915758617533745,524288 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4936 /prefetch:8
  2⤵
  PID:3668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4932,i,9560394619040751170,4224494499417886895,524288 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4928,i,10009625635809416412,6985906357212813700,524288 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4720,i,5339654042098023724,11655840571533168803,2097152 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1080 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4892,i,13185119679609587231,15908063792197519266,524288 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:5924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4752,i,13722879925685481313,4974853108943047361,262144 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4816 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2764
- C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
  "C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2736
- - C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxStudioBeta.exe
    "C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Enumerates connected drives
    - Enumerates system info in registry
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4176
  - - C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe
      "C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 4176 --attachment=attachment_0.732.0.7321040_20260728T235645Z_Studio_002B0_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.732.0.7321040_20260728T235645Z_Studio_002B0_last.log --attachment=attachment_log_0.732.0.7321040_20260728T235645Z_Studio_002B0_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.732.0.7321040_20260728T235645Z_Studio_002B0_csg3.log --attachment=attachment_log_0.732.0.7321040_20260728T235645Z_Studio_002B0_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.732.0.7321040_20260728T235645Z_Studio_002B0_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.732.0.7321040 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=1156fa98c4a70f733ebb6000d6ec2e8168132a4f --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.732.0.7321040 --annotation=UniqueId=5560337211893128285 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.732.0.7321040 --annotation=host_arch=x86_64 --initial-client-data=0x440,0x444,0x448,0x41c,0x45c,0x7ff6fdc9f708,0x7ff6fdc9f720,0x7ff6fdc9f738
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3584
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4176.2604.9509659762732334011
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:5288
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x180,0x184,0x188,0x15c,0x190,0x7ff96279b078,0x7ff96279b084,0x7ff96279b090
        5⤵
        
        PID:1744
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1752,i,7606246462512901132,13257616110081514981,262144 --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:2
        5⤵
        
        PID:3876
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2060,i,7606246462512901132,13257616110081514981,262144 --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:3
        5⤵
        
        PID:1040
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1760,i,7606246462512901132,13257616110081514981,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:8
        5⤵
        
        PID:6008
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3616,i,7606246462512901132,13257616110081514981,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
        5⤵
        
        PID:4580
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2548,i,7606246462512901132,13257616110081514981,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:1
        5⤵
        
        PID:5492
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4236,i,7606246462512901132,13257616110081514981,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
        5⤵
        
        PID:5268
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4672,i,7606246462512901132,13257616110081514981,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
        5⤵
        
        PID:3352
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4636,i,7606246462512901132,13257616110081514981,262144 --variations-seed-version --mojo-platform-channel-handle=3996 /prefetch:8
        5⤵
        Modifies registry class
        
        PID:672
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4176.2604.249899941695864704
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:4700
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x180,0x184,0x188,0x15c,0x104,0x7ff96279b078,0x7ff96279b084,0x7ff96279b090
        5⤵
        
        PID:3012
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1812,i,6825294712950012811,8694653907784878842,262144 --variations-seed-version --mojo-platform-channel-handle=1808 /prefetch:2
        5⤵
        
        PID:5756
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1864,i,6825294712950012811,8694653907784878842,262144 --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:3
        5⤵
        
        PID:5892
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2312,i,6825294712950012811,8694653907784878842,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:8
        5⤵
        
        PID:4356
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3752,i,6825294712950012811,8694653907784878842,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
        5⤵
        
        PID:5628
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4828,i,6825294712950012811,8694653907784878842,262144 --variations-seed-version --mojo-platform-channel-handle=4028 /prefetch:1
        5⤵
        
        PID:3528
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=5372,i,6825294712950012811,8694653907784878842,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:4588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5732,i,6364769750627334505,18159951961177319071,524288 --field-trial-handle=1972,i,17647983917173007748,11027992932492003265,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4092 /prefetch:8
  2⤵
  PID:5908

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5828

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5432

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:4280

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:2316

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2f8 0x4b4
1⤵
PID:3664

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:4868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AppSettings.xml

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\AppSettings.xml
Size 144B
SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
MD5 431a6eb20932ec1c56682a1f60d231d3
SHA1 40bb32db040cabade103c21ba5b6f811dfb0773e
SHA512 0969b9484bb7c661d4e0452ff1c77396796333904b39f24c56d5a92ac4ed4ebde9b8981a985c6950b4af2852e8d9599e071a51ce4f9ef21ead778a2fdc76fcec
TLSH
T18AC09BA45351C4149795CF14977DF690E3B1797444504498D8A1785A0DC51D427D53A3
MD5 SHA1 SHA512 TLSH

Submit Download

qgif.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Plugins\Qt5\imageformats\qgif.dll
Size 42KB
SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
MD5 9600a70636894f6a934f2a7f14d6ae0a
SHA1 d0a4e0dc7e4c61bebbd91579bf15d260c1fc7230
SHA512 6a80ca6c6b8ba3fcb1be5de6ea39bf6a75a6206266112bf23a81a249684b567e50babf257d011d0272d28d3d345c501d0f3e576f397a22abdea8b94abb3412bf
SSDEEP 768:dVRwrbBk3Xj+7yFZxK7+WHUgnNx1+MhYWeEJPxUo:d3wrbej+G3U7+lgnNx4MhYWLPxr
TLSH
T1E9136B56AB7844D2E513C678D9AA4D2BE935FA305B6297CF432181780F323D23E3C66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qjpeg.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Plugins\Qt5\imageformats\qjpeg.dll
Size 447KB
SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
MD5 81b6df8cd8de9db1eeca252958ea9d1a
SHA1 e1ec20f7e3575d9595d38ca2ad8b5c521c7eccb4
SHA512 8cf35cc5b7a11aa7e7cdbc9dc626c5429b8f59079590092343b9b207839d34c46c1b9a2a7bbd4c5e136fae71396a698474c432428edcdc809825f003b6919231
SSDEEP 12288:/WbtMZ30x6oT93baQIYnMEMI3dZfsskUn5BLvUMCk//RFEciccjxRPCA4cTJF/eN:/WbtMZ3y1B
TLSH
T133A4A243F2605C87C7E54474EE6AC1A6E794B81CC7FB46F779C1ABD97A226F0B829100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindows.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Plugins\Qt5\platforms\qwindows.dll
Size 1.4MB
SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
MD5 e81f163cbeb67ec8414c2ab3b4119647
SHA1 065921e56683b78097e125da120420136258ec55
SHA512 6700efcdae09a40e1907f56ee4fe2308422ce53ef76a13c434d1cd57a77d934e0bd583c8d96ced0fd250fd0ba727be6d7258692a6bbe19053b88fb48d188b13d
SSDEEP 24576:BgRZTqnadX9G01nyfcdGxOsFciSKi3kmbe7WAiYdZs9UIrIqrtQQ:oTqnadXw0xyfcdN8JQbOWAE/
TLSH
T11F658D57A3A48298C26BC23DC65B8B17D7B1700503619BCF11A88E597F63BE3277EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindowsvistastyle.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Plugins\Qt5\styles\qwindowsvistastyle.dll
Size 144KB
SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
MD5 04a9a47fa806c912a22af17577566709
SHA1 2caca306233ef324d63ef3fd04937793ff2af912
SHA512 47c39a2e91f0444bec87055aa1592bea6b0fe5fa1996b4c1f3d38a1928381d8a536522e5f86cea3fb7c655920ccee66c468a1d02af152750a41fbe46c9aad032
SSDEEP 3072:AYfJgCoOdX7MNwr80krOTmUMVa/MFWxmqd0SQV8lWTxf:RBBXwL2Sa/MFWxmqd0SQVwWV
TLSH
T12BE34C13326602C6C463D2B8C55F0916F7B3B05853228BEF0667CEA92F533E27E79A55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Core.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Core.dll
Size 5.8MB
SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
MD5 f6c86aacc6126b0d2f442c6a88e57efe
SHA1 df1b891829c3005d045e3ba048292789d5e28fef
SHA512 8cb4d26c069074e2c5dd734e5d1cd085afd0742795024460d80b9b0b333dc01b5df7c5691c03ece34be20956daa63184eb8f028c5e1c27814124937ecb7c8ed5
SSDEEP 98304:kFO2h8E4EwNrZJsv6tWKFdu9CsViJQ8xqfSgw2:kFO2h8E4lNdJsv6tWKFdu9CsVOQ8xqfZ
TLSH
T10C569D8776AB0250D0B7C23CCAA7811BE672B8018B219BCF125CA7495EB77F1693F715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Gui.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Gui.dll
Size 6.5MB
SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
MD5 3bce6b45e07a747167349865b4bf4ac3
SHA1 d24d4b87ed035f897009cf0b5b711e6485533d89
SHA512 d7584ddd3c6cfc9bda1ddddd02b883aa974309770a478f138202f7540ae92b38cdc658149e4e8b4e76eb0280ab066e096558bd942367c20c018f0f716c09d1e4
SSDEEP 49152:jWM6LDUqcvRiHZHjTpTFpFEOPVQJqguaf5Q/J+5mkU7vo3qsJAGUD4topffcLnZN:wLDFv/+RmFaqBpfkCgnAiYCHecbp
TLSH
T18F662886725A6262C977E17D8B4F052EE1F3785283428BC748199B480F737EA1B7FE05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Network.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Network.dll
Size 1.0MB
SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
MD5 bb5ede48a003b21b63bb134435c4f5ff
SHA1 55d6cd8128d80c81a5fea49b9de4daa21d4a5ccc
SHA512 e5e62f3fbf1a9c82c13d0c192c1033d2c55d08ad3830ebbbe3b9252d0721651225ac39ab92d863ecd11bba62ac1c51f86422ffab9fcef6f5f20fdcf847a33afc
SSDEEP 24576:XKF0Nu0gZmVnhqMpH6Q7pX9U2BgrExZ8Wv:bNu04mVnf6cgrQf
TLSH
T10A355B67B36103A5D46AC1B8CA8B8502F67270018B669BDF5639DF693F737E1263E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Widgets.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Widgets.dll
Size 5.3MB
SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
MD5 5309de309fb00a4be24bb465f0053455
SHA1 a14ef29356dac72d882f663a426f16ab29bc3529
SHA512 0cebf0e1560f2ef8b140bfd4fba2b3d7a562923f1b45c84eff41dd02b5ce04a9402c937cb4708d4623ab02a8991bbe6a31acc3cbd17fe2079130313f33daa1e7
SSDEEP 49152:T8LcMQHZ/gD0bTG5/Zh4w0I6Lr86R21sQGxTkaeduxK6PBZrGBqfjoWjmqYjYhIb:qPQg6CHliIYKsonnYhIv7uP3S6x9W
TLSH
T122466B57B3A54184C16BD238CF8B8613D6B2700487628BDF256A8E592F737E22E7F705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Xml.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Xml.dll
Size 215KB
SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
MD5 a24011ba1cba9e517da2d89d530329cd
SHA1 867f44a65128db05ec1c2842a52b2752ba22346e
SHA512 76d7115d7b5f57a609cae61e768b28cc873f30a4aea46a2b385e9c8be1e5bba7c73ce84731708fe12f28d691b06ec6dbb8579f5eb9eca92ecf83d94e97b98620
SSDEEP 3072:4rZx2zOZ+kzW8MWXJBPlGyGv+RQxm7uFkgs7pkV9p7RM7jJWTx/:4FxyOZtLMWXJBPlBbaxp6kV9p7CVWl
TLSH
T18C245B4777258596E427C238CE5B881BE673B85017628BEF81548B792F33BD2B87E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanBase.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\QtitanBase.dll
Size 1.1MB
SHA256 f664bb3d87b127ab46650413a675f09784fd2d27cb98eae9f77e0c233a66a285
MD5 3c3626b2e692510326b71658f424e891
SHA1 6dfc8d44ab9a9dec11111c6f35138daf8d37c16b
SHA512 e7faabdbfd44ada8e579f9a9483bbad738f3c33fa2afec47d987db1456b2e0c3407f76d5067886991c423b43edcd2a1aa661a8dc3d09f2e7f57c7778c7b7663d
SSDEEP 24576:r3nRLlUv+otWr8wY6S8dtuTbwQitevsM:rXXUvNdwVu/kcvsM
TLSH
T14C45AF4B33964352D16BC278C69F8114F07734159B4286EF9A2BFE291E333E5383B6A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanDocking.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\QtitanDocking.dll
Size 621KB
SHA256 ad5761ba9bee506bc9a1f4f0397fbc739eb8ad8544016a564cacb60979ad1273
MD5 c58473c626de265e2cead165e65c3d21
SHA1 3aa3d53110d01d51ec0f56fd988dce73f23076df
SHA512 b996e05ab9eed7d46b3fd21cb6f9432168ae6784a33e564cd9f138d36ff52e7ef594dcdb9ea7491be46f66c19f81c0d593a720f7f56b4490e5d63a4fcbc19b3f
SSDEEP 6144:qqpZco/36jOCZ0NesIZSNfFBg8UYS164o4TNQre4NMqINZIyavAj4vCDOZ4BVhg9:qs/CIkZ8fzvU564N4EmCDAnNg
TLSH
T16FD46C1B72780391E067D138C65BC626F4B77842476295EF6216EA2D6F33BE13A3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanRibbon.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\QtitanRibbon.dll
Size 3.1MB
SHA256 f02d3c963f8af77b638280c089ec607a891a291f6839dd815ffcf66764683aaf
MD5 01bd3e3ba233106d464db5a112f48154
SHA1 90b2270567b26225e0e5f8fa7927a7d15cdaf37a
SHA512 1dc29cd9d416164a1995b148ae37e2fd8d1e6ebb75a1025f7ef41233b96137785e0c43871266a723f44baa71020f1989b30d4adf6c06404f7cfb5ca3ba5414f0
SSDEEP 49152:BrTyq/LVyjq4LbhndL1ZsY0LUGGnVGvYEnCWCLn+XYKMcc/RotRNC7C7C7C7C7Cl:BvLUjbLnL1ZsY0LUGRjCWCL+IE
TLSH
T198E5CF8B77AA0298D2AEC13FD28B4555F5F7749A835386EB4926CD1A0F333E06C35B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxCrashHandler.exe

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe
Size 11.7MB
SHA256 884c98d21a41763ea14040455e946bda1d5cdab602fbe0efa45c3645096e30b2
MD5 915ecbdd8c8614d8318a97158aefbbba
SHA1 d7ad5cd0dadfc9bedbe8868805850371849339b7
SHA512 d953444179cb4d7b9a4a595a49663975f28b1b408288a277bc942adad56d2fe970c9fb8346b50bbddd4f29daaab97b559c5ef8c6c83f7b4b4038a7942bf35271
SSDEEP 196608:mAQpXVhmGKh5617XA9B2VtHK7aT+w5wixNQ:IVHfJXKatHKM+NiHQ
TLSH
T163C69D6AB2B800E8D4BBD1BCC6469617E772741603709BDF1AA046F61F63BE41E7E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\WebView2Loader.dll
Size 162KB
SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
MD5 e2f9d2ef3446e70b50de50f577c6939e
SHA1 48e7721704249cebd1267280459b7b36ce99e177
SHA512 f5d7790bb2eacc78405a91a65adc0f30a248542de22ed10cfe91bc87e4f953a93d738281c13480a070681e7169fca6ec49e20c5fb7b89d76f3a9bad912c6d87d
SSDEEP 3072:erQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Tv+EtJfy2aQutH:gMMTlTRTzWiThTNTFSzjiBM2h9P5oZNr
TLSH
T190F35B4772E5407BE16A8274C9A34A11E77774510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd-win-prof.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\dd-win-prof.dll
Size 3.8MB
SHA256 1e5998697cbad5d9800428bec8afd88285f7411fc05de9cb9453e776b01ee6f3
MD5 a0e645c21b4e8e8499f6e4af644dfe2b
SHA1 22c8205d8e5f40cb1688243df10ddf1c813a184b
SHA512 05a9f2dee061499527b615cb34614aff0eb150be3ed567614b9facb28cda328088b485a524e7402303c00c8b35da50cefac14b97b5d93d34f61b059cec3d4ced
SSDEEP 49152:LMbMlAt7HkrfnNhiM46GB8vGM535GN2j8dlZCEbIw0zUy+z/N0yooA9YIU6ieyV+:LXN0B8HoCzkxooA9n+
TLSH
T1D9066C02BF86996AC09DC874C34B4B638B2274CB0B35B6AF42D541253F6EBB15F6D358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfbxsdk.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\libfbxsdk.dll
Size 9.7MB
SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
MD5 51d82c0e8ad65126413ed39246b5cf46
SHA1 f73c0b2248ee11f8fde172e04c64b40452051521
SHA512 c60362c4a67bd11ee330d36ecb1a58d7619989072b48b652f9411884797852fca4805ea1aab77546b1d7fc3c158beb30dc6aef0f7dbfb99322affdc8dfec014f
SSDEEP 98304:4Zrqd/tYrwiI8gpR241UnQQjHNA256IJymNfJjWfELI1u0/QHnq:4ZrGewiI3pRf1UXNAUiF
TLSH
T103A67C8B227642E9D1BBD13DC9974903E6F2304117369EDB02964A6E1F237E0AD3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\msvcp140.dll
Size 540KB
SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
MD5 4e3fa9bd90ef020c14359639dc19312b
SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
TLSH
T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\msvcp140_1.dll
Size 34KB
SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
MD5 d433b3e8aec25afb1c65cccd97ddc7b1
SHA1 ffebb57d0bf8cdae0449302a691920cc22ed4a72
SHA512 b1d48de56a595ddd6fed36574f0d6f20fb21d047ef7a6e93a487d660bcb1090e45c6aed43a99bda9897c1ef524bd8032b33e35a48c796d3f467caad33f5dcff9
SSDEEP 384:FKzh5dQS8DzxhK4KWcS5gWIZ1gr4iSt+eMifX7R9zUkJCWEIHRN7/PFbR9z181q:FAQRDzxg4FMgU9nF9zUet/b9z/
TLSH
T13FF26DC5FA688443D866483082DAEE47BC3DB7D25F6092DB1392F25C0D937C5EA35A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\vcruntime140.dll
Size 120KB
SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
MD5 0d35c5e99871b4f02c490b9fd9dace34
SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
TLSH
T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\vcruntime140_1.dll
Size 46KB
SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
MD5 03b43160d21c08de07a79d0a1c5ee81d
SHA1 0a449093006af667432b83303614b53b62fc0d05
SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
TLSH
T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2a99884d9ee839360e64ace6048544ee0ee401ab38623723ad94a0fa8464fada
MD5 5063eaa708b170601c6c85beeef049ad
SHA1 79b45f5a6296b099eca523dce6914cf235a02676
SHA512 e7fd6bbc26d66e0eb48d73015a39d9f3573f57fdf39723b3e0d1012fefb524100cdc0b464f83353d750a16ebe740c47ea78ea94bc20f69d012872add26636681
TLSH
T133E02BEEC962DC771CFD075C61510745F65523073740998B3A3C99084F7533A4756C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 6626ce9fbc3a2ef00060eaaac2692d5d34286b7c504fe09e84b9423c019b2924
MD5 ec33edb1867d2d88843615772f3ca02f
SHA1 229833bd1b535389d121b5c52d435e2c8288df11
SHA512 28bd146a160a7fd5c7c87d15fc02a888da9840196ae9ff9e418b1928fb23f11e03a364058fcfb18a7d7b71b38b07eece4549e08b42e583f8c4c906fccd555d01
TLSH
T1A2518174B5DDEE81CFA3B177A97A0E3920D352EAC2160743B341A594385F8E4F142C68
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 d450545886a67f854806e7122f9c032148ffce6d3eb3ad9847b5bc3f94bd3fd0
MD5 4dd9cbb32701b81ae774fe744f076c4a
SHA1 485e3c11067290fe024697cc6e3da7af9723877b
SHA512 602aa58aec1a1c1742169f0ca761962283074de3cc16d4864632482759ba40d2c6581f24f74efe65b71ca4397f9cf378491b85664e8f6a6649c947527f4be54e
TLSH
T1E6817CF753B4C96D9A1196F4EA056E1FCE690530031C78B689E07E2793F39A2E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ca5bcdec90f9dbd5beffe8115309a4c1ef0db20a55ac927320c7b4591af1bf5c
MD5 eb280cb8a3bf0bedb5df62877a5eaeca
SHA1 915030073fd1e8d687157319c762de4c4241027a
SHA512 563b12d4ab04ce7c96682cf42e31ee3ea87bd6bc25e169688ca40336d8085bf8767f0e60c7233d5c05222f3112bc6f8f8f8998359c981b730ae187e0af55b9d1
TLSH
T1D1816CF753B4C56D9A1196F4EA056E1FCE690530031C78B689E07E2793F39A1E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1eb6f17c46d0ba3111331f0361b7a70e1e41fde7d491a0a4ce7c66ece3beb9ff
MD5 379c9ff4b66b5c6dd12474d1ac792179
SHA1 efcb5e4fa51ba9578af00b7d4ca888410eb315d5
SHA512 25379cae3bf9a03e96729fcf7b12117c7a45547946a8f1225853823787cf8aae41d032a17da65bde17796413d54b417e1ad48ec2e2b0e7879fc308c9cb464b7e
TLSH
T1A7616CF753B4896D9A1196F0EA05AE1FCE690530031C78B6C5E07D2793F39A2E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 c5a315351293a134c7e88072b3dbae71f7f7538fcc0897e062a8f7d1a502db31
MD5 cc66c7ab7b9c2799de983cd1ecfba3b1
SHA1 6cb66eb601ed1c8a797990b10708804db89e3008
SHA512 b97edfed47837a9d2665683e6df9ec1304828bf09fc3e818cab635464ada4ee0469626d9f86603b914908976fbce76911a6da25989a9bf2ae0a7da71b08d2832
TLSH
T146719BF753B4C96D9A0196F0EA056E1FCE690530031C78B689E07E2793F39A2E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1ee1bf1ac52cc17045af0293c1a0a453e68dd3e03a23ce6af7c2d06db8cdfaf9
MD5 1d65287ba7ae87ce3cb70cac88a70b9a
SHA1 997fc7a1ec78f91a9b5dcf2a4015020b3179f3eb
SHA512 8167399b93bdf9dfcddcdb6eda3fa44d70ab091991ac520ecc79b92aa246b367709f389d063ec184778cfc5b6baf6305a9d2051f9d428172b6284798833dbd10
TLSH
T1044149F7D7D886AE890195E4B6152E2FCE2D0D54532C3C5AC8D4AE0B57E2971D24058E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 be70837d890059b0d533aa921ef7ce622498a3395fc50460d3bdae5eed3640f5
MD5 7eeef211df0f07181f4ab1186665167b
SHA1 766b7b6b57e229a187faafd8530822ad614f06d7
SHA512 60e471347ba6e6524f2777465842c825e6347fe4a1444dfbe3aaf1fb6580c9ccef0b3cfa78481a7bab05b503975482dc18e11be486bc56c79f487e533954757c
SSDEEP 192:5RrJe3ofrv71hp8PRpaTh92Hsb+WNnkyZpPYjkJTbasyUyVyIsnAUgE:5RrJVTBh8XwQwNDYgJXarE
TLSH
T16652C56FA91469BB6CDBD22AF9223723D7F5102161E12E80E7FC8A1C15D76CD222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6fafe4ac5c64490a5e3bb95b14ee4a50e51d4cc8143a89fb9e640acb00020865
MD5 ba11813cacdc412898f03e42a495d90c
SHA1 6bc814344502d22cfbbb25ebb7c362d52ddfab92
SHA512 36923e6d31cc8e408d280c0973f4060ce2a6921e41ad0109d21e60c6ad47ef18ed78119650a68a5a118e0efae5770c367ac1067cda9db7fd452ac7c6daf01491
SSDEEP 192:5RrJe3ofWv71hp8PRpaTh92Hsb+WNnkyZGEEEkJTbasyUyVyIsnAUgE:5RrJViBh8XwQwN3ENJXarE
TLSH
T17F52C56FA91469BB6CDBD22AFA227723D7F5102161E11E80E7FC8A1C05D76CD222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b5c41c11be8f4bdbbcad6fdf0c8e9e33e03d703332607bb3e77367ddd18fa613
MD5 7e2c309977884da3a950d0cb6905393f
SHA1 f68685bd167e82652f53bf6a3a60104fc2f2a51b
SHA512 a8e3631959363de7918a451652fad8adf8d2eed03b4142801ce6b36d4356749bcab7c79936fd744b6f29d2245a0f78912551c8934c930d25a135d4e57ed3c94f
SSDEEP 192:5Rr5e3of0v71hp8PRpaTh92Hsb+WNnkyZlo42bkJTbasyUyVyIsnAUgE:5Rr5VwBh8XwQwNc42oJXarE
TLSH
T16852B56FA91469BB6CDBD22AFD227723D7F5102161E12E80E7FC8A1C05D76CD222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 de699ac6440e081af38a618fa596906fa05dbe84668dba225cc8f39a1abb6a03
MD5 ce4a69f9e89fb28e9fd67f3aa6c16d63
SHA1 460b53048b12ffa6978bf8f61c6f2c44e9ef751f
SHA512 441a3cd48bf63a1a4cffc351f361b8936c69232b5740319b6fd57bf15c4070877dcdb4bc2eac977277ec5d863aa1662db83672136f0c9037f7da849b65eb3a99
SSDEEP 192:5Rr5l3of0v71hpAPRp2Th92Hsb+WNnkyZlo42/kJTbasyUUVyIsnAUgE:5Rr5YwBhUXUQwNc42MJXa3E
TLSH
T13442A46FA914697B6CDAD22AFE223723D7F5102161E11E80E7FCCA1C15D76CC222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2b5e3ca76f82584e0f01271e5a433f07b17e95a3f87e3deaf259e3d1a024700a
MD5 4d0f5913cce5a7d1349f8341a920f797
SHA1 cb7f907f1c7e0f94e6276fc30ec70e6437109118
SHA512 9e3f2cdbb3ba67cd1edaf5731d5a68b570b6a8e4d809f349a35f2b487aaa9d0c349822370c66ad1175cb653096756a212fc326d68a95ee8f259c8b623382f33f
SSDEEP 192:5Rr5l3ofLv71hpAPRp2Th92Hsb+WNnkyZlo42SkJTbasyUFVyIsnAUge:5Rr5YzBhUXUQwNc42bJXaYe
TLSH
T1ED42B56FA914697B6CDBD22AFE227723D7F5102161E12E80E7FC8A1C15D76CC222711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 43052ab6c57f16a69f9a8adf17c1cef5df3da2a770fa822bb16537de28865b5c
MD5 c40f7af751492aa1ca83e04fc399ab86
SHA1 cd0b6456af04f7b8fa242072bea36d81c8898548
SHA512 618b05d54db550b5d5213b51e7aaf1fa33e81a3e83cc7ffb4d4ed9a6559a9545ab3c051f33c98ea1824798b0b356b2a95599d5c0f9eaadae9cc3fe45f9517a50
TLSH
T1AFB0121080456601C04202B0158268CCB2949F15960E170243E46966C8291718019150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58eae8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58eae8.TMP
Size 96B
SHA256 49a45a4e8ea2e08347e1ef15d91b324aef40fc16fb0d7b4f2022cf0e6b2ca0fe
MD5 4606e537a36d99f98e62ebed589b013e
SHA1 b3e7379d13db5446475d203fc44af701321b2d00
SHA512 96fd9964f1efea4ab27a838d66999027ef565d631c3015c5b5c74d36dd33746161995cbb6e810f43462a36d25dbf9fdaa4f1a1c30082fb8ffd0e32421cdfc74d
TLSH
T11AB02202C0022202C00223F0208388C830A2CF30C2030202C3E8AAA3CC2A3300A20020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 f65f187042bbc53c64cf94147a055f53f36f69608b72ca445e23781448cf0584
MD5 ce24cd5ce23fc6a3a2371b0c9384682f
SHA1 b4372b4597504a747c8429c71f5ecef8210a0e50
SHA512 73b4c5e328398d10b4f6728fdbcad1a2b905e69326c8c60a23da11df93962f20360580924b1d636587560c092459436dd3026bf3cc29a77ecba9f4dab43ed4e5
SSDEEP 3072:0Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:3m7Rkm1tYpBeh2BAo3
TLSH
T13AC3123B5D75A8375DB9BB1EB08E0B1F1EF14AA6C9209E52C8D85B0427EA7CC1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d0cf9ccae4539cccc88a04fd09286ac8a71a6610fcaaa105bc4de89f6bf8dc1b
MD5 6501549b0f827ffd4438e394401d49db
SHA1 f2c15d1a26f67a5c2ad29f6836149329d221d6c5
SHA512 6cf6f6fcb52f752cbfe6b75fbe419b32f3fe7cbb3c9b47c18a6e0828442bc50b98b331c12880408734fcd099180d69453f943a0e467cbc4e1f87510c0ca8dbf6
SSDEEP 3072:0Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:3m7Rkm1tYpBeh2BAo3
TLSH
T1CFC3123B5D75A8375DB9BB1EB08E0B1F1EF14AA7C920DE52C8D85B0427EA7CC1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 f6261c7751ea2c91007de5bf45a0f15139fdd73ae0fcb8608795b3d410a11601
MD5 570dfb3652d76b472a49caaeb23ddfda
SHA1 b7e36ffe57ee9f6a7e1d168e7de47d0e0c1f40da
SHA512 ed17784ede15f9be7c7bebd09ff55cc45e0efda41dcda07e476fba6e4c065654eaea80b9e6c4ae0f901de2500cd43324cc07a7e3a25c92a7e0d6f0fc4850e7ba
SSDEEP 3072:8Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Pm7Rkm1tYpBeh2BAo3
TLSH
T1E3C3123B5D75A8375DB9BB1EB08E0B1F1EF14AA7C920DE52C8D85B0427EA7CC1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 d0072f70d05f2510278c998cc97373767c8c851d8511ff00b89c7c61586f217b
MD5 aa1439a7e341ae11b584ca488295d892
SHA1 5286adf4bf80ce38e741f8ff725673824bf5acfe
SHA512 c19e51ce4a293de0383851d65c924ec0e8b9aca7f625236d6bda980283cdc1fd083b339982a73f509d6672c227ab9db3c26bb7ab9e903a025299f07800dd47c6
SSDEEP 3072:SGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:lm7Rkm1tYpBeh2BAo3
TLSH
T128C3123B5DB5E8375DB9BB1EB04E0B1F1DF14AA6C920DE92C8D45B0423EA7CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 2e1c55fb667fa7f5c27f090aaf761cea12d58cdd9c849bb53d26ea82ec64aef5
MD5 37d73cf1c40f4886ca05e8ec86d262c6
SHA1 7fd5e9cacb1a9b9de676664de43c0415bf1bf18e
SHA512 22e693b924b1b188141ecedffea781b6826ad964b974835d67fb7ec636fae652cb9ede35b978c8a7ca0b2a39a9f831e9d090951bce8df97b4d5192b1f2fb57d2
SSDEEP 3072:aGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:9m7Rkm1tYpBeh2BAo3
TLSH
T1D7C312275E75E9375D79AB0EB08E0B1F1EF14AA6C930DE92C8D85B0437EA7CC1A05934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 7cf668eb9e93b7d49f291dfb007a9cbfdebf6cef35c5335af9b61981180b5e00
MD5 c104a863c7d452585353e753f80b5248
SHA1 2d785b2ca3b0eebb57dbb953eb609cad3147fb17
SHA512 85d134ad1213dc1062032c8833a96aef1705056901fe78298934fa19a67e7ccdea30a5f0ff44c7754e3e912d07abb60a4a1a92fe1aa66602d6b7d0beb19f7f2f
SSDEEP 3072:LGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Sm7Rkm1tYpBeh2BAo3
TLSH
T17FC3123B5DB5E8375DB9BB1EB04E0B1F1DF14AA6C920DE92C8D45B0423EA7CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 39B
SHA256 5666e3314c816e6df322b6ebdc5e47234d1c698538985f7db279183fdf09a7af
MD5 a773044ef32b20f96586aca3a5f80b20
SHA1 8f836a9f918b23e5563374d576a5a6a89561116e
SHA512 16c11e0ca1812ddf5e80a716d3472346ef8b162ab67cf5b8d3f0c296d86c1f02c9f2a98f7f00b735854da6f38f582cbc6937556cfa6be99cdc4a9877c64d548a
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 67B
SHA256 d883376273fccb2d7c6ce0329c1c319557cdd50c87e49e81b7dd81d9bd424c8b
MD5 7947da9ddada092fc17e5ad99ee2f24c
SHA1 9cf2aa6c2bee5a79fb58ec6dd68e5460dff35577
SHA512 49fde1d99cc5734d4fd50019d6990435df310b894947616f85c2a3813347cd000970154bc6fc04ef0cc71cb05a72f96cdb0fe9f118a1f3b669c41f92857558ba
TLSH
T123A002452531267F411A2936A355E9A541A500DBA0A2628DB74C745F18A7C784201D7B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 2KB
SHA256 a21e124cc6b1979ad7aa461d9c1112cbcbc52ba7cd6cf09a47fba1190eccb133
MD5 e7c86e75252f964601e0437d464ffb6e
SHA1 ec9597cb441cd1b65869adcbe878cedef409b516
SHA512 f194e7cd358f9ffa9443e500c807f6db229c3d1209d0e2443648bfe912a9ab3068f1ba98e036bf76949f02652f03a08a4c28873385c1476d9b1c8080e10e0f3d
TLSH
T1D451696C79F41D7F620DFB5458E70B8A187840FA9548B84C95AD081CF4FF04937AEA89
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 3KB
SHA256 c2e172ca4e6cd5b17838a694fbfa21a12883bb8b443c0ca846e800b7138853c5
MD5 085ff3eea107dd6b7954a8381a355503
SHA1 3c1b2d7620f87fcb01ec47f72cada711236200ea
SHA512 de7978471edbc9f7cbd507fbb953ae1be8f4c68ac6150be2dcda760c0642b1157eee33bc69e84089765129b2b0618a566234014bdfec48e0fd4f0636c451eb8f
TLSH
T10751896C6DF40DBF624DFB5414E70B8A187441FA9448B88C91EC091CE5FF05937AFA8A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\165687726\settings.json
Size 75B
SHA256 d5705f6c1207bdf72642e2a68c97faae06739b8aa9a064e2439b7da434e0f2d7
MD5 2f4ded4fdd2296233c4dc7436641a544
SHA1 298fbf862b0cfab955bd8295373be4ea41e945c7
SHA512 c08f5e1f489891f7767a76d35ac9de51962ec4bc33379bb534c8f643600005922d8b693e3f30ce11455eb76eee1e8ef4a58426b5a42ac8170f0e025bf20d127e
TLSH
T190A00235A8E4F90BD38020047228746405F62F9FF2C224D05EDCC190039D97590D9B3C
MD5 SHA1 SHA512 TLSH

Submit Download

OTADataCache.json

Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\OTADataCache.json
Size 29B
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d8acee473d25435b3f5f2a128cdeec6952c68d669590daa64d46330ae84d060e
MD5 bee136873e89a970d5d328245a469941
SHA1 26d22f8036f5944973f75bc88d6c0b82c9ebbcbd
SHA512 393d170d28232ce38d068ac54f24559a7e28cb678780c84bfe51065b9ad21f883bda9f41a5602c636ba38baa6a955c45fddb1f01bba5669f669e11e8c0e4c377
TLSH
T1FAD022AA33060932C32430329081F0C42580811B108A81291D35AAAC4DE889308A84C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 bd9c6032e6bef2078f04d960a609fddd4bef1f17fc4e06b2df341e30f78f7eb7
MD5 ae158ebc1679107b2f1ea08faf18e992
SHA1 6cf8b91ab8b346dc04f9fb32b283b49bd6397d59
SHA512 494e35c6fa880954219b9bc4c7b63535ea5a6ff0f9451ebb8421d4a3740303aa3f405d11d9ef36e17a2cd3b243d2745d550acbc1acfa636c3c887639e0afe1b9
TLSH
T112D0C0FB37061533C32431329080F0C42680C01F10CF82391D35DABC4DE8C9308E84C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c005596452cdba1b377a16e467438ef3a42717cf31aa93ce190e02ac7ecf209b
MD5 9139bc8ab72540b0ed3171f2896fa27d
SHA1 aaf0e9c4c01f31f544bac3d3a0202e05ec321329
SHA512 477ade9987dcaf80b9ed7296efa849341cce92d090575b7c19c8a8c8dba21dce0bd3cb31c4a25d4ec8cfe6ef94d0b672d142af44f614abccf709e2a17e51d01a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2013019bf021149ef06147443baa3b477daae7f38c9c4e832901824ea216fb5e
MD5 a94a7763ddaa9a4c73bec8699ba38d0e
SHA1 c41acc55f60775472d6856b7d0d863bb6b048c09
SHA512 7fb31aa3973b63c10bf79be76fe873d992075f72f28f13b073a7762f98a4611fa0cc794863636f6af3fd8e071153f73df24ff1c477e45d8bdbd143177afa5881
TLSH
T1E0D0121737030134C4103073101271C80850C21F404D4010543A851E9E484500912483
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 493e8823d4769c5831b317f9a3fa6567c52b89a5c863e7108a4bedc7b6bd6c64
MD5 e4d82b999824173778bdd59f783bacee
SHA1 cb6df5e7d69522dd219cb023af199a25b1da9582
SHA512 2507854e2bbc81867a6a8b57a2ddcec98c6953623c07fc9cc8e1154a871e883db36e8b9d93b2fd1cc1342b219d6eba123c10b0b7484e4fce26c7f0a988308c47
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 63600a9e8e1cae34c957307066240f0bcda94065ea23699bac46f267246aab9e
MD5 7fbfc6be70529a59ee20bf5840a58d31
SHA1 58db8192813e6b6302536835ad341f68790fb3e6
SHA512 a1cee4be19db56fd955e4526070a071437eadce53eae4960083ccee8de5c8d74152eae73af33daf9061c295fc1d270ee7dc84ad75b7a10b2245b28287a745520
TLSH
T18241E788A9F0AC38CF57ED7D03A42C34A910185845CFEBC74B00E06CB00F9F3A912E68
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e1eb191b48af878c54500cdd89ce6a43b17760233fc22c52aa5345247d9f2aee
MD5 4187b7db786793c631a4c4992c040c75
SHA1 e8e6e538f56066fb350cce4046a2a0e4078192f7
SHA512 985e1af9f6746d6ae12cf5a85a2882c3edafd30c4c88bbe52168e35baac523477671b9ef6cacbe4150f2df6fc16ad0197655a7aff1ea1d42d00fdc216135006d
TLSH
T13741D88899F1AC78CF57ED3903A46C74A914195445CFEBC74B00E46D704F9F36612E59
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 21d50e4c54b84c2c98841b8de59174b6b1b2825a06139d7cf39f4fc32df36151
MD5 e79da50d9c6fe0ef6e0d8debb915941a
SHA1 ac6464823cb81f574ab1079a814c610426af63f7
SHA512 3eba06dac7cd9f850dbee872dc679ee20a566b5ec070ff9f972036fcc5fba308c82d181e953d6beb86e41489e0e9561740cc40a007485c980b5fd101bfbd4891
TLSH
T1E8419AF343F48A6D9A4653F42A19AD1BCE4D0530031C29B6D9D0BFA793B25A1F311B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 b9113fd57ac888f99e3013852f171b080b6bfc2fa06bb7215b23fe784c9a303f
MD5 6cb521d6b7d9fabf7a6788dd1b5f4cac
SHA1 397e82484323874fbde27c37ef688c9d70a9c4d0
SHA512 f38b4e511e6e24b45d236e872eb86e4c06f29f30f0e109c67a5bb01f498344f380de08d0cb25035cbaf0182a2876df044ee7ad039865a6484a08698d25d05a1a
TLSH
T1C0419CEBC2BEB41F142D5BBB0D44B80A66A6A53415636CF8CBD7896DF18B8F31713021
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 a95b65d89698c1c479e6e037c401a04a363e86f50bab40866cdb04d065340dc9
MD5 c2c75a0641fb6d7dd23d94fbfa851c13
SHA1 00a438e9ace1edbfef9d47733eaef85090d20af0
SHA512 b1718f97ad33b7fb5e70860130261dffdd9610454c288acf7809da05284c9179525108bd4cfebe6cf8aaad8b63d70bb41262e8ac5dda3e572206cc3f9bea4326
TLSH
T14A518DD7C6BEB45F142857BB0E44780966A6A63025636CF4CBD6897DF08B8F32717412
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 cf73cae03caa8589a30ca28a1f9fd5ee185853ce98db902047f86ec677f544ec
MD5 35407a56fd310307efc8eebbeb523dc5
SHA1 7032d414a9c9d48b00a586414601044b63505831
SHA512 197c654495fca650e20576b1dc8cef047aa105808264bfac41555fa7d48f4ce44849564f874bb43dcd5dd026e45eb8e9f5267125cf8af052dddbffec15c8ae74
TLSH
T118416BDBC2BEB41F14295BBB1D44BC0A66A6A53515626CF8CBD7893DF08A8F32713412
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 84804fdf94d830ca2e0f55d75ac51dc254b47c3f002c57034409decc02d9048a
MD5 06f69ff09ecea9d94a346e14c72db4f2
SHA1 946198d8415bf84e6babe4c51cd4d025eef26098
SHA512 a4b4a053bd902567c36b5da2ef23bf5a52aaa65a553036a4d0f9e6df92ab674787ee12cdba2274cc7ca051dc6ff4c358969ae448311d690322028100b31383d0
TLSH
T123518DDBD6BEB40F14385BFF1D44B80966A6A53511627CF4CBD7896DB08A8F31713422
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 de0ce670cdd9404c2c01deffe629cc72c594ea341c144d87ac95db46b5d78adf
MD5 60a8b8c8ec38c987c235db59864e8a01
SHA1 0ad7cca0f18bd3f5a05796f7dbbef081a30b25ff
SHA512 84c32f355de12d56b0bfca858f4f4387731fd6a5970068e6a01d0405f2688810d62c6ffb9a055e28360d2d45e4bf007975a0ab0f5afec0d1b38be6cb043d074e
TLSH
T1F3517BDBD6BEB40F18285BBF1D48B80966A6A53511626CF4CBD7896DB0868F31713422
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5c00f2.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5c00f2.TMP
Size 1KB
SHA256 c6251b3e4e84755d4a56ca3900b283d42c09f0c9cfd0da1d75ce2e7b38aba73c
MD5 8c7fe1f3efde7f3c1f281eb7ca6e3ac1
SHA1 b617e5b27a6032434e3ef423aa396f70cce254dc
SHA512 65bdb2a2a57b18cccc7755b2888145e3819fc66ae1f25b58b4a9f4d151dd4ed83a1187b39e7fb66ae6603dc9626dadbd02f71a92e2e853c23fca351490eff943
TLSH
T15C4196DBC2BEB45F142D5BBB0D44B80A66A6A53415627CF8CBD3896DF18A8F31712022
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e1d42f89-49c3-4ffe-963d-8c99d6f4058b.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\e1d42f89-49c3-4ffe-963d-8c99d6f4058b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 4ffa6881964bb9e452454c2c195d08f54f3004f02f486821a335fe7fd897dcfd
MD5 744262a1f6a0443ad266495e20eabb36
SHA1 94c1e47cdcc19dbf6101c78882fabb6fd9d960bc
SHA512 a6dbc08c55880514cd92922c46b1b69eb2e63f606aeae9cc4fad8985a9feac20c2402f87d8c76de79b3e99c28cda0daf809e438c27e537ca7e33a7501ac258a6
SSDEEP 192:stx0JdpJSfhZ8pal8/S+WiTkQwyku11oGiNvM8:styJlS8b/VzwS8
TLSH
T1ACE1A7875E6C59BB4CC7E219BA35FB17D2FA1022A6D04E88EBFC861C04D66DC6307947
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 e54ff63152e61eacdee7a7831ee0656df120326d1f0d07eb7c3bf597f8092c23
MD5 b30c13a077408d1db8145aa446452b68
SHA1 2e1d0dc3a458409b746bbf496bee4c0d60ab354a
SHA512 c72c36e380faf54bddd61952bf7c382d48a99bfe31c09197ecbd19fa3ede2a1d473fb4d533979e76bc1ce9cbd0c5e4d6398e2301d3f0e046e819c7a8635986d8
SSDEEP 192:stx0JASfzgZ8pal8/S+WiTqaqyku11oGiEDMC:styJASzb/VzqTC
TLSH
T106F1B8479D2C59BB5CC7E619BA35FB17D2F91022A6C00E88EBF88A1C04D76DC6307947
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 5KB
SHA256 41b361ef014e1ecd156d726cc671b3cf74dc0646157175d39b70cd7c2438942e
MD5 9e75a653ca2c97a1ae49ffe0100da91e
SHA1 4fddf292e50fd9d9a3f0a1309b4d4949e2fdffad
SHA512 2d2960b238c8ae3f3534f7a7b6b71b3987e8cf8bf345674b89596858f8922115dc3c24c215ac46a7caf745eafa22b69fb22964d3ce2dd3506e591c0697450961
SSDEEP 96:stz52sP6jDCb95SV7dZ8i0oEXklm/7qx+WVHMSm+uecadQjH+gqlKEB:stzp2KSHZ8pFN/S+Wi8diklK8
TLSH
T181C196075F2869B74CC7E21DBA36BB43D2FA102266D40D98EBFD861C08E56CC530B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 c7fb11bf6d9d4d0d597589a679289f17a8651df2ed6f9419718d05efadc49df6
MD5 b387ad9fc72f802acfff1c191701b16c
SHA1 b32022d97e92d675925ac9ec5a8e790597e69ee1
SHA512 63f8d5f49c759da8ddfbb5083fdebacd595ecb330c971e4b4e16b1f10b9c732c00cd02a1acd6dc3629c131678733257a741dcf1e27c9a465ac3955132e579979
SSDEEP 192:stx0Jdp2SfzgZ8pal8/S+WiTqaqyku11oGiEEKC:styJCSzb/VzqEC
TLSH
T10AF1A7479E2C99BB5CC7E619BA35FB17D2F91022A6C00E98EBF8861C04D66DC5307947
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 2b8fdbe327decc727325fb51637512f0f692d52423e35458d00525f0356ecbdd
MD5 8b98272a2b8a97a1d3bbc25dfd88a751
SHA1 e875ba36b15ca5bdf47113ad99d0b22a0a1aac67
SHA512 3d2d5f4aade62cd93da8fdc957b0190bdd1aec2da36ea28263246cd2b638ac6157a8dda4541d69e6f6427e6aefca73ecd957e2619c1677dfc5b20f588467d86f
SSDEEP 192:stx0Jdp2Sf9Z8pal8/S+WiT1hoyku11oGipvMC:styJCSQb/VvoGC
TLSH
T167F1A7875E6C5DB74CC7E619BA35FB16D2FA1022A6C10E88EBFC861C04E66DC6307947
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 55d440c8b9c16329be5e2174c1039fa5839c61696806d470021aef2f9686e673
MD5 7b339770cabdb4881d161f2197455ef2
SHA1 6481158a624912a0e816180e2aa5399f2ac8f63f
SHA512 8762eddb16c695ebe1a3a78b2a1e09e4276f14038301fe1175c9f66cc936ed97bb7722b3c2f80ecb4cae7c34771be39115a05eceef9cc2f0a2c943275a69287f
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 2KB
SHA256 d5f68d76d7ddd799ad1f9cc1b3dcc82a668f4e9e65578550af864ec3366ae162
MD5 aa1d8aa3c529168cc16381f7a6193f02
SHA1 8b66b4e94a7da405879db6470b4197e308fcd58d
SHA512 20debfc4b1ef85e58ab54ef71cac1794dc2b965421854898703600c8f90b8ea5deb6894f253a5927d14704cb754378293ad1e28c43601669c4c435bbbeb176b4
TLSH
T19351C5F3B8489AB389E38A54BD067F536E3951A1D6512F90D9ED0B0801DB38C3312C67
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 60b35900938d255606862125fdf0ec898d0daae6cd4f5c7fd661ca3c3e8d2d74
MD5 d562cdb0f5990e5091bcf361ded46d03
SHA1 b701e1e864f55cda1a4db699b2e063598623718c
SHA512 2d9d8ef8da9764cea6102755a62ff02511ec2f0e90fda09f538bb7b84993e84c10c89a491213be5fad58cd156a5c4d5bff6ce3ceba09facc3b853bed0df245a9
TLSH
T18F7196B7A5A4A9A74DE39A54B9863F077BA55173D5843FA8C9ED0F0C01DB3882312C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 4KB
SHA256 adfccf6d9f5928b8e3c737d0674e501288eb851eb2242a93654e27985f48c861
MD5 027f6a79b812ab7e83e1696942d6c1a3
SHA1 0cdc40808d6a81390a7290e51a21698878322bcb
SHA512 70576aa3a8e2f770b8930a262deb04bc989aec17d9dbb22d645ec0a88349473ec49c32cd555a366648de653f7cfdfc7d75f1cae8f7a2e97484c7fb795c7058a7
SSDEEP 96:zu+bNkCEuf1lgqteoWg58Frh/cInURLl8DotoiO24DcBOXu6NHZ/Z8Tilla:z/bNbZCOLWLoiDUDSwOXVEn
TLSH
T13791B576A5A4AAA34CE3DA44B9463F076BB45163D5843FE8CAED0F0C02DB39C2312C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 16KB
SHA256 c874dafff957e0c5e10155c1481f977c816bc20f82c7cad5b57b07b1c9460db3
MD5 06358024236fcaa393a20fe9be89d1b9
SHA1 1f3275b30df507a6bd5b679e9299b5e473d5d5a6
SHA512 4019f494f236393514cbe18bd4cbee380ddad470ed98b061cd2b3e84b239ca59163c608e012e23fba65f407597b37ba901cf11f5f5121c10787cdc143aaa0772
SSDEEP 384:z7+aQikB+z/xvxjg/qhEwNbxg6Sq/yZ69zh:m/UxvxjgC+Mb/yEFh
TLSH
T1E9729E2B556D6E6395F3A6447A59074FDBB988B2D0C16EB84EFD1F0806CB3D81312C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 16KB
SHA256 d0f0c16247bafdcfa4a4966b409419324c764081b6f83372dde6a9ba55f9ae7d
MD5 4d3f8ef7d03eaa795f7c9fb4cbc1ca80
SHA1 32625f862eda4074d368c1a548b481bcf3f3a33d
SHA512 b19b0e4ee4e433c590482586324e0e859b2fbb3eed424eaa17b1e81e22334dc0a780caddac41533a01add9e4db217d513f1d0ce946e47a959abbdab3eb430092
SSDEEP 384:zc+aQikB+z/xvxjg/qhEJNbaLASqGyZ69zh://UxvxjgC+/bGyEFh
TLSH
T1B5728E2B5469AE6394F3E54579191B8FEBB888B2D1C16EB84EFD1F0806CB3D81312C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 1KB
SHA256 b26bd051640cf53bccb137257fd796742d47e89dad8727c4592b12cf8eb0bbd1
MD5 6b477a479d0bd944d4575b4ee95fdba7
SHA1 a954ac417418f143ee3b5345d71f9636f4a20415
SHA512 542de06f6bc2996d5c175323c4781c9552b843a24ca450ed3cf3ffcb8ee71b6d684d56b52d4ad890d14b02a65dae1df7e096704335daaba5e4de6aa727943fa2
TLSH
T10D3165F7E0845BB39CD25655B642BF872E7515A2D2444F8895EE0B0812DB3CC7726C33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5ba526.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5ba526.TMP
Size 1KB
SHA256 1205571c5ef86ed3637cf75c09d9e1b8744f7fca7abe049fd8a70517a00a97f7
MD5 6971d382bdc09bd6f7e9ab842429de5d
SHA1 63b8972112678b4305165b2b1ca1c3e0bdd32114
SHA512 961fd9fc4ecfcc41baddbedfd854ba79a1357d81f41ece15b09d5928654f1b34768482f68f1bd53d0a8032750184dabaa943e143ea52f459b0948c100245cce6
TLSH
T19B2110B7D0846AB3A8D25965F602BFCB2E6445A2D2445F9CD5DE070822DB2CC6726C73
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 80c274146aac2f11c2fcc2eeda169160712c1f7fdf21b15f0def6f856814d18f
MD5 23b7df1ec4fb2cabc564df5558892232
SHA1 25b0dedd3bf0ae1d95b604497adfe8eb57d44a0a
SHA512 783eff103356ac4f3b3f4365f0f159933952107ad0e35770be442302e1e0df5a9bbf0db37290b23d91502920dd1bd89cba44a1ee365fa3f71388d7f951ff88ad
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 a9e13520d78d3415dd5621b009f1fe6bafa9abe47a12ab82cf045c2b61fde904
MD5 728e69fbad6b61f0b8afec93c62e5e6b
SHA1 61c0b7d6bfe404faebc4ce307437837f2ee92cab
SHA512 645237f02aff7abfbb10aaba8d23495502b9e5a2440ab9c87ebd387afe0d8a10d3982c07f86af50d73ffa1b591fbfdd968497baf6b2a1cc1b70fdaf9327ad36f
TLSH
T1F9B01201D0C51593DFD233F2060D0C70122094320000A31397E5000DD44FDD0C041100
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 d1aadcacd3417c80746afc70764f8050e35545c50e18b6094ffc5e1f6cd1b8f4
MD5 0474ed8d60065fab6d1bd4b27dbd8f98
SHA1 2d39c6debedb6fd8efc3d7acdcfa0a5bd72e4dda
SHA512 7bbadcd032a85c428d4e4a14e4f257802905c0b6d0de7165ecabb82876c9d8c831dd6cd2a1d5aac75d55da919be0451669ddbac1009e1a9171cc1d86ad97d367
TLSH
T1CBE05E1187F5584BDF5D53B24CE44CB5055D7929281C632F53E597BFE45F9D08801435
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 480B
SHA256 3b44e8efafdb90487300368eefc63d604346c7397b88276f6781ea5dc70ae6de
MD5 515deb0b7d4d5be1423f998d91749cea
SHA1 df18d5657c3268f9ad7e06c2b8c57071954efc08
SHA512 3c1b1c4e7e058bc1d0c544959f110d7e749497189bca5735c7933fd56648b8435354832ef22c0a0333c78ccc2ad023e4712d033c706ee084795c2ec2c84959b9
TLSH
T19AF068A08378008BDB2C93F34EE38D753898A2A4450C6B1F17884B7BE98B761990C572
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\ExtensionActivityEdge
Size 32KB
SHA256 aefb267ca50676ff14f1d504549d8a0a838339d3eae353c1366dd693a6d0ebc2
MD5 045d83499804e4725dbb720cd0a98b63
SHA1 b0f459d9e7ee2b6925fc1a09ea1ca099d928288f
SHA512 2e147102da4144eac91f9010da93dfdb2e648b7481e7f48d99438c745adde13fbb9495493158bd85848a474459648ee03f270bae8ccde6cf60058c430da00a7b
SSDEEP 24:TLcJhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/5eQQ:TAm+BE9ZW9v/3WOT/
TLSH
T130E23A2A5E3C7121CD66713A7C61A42658B910DA977336F23EE000796F8268BC474CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State
Size 1KB
SHA256 b5556b11dfd1d0976dbac21da40f150c72455f869b12121b7e3b11a5f0cfb991
MD5 ce246d5738c99ab68b504bc973bd8a4b
SHA1 7305ece4c3b5a062b55e0a4db2d7f2f5de0beffd
SHA512 c5ba040386135ad8f743a6c714848327d57ded5b0526a2db54f7f0c321d5cb635bb4ea09a278c92586bdf241ad016a2c31120ea316117791ece43afa02379bd8
TLSH
T1D22187F743B0896D9B1643F42E25AC17CE5C05300B1C69B6C5E0BF6793A2561E210B9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State
Size 961B
SHA256 7ce0e2d6493dac3b115aac66cbc9f54133e1df992a5672e5022eaa8ebd028360
MD5 1a6983f57aa18e7b675d7e150bd95cfc
SHA1 aa9ec5d17954529ec406f1e9d7ea872f9127bdf3
SHA512 47e2d924719abcffe07328c2f433902076f2f5473c944b488c81ac2d6aaec0e880ed52be59ba820867b0d231e2551f3a1c9d75a01d37923fae259c6e176ff319
TLSH
T1501157F793F5856D9A5603F02E25AC17CE5D05200B1C697AC5E0BF9B93E2161E210A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5d7ef7.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State~RFe5d7ef7.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 689B
SHA256 79a3d185ccf0a86d7b36004450c51d41caaf3d9030a7adec310653869777351e
MD5 5135593af6a3cbc76848af372834cd83
SHA1 e5ee12718668c556e4869d38f11e7ccd466b3c9b
SHA512 1a4a880089ae250ed313b2397dfaa05cd39f7639f3a2337151a08115be39037aed8a448a5c4985ee1b551c2d765a292d446e88732277ea47087fface131b5f8f
TLSH
T1940170E745BEA06A107C4AA75E457C011DBFA0340152A4F8DBA6825CE0945F34703893
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 769d885c542f03c50e11c3aa8c09decd1354e40ae01d3f5da1fa4db7a2920765
MD5 afb33a7154127b87b7686ff56336c381
SHA1 39b292eec8864d26249db2cf7fc3b7e5fd111854
SHA512 ab01fa676f3368b195033f374d9fdcfcad07833f106b9bd6e109739e2bbbb5f1efd623ae87b38ad44a57150ec729d39651da574927109878a1e56868649326f0
TLSH
T17D31A2D786FEB42A143806E71D44BC059AB7F5394191BCF4DF66842CF19A9F34712452
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5d354b.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity~RFe5d354b.TMP
Size 522B
SHA256 a6dd6a9cba3fa061a54a30f292f031687a2e5a098d43dd1e7691e8626b70d778
MD5 66adc202aca22e63466c048c3eb155a4
SHA1 13b0fe759598ba661b36c4c72a182c91b6de2ede
SHA512 f157e6c8a1c52d1315ea821ab94da3b09f047aea1d8afca3b0fb3424f6922937277df6757f346f9b08627215b162e05b372bdddf9cca190a097c0b0d5bbc05f5
TLSH
T1FDF059E785BFA42610788AAF2E047C001D7EA1340262A8FCDB9A866C91B54B353134A3
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 82696c3f3913239fd28ae49f7ed8f676828aa7e282f8e83fab3c90f9cbf04f22
MD5 39bdc2d6f9976dae3214f069fde2f257
SHA1 4651d564b6d534999a3e9fa315277474d66c1a7e
SHA512 9391bad2101aee487eb299c89cd6b3b86f0d746516cfe6b9b19da277f5a8754c1c9f3f6b297deaa8b0b77bf200765725aed4b4b82b700be443e4ea8d802d3f8e
SSDEEP 96:stDMo1Oab9IDffDC8i0vhEqkbKm/7qx+WVHMSm+uec+DJXMk8yrQj0+gCx5KMOB:stDzINf7C8panH/S+Wi8JXQyrxgx5KMC
TLSH
T150D1C9475F68ADB74CC7E6197A25BB13E2F61021A6D00E98EBFC870C05DA5DC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 7cb13fdfab214f7ba8e75aa82db2c0a2deaf5464260acd03ddedabc591e5e31f
MD5 ab2f3852af6d69b1df0e86911c68bca2
SHA1 1d9b2e9567f22b295b0b158b0ee3a04a24ce6627
SHA512 79aa0dcde36723afd4b9f2296a839136f9d0422ac1b6102917120a3672be869cff46915de37d993019e17db9cd4e51c426d60bdaf8acc86bcc8e0aad622bd949
SSDEEP 96:stDMC1Oab9IDff3dC8i0oEqkb4m/7qx+WVHMSm+uec+DXF1idQj0+gCx/KMEB:stDpINflC8pFnx/S+Wi8XFwdxgx/KM8
TLSH
T1D5D1B8075F6CEDB74CC7E619BA35BA12E2FA1461A6D10E98EBF8871C04D95CC230784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 44176a099f65cff4167624f5df48e1d4814a14b87d7528f997183383b44180ee
MD5 5d27a2d94a19c6ac2efffb7e8b2a1b0c
SHA1 aa986c87aa76743163f21b9089cee582fd04e4a5
SHA512 f3b90dc50a8af462a48e54c57b9017b8d58e1e86108c69c48a9308fd4f58a31a34da7145c2dfbfae4b06fef42bd04f2b9788c8df531003cb8bc45d1678bfdd67
SSDEEP 96:stDMC1Oab9IDffDC8i0vhEqkb4m/7qx+WVHMSm+uec+DXF1iyYQj0+gCxHKMOB:stDpINf7C8panx/S+Wi8XFwyYxgxHKMC
TLSH
T171D1B8475F689DF74CC7E619BA35BA12E2FA1461A6D00E98EBFC871C04D65DC130784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5d0736.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences~RFe5d0736.TMP
Size 5KB
SHA256 915a87a343049c3edf2122969b037120257a72b0ef2e20747bc391c7bea0897e
MD5 e4db4c9951eb1a49385be51d1e1b9e65
SHA1 c50f6fadc2e52bda4273c1ff7ff34317d1241e1e
SHA512 e620e9af490dbb8df4c8efe529fe936855dde22352ef3bd4f0c5a0f0d36760dc95709117dbce12ae092070354045c928f61714f438045f8894ba4cee6bbc59db
SSDEEP 96:stDMC1Oab9iDff3dC8i0oEqkb4m/7qx+WVHMSm+uec+DXF1idQj0+gCx5KMEB:stDpIDflC8pFnx/S+Wi8XFwdxgx5KM8
TLSH
T100C1C9075F6CE9B74CC7E619BA35BA12D3FA1461A6D10E98EBF8861C08D95CC230784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxStudioInstaller_0C6A7.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\RobloxStudioInstaller_0C6A7.log
Size 7KB
SHA256 ed7bcd04095e86c2c451ef9f26876844ec01b78c92bea101e98fa8f57e76cec3
MD5 45b1502b909f8afc448676d31e28faff
SHA1 b3539f1887e0db2b43539771beb6f148d10571d6
SHA512 9f1121cdec0b50d83b9d94c0d0a28cf2c45869d2031a5752572e935f9ac9389649a4ca5504aac1bf85077def67a46db48d669ca8f22f9b7b1c45fe9b496e97cd
SSDEEP 96:K7LWJN/mS/YOmwvWel83uwSjOhcsx2QSt14Q78/pl/NdPEjcTadh2:CLWJNe2pc2mEjIadc
TLSH
T1F6E1BB69C2B5003A320D12CFD7438C6ED7E77C49326AF27072DF104EB7962966AE5683
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
Size 223KB
SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
MD5 2ef00fa979161001a3a5cd5169a7de48
SHA1 0d3ee6044ef954db79d4db9984cad411dfd4c3c7
SHA512 f0b7f015d3e766b390a663ca5b1498175fa241259cad73f4b8d2b9646b56bc08a698fea7f5a28324b9a59af1622296ef79d77830a50bce14fd5f02f7f9228fdb
SSDEEP 6144:EqU9NgI6FdZL52dTOgwQh1hV1AP2A2FTR:knh6fZL5mOi1hXAP+9R
TLSH
T1E624AEAACF953C4A28E3F094C9AB037ED919C3629DDAB0B31D593845C78972D61FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8913724486d5e3c463c493b25346ca31

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
Size 64B
SHA256 c87c5360d6e05c41a43b16575adc7c17d293323e58c764e93322a8e31b725213
MD5 0a7e0cfa8d3a1d2407e179fa61d0db67
SHA1 6a5d4c54c0a4752860d7770cdb01a42c727386ee
SHA512 0c6391fa80a27348435fb6aaab4363a014a86304894cc52f3dc947e392aad43a237c9ea10debada2c9605c50cdb3d6e9eaa06e99804067ec6f2f2f8ac227847b
TLSH
T133A0023A7525B8A4D39501A26287CD1411095F95A465B272C84BE31424356AF9494641
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 102526.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 102526.crdownload
Size 9.7MB
SHA256 a33eeac3fde1d1f99de2df08d63faa818ffdfcf2ace6a37e11bec1fe59409c5f
MD5 ad0dfa05fcbf007b1e2e535139317ae1
SHA1 8bff45114123dad46374913eac070a7255ca57df
SHA512 98e470bec6520eff7ff701d3448dff3682c39a1a9f95211595cb6fd5fde63ba26aeb79ccd32fe7adc1ab3e27d551474e41d4e56c1e2d8f01d4cfe9715c7c234b
SSDEEP 196608:ivgkZi/+KxW/hvjyysmsxP66IM5e5QIfqZzcz9P:iv3KpysmsxC6d5e5QI8G
TLSH
T17FA6AF22B900C032E8D100B296BD5FFA997D9E340B7954D3A7D41DB95A705D33B3AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3876-1422-0x000001D56D8F0000-0x000001D56D8F2000-memory.dmp

Download

memory/3876-871-0x00007FF996F70000-0x00007FF996F71000-memory.dmp

Download

memory/3876-1420-0x000001D56D8E0000-0x000001D56D8E2000-memory.dmp

Download

memory/3876-1419-0x000001D56D890000-0x000001D56D891000-memory.dmp

Download

memory/3876-1431-0x000001D56D960000-0x000001D56D963000-memory.dmp

Download

memory/3876-1425-0x000001D56D890000-0x000001D56D896000-memory.dmp

Download

memory/3876-1424-0x000001D56D900000-0x000001D56D903000-memory.dmp

Download

memory/3876-1432-0x000001D56D920000-0x000001D56D925000-memory.dmp

Download

memory/3876-1429-0x000001D56D950000-0x000001D56D952000-memory.dmp

Download

memory/3876-1427-0x000001D56D930000-0x000001D56D932000-memory.dmp

Download

memory/3876-1421-0x000001D56D890000-0x000001D56D891000-memory.dmp

Download

memory/4176-2953-0x00000240A4FF0000-0x00000240A53F0000-memory.dmp

Download

memory/4176-2941-0x00000240A4FF0000-0x00000240A53F0000-memory.dmp

Download

memory/4176-2939-0x00000240A4FF0000-0x00000240A53F0000-memory.dmp

Download

memory/4176-725-0x00007FF6F1120000-0x00007FF6F2120000-memory.dmp

Download

memory/4176-723-0x00007FF967C60000-0x00007FF9681AC000-memory.dmp

Download

memory/4176-2558-0x0000024098540000-0x0000024098940000-memory.dmp

Download

memory/4176-2556-0x0000024098540000-0x0000024098940000-memory.dmp

Download

memory/4176-801-0x0000024098540000-0x0000024098940000-memory.dmp

Download

memory/4580-973-0x00007FF996F70000-0x00007FF996F71000-memory.dmp

Download

memory/4588-3350-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3351-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3339-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3349-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3348-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3347-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3346-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3345-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3341-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/4588-3340-0x0000026BAE290000-0x0000026BAE291000-memory.dmp

Download

memory/6008-894-0x00007FF997880000-0x00007FF997881000-memory.dmp

Download

memory/6008-893-0x00007FF997420000-0x00007FF997421000-memory.dmp

Download