hxxps://create[.]roblox[.]com/

Analysis

user interaction
yes
max time kernel
899s
max time network
902s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 17:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://create.roblox.com/
Sample260728-vv5bdadm21

Score

8^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
112	4500	chrome.exe

Executes dropped EXE 3 IoCs

pid	Process
748	RobloxStudioInstaller.exe
968	RobloxStudioBeta.exe
3064	RobloxCrashHandler.exe

Loads dropped DLL 28 IoCs

pid	Process
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
3064	RobloxCrashHandler.exe
3064	RobloxCrashHandler.exe
3064	RobloxCrashHandler.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioBeta.exe

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\D:	RobloxStudioBeta.exe
File opened (read-only)	\??\F:	RobloxStudioBeta.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
4040	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\InsertableObjects\Light\Large\AvatarSettings.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\ControlsPage\ControlsPage.test.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Navigation\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\scripts\CoreScripts\Modules\Settings\Pages\ShareGame\Components\Header.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\InlineLayout\MarkdownCore.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\textures\ui\Controls\key_single.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\textures\ui\Emotes\Small\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Lua\AssetManager\Dark\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\FoundationImages\FoundationImages\SpriteSheets\img_set_2x_18.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\MarkdownCore\ReactRoblox.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\WidgetIcons\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\textures\ui\LuaApp\icons\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\SocialLibraries\SocialLibraries\Components\AlertView\CheckIcon.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\HttpRequest.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\PerformanceTools\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\RibbonScale_Physical.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Ribbon\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends\RoduxFriends\Selectors\filterByKeys.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\api-ms-win-crt-multibyte-l1-1-0.dll	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Navigation\Dark\Standard\CloseWidget.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\util\CurveAnimationHierarchyUtils.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\scripts\CoreScripts\Modules\TopBar\Components\Presentation\GamepadMenu\QuickMenuControllerBar.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\WidgetIcons\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\textures\StudioSharedUI\pending.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Lua\TerrainEditor\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\Accordion\Accordion.code.md	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\assetQualityFolders\Measure_Vertex_Similarity\Measure_Vertex_Similarity.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Lua\AvatarSettings\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Lua\StartPage\Dark\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\DraggerTools\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\scripts\CoreScripts\Modules\Chrome\Integrations\Party\PartyMic.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\scripts\PlayerScripts\StarterPlayerScripts\PlayerModule.module\CameraModule\VRBaseCamera.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\textures\ui\Controls\DesignSystem\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\ReactReconciler\lock.toml	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\textures\ui\InspectMenu\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Cursors\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\GenerativeAI\Light\Standard\StopGray.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\scripts\CoreScripts\Modules\Chrome\ChromeShared\Flags\init.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\scripts\CoreScripts\Modules\TrustAndSafety\Actions\CloseBlockPlayerDialog.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\WidgetIcons\Dark\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\ServiceContractsProto\ServiceContractsProto\roblox\apppageplatform\shared\v1beta1\template_entry.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Clipboard\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\GenerativeAI\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\BuiltInPlugins\Optimized_Embedded_Signature\Toolbox.rbxm	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\textures\SelfView\SelfView_icon_indicator_on.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\PlatformContent\pc\textures\water\normal_23.dds	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\RibbonPrismaticConstraint.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Utility\Responsive\BreakpointConfig.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\SocialLibraries\SocialLibraries\Components\init.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\BuilderIcons\BuilderIcons\builderIconPlatformUtils\init.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\validationFolders\NoExtraTags\NoExtraTags.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Core\Layout\LayerCollector\LayerCollectorProvider.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\StudioFonts\SourceSansPro-Bold.ttf	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Alerts\Dark\Large\Question.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Components\ScriptProfiler\Actions\SetFrequency.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\content\studio_svg_textures\Shared\Ribbon\Dark\Large\RibbonImportQueue.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\MomentsCommon\MomentsCommon\Hooks\useAudioPlayback.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\validation\validateSurfaceAppearanceTransparency.lua	RobloxStudioInstaller.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RobloxStudioInstaller.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4500	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 13 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioInstaller.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioInstaller.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies Internet Explorer settings 1 TTPs 4 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	RobloxStudioInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth	RobloxStudioInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0"	RobloxStudioInstaller.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297328114080483"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 44 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-14d8b191232f4ddd\\RobloxStudioBeta.exe\" \"%1\""	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-14d8b191232f4ddd\\RobloxStudioBeta.exe\" %1"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\ = "URL: Roblox Protocol"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\ = "Roblox Place"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\ = "Open"	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place\ShellNew	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\ = "Roblox.Place"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place\ShellNew	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-14d8b191232f4ddd\\RobloxStudioBeta.exe,0"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{42767F04-305F-4813-8E68-43CAA7E6AC2A}	msedgewebview2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-14d8b191232f4ddd\\RobloxStudioBeta.exe\" %1"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\ = "Roblox.Place"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings	msedgewebview2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-14d8b191232f4ddd\\RobloxStudioBeta.exe"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-14d8b191232f4ddd\\RobloxStudioBeta.exe"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-14d8b191232f4ddd"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\URL Protocol	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\version = "version-14d8b191232f4ddd"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open	RobloxStudioInstaller.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
968	RobloxStudioBeta.exe

Suspicious behavior: EnumeratesProcesses 46 IoCs

pid	Process
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
748	RobloxStudioInstaller.exe
748	RobloxStudioInstaller.exe
1628	chrome.exe
1628	chrome.exe
748	RobloxStudioInstaller.exe
748	RobloxStudioInstaller.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
7024	msedgewebview2.exe
7024	msedgewebview2.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
968	RobloxStudioBeta.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
3200	msedgewebview2.exe
3200	msedgewebview2.exe
3200	msedgewebview2.exe
5756	msedgewebview2.exe
5756	msedgewebview2.exe
5756	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe
Token: SeShutdownPrivilege	1824	chrome.exe
Token: SeCreatePagefilePrivilege	1824	chrome.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe
1824	chrome.exe

Suspicious use of SetWindowsHookEx 29 IoCs

pid	Process
968	RobloxStudioBeta.exe
3824	OpenWith.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe
968	RobloxStudioBeta.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1824 wrote to memory of 4116	1824	chrome.exe	84
PID 1824 wrote to memory of 3368	1824	chrome.exe	85
PID 1824 wrote to memory of 3368	1824	chrome.exe	85
PID 1824 wrote to memory of 4500	1824	chrome.exe	86
PID 1824 wrote to memory of 3800	1824	chrome.exe	87
PID 1824 wrote to memory of 3800	1824	chrome.exe	87
PID 1824 wrote to memory of 2916	1824	chrome.exe	89
PID 1824 wrote to memory of 2916	1824	chrome.exe	89
PID 1824 wrote to memory of 4380	1824	chrome.exe	90
PID 1824 wrote to memory of 4380	1824	chrome.exe	90
PID 1824 wrote to memory of 3432	1824	chrome.exe	91
PID 1824 wrote to memory of 3432	1824	chrome.exe	91
PID 1824 wrote to memory of 816	1824	chrome.exe	100
PID 1824 wrote to memory of 2176	1824	chrome.exe	103
PID 1824 wrote to memory of 4824	1824	chrome.exe	104
PID 1824 wrote to memory of 1408	1824	chrome.exe	105
PID 1824 wrote to memory of 2788	1824	chrome.exe	107
PID 1824 wrote to memory of 2788	1824	chrome.exe	107
PID 1824 wrote to memory of 1372	1824	chrome.exe	108
PID 1824 wrote to memory of 748	1824	chrome.exe	109
PID 1824 wrote to memory of 1628	1824	chrome.exe	111
PID 748 wrote to memory of 968	748	RobloxStudioInstaller.exe	112
PID 968 wrote to memory of 3064	968	RobloxStudioBeta.exe	113
PID 968 wrote to memory of 3200	968	RobloxStudioBeta.exe	119
PID 3200 wrote to memory of 3888	3200	msedgewebview2.exe	120
PID 3200 wrote to memory of 3372	3200	msedgewebview2.exe	121
PID 3200 wrote to memory of 3372	3200	msedgewebview2.exe	121
PID 3200 wrote to memory of 3372	3200	msedgewebview2.exe	121
PID 3200 wrote to memory of 2388	3200	msedgewebview2.exe	122
PID 3200 wrote to memory of 2896	3200	msedgewebview2.exe	123
PID 3200 wrote to memory of 2896	3200	msedgewebview2.exe	123
PID 3200 wrote to memory of 5352	3200	msedgewebview2.exe	124
PID 3200 wrote to memory of 5352	3200	msedgewebview2.exe	124
PID 3200 wrote to memory of 5352	3200	msedgewebview2.exe	124
PID 3200 wrote to memory of 6032	3200	msedgewebview2.exe	128
PID 3200 wrote to memory of 6032	3200	msedgewebview2.exe	128
PID 3200 wrote to memory of 6032	3200	msedgewebview2.exe	128
PID 3200 wrote to memory of 5228	3200	msedgewebview2.exe	127
PID 3200 wrote to memory of 5228	3200	msedgewebview2.exe	127
PID 3200 wrote to memory of 5228	3200	msedgewebview2.exe	127
PID 1824 wrote to memory of 5204	1824	chrome.exe	130
PID 1824 wrote to memory of 5204	1824	chrome.exe	130
PID 3200 wrote to memory of 5496	3200	msedgewebview2.exe	131
PID 3200 wrote to memory of 5496	3200	msedgewebview2.exe	131
PID 3200 wrote to memory of 5548	3200	msedgewebview2.exe	132
PID 968 wrote to memory of 5756	968	RobloxStudioBeta.exe	133
PID 5756 wrote to memory of 5780	5756	msedgewebview2.exe	134
PID 5756 wrote to memory of 3784	5756	msedgewebview2.exe	135
PID 5756 wrote to memory of 3784	5756	msedgewebview2.exe	135
PID 5756 wrote to memory of 3784	5756	msedgewebview2.exe	135
PID 5756 wrote to memory of 3448	5756	msedgewebview2.exe	136
PID 5756 wrote to memory of 624	5756	msedgewebview2.exe	137
PID 5756 wrote to memory of 624	5756	msedgewebview2.exe	137
PID 5756 wrote to memory of 5720	5756	msedgewebview2.exe	138
PID 5756 wrote to memory of 5720	5756	msedgewebview2.exe	138
PID 5756 wrote to memory of 5720	5756	msedgewebview2.exe	138
PID 5756 wrote to memory of 6808	5756	msedgewebview2.exe	139
PID 5756 wrote to memory of 6808	5756	msedgewebview2.exe	139
PID 5756 wrote to memory of 6808	5756	msedgewebview2.exe	139
PID 5756 wrote to memory of 5996	5756	msedgewebview2.exe	142
PID 5756 wrote to memory of 5996	5756	msedgewebview2.exe	142
PID 5756 wrote to memory of 7024	5756	msedgewebview2.exe	143
PID 5756 wrote to memory of 5492	5756	msedgewebview2.exe	144
PID 5756 wrote to memory of 5492	5756	msedgewebview2.exe	144

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://create.roblox.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe9b19c728,0x7ffe9b19c734,0x7ffe9b19c740
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,17574979886422226761,10024131413154750636,262144 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1868 /prefetch:2
  2⤵
  PID:3368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,2386568880197818484,10885903475977975292,524288 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,7179066666474376245,3647971787277636647,524288 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,17576262915019573235,7742482817988253024,2097152 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,6490846460961163285,5029130369418925563,2097152 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4424,i,10286109488345637653,9002216235006536710,2097152 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:3432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5700,i,15555450393406600920,1479644762310013242,524288 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5780,i,5003185360656059647,8910142317671619196,524288 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4912 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5652,i,5196685251582752635,13490750734265783965,524288 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4988,i,9225678349699916106,14518611269692444863,524288 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:1408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4456,i,11270009236428209474,10453417849023504869,2097152 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5660,i,17563355113834482628,5575182530615182761,524288 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4884 /prefetch:8
  2⤵
  PID:1372
- C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
  "C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:748
- - C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\RobloxStudioBeta.exe
    "C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Enumerates connected drives
    - Enumerates system info in registry
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:968
  - - C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\RobloxCrashHandler.exe
      "C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 968 --attachment=attachment_0.731.0.7310942_20260728T172218Z_Studio_E3317_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.731.0.7310942_20260728T172218Z_Studio_E3317_last.log --attachment=attachment_log_0.731.0.7310942_20260728T172218Z_Studio_E3317_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.731.0.7310942_20260728T172218Z_Studio_E3317_csg3.log --attachment=attachment_log_0.731.0.7310942_20260728T172218Z_Studio_E3317_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.731.0.7310942_20260728T172218Z_Studio_E3317_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.731.0.7310942 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=790e533f655bedbf7e44e47f1021f14910e48cbf --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.731.0.7310942 --annotation=UniqueId=7835284093381565584 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.731.0.7310942 --annotation=host_arch=x86_64 --initial-client-data=0x440,0x444,0x448,0x41c,0x460,0x7ff6b4ce6c58,0x7ff6b4ce6c70,0x7ff6b4ce6c88
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3064
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=968.1944.7329901826199093232
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:3200
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ffe8242b078,0x7ffe8242b084,0x7ffe8242b090
        5⤵
        
        PID:3888
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1756,i,13301085704104822100,12606635006026479310,262144 --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:2
        5⤵
        
        PID:3372
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2068,i,13301085704104822100,12606635006026479310,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:3
        5⤵
        
        PID:2388
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2404,i,13301085704104822100,12606635006026479310,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:8
        5⤵
        
        PID:2896
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3700,i,13301085704104822100,12606635006026479310,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
        5⤵
        
        PID:5352
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3708,i,13301085704104822100,12606635006026479310,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:1
        5⤵
        
        PID:6032
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4336,i,13301085704104822100,12606635006026479310,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:1
        5⤵
        
        PID:5228
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5160,i,13301085704104822100,12606635006026479310,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
        5⤵
        
        PID:5496
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5168,i,13301085704104822100,12606635006026479310,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
        5⤵
        Modifies registry class
        
        PID:5548
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=968.1944.2570329977792405146
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:5756
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x184,0x188,0x18c,0x160,0x78,0x7ffe8242b078,0x7ffe8242b084,0x7ffe8242b090
        5⤵
        
        PID:5780
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1816,i,3293932665173491234,5335363693465343067,262144 --variations-seed-version --mojo-platform-channel-handle=1812 /prefetch:2
        5⤵
        
        PID:3784
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2068,i,3293932665173491234,5335363693465343067,262144 --variations-seed-version --mojo-platform-channel-handle=2072 /prefetch:3
        5⤵
        
        PID:3448
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2316,i,3293932665173491234,5335363693465343067,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:8
        5⤵
        
        PID:624
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3740,i,3293932665173491234,5335363693465343067,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:1
        5⤵
        
        PID:5720
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2216,i,3293932665173491234,5335363693465343067,262144 --variations-seed-version --mojo-platform-channel-handle=4048 /prefetch:1
        5⤵
        
        PID:6808
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5372,i,3293932665173491234,5335363693465343067,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
        5⤵
        
        PID:5996
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=3892,i,3293932665173491234,5335363693465343067,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:7024
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 731, 0, 7310942" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2096,i,3293932665173491234,5335363693465343067,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:1
        5⤵
        
        PID:5492
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4728,i,13405358524327969817,3780178295635432951,262144 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4612,i,1866680247091137862,18317053956895233154,524288 --field-trial-handle=1872,i,7810566835464863132,5606841849866147763,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:5204

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2312

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2804

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:4040

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3824

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4a4 0x2f8
1⤵
PID:3484

C:\Windows\system32\BackgroundTaskHost.exe
"C:\Windows\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider
1⤵
PID:6032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AppSettings.xml

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\AppSettings.xml
Size 144B
SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
MD5 431a6eb20932ec1c56682a1f60d231d3
SHA1 40bb32db040cabade103c21ba5b6f811dfb0773e
SHA512 0969b9484bb7c661d4e0452ff1c77396796333904b39f24c56d5a92ac4ed4ebde9b8981a985c6950b4af2852e8d9599e071a51ce4f9ef21ead778a2fdc76fcec
TLSH
T18AC09BA45351C4149795CF14977DF690E3B1797444504498D8A1785A0DC51D427D53A3
MD5 SHA1 SHA512 TLSH

Submit Download

qgif.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Plugins\Qt5\imageformats\qgif.dll
Size 42KB
SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
MD5 9600a70636894f6a934f2a7f14d6ae0a
SHA1 d0a4e0dc7e4c61bebbd91579bf15d260c1fc7230
SHA512 6a80ca6c6b8ba3fcb1be5de6ea39bf6a75a6206266112bf23a81a249684b567e50babf257d011d0272d28d3d345c501d0f3e576f397a22abdea8b94abb3412bf
SSDEEP 768:dVRwrbBk3Xj+7yFZxK7+WHUgnNx1+MhYWeEJPxUo:d3wrbej+G3U7+lgnNx4MhYWLPxr
TLSH
T1E9136B56AB7844D2E513C678D9AA4D2BE935FA305B6297CF432181780F323D23E3C66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qjpeg.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Plugins\Qt5\imageformats\qjpeg.dll
Size 447KB
SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
MD5 81b6df8cd8de9db1eeca252958ea9d1a
SHA1 e1ec20f7e3575d9595d38ca2ad8b5c521c7eccb4
SHA512 8cf35cc5b7a11aa7e7cdbc9dc626c5429b8f59079590092343b9b207839d34c46c1b9a2a7bbd4c5e136fae71396a698474c432428edcdc809825f003b6919231
SSDEEP 12288:/WbtMZ30x6oT93baQIYnMEMI3dZfsskUn5BLvUMCk//RFEciccjxRPCA4cTJF/eN:/WbtMZ3y1B
TLSH
T133A4A243F2605C87C7E54474EE6AC1A6E794B81CC7FB46F779C1ABD97A226F0B829100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindows.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Plugins\Qt5\platforms\qwindows.dll
Size 1.4MB
SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
MD5 e81f163cbeb67ec8414c2ab3b4119647
SHA1 065921e56683b78097e125da120420136258ec55
SHA512 6700efcdae09a40e1907f56ee4fe2308422ce53ef76a13c434d1cd57a77d934e0bd583c8d96ced0fd250fd0ba727be6d7258692a6bbe19053b88fb48d188b13d
SSDEEP 24576:BgRZTqnadX9G01nyfcdGxOsFciSKi3kmbe7WAiYdZs9UIrIqrtQQ:oTqnadXw0xyfcdN8JQbOWAE/
TLSH
T11F658D57A3A48298C26BC23DC65B8B17D7B1700503619BCF11A88E597F63BE3277EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindowsvistastyle.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Plugins\Qt5\styles\qwindowsvistastyle.dll
Size 144KB
SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
MD5 04a9a47fa806c912a22af17577566709
SHA1 2caca306233ef324d63ef3fd04937793ff2af912
SHA512 47c39a2e91f0444bec87055aa1592bea6b0fe5fa1996b4c1f3d38a1928381d8a536522e5f86cea3fb7c655920ccee66c468a1d02af152750a41fbe46c9aad032
SSDEEP 3072:AYfJgCoOdX7MNwr80krOTmUMVa/MFWxmqd0SQV8lWTxf:RBBXwL2Sa/MFWxmqd0SQVwWV
TLSH
T12BE34C13326602C6C463D2B8C55F0916F7B3B05853228BEF0667CEA92F533E27E79A55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Core.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Qt5Core.dll
Size 5.8MB
SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
MD5 f6c86aacc6126b0d2f442c6a88e57efe
SHA1 df1b891829c3005d045e3ba048292789d5e28fef
SHA512 8cb4d26c069074e2c5dd734e5d1cd085afd0742795024460d80b9b0b333dc01b5df7c5691c03ece34be20956daa63184eb8f028c5e1c27814124937ecb7c8ed5
SSDEEP 98304:kFO2h8E4EwNrZJsv6tWKFdu9CsViJQ8xqfSgw2:kFO2h8E4lNdJsv6tWKFdu9CsVOQ8xqfZ
TLSH
T10C569D8776AB0250D0B7C23CCAA7811BE672B8018B219BCF125CA7495EB77F1693F715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Gui.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Qt5Gui.dll
Size 6.5MB
SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
MD5 3bce6b45e07a747167349865b4bf4ac3
SHA1 d24d4b87ed035f897009cf0b5b711e6485533d89
SHA512 d7584ddd3c6cfc9bda1ddddd02b883aa974309770a478f138202f7540ae92b38cdc658149e4e8b4e76eb0280ab066e096558bd942367c20c018f0f716c09d1e4
SSDEEP 49152:jWM6LDUqcvRiHZHjTpTFpFEOPVQJqguaf5Q/J+5mkU7vo3qsJAGUD4topffcLnZN:wLDFv/+RmFaqBpfkCgnAiYCHecbp
TLSH
T18F662886725A6262C977E17D8B4F052EE1F3785283428BC748199B480F737EA1B7FE05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Network.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Qt5Network.dll
Size 1.0MB
SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
MD5 bb5ede48a003b21b63bb134435c4f5ff
SHA1 55d6cd8128d80c81a5fea49b9de4daa21d4a5ccc
SHA512 e5e62f3fbf1a9c82c13d0c192c1033d2c55d08ad3830ebbbe3b9252d0721651225ac39ab92d863ecd11bba62ac1c51f86422ffab9fcef6f5f20fdcf847a33afc
SSDEEP 24576:XKF0Nu0gZmVnhqMpH6Q7pX9U2BgrExZ8Wv:bNu04mVnf6cgrQf
TLSH
T10A355B67B36103A5D46AC1B8CA8B8502F67270018B669BDF5639DF693F737E1263E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Widgets.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Qt5Widgets.dll
Size 5.3MB
SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
MD5 5309de309fb00a4be24bb465f0053455
SHA1 a14ef29356dac72d882f663a426f16ab29bc3529
SHA512 0cebf0e1560f2ef8b140bfd4fba2b3d7a562923f1b45c84eff41dd02b5ce04a9402c937cb4708d4623ab02a8991bbe6a31acc3cbd17fe2079130313f33daa1e7
SSDEEP 49152:T8LcMQHZ/gD0bTG5/Zh4w0I6Lr86R21sQGxTkaeduxK6PBZrGBqfjoWjmqYjYhIb:qPQg6CHliIYKsonnYhIv7uP3S6x9W
TLSH
T122466B57B3A54184C16BD238CF8B8613D6B2700487628BDF256A8E592F737E22E7F705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Xml.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\Qt5Xml.dll
Size 215KB
SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
MD5 a24011ba1cba9e517da2d89d530329cd
SHA1 867f44a65128db05ec1c2842a52b2752ba22346e
SHA512 76d7115d7b5f57a609cae61e768b28cc873f30a4aea46a2b385e9c8be1e5bba7c73ce84731708fe12f28d691b06ec6dbb8579f5eb9eca92ecf83d94e97b98620
SSDEEP 3072:4rZx2zOZ+kzW8MWXJBPlGyGv+RQxm7uFkgs7pkV9p7RM7jJWTx/:4FxyOZtLMWXJBPlBbaxp6kV9p7CVWl
TLSH
T18C245B4777258596E427C238CE5B881BE673B85017628BEF81548B792F33BD2B87E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanBase.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\QtitanBase.dll
Size 1.1MB
SHA256 bdc67f4427af53bd34182c67f6f51ce5e8a7cc4adde9073d55d95bbc00877a8e
MD5 e1603a2112c73ea9e33fc5fa4b966f61
SHA1 c8e77bf61ad9c39e4c77623c90a1118fe623bbb6
SHA512 ffbb92ffbdfafb6973f61f70f22bd66a5346557cde91b2fad6a384dccf87381f93148472fb4d1a88e9b1ad9bbd91c8beb86414d5050c49ab9ed466d792531ac6
SSDEEP 24576:e3nRLlUv+otWr8wY6S8dtuTbwQTtbvsMd:eXXUvNdwVu/dhvsMd
TLSH
T10945AE4B33964352D16BC278C69B8114F07734159B4286EF9A2BFE291E333E5383F6A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanDocking.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\QtitanDocking.dll
Size 617KB
SHA256 cc2e970a2ae668fbfbbc57c5d0f9aad4af6e0bc74e8fe8b0083669667422e12e
MD5 7d1c88138139af7052c40d7720b5bb19
SHA1 586af679709da97f6d3087e8a68fa0d71f6033ef
SHA512 a8b5f79cf60653ed5884d562a403cf021e684af70ff9b536957e64179bccc4425de4ed98b8d03f12d16c1baaec8ebbc2455be3cfc3c2d000a1c6517abf0432ba
SSDEEP 6144:oOxoA1awXD+sLxt7MGeOjPgs2ChTcGwoBK1uSATaBnf64WIxt88+9s+WBVhglMSB:oSoESsLrMJObz2A41upW7WHsDe1
TLSH
T138D45B4B72A80291D067D138CA6BC52AE4B37841435286EF7716DA2D6F33FE13A3E751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanRibbon.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\QtitanRibbon.dll
Size 3.1MB
SHA256 4979427eb49aa4b27c3ec4c1f92173eac744f345134d1577181fd6972a07397b
MD5 283eb528fae1ca88853d507186ac434d
SHA1 2572647f37b207c4838359a015ae86a11df34fd6
SHA512 8cc15a9c071c39bf4ff10f290fafc5d551cdc2f98b6edbe001fe215bddb652c1a9741d93a09867a4f2534a0d37a3be1a61f2473b661317599ffdaca4d439b715
SSDEEP 49152:xrTyqHLVyjq4LbhndL1ZsY0LUGG1VGvYEnCWSLn+XY8lcc/RotRNC7C7C7C7C7CN:x3LUjbLnL1ZsY0LUGrjCWSL+I5
TLSH
T1B5E5DF8B77AA0298D2AEC17FD28B4155F5F7749A835396EB4826CD1A0F333E06C35B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxCrashHandler.exe

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\RobloxCrashHandler.exe
Size 11.7MB
SHA256 d33468ae387127cf23b8b37976c2c308d96cfc3fa823879ba50d63c8abbdaf7c
MD5 76db30627bee4d1302eca9f484cacb2c
SHA1 7702ff7df17b5ddaec271a7598fb912bdfc73ffb
SHA512 8249dd4d449b8cbd6b81b9415a705cd566bf5f0528e994791cb47583cec94b2d9013b6d347d405436df563b379144c8b79f9a0db2006c94975592053551a52e0
SSDEEP 196608:ZoG4Y5VJqDnzjpw7uQSj6o32ZIavEywthGtXtEl4tG8:ZHVU7OiQHo32ZIPy3t9ElD8
TLSH
T12AC68D6EB2B800E8D47BD17CC6469617E7B2741603709BDF1AA486F61F63AE41E7E340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\WebView2Loader.dll
Size 162KB
SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
MD5 e2f9d2ef3446e70b50de50f577c6939e
SHA1 48e7721704249cebd1267280459b7b36ce99e177
SHA512 f5d7790bb2eacc78405a91a65adc0f30a248542de22ed10cfe91bc87e4f953a93d738281c13480a070681e7169fca6ec49e20c5fb7b89d76f3a9bad912c6d87d
SSDEEP 3072:erQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Tv+EtJfy2aQutH:gMMTlTRTzWiThTNTFSzjiBM2h9P5oZNr
TLSH
T190F35B4772E5407BE16A8274C9A34A11E77774510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd-win-prof.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\dd-win-prof.dll
Size 3.8MB
SHA256 1e5998697cbad5d9800428bec8afd88285f7411fc05de9cb9453e776b01ee6f3
MD5 a0e645c21b4e8e8499f6e4af644dfe2b
SHA1 22c8205d8e5f40cb1688243df10ddf1c813a184b
SHA512 05a9f2dee061499527b615cb34614aff0eb150be3ed567614b9facb28cda328088b485a524e7402303c00c8b35da50cefac14b97b5d93d34f61b059cec3d4ced
SSDEEP 49152:LMbMlAt7HkrfnNhiM46GB8vGM535GN2j8dlZCEbIw0zUy+z/N0yooA9YIU6ieyV+:LXN0B8HoCzkxooA9n+
TLSH
T1D9066C02BF86996AC09DC874C34B4B638B2274CB0B35B6AF42D541253F6EBB15F6D358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfbxsdk.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\libfbxsdk.dll
Size 9.7MB
SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
MD5 51d82c0e8ad65126413ed39246b5cf46
SHA1 f73c0b2248ee11f8fde172e04c64b40452051521
SHA512 c60362c4a67bd11ee330d36ecb1a58d7619989072b48b652f9411884797852fca4805ea1aab77546b1d7fc3c158beb30dc6aef0f7dbfb99322affdc8dfec014f
SSDEEP 98304:4Zrqd/tYrwiI8gpR241UnQQjHNA256IJymNfJjWfELI1u0/QHnq:4ZrGewiI3pRf1UXNAUiF
TLSH
T103A67C8B227642E9D1BBD13DC9974903E6F2304117369EDB02964A6E1F237E0AD3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\msvcp140.dll
Size 540KB
SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
MD5 4e3fa9bd90ef020c14359639dc19312b
SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
TLSH
T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\msvcp140_1.dll
Size 34KB
SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
MD5 d433b3e8aec25afb1c65cccd97ddc7b1
SHA1 ffebb57d0bf8cdae0449302a691920cc22ed4a72
SHA512 b1d48de56a595ddd6fed36574f0d6f20fb21d047ef7a6e93a487d660bcb1090e45c6aed43a99bda9897c1ef524bd8032b33e35a48c796d3f467caad33f5dcff9
SSDEEP 384:FKzh5dQS8DzxhK4KWcS5gWIZ1gr4iSt+eMifX7R9zUkJCWEIHRN7/PFbR9z181q:FAQRDzxg4FMgU9nF9zUet/b9z/
TLSH
T13FF26DC5FA688443D866483082DAEE47BC3DB7D25F6092DB1392F25C0D937C5EA35A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\vcruntime140.dll
Size 120KB
SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
MD5 0d35c5e99871b4f02c490b9fd9dace34
SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
TLSH
T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-14d8b191232f4ddd\vcruntime140_1.dll
Size 46KB
SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
MD5 03b43160d21c08de07a79d0a1c5ee81d
SHA1 0a449093006af667432b83303614b53b62fc0d05
SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
TLSH
T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5756_2135203086\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5756_2135203086\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 0942436c36a6fccc35bad0d28a10b7d975e0103e79f740fcbe67dea42eaabffd
MD5 aeac4fcc5423094808a1400907f5fa2c
SHA1 f91a131dd61d0693beb3f98cd7002811602a6bba
SHA512 97e62c7c8e2bec833417a9de6cb82255b6626e36550784d31d78b135fd082c41c28c99aac9cd899d76ae895f514dd0cee4429dd1c165a5f8b88fdfcc65b28b0e
TLSH
T1EFE02BFAC9309D6B08FD07182469064BF655235B2B40456F3A3DD60D8FB9637058AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e9abf9d3cead691750a18cb619d8d4b5ceaebbb053d04582946fe1c2d818f5a8
MD5 3a2d966c0b244e5b49a21f0dade652e7
SHA1 10536064b5a39aaa68e26c3f73eb930123095b3e
SHA512 27e525d8e7582d3c2f593cbb78dd326230f9ee1cbf76f07adcf93fb4293e4102d313245bb00b618bb5e6e5bd10e861a1608dd11f9ff411572af1fceeccc146a1
TLSH
T13651219687DCA03BDFD9213B289A1E552615120115860B0F7600ED9E742F8FDF6AF730
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 532fc4e3baee53675502685fd4b78cd1a42a3149f233d14c4df5213ecc66e5f0
MD5 97dd882029eecbaea4c6e4058672da20
SHA1 0def2cc1aab0d65b10d0b6eeabdaf26c5a748a07
SHA512 8f7a801cca68fa44131e2d2431064981034d80f8ebc8baad9e0180370b3d8ef3d5ad6dd29aeeba5f3a01c21cc86da2c6186ca4546951ddb37d4bd1085b0b41ef
TLSH
T11B6198F743B4856D9A1196F4EA156E1FCE690520031C78B689E07E2793F39A2E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0ac60e5c40423bfc8bcd67b2422917cdfe0febb8b42acbb9ff2c8ecc9a82ba03
MD5 7b5934e28cff570939fc7dadd01c354e
SHA1 49b096c4272db5e00164e31fa06abea48f3561c6
SHA512 05a6ed41ec9da60c0549cba7bb795eaf581c93f548829c1326833660d597380e1371b587875e5599f18d2def19e3b84e5a1300fe2c362c9fa5a058e9084ea06a
TLSH
T11D4147B7C6D8CA6D890156E4A7152E2FCE690E24532C3C5788D8BF4F53E2971E20158F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5332cc2cb738167d333c9c909300beefc05d815682945d0407c6b8c5767a0e19
MD5 9b85110e9ae5b543f11df9f768f683ca
SHA1 7cacd72df2ff9f6d40886abf1bbbaf0d93d04290
SHA512 a5bcf90c2b57cf53ac809d11e77765de38f0fea83b0c7419883d162ba5ee61f79c917379bdaed3d4070aa65426cfe1671e5051e91ffd7e65e520b310e54adac7
TLSH
T1B3518AF753B0896D9A1196F4EA056E1FCE690530031C78B685E07E2793F39A2E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 9a48bbeb9b81bd7b32519290e48a6fbe12e3677271dbbc6e80141283642121f5
MD5 72ab6313c8f448bad7cb110929684c9d
SHA1 7aec4bcabec14769aefd95bf290843468f04d11f
SHA512 3c88ef9db565c680792e6380b9c4a7641c204b5ea8bdf3dcbb120eabcca81cfdec86c00d766cd6253ad463a6a935ca148ba208553f782b032f74429c57aaf6b6
TLSH
T1FB7187F743B4C96D9A0196F4EA156E1BCE690520031C78B689E07E2793F39A2E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 99c920d4b2b0826985bf71dcbc08723f2516a7ebd57419c7564b5ef8c30e9ca2
MD5 cc4d89fcc8ee0ab41de7970912824f54
SHA1 71bca525c5a60b81e78ecd71ebaad8edcfde28a8
SHA512 e6f834965b67ada9300967bd497d568096f9952fe896b681e5afd364234708d7ac7267eacf5afdac69720d7c70238a1c2c84dd5154d4ef0510e5d8cd1d158cd3
TLSH
T1307198F743B4896D9A1196F4EA056E1BCE690530031C78B689E07E2793F39A2E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 cc70d434999136333d585a098c6f713922095f5949d586cd3e57272f000988de
MD5 aeacfb67867f3632f60e04d9d3e04498
SHA1 bb9a995b9ff1213eb6f4d6ab7600223b142e177f
SHA512 3789f7e831a68595c9fb9821caf493d06a7c3a2f713393ff84f5e12fb725ab19b9022cec83e287a61c06cc12ebacefde27ff66b60025a91a4175b8c49fe8ef69
TLSH
T10851BDE796BFB51B60BD0DBF1F0478091E76A43651827CF4CBA6817CB0859F30B16422
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 536f417c99c2ec4e44dfa80bad0b01938046b19c3b915a139d9e9963a5baa525
MD5 becff8c15913ea7e34ddddab60263c9e
SHA1 d26afc74d494307ff48bf65c06d871c2d22fc888
SHA512 e3d3a09a5bd8392a71972cd91d93b021cd05944b876c8674e149b007ceb62c26351ad43d3f31fd22035a703dcc939739eca468698be6e5b975145623e546c670
SSDEEP 192:wRsSlUn2yFv72ympAPRp24o95Hsb+WNnEAZIxeEkor2vemJVyIsnAUgE:wRsSm1QUXk7wfWeNor2nvE
TLSH
T13342D72FAA20657B5CDBD229F9227757E7F5102625D42E80EAFC8A2C05EB5CC221701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 08c9b9a883dd5c1dca90b080d1a6d63c9c6e0a1da81c2c1ade898c363186bcb0
MD5 bbea769296f0522eaa3ae2cb9013d47d
SHA1 3768a4828c7c9464336b1ef1f50cc2a5117cd7e5
SHA512 68e19da809d27fd4476bf899a775229e73e14ed0870c296bedfdf62d67dfca5d24ef4085a5137c2c3ade646ab7f5890e07e1eb42670ba1b44032a32d82d17977
SSDEEP 192:wRsSlUn2yJv72ympAPRp24o95Hsb+WNnEAZ962pkor2vemIVyIsnAUge:wRsSmJQUXk7wfe2Oor2nse
TLSH
T18A42C72FAA24657B5CDBC229FD227757E7F5102625D42E80EAFC8A2C05EB5CC321741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b99d8f1f4768175d5d6a089c7d71bde21142de89ca2d9f170e0a780c29a9036b
MD5 085a0ed80f051b777590584bed7d7638
SHA1 499a028c1dd6a984b718618d64ea87445be056db
SHA512 541cd417b286747d371d670cd19c0c83b1b2604dfd7266a42531bda0b68bc3c0cd32747d283b07e658c69fe4799bbe0f3affdef5dd22bc50e8b424f3b6e6ecb4
SSDEEP 192:wRsueUn2y8v72ympbPRpD4o95Hsb+WNnEAZzZYKkor2vemNVyIsnAUgE:wRsujoQ9XR7wfvYjor2nbE
TLSH
T15152C72FA924697B5CDBD229F9227B57E7F5102625942E80EAFC8B2C05E75CC321701F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3a2bfaf12db5727b71758d19da8174df4853accd3cb460dd95a862c77972f952
MD5 9127154529313a0c3dc5bef9c6c68eab
SHA1 a76a1d9e3e0f21d240530ed25ffb5d33dcfc27c5
SHA512 b208e30744473136ab054f663c9b38ba10a05227f7e2781d7816030557a8e2ca7b0ca9bf8edb86159249d82497d004c8a6288f766a6f1b2a155fb56058719bad
SSDEEP 192:wRsSlUn2yRv72ympbPRpD4o95Hsb+WNnEAZIxeBkor2vemNVyIsnAUgE:wRsSmBQ9XR7wfWe2or2nbE
TLSH
T1FA52D82FAA24697B5CDBD229F9227B57E7F5103625901E80EAFC8A2C05E75CC231701F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 e86eec71cf3aa34a763457615f78d1de674634faaced112b11cfe9a050065a72
MD5 0e18cd85b228b3a820f77242b09c2e5d
SHA1 525f6e8bcd75f26fed37fc48fccdd0c01e92ffbe
SHA512 3ce077086ade3b55bdbdc5726841849f941cc1284e4799b69b8de9f1eba2b41d9b48651f7a01a7175538f261b16bd88f0f120a9875e291674bdd623b80a3ba81
SSDEEP 192:wRsulUn2y8v72ympbPRpD4o95Hsb+WNnEAZzZYKkor2vemNVyIsnAUgE:wRsumoQ9XR7wfvYjor2nbE
TLSH
T1DC52D82FA924697B5CDBD229F9227B57E7F5102625902E80EAFC8A2C05E75CC231701F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 93a969d5494520a313d59c847d3ee10e51ce49e2c8cea4f6ea38850cfab527d0
MD5 65eaa0a57fc2a07c6f5f8e9c22429ba6
SHA1 83b5d3c038efb456e4191e45a08c6c1cf8b7d43f
SHA512 2f69609ebf02ccda7dd197a901863ecdf075cd94dce3ddcaf8f69f28aa522eed4a257c71ee04de563d2d250a18b8f7b4dfd5e90247d3586bee22fe519ccbce35
SSDEEP 384:Q+jM77KxkXqKf/pUZNCgVLH2HfgslAG7pLuLcSjW3XODM3+ErU3oPHGqkkpLtE:QOM77KxkXqKf/pUZNCgVLH2HfgsSG7pu
TLSH
T136720A67684C9A370F94CACCDC16BF4FACB5025B65ED886492FA5C1503D5ACF110A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 076108065b451013bfb0e403e0c0c47435342bdfc307def1efd335b74b207f37
MD5 c67b32d0c43ef740a96f0bb96762c099
SHA1 fc1e5b0e9df7b65d7fa7361efb8ebafe138f011d
SHA512 9d408711b02e62cec5400b73240de1735f258efc0c030f6519fdd8dc8e13d38f42bb7fa9a19db6b52d6744abff767614f8a0a1fa5876eab6be7047bce988d76e
TLSH
T143B0222CC2032202C08203F0308282C83030CF20E2030222C2E00A3ACC222B2822A0A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 53cbc083987b3fd22a3025de5f5de624d5ef69c1a9894c44400ce951eb12ed8a
MD5 e7f75419d243ca25a2ca0ce45fe11767
SHA1 25d845c66d1d877dcb007d5e7b0c7ccbfaedb7b1
SHA512 e91d917f5595ad3cd5d4c2653134dbee39bcdac715d0bcda665a857f31a6f24a89dc75136577566794127b9597197d622b9aa8302ff188143fdbd61af0bde824
TLSH
T17DB01240800191D1C08202F0158A148D71186F11A61A170983E16932CC76571C015050
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 20e6b62a7a2d88bc0a25024cc73995c8b04a11af35b55a02d290cc043dd5e668
MD5 8f46bd9410f344ed71f8b300bf645aa9
SHA1 86c36072d964170cd08305825db74b8b7ad0426c
SHA512 5d5e47f3e1ffdb497ee0c05533d217a3479e6f22e78e7bf58daeeee8fec8ee3fb651a3481b339644cb58d25d581f78e0d49b62e9517506b5ed0072d8b725b05d
SSDEEP 1536:C0yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:Tqfd7NtZL8cHQRZEQ6Spsk
TLSH
T197C30237EB861E339DD2DB60B9130EDB63F645A9D034D305EA7D37AB6C83491A44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2045bab2aae717b702ed9e4288e60711d6d10c5ae7dcbec1019abe576040f1c9
MD5 a9a9741c18391c2c02b72f00fd2a615a
SHA1 0d776f0d27b24af9830ff88aaf9b622e9efe4e17
SHA512 e86e9ac1b5a094b3c9deef3367ed7c413ce76d7ddd4b074af782a07fd001bfb85984d9ce028e16fb4cc4aab3eae45df9133d55baa624f662c629574be1581d7d
SSDEEP 1536:aIxVyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:Xbqfd7NtZL8cHQRZEQ6Spsk
TLSH
T197C30237ABC61E339ED2CB70B9230EDB57B644A5D034D301AB7D27EB6883891654249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 cd0132d39798bad62c72b8623cf7f6f2115f111939f747a9f681ef876af676c6
MD5 03fb256bd9d31506a0f09ef851a01877
SHA1 3fb86e82285ad63f220643d0d8cc0e8da697e9ee
SHA512 b5372185d745ba45035cd3f922256e2c8b238dfe0b3f20b40eab29abe5e5770e34eb9a5a196c8127542b5adbced2fb981fcb61d3f4b926a7dab0d32fdc59ebdf
SSDEEP 1536:TGQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:nqfd7NtZL8cHQRZEQ6Spsk
TLSH
T19DC30237EBC21F339D92CB60B9530FD6A7B644A59034D301EA7D77AF6C83891684289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 cf659b5e9a7e3377ef121021965a86a59e44476cef287812049cfe06e7ddafaa
MD5 c5d1d029e9bf741d77ce23b871062115
SHA1 dcb85b7508f0bf71012832415cb5858c99de7bd2
SHA512 cbacdca96d7eba571e916efa55843682f18e34a7ac81cef4226f4365406a7bb6893edcfd1bf0f32ff7c17f2ec6b790e19ec158fe32f06809b5c83707b6c905c5
SSDEEP 1536:RIxVyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbz:Qbqfd7NtZL8cHQRZEQ6Spsk
TLSH
T178C30237ABC61E339ED2CB70B9230EDB97B645A5D034D301AB7D27EB6883891654249C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 4f8f0f00a94e2eb412e864797640cec6701bab86f2b4f25be7bfa5ce9094ed39
MD5 3fe8b9236162b89f85060063b326e175
SHA1 c15b5114cf809b1a1a21c7264483d77fee774759
SHA512 b94c1f057534f1fd9199b4e0757f5ddeae23a0827cfb100cf8a93babe12970429787087d99fc1dc70a9133015526b97eae05713d89a364f2098f3968706c6913
SSDEEP 1536:aQyD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:7qfd7NtZL8cHQRZEQ6Spsk
TLSH
T122C30237ABC61E339DD2DF60B9130EDB63F644A9D034D305EA7D67AB6C83491A44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 31721372b3365cbf9909c5cf4ff0666da97fc01bed1a3bab37cad55aa3411c61
MD5 d6b09b739c15c0298242efb0e6e566ab
SHA1 ee652633a156f9d7c352481136994bde0fdfabd2
SHA512 05479d6552b72ad5e1fb1c24862aceff3445d9e2247e7f04faf453ad46a77688fc504d7c300783ad3b9754592bf51e89f70e7c2e19f7d4313f0bbc5dbec0d217
SSDEEP 1536:a0yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbjf:bqfd7NtZL8cHQRZEQ6Spsk
TLSH
T1B8C30237ABC61E339DD2DF60B9130EDB53F644A9D034D305EA7D67AB6C83491A44289C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 39B
SHA256 5666e3314c816e6df322b6ebdc5e47234d1c698538985f7db279183fdf09a7af
MD5 a773044ef32b20f96586aca3a5f80b20
SHA1 8f836a9f918b23e5563374d576a5a6a89561116e
SHA512 16c11e0ca1812ddf5e80a716d3472346ef8b162ab67cf5b8d3f0c296d86c1f02c9f2a98f7f00b735854da6f38f582cbc6937556cfa6be99cdc4a9877c64d548a
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 67B
SHA256 d883376273fccb2d7c6ce0329c1c319557cdd50c87e49e81b7dd81d9bd424c8b
MD5 7947da9ddada092fc17e5ad99ee2f24c
SHA1 9cf2aa6c2bee5a79fb58ec6dd68e5460dff35577
SHA512 49fde1d99cc5734d4fd50019d6990435df310b894947616f85c2a3813347cd000970154bc6fc04ef0cc71cb05a72f96cdb0fe9f118a1f3b669c41f92857558ba
TLSH
T123A002452531267F411A2936A355E9A541A500DBA0A2628DB74C745F18A7C784201D7B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 503B
SHA256 3df40e652cd6312497b85c04b1ec3156eecb90f49cf60ba5f391880e8357ccfb
MD5 af9dfb8edf75bdb995eadce21d7dd7e3
SHA1 9758ebb6876da682507f3d3753b29aa4b0a28adf
SHA512 e316446bd4f11573889dd9a132ced08f2f5ea923f8ebdaa6b8c3c9e4eeec0e6bc068d6a48b0057ebe121e52e4a9e17f74ee28d30e154e90e97ff75749b192fcc
TLSH
T17AF0276C6AE01E3E920EEF28ACE76F94142021FA8108F56C05FC117C65F515D67D756A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 1KB
SHA256 2daa6c90e6f64c8bb9eaf9cc44fc5338c0b3c9971a25afcddde0769b635b0b0c
MD5 d5d74eab351d3f30ec5511b987cf35c9
SHA1 b0e118e9a46aa8f21b34a4014f290832fa4aa5fc
SHA512 ad4e99fa86ab3807efc800fdb4f50b2d33e1d731b13f00a5dbaa49c82de956321f24ae24e1c31ae35687ef624def47c62f953ec3b8aec693fb968a50fdfea9bd
TLSH
T1C2213B6CA9D41FBE520DFF6568E65BC9142411FF8984F88C14AC412C64FE04917FBA4E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 2KB
SHA256 a21e124cc6b1979ad7aa461d9c1112cbcbc52ba7cd6cf09a47fba1190eccb133
MD5 e7c86e75252f964601e0437d464ffb6e
SHA1 ec9597cb441cd1b65869adcbe878cedef409b516
SHA512 f194e7cd358f9ffa9443e500c807f6db229c3d1209d0e2443648bfe912a9ab3068f1ba98e036bf76949f02652f03a08a4c28873385c1476d9b1c8080e10e0f3d
TLSH
T1D451696C79F41D7F620DFB5458E70B8A187840FA9548B84C95AD081CF4FF04937AEA89
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 3KB
SHA256 c2e172ca4e6cd5b17838a694fbfa21a12883bb8b443c0ca846e800b7138853c5
MD5 085ff3eea107dd6b7954a8381a355503
SHA1 3c1b2d7620f87fcb01ec47f72cada711236200ea
SHA512 de7978471edbc9f7cbd507fbb953ae1be8f4c68ac6150be2dcda760c0642b1157eee33bc69e84089765129b2b0618a566234014bdfec48e0fd4f0636c451eb8f
TLSH
T10751896C6DF40DBF624DFB5414E70B8A187441FA9448B88C91EC091CE5FF05937AFA8A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 3KB
SHA256 ba101f7a91eefdd0207943d4ffee11091c2458181f30c22bda9fd3f4d8155b46
MD5 741893fc43368a504197acce6a2eb7f1
SHA1 01efa66f6f063a916ca7f39e824b2fc4b93b2d8e
SHA512 88470c6fa0b856482548759b79890bf830954889526598946bb20fe601e8eb7568cbca884a657e844d25b89efc2f312919b582e83d0ea1201db4f62d8dd7ae6e
TLSH
T16351896C69F40DBF624DFB5418E70B8A187441FA9448B88C91EC081CF4FF04937AFA8A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\165687726\settings.json
Size 75B
SHA256 d5705f6c1207bdf72642e2a68c97faae06739b8aa9a064e2439b7da434e0f2d7
MD5 2f4ded4fdd2296233c4dc7436641a544
SHA1 298fbf862b0cfab955bd8295373be4ea41e945c7
SHA512 c08f5e1f489891f7767a76d35ac9de51962ec4bc33379bb534c8f643600005922d8b693e3f30ce11455eb76eee1e8ef4a58426b5a42ac8170f0e025bf20d127e
TLSH
T190A00235A8E4F90BD38020047228746405F62F9FF2C224D05EDCC190039D97590D9B3C
MD5 SHA1 SHA512 TLSH

Submit Download

OTAData.json

Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json
Size 29B
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e
MD5 SHA1 SHA512

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c9287a1254ea338a94465877a448e3ad3b88cbeb9ecb1478ff277367b953cd90
MD5 381748c93bb6025fb479ae96c0e6f852
SHA1 c04a08c340edc92298e96a89d9e101a0a2cd596c
SHA512 6990569f5f8fccce95a7c3083f089149e0b150a47bbe1926634a46777a06ef87035ac602f7c3551013dfb45260722865d6f4a69ce0ffc3b6f9553b6b3f37f87f
TLSH
T195D0C0F633250931C331303380C1D5442240C30F308EC1189D31EBBC0DE48D308994D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 433a925c68229fde54f242e0f9e849506d8275ba5cac7274c0238b6e36481997
MD5 c30893e1cb77e9df02f5d92dca8c6f30
SHA1 10cf5b2793d6ca84b59f484ee2e1ab3424bf332e
SHA512 1e09d3791372ca830152486f991b5322faeae110aacf42ded57af5d3b842ca42091cedff17247f653914845da975966c2cd05267a5012cfa262e0c8be6fb856f
TLSH
T1A3D0C0F637251531C33131338080D5442340C20E308EC2189D31DBBC0DE48D308D94D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3ba4d8617ea92cb0f7931a2d73b1f133a329f08c34cbd27b21451bf274496099
MD5 6813a5377d1dc18960946d3debea0ab6
SHA1 9e71cfcdd5f968efe2c4c68645f2e759515a97a7
SHA512 322fef58ec7bcfd9979da3b1c1655f5ed5bf4edf5b9029268ad6ab06920e46f93d7d4caf449be28720e40f24365a59f4bab33e34111d8f9a763eb5c17c397933
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 5d2e4b3e2818e041b5aaefb4e1319fb3b35e4eb1a2a14bd8527d36278e438c93
MD5 a259175bd63fc360abe0ed9a978f1c26
SHA1 eed2e0e8d10ad6eaab78d1a6df31fbcfaf8e2270
SHA512 2c3cf4da0b228290a4930230d92acd8e2f9e94550e45143c22907707d6c53af84167616d0f76af729ea12f3b514c29cef8bc5411fc9c8706d137b3ed9a690762
TLSH
T195D0112A3B228238C02220330023AA0A0A02C30F800E8080EC388A2E2A882A00A038A2
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 e0d34583928b295ff00e1754aa1768aad52ffaa0576621099f590271226e02bb
MD5 47e397dc177b8756236f2d8d8cc9c06b
SHA1 90e4a88ebe7c2e8381e999e440860f2c0923f90c
SHA512 429e1c2c69c20b6f55ca404a58a6d7bd15cf94dc97c05766573117257c4d331e36206c0296fac299b2cf6224ea4f09f638f363b2667fde89c3467884b4a4dad8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 0a636bab28ba0661702913644f2f2fc7df65f8d07ea3ee12ade2e4aba6b80abc
MD5 08e779a2e1aad792984c9793ddc3a0d4
SHA1 f4633e075a8fac7e038c21ccee67e79acea4e2bf
SHA512 d6c81bca047a1a820f462b9caac93cb4fb64f4f0fc797d72ca3f17b851bcf2efcea998f79d04133142cbff1820ca6d8ee42e04c4d3bf1285621e7feca20fad98
TLSH
T11841DAE08BECAC30CF20E17F03B41C94BE141840481A5B8FF98F6162A59F9E4F9D2557
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

0155fab9-1ddc-4c2f-b926-11619c3c3e6e.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\0155fab9-1ddc-4c2f-b926-11619c3c3e6e.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 1cc6da59422f93aa947f2d4045c67c22c57001556bf8cf76a9341647c5fe6307
MD5 9ffbf29fd73eb677fdd25d09e13343c0
SHA1 fc853ce833090405bfd1579a53bceab4ffae8b23
SHA512 d7531cba8be8c1ec1060fdbdcdc962d70959d872812676a515f6b30d03778c008f070b13a2803f48a797758052a841d3316f2e4269a29d358be5650b34c89004
TLSH
T1AE519AF343B08A6D9A4653F42A19AD1BCF5D0430071C6976C5D0BFA793B25A1F311B9B
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 521bd37d347e6a44f778bd806b576e35e82fb233637a34d8bd5bc364287c78f8
MD5 28224d1de8d4559ce1435184d6961eb1
SHA1 39ccc3e66956a59d2888a47583e6e365d3a1c725
SHA512 7b1e6439d3c2f5be8239146d73e624159c9e48cd5f5b081d437a66f47eb422c4dfde18036f4a797664117ad0427e9ebeb10ef6fa57c528d6c2cb6439c99011d7
TLSH
T1C4416DDBD1BAF05B246C0A3F5A44BC057AB6A83741C368F4DF66812C70CE9F34756521
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 329bc31d2a3293024a19a0adef39e99fea55483484b29e08f93f2fd75ac7b3f7
MD5 a9146b53c1f4b635f44d09d6e2413080
SHA1 ec2eb7b522196011d26cbf728bec17f7251688ce
SHA512 31be5ae5232b750657928ba330e61c0399a0fde8ed54c7cfd0d00bafb515317d831ade100d82b3578422ff6f29518987743f939508380fd4dac9a652ec3e7272
TLSH
T10E518EDBD6BAB49B246C1A7B1E44BC052AB6B83710D3A8F5DF66812C70CD8F30756521
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 0ecc29dfcbf80188263d9332652ba3fa603add04853dcf040a0561aeb9cc4305
MD5 318a5d0f987779d524784dc28c3a1e7a
SHA1 5f8c40248046a2bd7d8729ef60be4b2071994312
SHA512 2b383e390737af24be35033a1b95e7a6597d3a4d34b7d01e73e2822d7599143a3aaade3973439b4522d6fb269675a9a428551252ea63e5bdcd5b57e35c62b4b9
TLSH
T1975179DBC5FAB49B246C0A7B1E44B8056AB6B837009368F9DF66802DB0CD8F31756522
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 d5067ce02f6e74591f65a6989c7d35e4125392e64bcdc81209818d2579eb89ba
MD5 5b7b082079597ce242495223f0857eb0
SHA1 befd65fff5298fd6c68d8ed2f462763badf2aa4c
SHA512 0ed4da7697eb8b5f93340a07334d98d5bc437e533ff3e92c73e703a2a06de3ecc6caa0fc1bfa3ea6e9a91a2d3804ef8ea5bb4aee5d9e10cc411593677101a9b4
TLSH
T120515CDBD6BEB49B246C0A7B1E44BC056AB6B83710D3A8F5DF66812CB0CD8F30756521
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5acae3.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5acae3.TMP
Size 1KB
SHA256 d8902e8f2a635ebc35a93f72a83205813fdc1c77e0c39b4c1b910eb738c0d6ef
MD5 90c40df03dcaaf56c58bbc3cb72f5b08
SHA1 7071d1477197651a4ecd1fce1f4c1d17de7729cb
SHA512 84385ae911a2114e73966deaf62a37fbc3f877ab5cd0a51ba175714be05cf71e3346014ec3297351977212563f171ff735e47645c3923e921fc1ba794f2ea6b3
TLSH
T1EF416CDBD1BAF1AB246C0A7F1A44B8057ABAA8374183A8F4DFA6812C70CD9F34756111
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 4ca55194d46eb35969a95b903126d3bfd853cfe3b5d1162e62d8178a0a0c1f7c
MD5 333f08cf211db79820cc16183c528064
SHA1 e2bfb0a9d28c097ff7cb529cdb59c76362cbb1a8
SHA512 b14116d0d298c227d531e84ba55db7bac35857286198898da2399d44b1a5fb1a56db03558863227ce770c6ea7792780e107c761f812bd39286d763c7773b1d5f
SSDEEP 192:st90JifkZ8palX/S+WiTMlqyEuKUoLhPqwMQ:stmJiz4/VAq/iQ
TLSH
T1A8F1A8479E2899B74CCBE619B935FA16E2F9111266C10E89EBF88B1C04D66DC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 d4b73164d07c64ac65113c3baa8058b87ac0b0fe6f162a57001ccc3afa2aab76
MD5 8edefc795da964c3ba1048f9fdca2783
SHA1 9a7ac4fe01a7674bebcd85a3ea0a137f7c273271
SHA512 5ba4ec9a9fc3cf7c1f7d8f37f0ddf02976cf8bdd33c85172f8dba344c3aeda3da9fbce4013d5e30ff92aec3035bdefe7205c0d834267ad813c97ccf81a2429df
SSDEEP 192:st9Qrf0Z8pasX/S+WiTwRwyEuKUoLh5mMC:sturD3/VAwFC
TLSH
T151E197075E68A9B74CC7E219BA35FA16E1F9112166D00EC9EBFD871C04D66DC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 c97bbef3dbf0c936490ca924a1919f6603eab6913ce4b37b1cfa37f030f40e3d
MD5 a343e34d03c596c357edd5c34f1323fd
SHA1 331a7e1249cbc2b545f5b54bc333de5ab9f3ae93
SHA512 80645b319d665bd22e139c31542a142edcdf694a187d0205105e738d41541d99e8b315cb71e84d5145ddc822e5d3e2a859650d8da9102df0ee24877fbbd00159
SSDEEP 192:st9QifkZ8pasX/S+WiTMlqyEuKUoLhPqXKQ:stuiz3/VAq/VQ
TLSH
T1CAF198479E689DB74CCBE619B925FA17E2F9111265C00E85EBFC8B1C04D66DC630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 302c9d89a9c9710cc4375b0e00df891be39a78cf9403b0da69ffbae9cfa5262f
MD5 fc9391f2e05ef6a24d5304a2876e2700
SHA1 a70684ca37a32c64e6102c14e22c13093f63257d
SHA512 06b6757c9d372a3b7ae7de16b5bfea67c3158dac132ce5eee8e2c403380277889da37ce3c2aeb23d42de415bc09deb2f288018d9b44a35068b916c1782fb2a1a
SSDEEP 192:st9QrfEZ8pasX/S+WiTfnoyEuKUoLhRmMO:sturz3/Vjo9O
TLSH
T143E196079E68A9B74CC7E219BA25FA17E1F9212166C50ED9EBFC871C04D66DC230790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5aa077.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe5aa077.TMP
Size 5KB
SHA256 a6e03e05a2c0fb1ff9f393fe16a29ccf06ed6e51b2d38d03500bdf97b7e587f8
MD5 db47a9d32517a2ff052b9536c3781d85
SHA1 aa0251168f3c6aa33360ba5a76dbd736e0c08907
SHA512 444c0d989fa0e6fad3b61273acc355d5dff211a886e57c6dc57e7ecc1a553cb332626a37adb1d06b1d486311f5040fe67aeb7cb419325b39a7251807928a7c30
SSDEEP 96:sto52saJkkb9tNVtdZ8i0oEIklm/7qx+WVHMSm+uecadQj4+g37XiKEB:stopyNRZ8pFa/S+Wi8dJBXiK8
TLSH
T187C1A7575F28A9774CC7E21DBA357B43D2FA202266D41D99EAFC861C08D55CC530B90F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 efbd39ee7d30b5ea900bde11327cd38ef5acbacb2a2bcb728c22737bec5a969f
MD5 e8db1ecc38a7ec50e8d573556217e00a
SHA1 569f7a995ec6999c24c9d182b0a677e2cb9ba972
SHA512 570280ea3097be131fb0f5577e2a12808bd759446e5ec8f6025b1ba14472fd0637886b2a3a56aac34dcb2bdc9438cc8e152d564746d95cdc24a6c3212d253dd7
SSDEEP 96:HlMditePlf/ROoKOpkF5d1Mditz7sMaTEv9V5h5pg5+eedsLElnNKkrAG2:HjUWG4t9l4ElnNKTG2
TLSH
T19CD1C5A74A6DC975BF448BEFDC293ECA997600CF88D54C0A93D2C54806C2FFC11DA499
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences~RFe5aa068.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences~RFe5aa068.TMP
Size 6KB
SHA256 77259bd93bedc2ae3137773b808ba3503f01fc7751645cd9a7aab9148056eb61
MD5 3db811da7fefb698233aa2fcd51bcc59
SHA1 310dab3a90847b5d7aece8d7c9f68e99d61bfb40
SHA512 5a034b9e99892a723b060fd2233e6e078bf7ab75aa9896b243e76d2d2d4edf3ddf0a4a37fbe4de921d694fc801149e1952d14f72af13764090e9842047907b76
SSDEEP 96:HlpinPlf/ROoKOpkF5d11iO7sMaTEv9V5h5pg5+eedsLElnNQ+m7rAR19:H+nWGl29l4ElnNxdR19
TLSH
T161D1C6A7496DC534AF448BEBDC293ECF9D6A00CF98D94C0A96D2C44C06C2AFD11DE895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 8515282c32dbe96a45ecd7b6eb085b02b86ad9d213bb083ce0ad236b509fdf57
MD5 caac0b87a69d6bf28c13d0a1f68f275c
SHA1 26d446d02d9e57888414906832b6b9426b9786f1
SHA512 f52032ea9b560399db764c91e7beab7977a554ad74d03e518a264254b7ac2c570e6ffa9850f7e3bbe64426ad8cfa7182208aff3bd589bdf356a0330f60799b00
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 1KB
SHA256 3be4f6a0e9dd6a0bd0c46f2a4635f97ca97614854ceb500026504a00a58548a0
MD5 5b30d8fbfe496b47e5330fddba9b09d1
SHA1 da583f44d388534f296ee58ab5a60d1153c48c6f
SHA512 e986501bade35709d404807b2b8e0cf761479247265106dc32435e8391dcf5069daf2a24a434b067310ac135366cad970352a2c817fd3b29a61329e7e4f77293
TLSH
T1BA3179B3E4985B725C91D64971427E5B3E30117AD2114F49B1EE4F1C01DF59C923AC39
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 2KB
SHA256 0f2152ca5a06618e7abbd3feaf6a9cfffb52e2a71bf9a25c3de375ae75a5ee03
MD5 70763f792afb772184f9d616de0fa230
SHA1 ff08a365eee47ec898c4cd309763bea8a162dc6b
SHA512 982b72fa26b5d60c6a8a8985324f285baf6d934a68ef5fd10089289982f86fb159b8bf853776e07de959ad7528af077d564d9fc480b790b21ad1a03cccf63bc0
TLSH
T1B451C773B858EBB748E2CA48B8453F176A311276DA622F51A6ED0F0C01DF15C2316C3E
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 e8411aff8ce2b047f3e7aa9ac791465875d13b9e32fd48b72d53ce5387d6a64e
MD5 d36a214062b2beddd81e8e27d709ba3f
SHA1 e0bdc97cd43d74510af13704b71b41ead0eb0cf6
SHA512 9f3e93a0546cbbf39b49bdcba1224e2ce9608462ffe43f66b2e2b6c1824637c56c8b4d8c38aa11524dc22af7dc0ea7a009583d6f5290ecdf1c570d320befdc24
TLSH
T1D871A677A868EA774DF2DA44B8852B1B77711237E5913F99DAED0F0C01DB2981312C1B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 4KB
SHA256 fada37aaa1d217aef02a876b03f7522384fb3e5cb3335c47ff46ea98b8bb9357
MD5 5156767922948abe89afdd88ff846362
SHA1 ddf0bef3331b7a4dfc321facc5c080be1cb1f468
SHA512 3dd851a648b4718453fdc1215b5944495d17605bf02b26d701f6f6e356ea5325d9f3debb8d64c4a8a54a3e3b8ff60596006d0afcef9f0bb6366a65ffefd05b92
SSDEEP 96:zu/bNkCEL2fHP7+O58Frh/cInURLl8DotoiOgDmB7XA6StZw9ZoTsl7a:zObNbJiNoiDUDX27XfQh
TLSH
T105918226A868AA674CF2DA45B8863B0777B05137D9953F99DAED0F0C01DB29C1316C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 16KB
SHA256 017e8cf980323cce3a2316a2b3d75f1f5c962fc1a593a77b352b9f8bd7edd3df
MD5 b42e9743bb4a22c2fe75cfd5c25d44b7
SHA1 6859d7439b44b926f7f39653c7637403b9f234ad
SHA512 52b9f3d4f139668c545d18a25347c35c7724f5eff917626f5176258e3f31e3c1b4559f5461978d216599abef0c4b0bcb7a7b8e2c2637595336014b217f1b35f4
SSDEEP 384:ze+aQikB+z/xvxjg/qhEwNbJPd7oEOco9z1:F/UxvxjgC+OF81coF1
TLSH
T12972AF2BA46D2E2398F3E504B94D174F9BF984B2D1C16EA84EE90F0D02DB3981306C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 19KB
SHA256 56c8bcf97f3b290742d913aadfca61747695465663b55a35e0a370526e6ef803
MD5 c88cb8f57c3271f1dad269733772cd0b
SHA1 e82e2c6c35bfb5d51a9e075d3115760f2cd670f4
SHA512 52cf27cd353a5521026fd9e24cf8d763b843858201eb793631e9950be288685fdeb3e84b80a9ca982fb3ddeb737a269dec4e8f5922cbfc0736db9a3b364e86b8
SSDEEP 384:zI+aQikB+z/xvxjg/qhEvNKJP6h2JB+ikY4ymOc4ukDzY9z2:7/UxvxjgC+Mg2OikY4yTcVF2
TLSH
T1C9926C3FA469AE239CF2E5847A5A1B8BA6F44573D1C56EEC89E81F0D06C73D91307C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 19KB
SHA256 ffd5c844cffe7c3481d454a94e60263d9f06f4bccaf5cb2ca3c59b68aab85686
MD5 b3d3d0ad7d75b37d515a8f1b7c40d91f
SHA1 4155527b06a065e9988994e48f8232315ba67448
SHA512 65627ce9cb80ef9d10639ca6b90bdd65593228f55fd1ec0ee5efe7cb32878e251cbaf301c81c9300b079d24f3aa437ad9242aea52afc471db94212e469f56f9a
SSDEEP 384:z++aQikB+z/xvxjg/qhE8NzJPgh2JB+ikY4ymOc4ukDzY9z2:N/UxvxjgC+cm2OikY4yTcVF2
TLSH
T139926C3EA469AE235CF2E5847A591B8BA6F44563D1C56EEC89E81F0D06C73DD1307C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 16KB
SHA256 ca24e43ffaf5acf870540de4b4ecc8fc0f94c9158686a168ee89c7895e859d81
MD5 d25396bac857ee89c48e90bb9de70788
SHA1 cb4493b82ad1c41a2109a08760947bfe12fe5bb6
SHA512 85e04e4ace197af7b93edb216fc0545167a48d5d66494df9e7dc02f02ec07d42e8313c5f6e46d076a19be6e5dbe9bbe3e7bf1c1b0d56ae646addd35842c25d9b
SSDEEP 384:z2+aQikB+z/xvxjg/qhE0NbJP67obOco9z1:N/UxvxjgC+KC8ScoF1
TLSH
T128729E2BA46D6E3398F3E504B95D174F9BF994B2D1C16EA84EE90F0D02CB3981306C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 19KB
SHA256 bbeac200d9cb25d155559c043f072a146e423746f4cab3f095b82fe6ff3bf0c9
MD5 ebf65ec13c4c6c4efa96ce332a964a49
SHA1 496f0b8c93b64656a86b63895d5cced13fe6f579
SHA512 37ebc0d72ff9521285d4d7da159b6cb5ee69a9e16434a9924437e7188f243fad03456c735bfd680c4094ecc8289f48bce2d0fc4dc956fba1daa6752f53bc5625
SSDEEP 384:zT+aQikB+z/xvxjg/qhE0NKJP6h2JB+iHY4ymOc4ukDzY9z2:m/UxvxjgC+9g2OiHY4yTcVF2
TLSH
T19E926C3EA469AE2358F2E6847A5A1B8BA6F44573D1C56EEC8DE81F0D06C73DD1307C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5a7485.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5a7485.TMP
Size 1KB
SHA256 558e5f713430025732919697a823c48b727a8d303a856f5272efbd68131309f4
MD5 fcc38a1487a7d59973a1956611ce8f53
SHA1 198e800df1484a734263251545e6d8727acc865a
SHA512 ef70c1d43b9eb4bd0a33e15034c649c19e1990f5038bcc43ae1364fcf0ed45ee75e6036e3f1085d46d9fff794d11379986ac9dad2a8af72020997172c7da8d94
TLSH
T1D2218773D49C6BB26C94C549B102BA4B3E70217AD2218F0DE1DD0B1902DF59C823BC3A
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\RevisitationBloomfilter
Size 392B
SHA256 d2bdf34cf98a4f43fe127eb7710f191acc2ad6dd4f1a3f5ddacd5e91bcbc6e53
MD5 7da4a37c035a6b88aa311df461b453f8
SHA1 55ea9f168859850f1d95e7aa1bb18e288fe4aa0d
SHA512 238ca1ff3484c690dacd04cb3389bc805f7289c05dd4276b97ef8a68e612ddeead28cf2f86a1278efcfa1585588ed3bd9df76e6c15e8a57a3606c8eeb8fbedd1
TLSH
T16CE00207D741C0EFC064033000832B342BE3C47003724347862015752C237057E106C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5e0e17.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\RevisitationBloomfilter~RFe5e0e17.TMP
Size 392B
SHA256 0943810430a93489607ae2935fc797d6aed1fceac89db413d241fe0e46aa1e38
MD5 df623a0a56c4c43881d8f39b22d952bc
SHA1 2ec23df50f658ccb5484a9ed621776f2e29dae1b
SHA512 5ddf5071ec33391ce88aa79f5c89bf29a2474dfc3bcb2bbe42c7c4f2e876130f5e9eac33c4f9bf0c5aaa2ad476438dd6eb1a689f7110947fa67d5b59fea5d36e
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_000001
Size 23KB
SHA256 6ba527e0632e612d6f10dbe93d8b2dc46eb866b0efb19b1acea6749f2b8c6923
MD5 d40cb9bf970e4cecb47a3644f2b38133
SHA1 f08aac072c9bb90d62ea028d2aacff1f1d8f3c40
SHA512 4b0599c860705893bef8662e72e566415a21008980ad788d855ab3b939db489a2982eeb64cd401617a98ef72a02b756d7be26726f3a5922308d625004b6cc57b
SSDEEP 384:paZC08VsYRBjKX9nxTukrKEekQKpPXu/m5gqoKSOS4bd/pyp33Bs65mg4NS32q1:wZC08SYrOX9nx6kGEPQKpXuagqHSMd/W
TLSH
T1BBB2F1FA8B8BF14C17970574A1B2A0512808877C7B2B218527E951A9FF873327338F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_000002
Size 42KB
SHA256 ab62f628a9493870755efcbbc505ab22dc971c7a4deb9d2c3842ecb197ea593a
MD5 472f3b23ceb446d440c2fec05bf59b57
SHA1 acabbdadd766beb43abce87f79edf5d589a7432d
SHA512 c845e9a9a109fbeeccbf448a3c6acf976a271d1c6ad7fcc71a033bb28ba93c7ae0000a73442e056e41d0d802431ac7f343422a77a6aec1d7c67da5897349e920
SSDEEP 768:phAgDZHMW1ta6UPIvYeWyu7G5GQT8nhORepKlx5n:p3ZsKtwdeWy+G5/ghmep65n
TLSH
T10113F1EC3B571C261EE2062840D68DF7FEB015E9E768319CE7F24940486070EA57DAF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_000003
Size 36KB
SHA256 a190588437f389043e25a57d2466f39283ce48c2fd979ee8a374e1c0c3e71a56
MD5 896e19e39278992a4a0dda3e04074fd6
SHA1 694d5f330331d8aa6f5b43d02f6f59d932bc8ca3
SHA512 5743c9f9c1822112457bea040f1fed435d6a72be0c7705ab78bee1de47df5aec9ba0e3a66aadbc07b470e67dc5b5166e8e0c294b3bcd1e04c8e4097b2395c64c
SSDEEP 768:VPLizyzQ5VzHjTz383EdPpNBzZyhXe1exICHCxF5QcMAykkP7SCx7:N9zipHPI0zyhRxICHCxM1AykNCh
TLSH
T1F5F20236EC24C430BAF776A731B09A79F1DCB6068341423FAA6E9B11CF09D56E0442B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_000004
Size 36KB
SHA256 85c8c2c46751a6d0be22e1d0e3e4eea585f69e3d64c89b5e5295fa5625b3383c
MD5 399401159b17b6c3bfa90e2c1b8f71b4
SHA1 3558f9c0e90ec5611a43c1ef7418c6129643aa8c
SHA512 fc065bd01a06eeb51afcba8c76c5b2a7f5dc3fb32bb9def6235a11abf2f87951c12548d173e453874e51dee88b7c4f0f824296607fed1e82030b931cad0e89e8
SSDEEP 768:Bu+NILW3HHU1P1Rg9qtuPsWT+Qtisab5EvktQ+P+XLMZDDeX+o:Bu0ILW3nU1tRg8tuPsWTvLk+ktLPWMNQ
TLSH
T153F2F17029D32AF2BA423152176842508FB96C733978F230F58CF3196B639DEB534619
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_000005
Size 985KB
SHA256 3237238f3573a5d7174e8416ec21df3d5e5afcfddaf7c885403138fa6b500a5c
MD5 70f56e07df575ef5fde797935a707126
SHA1 f9578bd57496893a976dab2f45a682cd5f14a9c6
SHA512 715592d5dd053e28d503e64c7c67cc67d2d9388a50fca787c5c5a8ad99f27cab52dd76e85c70e216d5047a2d337da33115fb724fa66f5b9995a3cdc973954b94
SSDEEP 24576:K2rtXKNpD816uEAwlTtIDA6Rhrqccca3yKEUQ:XrdY4161flp44ccTiKTQ
TLSH
T1BC2533CE1BA13BB568AB29EFE70666058564DDC3A10BEBF8715E84C514F05FA20F7C48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_000006
Size 24KB
SHA256 fe195d51d9f54c308b8dcd8f26a0875eccebbd66f99536d146a60d21000cde20
MD5 2145ac3e791e369625e9b6a83c09ce1c
SHA1 e16790d826d575a80a661498e48843ce38a37e73
SHA512 7f54ca306774232fc6a1ecd393265580f5d77321f5978257f3548829f01944ddbf914fa37aaf04b78bea4faaa699641828fd3c930c47745312a428cceb5927dc
SSDEEP 768:Ke6MnHRFTinU+RktlJh0l1s6cJ4hGPamp42:H/NjOMz+Dqf
TLSH
T10CB2F169E188EDD9ED1E31D872D22C4BFD85D00B99DC47CF1D349E93A321B854538887
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_000007
Size 17KB
SHA256 a6e02cc18e0039f1e0ca5dcf070af13cd2874719c3a9676dc26fbeded0827480
MD5 ac060f09265e39d6eb79c483bd3ef7f4
SHA1 848f6c853b19d358a7b7e29cc2e7378c7f800e22
SHA512 13a54ca12cece28c4da5f6f4d6647a64b79d1c7b0515199d93db1c6598cce5e0a49e9cf0702c1a29e972b6473703edac216a109731e126c6c4ed04f178ac0e77
SSDEEP 384:Jk5vQyP36YJfShYy742/NpdY1TNsC4QoxYAqtnH8Y68Hu:kvQyPKlhYy7NKRZ49YAqtHS8O
TLSH
T1EC82D0AC5CE5A57F3C849E16BF5ADD482980351AD0F5A035C825C3239CFAAF152C1EB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_000008
Size 34KB
SHA256 1a5f55a95ecd7bb13261d765c57883366ef18f480746523bd6d1263afa3133e5
MD5 0fee9bca7b95eb8f86336bfece97c6ff
SHA1 93108ae767bd45bfd017e50301558742dca142b9
SHA512 28a8cc8dafc2b2ae2bd108041d13979ff03363060f0a02c75bf3994e162b82f12f2938eb593932f74b0203fe6e57d43f28c7eb2051b4d497263a2f5b172837f6
SSDEEP 768:0Ppm11YyP3x4tnHfJ1CrqynVc343iwjwCG2m2p:0w11YY4F/3CrqynG343iw+2t
TLSH
T167F2F173765A16C8DE788131BE0A9C223C49E357A2C5D7E267892CC03AB1DC1A33C636
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_00000a
Size 34KB
SHA256 95795831365e2d809f5800ac14d191b74cbe34f5b1bc756d2badaffbaece963a
MD5 3e886f90af804326c5a578ef2262d4e0
SHA1 8f5a3ef4891e21301ec62e5d5b02471babae98cc
SHA512 fd8a15f4526f7bac6663c10ce7f4145d5d8b9025729045b2c085d748bed09b424b04dfe650506820d0ad9e77f01292c0999a88a34757a914c8cfac3f6f6a2da9
SSDEEP 768:KmfpEhdRkFiveOf5WhApnfB+TLbZrr7MFjLUFP8YyFPr8K9CyGfgEVfgnM:KmfpEhRmOf5bnZ+THtrwe8H+vfgE+M
TLSH
T154F2E1DAFD54F203EA292DC111BDA08C6DDD35B979EF95F52668CE0935A6D08C00AA06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Cache\Cache_Data\f_00000b
Size 34KB
SHA256 e1938cb55e6f1fabd08218dd1876cd4498341dd577cceca1e40e94b295c319a8
MD5 0e651db015baaa2adfb96ae73e5e3ae1
SHA1 2b7ce1d6f7ae7b4dcea6ff2d54aa67bb360073d1
SHA512 8cbcde1ebe508e8edfb8587642f073942b5a3daefc3a5bf25a7473c0a03c8791b55fafd4fe115a27b4fcbd6add652505f929d871d033c196657e84f320fd1616
SSDEEP 768:T3yCKXsDxMHmew4dI4cry7G08ehYuRQeIrapoctY:TJKX4xMHmew4c27R8dFeIra6p
TLSH
T1ADF2E1D6B5C91C29E593A7A140E41324A436BCB40CFE7C8EF750A6784F68E734191BA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 8b94571f8b66ed5939538169882945966b035431df798f6bee258a8a4899fe5d
MD5 2eec25a5a77538df7311c5a8ed8abc38
SHA1 b7ff998878072b3ad7a570a7f9319f25d8443b62
SHA512 82fc72cab7c60a63baca78314de89757e1e167a513fb01c12e4256dfc6db0cafedab14007856f54e344ffa5cf278b773b77d3995bc2df2073632fbdc621a621d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 f68b36dd6eadae4ff0c4c84d9e8862b1e4c0525f7dfe03e799151d6f05d7087a
MD5 08f5e57d5f9b91d1c51bcbc3ab6b127e
SHA1 3828f07cd0c2a96056afe95ee48ebd00693c98b7
SHA512 4db09155a63b50eb4685481d4baabd669dbdbc5e7ffae6a2154617f94ef3935fd5bfc0d831f4a9c9732340243a03f8481166663f4f05bd280ad1e8cb01621a19
TLSH
T13DF097E483DF0872CF1162335CD98FA1AC0F330049442F0F406BA534C68F0B2D108ACA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 5797315474d50c515b89c26ea97cf0a0a61f735c38006a4aad32a87e8ffbbe7f
MD5 43d71a2cac9ee5973dfb6d6e1e07cfda
SHA1 137d34864363eafa2ff462e338dbe82e4bd0ace4
SHA512 e70d71d73fba4b668c349248486e3283b7d528064b8f0edb122f7accece68eeeca39d7a05efa38de0ae4940470555e81e3fc50b1968c6af793d97fea420a0e94
TLSH
T108E01710C3CF0A7ADF19523649A65FC11D4F3B6198156F1F05ABD15DA08F0C0D980BC7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 b837a70958b3773b3005bf8483b4bb3121a143439568f4ff32f7ffd35ac73b5e
MD5 5c77883a6fe505470cecbe657cd53d67
SHA1 2ff298c42a331b4c33bf710f76f2a1837b4d7aa8
SHA512 1b357a88b3ca2403896446e662a2f95cde214f3c289f547ad60f7dec45f676dda1cc4250645983881f9fc3639e22c81535e3c32c98748ffb7845cf50921ae496
TLSH
T137F09E50C39F497AEB1153335CDA9BE16C4F375749502F0F096BD028A48B0A2DD01AC2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 475062aacaab9d3ad1311ff7812df525e80c10df781d5d03eac659401bbf0c2a
MD5 93d1dcbabf8e9fa510796658c73f0e12
SHA1 6d87b36a13bbf4312223a1fe13a92a32c66d9e01
SHA512 9fec373fc43fdf37e539c02872919595b7a2cbe676f5aa1bf313d72979d16f5aec149b608f0a7981f68fc7cd612185096f44e8e5e1a8ac4e2a0986c4a9490faa
TLSH
T158F0EDD4839F0876DF24A27398DA8B82AD5F670159906F1E0587E428E28A0A2D54CACE
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\ExtensionActivityEdge
Size 32KB
SHA256 aefb267ca50676ff14f1d504549d8a0a838339d3eae353c1366dd693a6d0ebc2
MD5 045d83499804e4725dbb720cd0a98b63
SHA1 b0f459d9e7ee2b6925fc1a09ea1ca099d928288f
SHA512 2e147102da4144eac91f9010da93dfdb2e648b7481e7f48d99438c745adde13fbb9495493158bd85848a474459648ee03f270bae8ccde6cf60058c430da00a7b
SSDEEP 24:TLcJhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/5eQQ:TAm+BE9ZW9v/3WOT/
TLSH
T130E23A2A5E3C7121CD66713A7C61A42658B910DA977336F23EE000796F8268BC474CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State
Size 1KB
SHA256 b016dcdf3a97334bc328b10f7cf405f994004bffac748218082f82850cbefa14
MD5 29d5585925331f41ef59e202880f9bc5
SHA1 2b26ebeb6c2c8f51698930e0bd054f40bd0dd60b
SHA512 ea484e6c1e1ef004c83eccba1bb0b20562425bf1f90a7f83175de2e0071b40a5f80d65006e0b65a9c936466fb95891488932d03e58c6e93338d23d1490258670
TLSH
T18B317AF743B0896DAB1643F41A259D17CE5D0530071C69B6C6E07F6793B25A1F210B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State
Size 1KB
SHA256 03aeb03fffb462a6d955fb9dbcde30ffff6f90585e2ad099e3a3a72f16b630f5
MD5 158738cfe03dfd19811fbcb81adbb071
SHA1 2fe9a7238687a116f9176f6c314cd5bb1b35093e
SHA512 56a281ed4bf53dfdadccd9d5a6be949bf0e6aa9cb077b7be0564cdb9dc93d84c088c521110df0755e4e084a6ae1c4487c1b521131b280da4b949b6eb1fbf9a7f
TLSH
T14F315AF703B0896DAB1643F46A259D1BCE5C0530071CA5B6C6D07F6793A35A1F311BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5c2b5d.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State~RFe5c2b5d.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 1a7341e5cd32c5d525d19d477f0540a8490418ab28804c7878992576dc9472f3
MD5 d8b569ff84e2d1a3c2a8c4f02e382939
SHA1 31ed856f1392f2ebb6e127e1f810e1ec7be2dcb5
SHA512 5b0ff59ad637f817490f9386d4f1aa2dbbea28a5b39b441c04a23f2b6d6b9a2f431c264a93621f02f5fef95f1e69b18c2ba97e99ced566f78a390f59aaa79668
TLSH
T1A3318FD7C6FFB56BA0BD093E1E047C091D76A4325143A8F0DB96413CB0A95F38B16851
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 f0c66100b691d71592997c6be8b0f0711af111872ca688f3e73d5a465c78a57e
MD5 c526ec123d0aa291ebb49f1f920ff3f0
SHA1 9ced190a4ab37aeafe34860b7ccc38f93a4f4afd
SHA512 85bc7cccdc581e2fdf348cfd9d359304e51b41630317c573971d0c77c1d09dc641e6de7bce7aadbd84ec4423f70662a37f96c2fa0d4b98509ba4b2f6bb7ec68c
TLSH
T141316DDB92FFF96B60F809BE1E047C452D76A4325142B8F1DF56816CB0AA9F34716823
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 58686ae1246afe5049276a42862facf9981ad2ac3f5f25af2853bd77899550d9
MD5 aa1e65667ba9cc64d81e980716531dd5
SHA1 077a09b2b6dbf3d867de61fa050084191cafbbd5
SHA512 a25b83aea4fdf76106c62410e4f9bf06c630ff9fd9cbab31dffb2c91e092350eab7c2fd1f3b95b962439707f5f6c51324a513c3014d5bbd01693850dc9e6c05c
TLSH
T12A317BDB92FFB96B60B80DBA1E047C052D76A4325152B8F1DF56812CB0AA9F34716823
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 ac868212d10488c7229cb65a252f26beb51bffdeb107190b8bbb6288c21e3a7e
MD5 0b0bd5b3e666be3b3b15b8f4c17afeb4
SHA1 bef3990049db39a8b1ebdaf8ea2143bd1a75ccf3
SHA512 291e05ec0a3f262ea6f3ec175f9a037a0e6c41468130e9ffeb54b1a4a8905f80c2d2d4d3132e591b0dcef68fc0928fcd892174f8121b109f1df9e106b2712d07
TLSH
T1E33130D792FFB45B50B8057E1E08BD052EB6E4360182B8F5DB5B812CB09A4F35B16527
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 dbcccb68947f5457045c8f1bf7478a20763301f1a9c47c43e86f418ea23d3de5
MD5 5882ac4cfc128b448c2dad08e8dba97e
SHA1 4c5c00dec84173e72912b9e33e638b8c19c97358
SHA512 91804a2b9e95bf709850b25a0a5a98e5df69145584c611679ccdf034160ead106b479e80cafdda4cd421a89d052fd8f198d7d9a935eaa4540053efeb7513551b
TLSH
T15F3160D792FFB46B50B8097E1E08FD052E76E4360182B8F5DB5B812CB09A4F35B16526
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 d455dd522ee8e32e45e0c91ec7ea846b1d42b179713e8258abd774889bb6a539
MD5 92cc45fe8e4f0ea8a1eb767947f80399
SHA1 da4b1e7f992bb3ff767b666642e27b9c384d5a6c
SHA512 b0c6a8f33b7648749ae5474da456ce0207f3ce913d1a7aa2ddaaace0e52740edc54aaf1445ce8ae546f1cb3bf1521dcf5d35cc1dcd8594792372b2fa43a53394
TLSH
T1EC31D0E786FFB41B5078096B1F44BC051EBAA876019274F4DF56C13CE09A9F34796452
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 713110c4d3cd2142fb8f629c3b209512b98b6211561d1156809bd11f33419607
MD5 02b7693587ef22c49d52efde47bb184d
SHA1 0b2c5149b17e0178388aba82f58e228dac797a95
SHA512 e14e0466cc6811231ae78aea1997cf4ca3c007574d097371707500189fc739e12c03c82fc72a81251f0eafbab77b9f5cda7da646b592ad02d93edde1a6240cba
TLSH
T197318DD7DAFEB46BA0B80D7E1E047C092D76B4374142A8F1DB56813CB0A98F38B16C52
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 ca9be88ba377fbc6bdae52caf59bdb382055649f696d32b34ee1ff6bb79dc234
MD5 71171c963b861d008ff85a860800c1d4
SHA1 8591bb7f67d1a78dd4e60dcb9d048b9d4053c4b3
SHA512 e0399e0981d1d7e61075e98c28f42400526abe4def34eff540bb21392572aa3efcde7f7955d7e85d261bfd24688fed6d924fbb46c91636403069403675e4e22d
TLSH
T1FD31B0E792FFB45B60B8056B1F44FC091E7AA4760182B4F4CF56812CE09A9F34757862
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 2a16040a53cf01880388cc84178902e231024eeaf6b96cedd9331cf555aa248a
MD5 62ebb2191767e6fc670dc9da0f859524
SHA1 070fdbc90e2691aa68683161f828c822cabb937b
SHA512 73f3a09ed8cfbb69b5d755fb9636faa37bf0f23fc6744ef9950107626fb1af0ccf5a416d44b47cbe1e95334ccfce4f076133d98fdff8de3a2384fa72d64f922f
TLSH
T14F2191E3E5FEB0BB507C0D7E1E44BD092DB7A436418294F1DBA6822CA0B48F74317862
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 2a8e5b297585ddd7ba6d7924f6007dd28b3cd2a1a9fd473bde94977a6b088e76
MD5 187d61c70435a158645f0df75407619e
SHA1 b0452838eeff00b20cfb3c8a1364b5605277bfdc
SHA512 b2ba5e9db032a642f180f537c43f5741a07fcb3fb457ddf9200b7229562c3ff9abad54d4f0210890bf4d2b85ddb2b120d054d856c841ed2f5290b7853904dc74
TLSH
T1E9318DD796FEB46BA0A80D7E1E047C092D76B4374142A8F5DB56803CB0E98F38B16862
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5b6b49.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity~RFe5b6b49.TMP
Size 1KB
SHA256 c7224219ab4fde326fe86cbc843f0ce1f3fecec66037ea608586ea346cd9b01a
MD5 f63d5ed74a3715ebfac3110e90226567
SHA1 644d6bfa91870bad90ce4f7a6e0ec7ddeb4a1037
SHA512 b0af0da66b16389643d65f80ba935fd4d140d40f15564bb7fae8a18c2ab4e5417f6755cd79bf69e0dd7a9ca948363bc3d3427e3d64d0c4afc9fbec34056c2da6
TLSH
T14D219EE3E5FEB5BB507C0D7E1E54BD092D77E4360182A4F1DBA6422CA0A84F74717862
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 72af1eb99f61532a415b65a85dca57472b781697ae5164d0a5cc9e8300e9b84e
MD5 0f1c51b4dab33d2219490de4bf73fcfd
SHA1 df09b5ea67c3a7583d87aaaab808b690805a26fe
SHA512 3becc2f97898378028bbb712cf06d59c33dbda24fb20af99ee654a651fd89164e08be8b5d51bd8293bb00283e74d07d61d7732be154dbd4896826603d4782f77
SSDEEP 96:stKMCH1b92ff4dC8i0oEjkbTm/7qx+WVHMSm+uec+DVI41iynQjS+gynjMMEB:stKpGf2C8pFwi/S+Wi8VI4wynbiMM8
TLSH
T1C9D1C9475F78A9B74CC7E6197A25BB16E1F6106196C50D99EBF8871C04DA6CC230B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 9109da909b87fbb72d0497b78c78989d37e4d6287fb0c48db815c24133beee17
MD5 a22f663dd7f4843e3e18f685188d6ecc
SHA1 ce2e0384c3c77456a9aaa13efc307b49fd77a727
SHA512 a20c6e6eeb7cacf8ed5df2697324059377d34e4c79dea29c1dd37841b263f49f91f3d0d5f460ec57cc749fd08efe779b29177ecf16c5249bf8ac88040fdd0a12
SSDEEP 96:stKMoH1b92ff4dC8i0vhEjkbrm/7qx+WVHMSm+uec+DVESMk8yPQjS+gqnjMMEB:stKzGf2C8paw6/S+Wi8VrQyPb+MM8
TLSH
T113D1B6475E28ADB74CC7E2197E25BB16E1F61022A6C50E99EBFC871C04DA6CC230790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 95b617b6b6a5719aed337cddb69c0656c32c21469fc1bcfeeeb296fc38ade5ee
MD5 ec7b4eef068412564cc76f2397e709c2
SHA1 d7c8cae44a3b920c23447cd5fd92577ce0e9add4
SHA512 b41463dc8eef16d8191e00cc055092debdd9ba564a08ca95e1e75854982b99f42170ac4c554cb4337e739998039ba97d9a895fcc3be35fc3a19ebabef7150bfe
SSDEEP 96:stKMrH1b92ffmC8i0vhEjkbrm/7qx+WVHMSm+uec+DVESMk8yPQjS+gYnWMMOB:stK0GfOC8paw6/S+Wi8VrQyPbBMMC
TLSH
T10CD1A6475E68ADB74CC7E619BE25BB16E1F6106296D40E98EBFC870C04DA6DC230790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 f9b74e042583fc765d60fe0ad5b3431ddea549640fa0dcc8e3a2157f639a4e83
MD5 29d35162c90f198b87c321c358ab5b62
SHA1 32be47b9db830bc9ead19a31026b5b91f84035a2
SHA512 c473b6fa0660b0583ae0c514f716aa4bf2b5e0434430ac5d0ab2732706893c102c6fb7a4f144dbed0ae6b3fe12c02935bd505223970112a20c11528c116e56d5
SSDEEP 96:stKMrH1b92ffqaC8i0vhEjkbrm/7qx+WVHMSm+uec+DDIkzDyPQjS+g63CYWQMOB:stK0GfxC8paw6/S+Wi8DIuyPbJQMC
TLSH
T139E1B8476E2899BB4CC7E61DBA25BB16E2F5102297D40E88EBFC870C05D66DC230790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 8d090d03f903f7fd5ee13d6083337b447e99d694b16fb75bba77a92169d14e2f
MD5 e722082cd7ff463416daa1930f461ac0
SHA1 0bcc99886f922e97c7ae56d34ceacbf1ca493fad
SHA512 577e6e143478cf263e2052b7c2158dc865760da73522b78130773905fc9b37d13fe9b8255e57b11de66ee681297fa61e0d42eda7ac12c26644def01f61bf1ef6
SSDEEP 96:stKMrH1b92ffqaC8i0vhEjkbkm/7qx+WVHMSm+uec+D8bC7ybQjS+gDCYWQMOB:stK0GfxC8pawt/S+Wi88b2ybbiQMC
TLSH
T1BEE1B8475E2899BB4CC7E61DB925BB16E2F51022A7D40E98EBFC870C09D66DC630780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5bb274.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences~RFe5bb274.TMP
Size 6KB
SHA256 d2f56fcd6445ba091c3072ed8c2700d8a13f543c3e74b8d71a679730c0af255a
MD5 e0f2000ec840f2d7907b06d217e82915
SHA1 ec6ceab34d5592552f9cea14f83bd4f04b4e68b4
SHA512 968c95c4548754bfbbf07a5094cdd177bdabfc2108bb43c102ce534ae2e9b31ba3f803593aab6c842124e4a67454182a2f6d62b7523bb244a5aebac5d67737c4
SSDEEP 96:stKMCH1b9Rff4dC8i0oEjkbTm/7qx+WVHMSm+uec+DVI41iynQjS+gnjMMEB:stKphf2C8pFwi/S+Wi8VI4wynblMM8
TLSH
T103D1CA475F78A9B74CC7E6197E26BB06E1F61161A6D10D99EBF8871C04DA6CC230B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxStudioInstaller_57631.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\RobloxStudioInstaller_57631.log
Size 7KB
SHA256 1a00c86dda9a9b6ca4fbf4d4419f00c7e3df08d1119cedbc5ad9b55b440de6e1
MD5 f04b28b4129de94de54c3457e8da8a0f
SHA1 8d7731981df7504f59657f50fc7aff772be74fc7
SHA512 138c0ce60bd7f1db3f129a6815070c31ed423749ffeb84ca0e25b672ea8aa786e214595e2cb871703c8c719e74ab40ad72a666cd5189eb9322b15f2d1583c7fe
SSDEEP 192:dLDEKxaJy2XNu25QXFXvcMObbJcDciCswy8rWnYZ:V4Kr25QXFXvcMOPGDc13y+eYZ
TLSH
T11BE1D29DDE960035220D1B4B97524C5FD7537C0860FBF3B076DF214EAB88289B9E6786
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
Size 223KB
SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
MD5 2ef00fa979161001a3a5cd5169a7de48
SHA1 0d3ee6044ef954db79d4db9984cad411dfd4c3c7
SHA512 f0b7f015d3e766b390a663ca5b1498175fa241259cad73f4b8d2b9646b56bc08a698fea7f5a28324b9a59af1622296ef79d77830a50bce14fd5f02f7f9228fdb
SSDEEP 6144:EqU9NgI6FdZL52dTOgwQh1hV1AP2A2FTR:knh6fZL5mOi1hXAP+9R
TLSH
T1E624AEAACF953C4A28E3F094C9AB037ED919C3629DDAB0B31D593845C78972D61FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8913724486d5e3c463c493b25346ca31

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
Size 64B
SHA256 220487c4fef056ea4258bfabd6c49ebcc4ab4a80e0033f09ad2321d6a1c9d5fb
MD5 17da5875608fc2a6af5bffed2c1c29ad
SHA1 618b0243ac7dd0ef95500a532c87f297420e67b2
SHA512 08c6222846655779c534eacd1977c5abd636021143a7bbe6c1e7a05afc5cc24b86364c9a75e665626f7e6219a67bbf6c4060bcea96a45acbff07355b35771a95
TLSH
T1FCA022A3E0B23802E0020F302080C80000082E2320880080E2AE8FAECA0A00088AC80B
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Unconfirmed 821753.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 821753.crdownload
Size 9.7MB
SHA256 0bf6d10b71b025e36af8802335cfcf5a693cb351731e6d3f56c9a9616ab2c4c9
MD5 6a2df518995fce2ec395becd750fbb69
SHA1 8f40283d158a0db74743755bc6e356f3de4f0e21
SHA512 ff1c2fe1cb904a2cb0846b3e314e4f2c02aa2945b389bd94f1ac7bb7d66058d222970c7334a577430c1f2498908f50d077560c0b032bfc12958179dc3c4b8e88
SSDEEP 196608:Lqrajgrui7KiWARoWQb5amsxUMRUFUnvTBDbBQ03O:Lm77KWiamsxbU2nvTBiQO
TLSH
T1D8A6BF22BA00C032E8D100B296BD5FFA997D5A341B3954D7A7D41DBD5A306D33B3AB1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/968-1331-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-784-0x0000020217390000-0x0000020217790000-memory.dmp

Download

memory/968-2793-0x000002022A530000-0x000002022A930000-memory.dmp

Download

memory/968-2791-0x000002022A530000-0x000002022A930000-memory.dmp

Download

memory/968-2972-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-3332-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-707-0x00007FF6A8230000-0x00007FF6A9230000-memory.dmp

Download

memory/968-2784-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-2304-0x0000020217390000-0x0000020217790000-memory.dmp

Download

memory/968-3667-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-708-0x00007FFE87690000-0x00007FFE87BDC000-memory.dmp

Download

memory/968-3017-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-2301-0x0000020217390000-0x0000020217790000-memory.dmp

Download

memory/968-3051-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-751-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-3567-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-2796-0x000002022A530000-0x000002022A930000-memory.dmp

Download

memory/968-3550-0x00000202560A0000-0x00000202564A0000-memory.dmp

Download

memory/968-3548-0x00000202560A0000-0x00000202564A0000-memory.dmp

Download

memory/968-3543-0x00000202560A0000-0x00000202564A0000-memory.dmp

Download

memory/968-3451-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-2077-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/968-2029-0x000002027D750000-0x000002027E112000-memory.dmp

Download

memory/2896-897-0x00007FFEA8B40000-0x00007FFEA8B41000-memory.dmp

Download

memory/2896-898-0x00007FFEA8970000-0x00007FFEA8971000-memory.dmp

Download

memory/3372-1339-0x000002CB55F20000-0x000002CB55F21000-memory.dmp

Download

memory/3372-1345-0x000002CB55F20000-0x000002CB55F26000-memory.dmp

Download

memory/3372-1352-0x000002CB55F70000-0x000002CB55F75000-memory.dmp

Download

memory/3372-1347-0x000002CB55F80000-0x000002CB55F82000-memory.dmp

Download

memory/3372-1349-0x000002CB55FA0000-0x000002CB55FA2000-memory.dmp

Download

memory/3372-1342-0x000002CB55F40000-0x000002CB55F42000-memory.dmp

Download

memory/3372-1340-0x000002CB55F30000-0x000002CB55F32000-memory.dmp

Download

memory/3372-854-0x00007FFEA9000000-0x00007FFEA9001000-memory.dmp

Download

memory/3372-1351-0x000002CB55FB0000-0x000002CB55FB3000-memory.dmp

Download

memory/3372-1341-0x000002CB55F20000-0x000002CB55F21000-memory.dmp

Download

memory/3372-1344-0x000002CB55F50000-0x000002CB55F53000-memory.dmp

Download

memory/5352-957-0x00007FFEA9000000-0x00007FFEA9001000-memory.dmp

Download

memory/7024-3360-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3366-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3367-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3368-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3369-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3370-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3365-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3364-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3359-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download

memory/7024-3358-0x000001D61EF10000-0x000001D61EF11000-memory.dmp

Download