hxxps://create[.]roblox[.]com/

Analysis

user interaction
yes
max time kernel
754s
max time network
752s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 04:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://create.roblox.com/
Sample260729-eppqqsgl4v

Score

8^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
98	4400	chrome.exe

Executes dropped EXE 7 IoCs

pid	Process
1204	RobloxStudioInstaller.exe
1840	RobloxStudioBeta.exe
100	RobloxCrashHandler.exe
5792	RobloxStudioBeta.exe
3524	RobloxCrashHandler.exe
6004	RobloxStudioBeta.exe
5432	RobloxCrashHandler.exe

Loads dropped DLL 64 IoCs

pid	Process
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
100	RobloxCrashHandler.exe
100	RobloxCrashHandler.exe
100	RobloxCrashHandler.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
3524	RobloxCrashHandler.exe
3524	RobloxCrashHandler.exe
3524	RobloxCrashHandler.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 4 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioBeta.exe

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Enumerates connected drives 3 TTPs 6 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	RobloxStudioBeta.exe
File opened (read-only)	\??\D:	RobloxStudioBeta.exe
File opened (read-only)	\??\F:	RobloxStudioBeta.exe
File opened (read-only)	\??\D:	RobloxStudioBeta.exe
File opened (read-only)	\??\F:	RobloxStudioBeta.exe
File opened (read-only)	\??\D:	RobloxStudioBeta.exe

Network Service Discovery 1 TTPs 3 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
3544	GameBarPresenceWriter.exe
4548	GameBarPresenceWriter.exe
176	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\validation\rules\KnownFragmentNamesRule.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\textures\ui\Controls\DesignSystem\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\textures\ui\LuaApp\dropdown\gr-tip-up.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\RoduxAliases\RoduxAliases\init.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\RoduxShareLinks\RoduxShareLinks\Enums\LinkType.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\validationFolders\BodyPartCageDistanceValid\BodyPartCageDistanceValid.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\Settings\Radial\BottomRightSelected.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\VoiceChat\Muted.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\VR\edgeBlur.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Core\Utility\bindingValidator.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\AnimationEditor\image_keyframe_constant_selected.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\StudioUIEditor\icon_rotate8.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\StudioSharedUI\alert_error_withbg.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\InternalInput\useInputVariants.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\Moments\Reactions\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\TerrainEditor\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\getFFlagUGCValidateAnimPartsRotationOnly.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\Explorer\Light\Standard\checkBox_checked.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Util\getClientReplicator.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\InspectAndBuy\.robloxrc	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\Tile\Content\init.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\PlayerList\Components\Presentation\PlayerNameTag.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\AssetManager\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\Notifications\Light\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\HingeConstraint.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\textures\ui\LuaApp\graphic\EducationalBackground.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\validation\validateBodyPartChildAttachmentOrientations.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\AnimationEditor\eventMarker_border.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\StudioContent\textures\RoactStudioWidgets\toggle_on_disable_light.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\fonts\Creepster-Regular.ttf	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Widgets.dll	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\RibbonLockTool.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-31ab8d40-1.2.3\LuauPolyfill\init.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\tutils\lock.toml	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\StudioSharedUI\ready.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\Controls\XboxController\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\Class.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\ReactUtils.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\Settings\Pages\ShareGame\Thunks\FetchUserFriends.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\InstanceOf\InstanceOf\instanceof.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\getFFlagUGCValidationAnimationPackMissingTypeMessage.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Input\HelperText.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\Utils\Utils\astFromValueUntyped.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\chatBubble_red_notify_bkg.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Debugger\Dark\Large\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\Server\ServerPlayer\DefaultServerPlayerModules\PlayerSettings.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\Settings\Pages\ShareGame\Components\ShareInviteLinkMapDispatchToProps.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends\RoduxFriends\Reducers\Friends\requests\order.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\StartPage\Light\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Navigation\Dark\Standard\[email protected]	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Thunks\RespawnPlayer.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\ExtraContent\LuaPackages\Packages\_Index\llama\llama\List\filter.lua	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\textures\ui\Chat\ChatFlip.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Lua\PathEditor\Light\Large\Path2DCursor.png	RobloxStudioInstaller.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\content\studio_svg_textures\Shared\Debugger\Light\Standard\LogpointDisabled.png	RobloxStudioInstaller.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RobloxStudioInstaller.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4400	chrome.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedgewebview2.exe

Checks processor information in registry 2 TTPs 14 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe

Enumerates system info in registry 2 TTPs 23 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies Internet Explorer settings 1 TTPs 4 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth	RobloxStudioInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	RobloxStudioInstaller.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	RobloxStudioInstaller.exe

Modifies data under HKEY_USERS 11 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "4"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "7"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "8"	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297716563998335"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "3"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "12"	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D	svchost.exe

Modifies registry class 49 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place\ShellNew	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings	msedgewebview2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\ = "URL: Roblox Protocol"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe\" %1"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place\ShellNew	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\ = "Roblox Place"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\ = "Roblox.Place"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\ = "Open"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe\" \"%1\""	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{2B871581-CDCE-449A-BFF2-183CA4DBDC06}	svchost.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe\" %1"	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\URL Protocol	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\version = "version-ff6341faef444107"	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{A9E82B18-5B56-4476-8A74-301E43CF7311}	svchost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{A996C23B-99FE-452B-9733-B4D97EE44C4D}	svchost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\ = "Roblox.Place"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{BD774911-F887-4B88-AC3A-6FDACBD02C22}	msedgewebview2.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{128468BD-BA5C-4927-BA85-0C1ED592BD52}	svchost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl	RobloxStudioInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon	RobloxStudioInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-ff6341faef444107\\RobloxStudioBeta.exe,0"	RobloxStudioInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{D98B2C51-7180-43E1-8B99-A1C1975955EE}	svchost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-ff6341faef444107"	RobloxStudioInstaller.exe

Suspicious behavior: AddClipboardFormatListener 3 IoCs

pid	Process
1840	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2736	chrome.exe
2736	chrome.exe
1204	RobloxStudioInstaller.exe
1204	RobloxStudioInstaller.exe
2736	chrome.exe
2736	chrome.exe
1204	RobloxStudioInstaller.exe
1204	RobloxStudioInstaller.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
6008	chrome.exe
6008	chrome.exe
5172	msedgewebview2.exe
5172	msedgewebview2.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
5728	msedgewebview2.exe
5728	msedgewebview2.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe

Suspicious behavior: GetForegroundWindowSpam 3 IoCs

pid	Process
1840	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
4908	msedgewebview2.exe
4908	msedgewebview2.exe
4908	msedgewebview2.exe
628	msedgewebview2.exe
628	msedgewebview2.exe
2736	chrome.exe
2736	chrome.exe
4252	msedgewebview2.exe
5632	msedgewebview2.exe
5632	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe
Token: SeShutdownPrivilege	2736	chrome.exe
Token: SeCreatePagefilePrivilege	2736	chrome.exe

Suspicious use of FindShellTrayWindow 52 IoCs

pid	Process
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe
2736	chrome.exe

Suspicious use of SetWindowsHookEx 47 IoCs

pid	Process
1840	RobloxStudioBeta.exe
204	OpenWith.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
1840	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5840	OpenWith.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5792	RobloxStudioBeta.exe
5624	OpenWith.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
5384	OpenWith.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe
6004	RobloxStudioBeta.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 2620	2736	chrome.exe	88
PID 2736 wrote to memory of 4520	2736	chrome.exe	89
PID 2736 wrote to memory of 4520	2736	chrome.exe	89
PID 2736 wrote to memory of 4400	2736	chrome.exe	90
PID 2736 wrote to memory of 4048	2736	chrome.exe	91
PID 2736 wrote to memory of 4048	2736	chrome.exe	91
PID 2736 wrote to memory of 4920	2736	chrome.exe	93
PID 2736 wrote to memory of 4920	2736	chrome.exe	93
PID 2736 wrote to memory of 5012	2736	chrome.exe	92
PID 2736 wrote to memory of 5012	2736	chrome.exe	92
PID 2736 wrote to memory of 1240	2736	chrome.exe	95
PID 2736 wrote to memory of 5072	2736	chrome.exe	104
PID 2736 wrote to memory of 5072	2736	chrome.exe	104
PID 2736 wrote to memory of 3852	2736	chrome.exe	107
PID 2736 wrote to memory of 3852	2736	chrome.exe	107
PID 2736 wrote to memory of 3880	2736	chrome.exe	109
PID 2736 wrote to memory of 780	2736	chrome.exe	110
PID 2736 wrote to memory of 3844	2736	chrome.exe	111
PID 2736 wrote to memory of 2704	2736	chrome.exe	113
PID 2736 wrote to memory of 1204	2736	chrome.exe	114
PID 1204 wrote to memory of 1840	1204	RobloxStudioInstaller.exe	116
PID 1840 wrote to memory of 100	1840	RobloxStudioBeta.exe	117
PID 1840 wrote to memory of 4908	1840	RobloxStudioBeta.exe	124
PID 4908 wrote to memory of 3408	4908	msedgewebview2.exe	125
PID 4908 wrote to memory of 1948	4908	msedgewebview2.exe	126
PID 4908 wrote to memory of 1948	4908	msedgewebview2.exe	126
PID 4908 wrote to memory of 1948	4908	msedgewebview2.exe	126
PID 4908 wrote to memory of 3224	4908	msedgewebview2.exe	127
PID 4908 wrote to memory of 4440	4908	msedgewebview2.exe	128
PID 4908 wrote to memory of 4440	4908	msedgewebview2.exe	128
PID 4908 wrote to memory of 5536	4908	msedgewebview2.exe	129
PID 4908 wrote to memory of 5536	4908	msedgewebview2.exe	129
PID 4908 wrote to memory of 5536	4908	msedgewebview2.exe	129
PID 4908 wrote to memory of 6136	4908	msedgewebview2.exe	130
PID 4908 wrote to memory of 6136	4908	msedgewebview2.exe	130
PID 4908 wrote to memory of 6136	4908	msedgewebview2.exe	130
PID 4908 wrote to memory of 5788	4908	msedgewebview2.exe	133
PID 4908 wrote to memory of 5788	4908	msedgewebview2.exe	133
PID 4908 wrote to memory of 5788	4908	msedgewebview2.exe	133
PID 2736 wrote to memory of 6008	2736	chrome.exe	134
PID 2736 wrote to memory of 6116	2736	chrome.exe	136
PID 2736 wrote to memory of 6116	2736	chrome.exe	136
PID 4908 wrote to memory of 5172	4908	msedgewebview2.exe	137
PID 4908 wrote to memory of 3380	4908	msedgewebview2.exe	138
PID 4908 wrote to memory of 3380	4908	msedgewebview2.exe	138
PID 4908 wrote to memory of 1484	4908	msedgewebview2.exe	139
PID 4908 wrote to memory of 3720	4908	msedgewebview2.exe	140
PID 4908 wrote to memory of 3720	4908	msedgewebview2.exe	140
PID 1840 wrote to memory of 628	1840	RobloxStudioBeta.exe	141
PID 628 wrote to memory of 3008	628	msedgewebview2.exe	142
PID 628 wrote to memory of 3640	628	msedgewebview2.exe	143
PID 628 wrote to memory of 3640	628	msedgewebview2.exe	143
PID 628 wrote to memory of 3640	628	msedgewebview2.exe	143
PID 628 wrote to memory of 5568	628	msedgewebview2.exe	144
PID 628 wrote to memory of 3824	628	msedgewebview2.exe	145
PID 628 wrote to memory of 3824	628	msedgewebview2.exe	145
PID 628 wrote to memory of 5464	628	msedgewebview2.exe	146
PID 628 wrote to memory of 5464	628	msedgewebview2.exe	146
PID 628 wrote to memory of 5464	628	msedgewebview2.exe	146
PID 628 wrote to memory of 4884	628	msedgewebview2.exe	147
PID 628 wrote to memory of 4884	628	msedgewebview2.exe	147
PID 628 wrote to memory of 4884	628	msedgewebview2.exe	147
PID 628 wrote to memory of 6696	628	msedgewebview2.exe	148
PID 628 wrote to memory of 6696	628	msedgewebview2.exe	148

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://create.roblox.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffacc17c728,0x7ffacc17c734,0x7ffacc17c740
  2⤵
  PID:2620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,16087463931472605373,17037384569323307436,262144 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2252,i,6686850910231627476,6240355724201058088,524288 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=1264,i,5569111635621142256,17647505007050426238,524288 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3152,i,17992366812777014054,5268326970299686659,2097152 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3168 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,8759548706755525076,9551069666693388462,2097152 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,12958854652592775410,13042782447339822428,524288 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:1240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4836,i,16110337563786759432,18322839831642107657,2097152 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3508,i,15184232263925879363,10957500625304070736,2097152 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4716,i,12121552256246729170,5704040888636657559,524288 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5464,i,15902922671389466355,9431156371713444804,524288 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5528 /prefetch:8
  2⤵
  PID:780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4704,i,4890993111509650432,3939730309090247276,524288 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4868 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5752,i,5036315992714768548,16952338751734362018,524288 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:2704
- C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
  "C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1204
- - C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxStudioBeta.exe
    "C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Enumerates connected drives
    - Enumerates system info in registry
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:1840
  - - C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe
      "C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 1840 --attachment=attachment_0.732.0.7321040_20260729T040911Z_Studio_7172D_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.732.0.7321040_20260729T040911Z_Studio_7172D_last.log --attachment=attachment_log_0.732.0.7321040_20260729T040911Z_Studio_7172D_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.732.0.7321040_20260729T040911Z_Studio_7172D_csg3.log --attachment=attachment_log_0.732.0.7321040_20260729T040911Z_Studio_7172D_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.732.0.7321040_20260729T040911Z_Studio_7172D_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.732.0.7321040 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=1156fa98c4a70f733ebb6000d6ec2e8168132a4f --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.732.0.7321040 --annotation=UniqueId=3237704876079631048 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.732.0.7321040 --annotation=host_arch=x86_64 --initial-client-data=0x440,0x444,0x448,0x41c,0x4d4,0x7ff68f6ef708,0x7ff68f6ef720,0x7ff68f6ef738
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:100
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=1840.764.14755023885818656556
      4⤵
      Checks SCSI registry key(s)
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:4908
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ffab2ceb078,0x7ffab2ceb084,0x7ffab2ceb090
        5⤵
        
        PID:3408
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1752,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=1748 /prefetch:2
        5⤵
        
        PID:1948
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2060,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:3
        5⤵
        
        PID:3224
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2056,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:8
        5⤵
        
        PID:4440
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3724,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
        5⤵
        
        PID:5536
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2576,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:1
        5⤵
        
        PID:6136
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4244,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
        5⤵
        
        PID:5788
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4100,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:8
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:5172
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4968,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:8
        5⤵
        
        PID:3380
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5048,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
        5⤵
        Modifies registry class
        
        PID:1484
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3916,i,1966796960212716794,11722113845831451467,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:8
        5⤵
        
        PID:3720
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=1840.764.4896557001491622491
      4⤵
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:628
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7ffab2ceb078,0x7ffab2ceb084,0x7ffab2ceb090
        5⤵
        
        PID:3008
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1808,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=1804 /prefetch:2
        5⤵
        
        PID:3640
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1976,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=2080 /prefetch:3
        5⤵
        
        PID:5568
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2316,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:8
        5⤵
        
        PID:3824
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3772,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:1
        5⤵
        
        PID:5464
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2896,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:1
        5⤵
        
        PID:4884
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5384,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
        5⤵
        
        PID:6696
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=5396,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:8
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:5728
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5392,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
        5⤵
        
        PID:4424
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4472,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
        5⤵
        
        PID:6344
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4772,i,1814976909219752565,9723640848785235134,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:8
        5⤵
        
        PID:6680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1512,i,16169824479892684396,8838889774677683805,262144 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=728 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5544,i,8568477517386174496,4823766707409456697,524288 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:6116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5940,i,8552700646648441091,14630738309843057106,2097152 --field-trial-handle=2000,i,13694853391726347904,10745892597298860550,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4516 /prefetch:1
  2⤵
  PID:6108

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3888

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5060

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:3544

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:204

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x48c 0x254
1⤵
PID:4612

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:5788

C:\Windows\system32\werfault.exe
werfault.exe /h /shared Global\439c5643ae424d50aa1712bb2de8ab5b /t 4596 /p 1840
1⤵
PID:6280

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:6600

C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxStudioBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5792
- C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe
  "C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 5792 --attachment=attachment_0.732.0.7321040_20260729T041643Z_Studio_4E772_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.732.0.7321040_20260729T041643Z_Studio_4E772_last.log --attachment=attachment_log_0.732.0.7321040_20260729T041643Z_Studio_4E772_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.732.0.7321040_20260729T041643Z_Studio_4E772_csg3.log --attachment=attachment_log_0.732.0.7321040_20260729T041643Z_Studio_4E772_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.732.0.7321040_20260729T041643Z_Studio_4E772_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.732.0.7321040 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=1156fa98c4a70f733ebb6000d6ec2e8168132a4f --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.732.0.7321040 --annotation=UniqueId=6718076336128988229 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.732.0.7321040 --annotation=host_arch=x86_64 --initial-client-data=0x450,0x454,0x458,0x42c,0x468,0x7ff68f6ef708,0x7ff68f6ef720,0x7ff68f6ef738
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3524
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=5792.2180.14807417701721706070
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  PID:4252
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7ffab2ceb078,0x7ffab2ceb084,0x7ffab2ceb090
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1784,i,2318595787615953000,8252044991297966604,262144 --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:2
    3⤵
    PID:1052
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2032,i,2318595787615953000,8252044991297966604,262144 --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:3
    3⤵
    PID:5656
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1352,i,2318595787615953000,8252044991297966604,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:8
    3⤵
    PID:4056
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3536,i,2318595787615953000,8252044991297966604,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
    3⤵
    PID:2168

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:4548

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5840

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x48c 0x254
1⤵
PID:7160

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:3936

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
PID:2896

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:1044

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5624

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:3224

C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxStudioBeta.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:6004
- C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe
  "C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 6004 --attachment=attachment_0.732.0.7321040_20260729T041747Z_Studio_06AFD_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.732.0.7321040_20260729T041747Z_Studio_06AFD_last.log --attachment=attachment_log_0.732.0.7321040_20260729T041747Z_Studio_06AFD_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.732.0.7321040_20260729T041747Z_Studio_06AFD_csg3.log --attachment=attachment_log_0.732.0.7321040_20260729T041747Z_Studio_06AFD_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.732.0.7321040_20260729T041747Z_Studio_06AFD_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.732.0.7321040 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=1156fa98c4a70f733ebb6000d6ec2e8168132a4f --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.732.0.7321040 --annotation=UniqueId=5269699307557738645 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.732.0.7321040 --annotation=host_arch=x86_64 --initial-client-data=0x434,0x438,0x43c,0x410,0x444,0x7ff68f6ef708,0x7ff68f6ef720,0x7ff68f6ef738
  2⤵
  - Executes dropped EXE
  PID:5432
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=6004.536.4816821796342024646
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  PID:5632
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffab2ceb078,0x7ffab2ceb084,0x7ffab2ceb090
    3⤵
    PID:3824
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1784,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=1772 /prefetch:2
    3⤵
    PID:3180
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2012,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=2016 /prefetch:3
    3⤵
    PID:2244
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2300,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:8
    3⤵
    PID:5512
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3512,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
    3⤵
    PID:4328
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4224,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
    3⤵
    PID:5640
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4792,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
    3⤵
    PID:4004
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4964,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
    3⤵
    PID:3224
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4496,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
    3⤵
    PID:2656
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 732, 0, 7321040" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4488,i,8815123400918803509,16894771991623055654,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
    3⤵
    PID:6740

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:176

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AppSettings.xml

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\AppSettings.xml
Size 144B
SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
MD5 431a6eb20932ec1c56682a1f60d231d3
SHA1 40bb32db040cabade103c21ba5b6f811dfb0773e
SHA512 0969b9484bb7c661d4e0452ff1c77396796333904b39f24c56d5a92ac4ed4ebde9b8981a985c6950b4af2852e8d9599e071a51ce4f9ef21ead778a2fdc76fcec
TLSH
T18AC09BA45351C4149795CF14977DF690E3B1797444504498D8A1785A0DC51D427D53A3
MD5 SHA1 SHA512 TLSH

Submit Download

qgif.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Plugins\Qt5\imageformats\qgif.dll
Size 42KB
SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
MD5 9600a70636894f6a934f2a7f14d6ae0a
SHA1 d0a4e0dc7e4c61bebbd91579bf15d260c1fc7230
SHA512 6a80ca6c6b8ba3fcb1be5de6ea39bf6a75a6206266112bf23a81a249684b567e50babf257d011d0272d28d3d345c501d0f3e576f397a22abdea8b94abb3412bf
SSDEEP 768:dVRwrbBk3Xj+7yFZxK7+WHUgnNx1+MhYWeEJPxUo:d3wrbej+G3U7+lgnNx4MhYWLPxr
TLSH
T1E9136B56AB7844D2E513C678D9AA4D2BE935FA305B6297CF432181780F323D23E3C66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qjpeg.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Plugins\Qt5\imageformats\qjpeg.dll
Size 447KB
SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
MD5 81b6df8cd8de9db1eeca252958ea9d1a
SHA1 e1ec20f7e3575d9595d38ca2ad8b5c521c7eccb4
SHA512 8cf35cc5b7a11aa7e7cdbc9dc626c5429b8f59079590092343b9b207839d34c46c1b9a2a7bbd4c5e136fae71396a698474c432428edcdc809825f003b6919231
SSDEEP 12288:/WbtMZ30x6oT93baQIYnMEMI3dZfsskUn5BLvUMCk//RFEciccjxRPCA4cTJF/eN:/WbtMZ3y1B
TLSH
T133A4A243F2605C87C7E54474EE6AC1A6E794B81CC7FB46F779C1ABD97A226F0B829100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindows.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Plugins\Qt5\platforms\qwindows.dll
Size 1.4MB
SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
MD5 e81f163cbeb67ec8414c2ab3b4119647
SHA1 065921e56683b78097e125da120420136258ec55
SHA512 6700efcdae09a40e1907f56ee4fe2308422ce53ef76a13c434d1cd57a77d934e0bd583c8d96ced0fd250fd0ba727be6d7258692a6bbe19053b88fb48d188b13d
SSDEEP 24576:BgRZTqnadX9G01nyfcdGxOsFciSKi3kmbe7WAiYdZs9UIrIqrtQQ:oTqnadXw0xyfcdN8JQbOWAE/
TLSH
T11F658D57A3A48298C26BC23DC65B8B17D7B1700503619BCF11A88E597F63BE3277EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindowsvistastyle.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Plugins\Qt5\styles\qwindowsvistastyle.dll
Size 144KB
SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
MD5 04a9a47fa806c912a22af17577566709
SHA1 2caca306233ef324d63ef3fd04937793ff2af912
SHA512 47c39a2e91f0444bec87055aa1592bea6b0fe5fa1996b4c1f3d38a1928381d8a536522e5f86cea3fb7c655920ccee66c468a1d02af152750a41fbe46c9aad032
SSDEEP 3072:AYfJgCoOdX7MNwr80krOTmUMVa/MFWxmqd0SQV8lWTxf:RBBXwL2Sa/MFWxmqd0SQVwWV
TLSH
T12BE34C13326602C6C463D2B8C55F0916F7B3B05853228BEF0667CEA92F533E27E79A55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Core.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Core.dll
Size 5.8MB
SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
MD5 f6c86aacc6126b0d2f442c6a88e57efe
SHA1 df1b891829c3005d045e3ba048292789d5e28fef
SHA512 8cb4d26c069074e2c5dd734e5d1cd085afd0742795024460d80b9b0b333dc01b5df7c5691c03ece34be20956daa63184eb8f028c5e1c27814124937ecb7c8ed5
SSDEEP 98304:kFO2h8E4EwNrZJsv6tWKFdu9CsViJQ8xqfSgw2:kFO2h8E4lNdJsv6tWKFdu9CsVOQ8xqfZ
TLSH
T10C569D8776AB0250D0B7C23CCAA7811BE672B8018B219BCF125CA7495EB77F1693F715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Gui.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Gui.dll
Size 6.5MB
SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
MD5 3bce6b45e07a747167349865b4bf4ac3
SHA1 d24d4b87ed035f897009cf0b5b711e6485533d89
SHA512 d7584ddd3c6cfc9bda1ddddd02b883aa974309770a478f138202f7540ae92b38cdc658149e4e8b4e76eb0280ab066e096558bd942367c20c018f0f716c09d1e4
SSDEEP 49152:jWM6LDUqcvRiHZHjTpTFpFEOPVQJqguaf5Q/J+5mkU7vo3qsJAGUD4topffcLnZN:wLDFv/+RmFaqBpfkCgnAiYCHecbp
TLSH
T18F662886725A6262C977E17D8B4F052EE1F3785283428BC748199B480F737EA1B7FE05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Network.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Network.dll
Size 1.0MB
SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
MD5 bb5ede48a003b21b63bb134435c4f5ff
SHA1 55d6cd8128d80c81a5fea49b9de4daa21d4a5ccc
SHA512 e5e62f3fbf1a9c82c13d0c192c1033d2c55d08ad3830ebbbe3b9252d0721651225ac39ab92d863ecd11bba62ac1c51f86422ffab9fcef6f5f20fdcf847a33afc
SSDEEP 24576:XKF0Nu0gZmVnhqMpH6Q7pX9U2BgrExZ8Wv:bNu04mVnf6cgrQf
TLSH
T10A355B67B36103A5D46AC1B8CA8B8502F67270018B669BDF5639DF693F737E1263E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Widgets.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Widgets.dll
Size 5.3MB
SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
MD5 5309de309fb00a4be24bb465f0053455
SHA1 a14ef29356dac72d882f663a426f16ab29bc3529
SHA512 0cebf0e1560f2ef8b140bfd4fba2b3d7a562923f1b45c84eff41dd02b5ce04a9402c937cb4708d4623ab02a8991bbe6a31acc3cbd17fe2079130313f33daa1e7
SSDEEP 49152:T8LcMQHZ/gD0bTG5/Zh4w0I6Lr86R21sQGxTkaeduxK6PBZrGBqfjoWjmqYjYhIb:qPQg6CHliIYKsonnYhIv7uP3S6x9W
TLSH
T122466B57B3A54184C16BD238CF8B8613D6B2700487628BDF256A8E592F737E22E7F705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Xml.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\Qt5Xml.dll
Size 215KB
SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
MD5 a24011ba1cba9e517da2d89d530329cd
SHA1 867f44a65128db05ec1c2842a52b2752ba22346e
SHA512 76d7115d7b5f57a609cae61e768b28cc873f30a4aea46a2b385e9c8be1e5bba7c73ce84731708fe12f28d691b06ec6dbb8579f5eb9eca92ecf83d94e97b98620
SSDEEP 3072:4rZx2zOZ+kzW8MWXJBPlGyGv+RQxm7uFkgs7pkV9p7RM7jJWTx/:4FxyOZtLMWXJBPlBbaxp6kV9p7CVWl
TLSH
T18C245B4777258596E427C238CE5B881BE673B85017628BEF81548B792F33BD2B87E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanBase.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\QtitanBase.dll
Size 1.1MB
SHA256 f664bb3d87b127ab46650413a675f09784fd2d27cb98eae9f77e0c233a66a285
MD5 3c3626b2e692510326b71658f424e891
SHA1 6dfc8d44ab9a9dec11111c6f35138daf8d37c16b
SHA512 e7faabdbfd44ada8e579f9a9483bbad738f3c33fa2afec47d987db1456b2e0c3407f76d5067886991c423b43edcd2a1aa661a8dc3d09f2e7f57c7778c7b7663d
SSDEEP 24576:r3nRLlUv+otWr8wY6S8dtuTbwQitevsM:rXXUvNdwVu/kcvsM
TLSH
T14C45AF4B33964352D16BC278C69F8114F07734159B4286EF9A2BFE291E333E5383B6A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanDocking.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\QtitanDocking.dll
Size 621KB
SHA256 ad5761ba9bee506bc9a1f4f0397fbc739eb8ad8544016a564cacb60979ad1273
MD5 c58473c626de265e2cead165e65c3d21
SHA1 3aa3d53110d01d51ec0f56fd988dce73f23076df
SHA512 b996e05ab9eed7d46b3fd21cb6f9432168ae6784a33e564cd9f138d36ff52e7ef594dcdb9ea7491be46f66c19f81c0d593a720f7f56b4490e5d63a4fcbc19b3f
SSDEEP 6144:qqpZco/36jOCZ0NesIZSNfFBg8UYS164o4TNQre4NMqINZIyavAj4vCDOZ4BVhg9:qs/CIkZ8fzvU564N4EmCDAnNg
TLSH
T16FD46C1B72780391E067D138C65BC626F4B77842476295EF6216EA2D6F33BE13A3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanRibbon.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\QtitanRibbon.dll
Size 3.1MB
SHA256 f02d3c963f8af77b638280c089ec607a891a291f6839dd815ffcf66764683aaf
MD5 01bd3e3ba233106d464db5a112f48154
SHA1 90b2270567b26225e0e5f8fa7927a7d15cdaf37a
SHA512 1dc29cd9d416164a1995b148ae37e2fd8d1e6ebb75a1025f7ef41233b96137785e0c43871266a723f44baa71020f1989b30d4adf6c06404f7cfb5ca3ba5414f0
SSDEEP 49152:BrTyq/LVyjq4LbhndL1ZsY0LUGGnVGvYEnCWCLn+XYKMcc/RotRNC7C7C7C7C7Cl:BvLUjbLnL1ZsY0LUGRjCWCL+IE
TLSH
T198E5CF8B77AA0298D2AEC13FD28B4555F5F7749A835386EB4926CD1A0F333E06C35B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxCrashHandler.exe

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\RobloxCrashHandler.exe
Size 11.7MB
SHA256 884c98d21a41763ea14040455e946bda1d5cdab602fbe0efa45c3645096e30b2
MD5 915ecbdd8c8614d8318a97158aefbbba
SHA1 d7ad5cd0dadfc9bedbe8868805850371849339b7
SHA512 d953444179cb4d7b9a4a595a49663975f28b1b408288a277bc942adad56d2fe970c9fb8346b50bbddd4f29daaab97b559c5ef8c6c83f7b4b4038a7942bf35271
SSDEEP 196608:mAQpXVhmGKh5617XA9B2VtHK7aT+w5wixNQ:IVHfJXKatHKM+NiHQ
TLSH
T163C69D6AB2B800E8D4BBD1BCC6469617E772741603709BDF1AA046F61F63BE41E7E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\WebView2Loader.dll
Size 162KB
SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
MD5 e2f9d2ef3446e70b50de50f577c6939e
SHA1 48e7721704249cebd1267280459b7b36ce99e177
SHA512 f5d7790bb2eacc78405a91a65adc0f30a248542de22ed10cfe91bc87e4f953a93d738281c13480a070681e7169fca6ec49e20c5fb7b89d76f3a9bad912c6d87d
SSDEEP 3072:erQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Tv+EtJfy2aQutH:gMMTlTRTzWiThTNTFSzjiBM2h9P5oZNr
TLSH
T190F35B4772E5407BE16A8274C9A34A11E77774510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd-win-prof.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\dd-win-prof.dll
Size 3.8MB
SHA256 1e5998697cbad5d9800428bec8afd88285f7411fc05de9cb9453e776b01ee6f3
MD5 a0e645c21b4e8e8499f6e4af644dfe2b
SHA1 22c8205d8e5f40cb1688243df10ddf1c813a184b
SHA512 05a9f2dee061499527b615cb34614aff0eb150be3ed567614b9facb28cda328088b485a524e7402303c00c8b35da50cefac14b97b5d93d34f61b059cec3d4ced
SSDEEP 49152:LMbMlAt7HkrfnNhiM46GB8vGM535GN2j8dlZCEbIw0zUy+z/N0yooA9YIU6ieyV+:LXN0B8HoCzkxooA9n+
TLSH
T1D9066C02BF86996AC09DC874C34B4B638B2274CB0B35B6AF42D541253F6EBB15F6D358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfbxsdk.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\libfbxsdk.dll
Size 9.7MB
SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
MD5 51d82c0e8ad65126413ed39246b5cf46
SHA1 f73c0b2248ee11f8fde172e04c64b40452051521
SHA512 c60362c4a67bd11ee330d36ecb1a58d7619989072b48b652f9411884797852fca4805ea1aab77546b1d7fc3c158beb30dc6aef0f7dbfb99322affdc8dfec014f
SSDEEP 98304:4Zrqd/tYrwiI8gpR241UnQQjHNA256IJymNfJjWfELI1u0/QHnq:4ZrGewiI3pRf1UXNAUiF
TLSH
T103A67C8B227642E9D1BBD13DC9974903E6F2304117369EDB02964A6E1F237E0AD3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\msvcp140.dll
Size 540KB
SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
MD5 4e3fa9bd90ef020c14359639dc19312b
SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
TLSH
T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\msvcp140_1.dll
Size 34KB
SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
MD5 d433b3e8aec25afb1c65cccd97ddc7b1
SHA1 ffebb57d0bf8cdae0449302a691920cc22ed4a72
SHA512 b1d48de56a595ddd6fed36574f0d6f20fb21d047ef7a6e93a487d660bcb1090e45c6aed43a99bda9897c1ef524bd8032b33e35a48c796d3f467caad33f5dcff9
SSDEEP 384:FKzh5dQS8DzxhK4KWcS5gWIZ1gr4iSt+eMifX7R9zUkJCWEIHRN7/PFbR9z181q:FAQRDzxg4FMgU9nF9zUet/b9z/
TLSH
T13FF26DC5FA688443D866483082DAEE47BC3DB7D25F6092DB1392F25C0D937C5EA35A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\vcruntime140.dll
Size 120KB
SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
MD5 0d35c5e99871b4f02c490b9fd9dace34
SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
TLSH
T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-ff6341faef444107\vcruntime140_1.dll
Size 46KB
SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
MD5 03b43160d21c08de07a79d0a1c5ee81d
SHA1 0a449093006af667432b83303614b53b62fc0d05
SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
TLSH
T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4908_938436530\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4908_938436530\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5632_1170089517\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5632_1301333640\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5632_2090192122\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-af.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5632_386584787\hyph-af.hyb
Size 70KB
SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
MD5 ffa9db945f0f0c15b8bba75a6e064880
SHA1 49217a9d5bb7a868464403b4e3c82e80df53456c
SHA512 cc67b2dfbbb009dd3fdb999fe86410425455613c12dac755a3cded435cd25ca4363782d70f3b7bb7c0fdd63e2eb649ae6a4053d929f463b646b43d7dbfda79c0
SSDEEP 1536:dH4Yzf/r1T2bhKC+wQ/MJ4tpBMfWDMxFaye3yrGZ3vGV9YODhX3yKfhGt:dxLr1qFKpNpufWIqye3KgGVnDxe
TLSH
T1D56329C3C62BDF90CC6419F4594D0AA811D816C6E7C039BE9B6C54797A27CB82BC13EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5632_386584787\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5632_386584787\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5632_386584787\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5632_386584787\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping628_1587983897\manifest.json
Size 1002B
SHA256 dca3cd7a673d0776a085c0b8958a85bdd8392923db21a0b55f4d37210f752322
MD5 9be87722ce3608a2d38a79079feaa394
SHA1 34ed541044567272d5402b30fa99eff29d70e9b9
SHA512 d4d22a3c277a9cc3325f4f6f15f18c56efc6945ce8abccae32d66158b9f35039b347e93d0f1002b66336fbef2d750f78184e6a4b72644cb71a2ef944af52388d
TLSH
T10B119B00CC388DD322D4BAA21CC6580A93621DAF4CC23E84339E161D8F1C8AB927366C
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Program Files\chrome_Unpacker_BeginUnzipping628_1886408474\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping628_1886408474\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping628_413803526\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping628_420061802\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 4efa8f073ca80e22d9795a8b983592f53c73f6e82f7bffb1fc01038630f8e654
MD5 bdd855ae43009f62bc9d9469485c5433
SHA1 3af580b4a1af07ea4d18fb26daa919c9967b1e63
SHA512 8fac3133d39781e485e7b5d840a7f33213d02ba99b7ba55695c3a0c210fa27b53994b7fb392221ad01e683012d57e714b0dad6a71143ae9f1ef018e252176629
TLSH
T1A9E02BAAD935AC7758FD072C60640B46D74113573B40894F363C8109CFB8736418581C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 da48818d06a90f2fa66c2f620aefab9eabab930aa094d501ee2385b07991f644
MD5 607c61565c0152083a0ae6e870deac0c
SHA1 3dabaf056b80f543a5bad72cf4d12b64a8ff629f
SHA512 2f684690ff800ed5e0c1c90078ff857ff40e9bd72f74f3815540753eed179ec815e5d7bea9405e1a9bc3cafea0124448237e95f46664368325c31998013b4451
TLSH
T15D511900D0E12652DF95EFF747EB0F3A6F7997AA0A11135B8D00A2D0340F3D66049AF4
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e9311823cae4f0551ecf506c1b419be6b16a87efb16124bb79bde7d07073e6bc
MD5 1239d35c84442dd2cf653823496ea9b5
SHA1 daa68aba56145fd11b6264711177a5d6e5b907a1
SHA512 db8029d109c9b3e80bc2e67c63626b0312fc75b87ae147b3e4d72e7b5f51e8cda41593f23fb33a5e75d6cc3fa34486b339d110355ac8d84948cbe6f6853376ce
TLSH
T1EB518AF753B0897D9A1196F0EA15AE1FCEA90530031C78B685E07D2793F3962E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 66bf91afcb352be61678fd4a4acba04b5102d5c1e802650710ff26e1539ff51d
MD5 ec451beaef3efcbf0b0084fef508c82c
SHA1 6ff20834c1a4f9079ff688a0bcb83334c0cd89fb
SHA512 eb4a7aeaee7a8b66666f83173392c601c59676b0e7cde56fb1f1ad57443c8b2c0698822cad441f02c8e225c79e5dacccd1b57d0a4ab6e43e570b2f8536d6ecbf
SSDEEP 96:Dww5laIah0B1uTC0zHYHnefErjheHdI7K:Dww5laIa2B1uTjzHYHn24jheHdI7K
TLSH
T15B81BBF783E0C56D961196F4EB156E1FCE690A24031C78B289E0BE1793E3972E20179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 9ce081735240edca40a8d16b08969c50a3b01d18926e7fc84da947b80897f6f4
MD5 a2de739af7f0b347180c7eacb78c3644
SHA1 c6896533d83ae00ca4ff85bfe75c49645e4edaeb
SHA512 e7c1c11a2444d1808dfa3e7e15382129257e2e1af4dcdcf107f71b3f890c10c6638a58c28ef59c22a67173af3f15bc5d1d7bc53e5df199c6a857374b9d487023
SSDEEP 96:Dww5laIah0B1uTC0zHYHDfErjheHdI7Htby:Dww5laIa2B1uTjzHYHj4jheHdI7Htby
TLSH
T1BE91BBF783E0C56D9A1156F4EB156E1FCE690A24031C78B289E0BE1793E3972E20179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 912e9c4605587c8f5d17344b6334feb5e8c1b75f9d24d9c43fbe36b704181c99
MD5 0a21f57a938016928cefed3264f8fc24
SHA1 c6398880cf730f21dece0ee87ac32fa228f1abe6
SHA512 d47df79afa6419517f36e65443d64f6d66321e6c54e58d48f7712cff3b9ec80a8d1974cff0ca5ac4acbffaae7b50cc97547ef8998f83cdeba8144a311edf60c7
TLSH
T1EC4148B7C7D8897D890156E8A6156F2FCD690E14531C3C1A88D8BE0F93E6876E20059E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 0ca2a3e8ca7e7f686b174fd7faafa3f2d6a349e45b2d7c3218657272211db223
MD5 e79faf530372a057f91dd437d9955f25
SHA1 c1d408dbe40cfbeb49cd9023fde63a835fd0e771
SHA512 93e5804795327ae139a23140a4a0511153d7cc730d5fa347a3ce493ac7c81786f9e9c178daeb2b6ee0aeab400c7fdda3c40a4b12bfcc1c677cf8d3b84fdb4648
TLSH
T1C9617CF783B4C57D9A1196F4EA156E1BCE690524031C78B685E0BE1793F3972E20079F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 10da0067e7e2f56629bb98c204633ea5ea5560f10b97d3828ae56be345689728
MD5 d092eface8722a0ec3a674c81f9da673
SHA1 b69e67e5a2b518013f7b00f1886c35c3edaf7a64
SHA512 1dfd710e4a95d87795e4818acdc58a9e6c1458460a346eba5540ddbcbc37bc3604aaabd36fb3f7681cf1efce579094788d119d54adfc77148fff2adcb167141a
TLSH
T167518AF753B0897D9A1196F4EA15AE1FCEA90520031C78B685E07D2793F3962E20179F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 a2e7993c2005552203301fe0187621d4c919624fbd0ed0afa549ebbcbf7d9859
MD5 b90e2f789db314b247a87f75272724f9
SHA1 377c89a741bb756e45649d33dd1fdf2a9582ea20
SHA512 3d89361923cc94fd168ec2ca1a9d9a28d98a2c0929649b03e83afa93d31adc8f22070a4008cdfd0f780f386f9081dd12cf0c3bfd239d8afd4e8157452028b1bb
TLSH
T1B0517DEBD6BF745B10B8097B5E44B80959BAF8350182A8F4CBA6813EB0858F74B16466
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2e22383c7523f7b76c9f8e08fe2ea4cc49cacf944e14051b7224b6cc9df66dad
MD5 3fd735f84d9e6d118efb0f3c79b7ab73
SHA1 6b7e1d28e1234261100f0fd949a1eec85f48abd4
SHA512 220dede4f00031bd88090769ef6c215646f6ec1f9822afa3206bfa0f4a12febaec855e19c6f2aadb151a4087ceefeeba83b5bee15540f0c7b9870ea9b1d3935f
SSDEEP 192:/RFyx7Iv78pAPRp23a9DHsb+WNnSPZv0Ya4eGGGVyIsnAUgE:/RFyZU4UXb5wkuYDzE
TLSH
T18C42E72EAA10697B6CDBD219FD657B53E7F2102261D12E84EAFC8D1C15EB5CC322710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 de5164da523adb32eaf1352524cc76850c4435cef638982786f661caab8bb419
MD5 1449ce0e35836da88375c8024138cb19
SHA1 8bd2dc36b7a0e75febdcf2bf87c579217e37d8ad
SHA512 4fe1f7d3dc9372501c8d76624708b27d34dbde3c6d6168f773a675f76a6aa68d5055a129299106ae98a2a9bab24872db5380e97a03f6f737a12af790e1ec2d67
SSDEEP 192:4RoyIu7v78pEPRpq3a9DHsb+WNncTrv0YB4eGGsVyIsnAUgE:4RoyfD48Xn5w0IYavE
TLSH
T18142D52EA91069BB6CDBD219FD657F53E7F6102261D01E84EAFC8A1C15EB5CC322311B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 47046d75d3bdf181629b3c1a28594ec36b734b038271d48ec6ea63e8aad36fd3
MD5 653df1db877ff757f5d31b3cfdfb668e
SHA1 ca41dd62a543c44a62f4bc726c5ffc2666c1aab1
SHA512 2c5952575377aa8d1b6524ba327bf53d72d6a682057286634cb2065aac345a9caf4835f84d2d8a3f2cd56d8211e0e99f21d9546a50478d8588fc394acf4e6f97
SSDEEP 192:/RFyI77v78pEPRpq3a9DHsb+WNnSPZv0YK4eGGsVyIsnAUgE:/RFykD48Xn5wkuYzvE
TLSH
T1B642C62EA91069BB6CDBD219FD657B53E3F6102261901E84EAFC8E1C15EB5CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 3b0bfcb5919fe1eb367ca85e11ac025ed5210a5a2253b3b033faa57f321bd8f2
MD5 31c662700ce79fe3c1e3b511c8526b8e
SHA1 d5dcbfd4291dfb4d04516330295e71dbd55da2a8
SHA512 3aea89d89b27d5ade025aa7279a64bfa4bc75f590777b6333175b0e891ff1da576df38b86106ab6d015bd58d0dea7c5ded5d6d559dc035edc58a051430fbebaf
SSDEEP 192:/RFix7ov78pAPRp23a9DHsb+WNnSPZAX2L4eGG+VyIsnAUge:/RFiZ04UXb5wkW2k/e
TLSH
T10C42D52EAA10697B6CDBD219FD657B53E3F6102261D12E84EAFC8D1C15EB5CC322310B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c69da2746ca96dcfc16806548c1433d5dd93f4c5fb806b4e88e14221f703fd98
MD5 c94825768268607fa69ff47a3b451f9f
SHA1 7c917987917ead2343ba274082736d3b4ff3fa6d
SHA512 88cfc8437426702f377d5e607bc84a4b46acdcf73b7ef3644de97494cbff025dbe103a7730556a76a94cbbb944d8390da31bdbb1539694c57b849d8f252ab492
SSDEEP 192:4RFyIu7v78pEPRpq3a9DHsb+WNn9Suv0Yo4eGGsVyIsnAUgE:4RFyfD48Xn5wMhYxvE
TLSH
T17B42D62EA91069BB6CDBD219FD657F53E3F6102261D01E84EAFC8A1C15EB5CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 8c1d154ee72922fd2025723b463d2dbd871ba617afadf8553dbd300233c59f2f
MD5 2f0f3f8541106e0600b8bf61521dabae
SHA1 4f7c8b702bcd313081863b263f778f64f8ef956b
SHA512 f659ccb063fc3b89676617bb26da37fdeaf5013615338621f2aae53f1852341dff82016af45dd79b10d1cc8eae4b3f2e089ea87f748f2f194e1f0f2f05742477
SSDEEP 192:/RFyx71v78pAPRp23a9DHsb+WNnSPZv0Ya4eGGGVyIsnAUgE:/RFyZF4UXb5wkuYDzE
TLSH
T16D42E72EAA10697B6CDBD219FD657B53E7F2102261D11E84EAFC8D1C15EB5CC322710B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 ebbb7ae447654b309e83639e4de9cf45488013c8b5d47d473bc7490f6b97e84f
MD5 653f2bc52166cbcdc8e58b091ed9b6a2
SHA1 e15650b69de852854ce59999c66a158acc145dbc
SHA512 fd39baf8dd8668426a09112bade8985069c46d44f95caaf548edaa72b8e2b94000374d7499a144c0bde9c98ff93cbad1eaf1b2039d3e6343000fc26bd57c2193
SSDEEP 192:/RFyx75v78pEPRpq3a9DHsb+WNnSPZv0YK4eGGsVyIsnAUgE:/RFyZZ48Xn5wkuYzvE
TLSH
T10042C62EA91069BB6CDBD219FD657B53E3F6102261D02E84EAFC8D1C15EB5CC322711B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
MD5 be6f9d6a2cbcb56c02708e735863c266
SHA1 974f8ac2aeecd275c490a6e72bf1549cc608ea18
SHA512 5d06f958f136237f1a30c847cff1a2af158baf7b8f8804d6c444ebc126d222c22c946442ed853f321e6823a9c6894841dac031de891b36a87a920630130e9eec
SSDEEP 384:6QjOp7KxkXqKf/pUZNCgVLH2Hfgsl9RXODOB+ErU3ymHG/5Ut4vtEp:6UOp7KxkXqKf/pUZNCgVLH2HfgsL1OSK
TLSH
T1EE52E867648D9A3B0FC8D58DDC16BF4FADB6015766780C7452FA5C0803A97CB124A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2464dde4789d9b4d0ce1c374823c8d220982789df1a53c38c43e119e6b19c0c0
MD5 a8bd9ffe3c8a01526b71c83db3060e30
SHA1 9192e7e8cd96908f69bb76405c67dc9cec44a896
SHA512 821777bd632261eff9cca82c7b312b12a64b7d95b9c7506ebf71088bb7269d2dce2b11a55ffc7073c3e56d9477e964f654c18d1d186d9c56aad60b72651786d2
SSDEEP 3072:j0jGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:j0am7Rkm1tYpBeh2BAoO
TLSH
T115C3123B6D65E8775CB9BB1AB04E0E1F1DF14DA6C920DE52C8D89B0423F97CC1A48A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 e94e414ffe151525f98c1b8e1ee320c390ef5ee1395769f905a2460e2259370c
MD5 a3eb82358d487ee976faee8348be88c2
SHA1 068d950d11889ffa5937ad228744114f9802aac5
SHA512 d40b8963b6c19702f96e6ff11d4110011f8a51af88a92d709eaeb1d5e032fd17c07911dc64e6aa636f25cf1e42990a9527b103ecdb21deea8eaaf4ec10db7c69
SSDEEP 3072:krGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:kym7Rkm1tYpBeh2BAoO
TLSH
T1B5C3123B9D65E8775DB9BB0AB04E0A1F1DF249A7C920DE46C8D85E0433FA6CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a6c32abf784337dad562dbbde0aeab18682bc1d23ee77f5c3efe2401d1eeaf29
MD5 c912dd6e362b198dbf1bcf7078a173a1
SHA1 b5699ec7bc79fdc1745c315d1346e4084933692a
SHA512 6b93c203bdcfe15e41704dec9c0ee9085cd933ea3fc9c6022021c7a23ef994f0dc6edbc3199abb98f2c7956192a7e375661914801d12bd95fb26caf6f00382fd
SSDEEP 3072:grGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:gym7Rkm1tYpBeh2BAoO
TLSH
T1A0C3123B9D65E8775DB9BB0AB04E0A1F1DF149A7C920DE46C8D85E0433F96CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 abf567177009e6c778800da0238379bc4bd71595385a79e135ddfe5b918e4903
MD5 eed65bac1fa307a524b07e65253f3594
SHA1 ca34a487044e2d8aded3c8c5bd544ab62e6ee9dd
SHA512 3e65768e8a3d90cd057266f82782ebd602afb6ce559069775241be8865377cb3146c8353d892bfd933b2801f14563cba048b36b6c8b4292c22ee6ac93228f9fc
SSDEEP 3072:9rGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:9ym7Rkm1tYpBeh2BAoO
TLSH
T136C3123B9D65E8775DB9BB0AB04E0A1F1DF249A7C920DE46C8D85E0433FA6CC1A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 36d771e88a6c17dbf287d33ef224ffa32d243dabba68be488021f814ced100e3
MD5 b4dab6a85f79cea1ef7797c191aae73c
SHA1 adab0c360bad73204e27c5832aef96c642dbb112
SHA512 7a923a91c95e50c6a8984672c95c62b9c6ddca0f0fdf9947a0d6a513085d6c64c631c0df0856597ed8137d652cae60a406349cd3cb4204fade3397b242ef94ff
SSDEEP 3072:nGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Gm7Rkm1tYpBeh2BAoO
TLSH
T17DC3123B5D65E9775D78A70EB48E0B1E1EF24DA6C930DE4288D86B0437FA7CC1A04A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 157KB
SHA256 4a36e7b070918fcb6b6b0f2d45e594c9d050116899c512495a13273c00eb6210
MD5 82dfe89860b68b4ceb833d1c55a68011
SHA1 72a4e449a437e4fa33b52890a90852bc85f6c738
SHA512 10e6e4c56de32e7844e68a4eaa3f66207a0348b3b7cb7cd8f3363e4cc79ac31d4fa95e58c2f26c2f0b594829ce6c97c0fd6c0e3422736d31d9a103bbdfd5efef
SSDEEP 3072:A672i3u02AdPU6kGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:7D3rM6Hm7Rkm1tYpBeh2BAoO
TLSH
T1E7F312376D6568375AB8B34EF00E1B1E0DF58E96D820DD5AC8C06E0032FEA9C5A99670
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2450961d324387c44cd812130b44ae7f405f0ff71fd5df68481eb3cee9991ca4
MD5 30dce79c82174a27293919cf964831af
SHA1 500d1977e61e3dad9885a6ad5236c3b4e9d2c3f3
SHA512 a550906ccee884e2eabc62e73cb91fe4fc93f3dde1542254a0e77227a009f7b0af9a9311abf85096f0c677493ab7c03ce52e32a5ebda8755e7f77e7164acc2e4
SSDEEP 3072:+0jGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:+0am7Rkm1tYpBeh2BAoO
TLSH
T1D2C3123B6D65E8775DB9BB1AB08E0E1F1DF14DA6C920DE52C8D85B0423F97CC1A48A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 117KB
SHA256 cf25cf29739163bf08f3800ef239ac1affe2dfb264f8e497f808fa516a9d26e7
MD5 9edde0bf198554b720870f12c053ca03
SHA1 250cd09afff1304394e6fcfe020866328b6da6c4
SHA512 8b3418e7ab6cded0541d336e029b7a2c0f277684039c3ad3354dfd05b4e7dd4a6366266ac7aad58c50f1346ad059d1abe511da841f221e4711c1cd2c593ff964
SSDEEP 3072:OrGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMO:Oym7Rkm1tYpBeh2BAoO
TLSH
T1F9C3123B9D65E8775DB8BB1EB04E0A1F1DF249A6C920DE46C8D46F0433F96CC1A44A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 39B
SHA256 5666e3314c816e6df322b6ebdc5e47234d1c698538985f7db279183fdf09a7af
MD5 a773044ef32b20f96586aca3a5f80b20
SHA1 8f836a9f918b23e5563374d576a5a6a89561116e
SHA512 16c11e0ca1812ddf5e80a716d3472346ef8b162ab67cf5b8d3f0c296d86c1f02c9f2a98f7f00b735854da6f38f582cbc6937556cfa6be99cdc4a9877c64d548a
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 67B
SHA256 d883376273fccb2d7c6ce0329c1c319557cdd50c87e49e81b7dd81d9bd424c8b
MD5 7947da9ddada092fc17e5ad99ee2f24c
SHA1 9cf2aa6c2bee5a79fb58ec6dd68e5460dff35577
SHA512 49fde1d99cc5734d4fd50019d6990435df310b894947616f85c2a3813347cd000970154bc6fc04ef0cc71cb05a72f96cdb0fe9f118a1f3b669c41f92857558ba
TLSH
T123A002452531267F411A2936A355E9A541A500DBA0A2628DB74C745F18A7C784201D7B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 2KB
SHA256 a21e124cc6b1979ad7aa461d9c1112cbcbc52ba7cd6cf09a47fba1190eccb133
MD5 e7c86e75252f964601e0437d464ffb6e
SHA1 ec9597cb441cd1b65869adcbe878cedef409b516
SHA512 f194e7cd358f9ffa9443e500c807f6db229c3d1209d0e2443648bfe912a9ab3068f1ba98e036bf76949f02652f03a08a4c28873385c1476d9b1c8080e10e0f3d
TLSH
T1D451696C79F41D7F620DFB5458E70B8A187840FA9548B84C95AD081CF4FF04937AEA89
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 3KB
SHA256 c2e172ca4e6cd5b17838a694fbfa21a12883bb8b443c0ca846e800b7138853c5
MD5 085ff3eea107dd6b7954a8381a355503
SHA1 3c1b2d7620f87fcb01ec47f72cada711236200ea
SHA512 de7978471edbc9f7cbd507fbb953ae1be8f4c68ac6150be2dcda760c0642b1157eee33bc69e84089765129b2b0618a566234014bdfec48e0fd4f0636c451eb8f
TLSH
T10751896C6DF40DBF624DFB5414E70B8A187441FA9448B88C91EC091CE5FF05937AFA8A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 3KB
SHA256 ba101f7a91eefdd0207943d4ffee11091c2458181f30c22bda9fd3f4d8155b46
MD5 741893fc43368a504197acce6a2eb7f1
SHA1 01efa66f6f063a916ca7f39e824b2fc4b93b2d8e
SHA512 88470c6fa0b856482548759b79890bf830954889526598946bb20fe601e8eb7568cbca884a657e844d25b89efc2f312919b582e83d0ea1201db4f62d8dd7ae6e
TLSH
T16351896C69F40DBF624DFB5418E70B8A187441FA9448B88C91EC081CF4FF04937AFA8A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 2KB
SHA256 2e4ddc0e0e19b452b1f6aca9c2328b42f73d8a41c164ce085d9ba9b2f2cfb66a
MD5 e824d6e3f4addf7dec818da7e7f2a0d5
SHA1 e1d46ccf62444b5f2fbda64f6332883dd7edb4ea
SHA512 3d433332007d26031b0d0824b9623bde1b5c3423fdb89add19dda83475a2e03c710b3e98bdc4aec0da7737b90de2f544f893d1f849339044a1cd2954c302a7c0
TLSH
T11151676C6AF41DBF620DFF5414E71B8A187441FA9548B89C95AC082CE4FF04937AFA8D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 2KB
SHA256 8dca1c6aa841aeae4e0b283d6c42a33a41877dedecf24b0f5d39e4e5fcaad53d
MD5 24ad722e6726f4c6b1160a0ee417aa0f
SHA1 54b3100fe22fe540be2ef8c555b804b58555c60c
SHA512 e012a395a7329b7d9b412e141dc72014d1c0a4f02a5d8e986006ad667d3e225c80fa493109526422870040337d728f63ed971e822761955920e3ceb5170836f7
TLSH
T19651776C69F41DBF620DFF5814E71B8A187441FA9548B89C95AC082CA4FF04937AFA8D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 2KB
SHA256 0f404505580517553db6611a9b1d8cb213693d418edc1208f8eaeaceaf7bff69
MD5 7fa099cb49f47f30bc82d1c6246e84c5
SHA1 613725dd4e1ffaeb66490f5f1fe31c961255dcaa
SHA512 35b7fc6ebeddd5e9c63abd109e7e60e9fb456b940e8b2241963b1a97aa9af0c223587065d5bf2f6ab063c6df7c5fff75d1349c0aad1e5c459de3e77aaf6eb1e1
TLSH
T1E451676C6EF41DBF620DFB5414E71B8A187441FB9548B89C95AC082CE4FF04937AFA89
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\0\settings.json
Size 2KB
SHA256 c5292c78f3724ca0c5f8e06e327f8e2ba24e2edf269b22a16204f03e754ec544
MD5 7da0201fb7599996eebb2484d98a1e4a
SHA1 08b6712f57809d3d030686d084e6d951dc2da010
SHA512 9168b17db1c61361785b7f71d0367145687c03fd9ea879f1576a880046c171cd1c4d7cdbf0074e15bb35c9dff60ceee5dcd31eb7362329755fa841938cf6020f
TLSH
T16451776C69F41DBF620DFB5814E61B8A186441FB9548B88C95AC082CA4FF04937AFA89
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\3055822459\InstalledPlugins\165687726\settings.json
Size 75B
SHA256 d5705f6c1207bdf72642e2a68c97faae06739b8aa9a064e2439b7da434e0f2d7
MD5 2f4ded4fdd2296233c4dc7436641a544
SHA1 298fbf862b0cfab955bd8295373be4ea41e945c7
SHA512 c08f5e1f489891f7767a76d35ac9de51962ec4bc33379bb534c8f643600005922d8b693e3f30ce11455eb76eee1e8ef4a58426b5a42ac8170f0e025bf20d127e
TLSH
T190A00235A8E4F90BD38020047228746405F62F9FF2C224D05EDCC190039D97590D9B3C
MD5 SHA1 SHA512 TLSH

Submit Download

OTAData.json

Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json
Size 29B
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e
MD5 SHA1 SHA512

Submit Download

OTADataCache.json

Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\OTADataCache.json
Size 295B
SHA256 9e36995bdd95ba3da984ef927d41fd43d353a3fc1b91e59ca683bcda4cdbbb60
MD5 b168eae69fd1dbb66d74c2780a3e8d70
SHA1 0b423d3079f0ffeb49c0e609abbe174fbb0feade
SHA512 f5de20034cdfdaa3841e64d388e30fc1b37edc283644cd71a9df88d2532fdf2ca52965728a348ecff79112f8de61991feb4c97601f177a230787a1c44e4ca3b3
TLSH
T1AEE0C244C11469B14C38C30D012B2594B3F627CC010A89FC22DD5A886BF023E400BA33
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 75ca433b69a7a1e14ad7d8deb25e49478dbcfc6aa18f120711193a00992855af
MD5 970f39fc8a7139d1406289ee2acea55c
SHA1 9f55c915d74fa825f841bd7e3724b2f60d0c83fc
SHA512 953cf5b518e0623c8d09d515eacea55e874b127c99af35f274e3aac018e0b8131053061382e567e627407e8f73a93bde8fe6837a870c912d13eef3baee5c0561
TLSH
T179D080F773152A35C7653537C0C2E5442541C61F10CA45599E35EA7D1DA88D31D99CC1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 4a709e63b409e5ee24475ee30ff4b7b89dfa7c9855d4b4daab30d8a161ecebc3
MD5 64ab7bbb04cdd372d7ab13b4da5bb559
SHA1 6be254e643e8c0afd10e062b90510aea43e21b02
SHA512 b8700f19bf1a33541b752b65beabb5fd3c6d71e052261ba2a5d42d5c41240c3034e7b4551e8e50946b9b6178da787770af655fad4f7381d9e74ba0b11fa1bcb5
TLSH
T131D0C0F773053635C3243132C081E0442240C10F10CA46199E30DA7D0DA88D30CD8CC0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 12f5367db8f2b9acf801c8487d76c69b102223edb93f86ef9893128313f2fb94
MD5 5b2c700680c997118d0720fd25a8deba
SHA1 20bd8b909adff03541b10da44c4902455ad246a8
SHA512 7e8950a5fbb09b0a5d62c0e35743652a9186cbbe2503c2e0b294d3b1fcbb0d319a824a83d62229c9446c97b21ab0c94c77f677b985d7aa2ae8c4ff62f5a1ac77
TLSH
T1A1D0C0F773052635C3243032C081E0443140C10F10CA45199E34DA7D0DA88E30C98CC0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 096a48e9100c7d9f593809038c5a74acb97f46984de43add050c935cd87d9c79
MD5 7f7ba3b0cc308b8132ae95e1135ca6d3
SHA1 78fc3fba5511aa63799bc77d6088ed738e88624f
SHA512 dc9905377ea4e2a422ffadef981b5275b93e98579da606f1214984db3c95093c13398eaf133a81f59ccde3f769800f8e2579818829f0ab2eb7fd05dcddd69c92
TLSH
T11ED0C0F773052635C7243032C081F0442140C10F10CA451A9E30DB7D0DA88D30C98CC0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 6ef2d16c0cc731675a23fc69607c2bec180e96f07f2e02b345be2654f327c19c
MD5 c67998c33e380bd412264d97db3efe05
SHA1 fbe7870b0def7d48f549ee34aa868e3e0abb3833
SHA512 1a6e773d1e3aea1c7ae27663404d12ea756d41c53547b75e0980d27333babbba09c3dc2b6def0db227e7b4fe6f19ceca9a54a9ee4a27b7f129e1934065bca418
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 5f9af1b2297815c8a0af2e606d71bb9e795d544f7d4da34ade064c31e28cea53
MD5 112df2eaecca8997c2b532c64576e549
SHA1 08378701c5cd823fdc9fadcf40ce8ad4bbbb64d7
SHA512 6a583885acc434bf359c4668445a907302461f46d98146730e30c0aa5f811ae80f9a3d9c6f3d757a514ab68386e4e6948f85e0c477a3f8b813d7e4a1052370d4
TLSH
T1EBD01213B7014638C41120330113B1080401D60F40094000E839852E1A180900D06851
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 55218cb5d10393d8071e253bd7aefaca1db0a67ce9c3ecfbf2cd8f2771121bdf
MD5 a4d67124c2faf515e624e4d620a65560
SHA1 de83aaa1e132fcf381fed076036a256ebe992bc6
SHA512 e582ddb022274a8e943f32766d8179e714e159499144e035dc32477617abfeba706908dca2f302d56e1e68d40256c5e0d4593906af4d5a595bf5c95506ab526c
TLSH
T130514011F5E1A0E2CF65DA3200AD2C0EB955399148477B875E41C431B8CFBD8E11FEAD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 214d6682d7fbcfd541f8fc94150f7f947d3200dcb0a737419be085c247424cf0
MD5 ce1a2e1f324065c566c38c8d2d157c8e
SHA1 bdffdaa683d395206247ff18990d6ade6e48135d
SHA512 c82e79f7b89891249ff88a6582f1d4a063baacddc4c9a7dbc93a5fd68fd4cfd90304f4a1f6318b119d7b98608add1bdea6049ee473c24ef247f4cf5c948a2ed8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9d224cc73cfa3f090970778c4562023a43e9c64cb42982cecea4a6aac30cba2d
MD5 9f6f3c009085577d4176dbc81ac5b999
SHA1 5b2ebcafb71ae4dc5c4b99b075dc30d5ff018e4d
SHA512 b0605fbddaa1f493ae98d0f09d4c45c9afb271b0ac243b3ce70bc1aa5da268960fe3e5a3ead5e11f4820afdae19b884ead121f1b7606a0c0d790e80814c358f5
TLSH
T188413F01F8D1A4E1CFA6C63011646C0EA9503955480B7BC35E41D471F0CFBC8E01FE2C
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 de1839aff06eadcc644762ff7493890aca05541033c3cc2ce59e13a3b6d0202d
MD5 6ca5967773ef8583e289adfde457b7bc
SHA1 763bdaaece56726bc166296f317b1be1aca052bd
SHA512 2d7bced107bfa28a8565a9ea092fb2c701ec4ed262bc6136c79de0469b7216f8311a1b1fe0349efb2866039b1612c85481e936d0fc1d8e2a86d99c2b2284df1c
TLSH
T1F1518BF353B08A6DAA0652F42A19AD1BCF8C0430071C65B6C5D0BFA793B35A1F311B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 8b3f442e66b870cf087e9fe47a79f188e3bba7f1da52ac59c1741ac28d8ef047
MD5 16fe8ed3660059a25b2e1e2d39512bd7
SHA1 d2d2a670fae051465b4a5614c558ed6fae52cb3d
SHA512 670be5c91edebf53dca57668f811d3fe425f37f1ab0f1576169a9071556f75fc6f84cf08995773cdb7eeb8b7688160de470135872d78d01334e46c7922b3d29e
TLSH
T1EE518DF353B08A6DAA1653F42A19AD17CF8D0530031C6976C5D0BFA793B25A1F311B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 4de885ec7bfb36a9ab06e61e0dd1e7ff9080f365b64b333fa248a182d180d935
MD5 acb1b742c5fa195ce643ff40c2d9c081
SHA1 bb4a9e990299d9e4727ac84ec8fb811db4286528
SHA512 51c899dd5b3d45d0c916d58f4376aeaa193f7d62b70f29a44381fac99f42b407598e0d49f7159e20873e7918abcc9fa0141531476f7d17c3d074f2823d8fdbc7
TLSH
T18F418BF353B08A7DAA1652F42A19AD1BCF8C0430071C65B6C5D0BFA793B35A1F211B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 75465b7dab0bdef393010650ab8c7fb95a438d934fdff24018cd569132a0a129
MD5 8d97b087aebeb92040a731c84721745d
SHA1 95fc8e6f6796d0bbc9a697ab2958dcd7cd264ce3
SHA512 96598f803d04e7a8ad4ee69f211a8571a3bbd82276d5359cebef106a9829d5c07b430db9c05c2bd622d7c45ee26ad0fd022f6898fba91192582eb25c2c366b22
TLSH
T12C419EEB99BEB59B543E093F1E84BC09156BB4380091E8F4CF9AC03DB08D9F30B16066
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 9a921b4e53d00227465a82a813679affd80749a511e1b87c9c18cc4b2e557a95
MD5 1f35d4735c317935c0429bb5b0b361d2
SHA1 d7301d265ba019a4b970ee20f8d213a15f8414e5
SHA512 e44021ebfc711c41ebb2f1f7a12fdd93f688bcd495b4c10982bba591024c4fa45693f8958186a96fba3c83035ad966add9a1919a84cc3e6c0c89504bdc8e45ac
TLSH
T115419BEB95BEB59B183D0A7F1E44BC0915A6B4344092F8F8DB97C03DB08A9F31B16466
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 26831a253f27b37b56ac3d95010668a2d9f5c50d7c5518c50a1b15f86af4909e
MD5 212c49b4f6e02b65d0cfb584ec210f27
SHA1 1ba64b63b85458e562945e546222350004a3e56e
SHA512 a7a49c84277c84b67de88326fdb9e4f5c531129963940f65dba4639b80142b9c75dc88fa823bacd1ebc9c3acf37abdff2af60a9f2c9c42e18369069a8007409e
TLSH
T1E1519CEBD5BFB14B24381A7F1E45BC0959B6F4350082B8F8CF96C02EB08A9F61B16565
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 60f68c16d32c9ec99e8d57785802221e4d778e7822d67ffc174db2007e189534
MD5 93348352f194805286ad80fa866d6fd4
SHA1 21249eb4efd03a311362bb3cc7d21d3a82e989d7
SHA512 47c458cf37ef71437042b72e921cd2c62970bc1f0902f41b93efec981aab11541e39193ac013ce143026951bea517e31b8bb5506706685c6305748d0c7255ec9
TLSH
T16C41A0EBD9BEB59B543E093F1E84BC09156BB4380092E8F4CF9AC02DB08D9F71B16461
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 942c121c0123c83d3077697ce172b530f62135d21dd28c49710e88dcfb66edb4
MD5 a3382d0a28592e47695bb25d028a516e
SHA1 431fba87ba2ed7b195cfbf0af0f137d5bb02fb78
SHA512 9fac7ddb2ff248adc07c15071001ccf3fd3bc4a501954058bf2bf732bcc1af5bc435163fce9a7949f01b7e59ed25d4fc19787ba8f319ab8f53d9bd465c87210f
TLSH
T142419BEB95BEB55B183D0A7F1E44BC0915A6B4344092F8F8DB97C03DB08A9F31B16466
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 fcb8a91bef4a17f4597eface8aa5fbc69aceccd14ea3071c4baea1a3f901d698
MD5 25d0521d6f08c5f34cd57d5fbc6af137
SHA1 b8ff8cec5914ebcb2f07afc97bb65ea75242a2f2
SHA512 7ee690915ff1da617be8c52aec7cc53be0eddde2ac55377967d910934c4fb91d64876f893848227e13ddd6363dc239966cc2f4059abf7a14069e7ab64a8114f1
TLSH
T14051ADEBA5BF719B543D097F1E44FC0959A6B4344082B8F8CBD6C02DF08A9F61B164A9
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 82bb01f3cd888365e47237f11be2a5985e96a85d0270dca4d0891dcd6165f2e1
MD5 ea30b9fdd4e641157bd7ae9c7947ba64
SHA1 e8f9ecbe612e056c6b524da51dc19810488164d1
SHA512 6997a6505fa9efee3710ebc01ccec690944dbb8ea28e9a7ab17dc58e2bb998cf41d9160ea687aea149c969c30202b2deef57f6d10a597c2f5a81b333f353c301
TLSH
T1A04190EB99BFB59B543E193F1E84BC09156BB4380091E8F4CF9AC02DB08D9F70716066
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 cf62bba14ac777f8a1cca0d84cb7987b3fc21da5348dbfda49d1f5cf1c48f19b
MD5 ff4a3439ed518e963020b86d57eb5354
SHA1 5c487292d2de9a07871e18f5d5a3c44e06b1e465
SHA512 7db31e87ba7c8d5c7563990f0b26b0fd072de7b6ca910603df78864525be928e40d548e7bc718932ae802ecc0fdbab9f25001bc09cd4e128bdd53aca208f7e7e
TLSH
T1C9419BEB95BEB15B143D0A7F1E45FC0915AAB4354082B8F8CB97C03DB08A9F31B164A6
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 8930d9ce1f3912fbeaf04f053b0aeee5f6d77bade51063fd5aa9f3d3057692b6
MD5 40e09de88b6bd97a51dc1c95ac15a758
SHA1 7c75039d4ae01f73770f4fd7157316f3f077e90a
SHA512 85694421d29dd61f0e517e0f053748bdf64f873e1662adaf30015dd10b1f472539ed5e817febd585810540257592a6b6b5dcaa9f5f7b72baa040b1bb61d480d0
TLSH
T15E4190EB99BEB59B543E193F1E84BC09156BB4380091E8F4CF9AC12DB08D9F70716165
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 2e3e22133e95e9e13552bfb51fea67d27c50038ad2d35c2b6a3c3545d9670dad
MD5 dd237fbb7995920cc6e38197cdb1be67
SHA1 ec55429aa542024bcb14a5d71b6bd3027f9d0373
SHA512 55cde573bed2435c5826f4d9af411837bdbe2f318d0fbaff6fe1505866de21b3c57664134bcf3824b1594f1beef15db488bec01b708c359bbb78aee7e5c46f20
TLSH
T15451ADEBD5BF754B24380A7F1E45BC0919A6F4350081B8F8CF96C02EF08A9F61B16465
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5a064b.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5a064b.TMP
Size 1KB
SHA256 f7c53bac8615966b8c80dccbbc2c14d2cea75d286a3e2f1027d94cb17296f7d9
MD5 62f61a5b4630cef7bb5d24a817c17429
SHA1 b44322109885013ac44ff630fa34513b2b0ec7af
SHA512 9c1a0880e6e29ff890bc7752846f4243634848a4341ce0bf068fa3643ecebd41a179bad9215bdc279b46c07a797fb8aa2c46d52dfd35515ad78304a1741ca3ac
TLSH
T1284190EB99BEB59B543E093F1E88BC09156BB4384091E8F4CF9BC02DB08D9F70716065
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b18fd937-ecf5-4377-9745-951e38c78f83.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\b18fd937-ecf5-4377-9745-951e38c78f83.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 5KB
SHA256 45ac7230d70cf2f8c5af8d9e234d092e179f07a5db439f6df49e24d162b28d75
MD5 a64d6986258829a71dedce4c765aa38f
SHA1 7943baec487b484c09105de6b2f24bcd3d6d7172
SHA512 080869deb925d87a94cbf9d1c8076ce510c4dc5f58b693920ad0256b391db7c769c575ba3f67d45c1bc1c1128d5fa022241e93161f8646ec23a647b62fa6993c
SSDEEP 96:stN752skDCtib9dzV+dZ8i0oEtklm/7qx+WVHMSm+uecadQj9+gs7KEB:stlpkdaZ8pFr/S+Wi8dc+7K8
TLSH
T1F8C186075F28697B4CC7E21DBA36BF52D2FA102266D51D58EAFC861C0CD95CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 37c9e8032db5bb653ad83dd0336b592c57541a5a2139fe27efc4fccaed477fd8
MD5 91d9bdfb1fa1eb0fc67af5237fb286ba
SHA1 adfcd22b829ae9f4415ef5a307bc9172efb683d7
SHA512 860b907250f170dca5fc4aa3319d08e503f9eddd296e2dd32f095db5173d27add20d20d57cc1ad9fa6e0f6e1111f8d2bb019217d2d4b4a8a30626fca68b5fc75
SSDEEP 192:st30JkOfRZ8panX/S+WiTcUCyhu5OoLc6QMQ:stkJjcu/VnC5Q
TLSH
T149F1B8079E28997B4CC7E61DB925BB17D2F91422ABC10E48EBFC861C08D76DC2307A47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 a665c8dcb74e1df26d1bbbdb4c7f715a530fea33c647df15bd4103286cabf684
MD5 d1896c94ac194edd17fb09c97b87e900
SHA1 bf9c77a657810b59a15be3d7a45dc35fc64da7fc
SHA512 cef150685a95333e06bfeb9cc935b512eab9c480e62a827aaa3738f4f49246b38edf01f4aff8a69226cde8f661d520aae4466ceaf727c1de790d32aafdeaef9a
SSDEEP 192:st30JkafQZ8panX/S+WiTAnwyhu5OoLcTYM8:stkJHnu/V4wo8
TLSH
T1CFE1B8475E68597B0CC7E219BA35FB17D2F91422AAC50E88EBFC461C08D65DC6307A4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 57ed3aeb8a48d283ceca71f78bbe4652427e3905b424ec56915770ca7651eeb6
MD5 f591a63d1b4f4482bc58e77d5e3b71ff
SHA1 dd987cb7bd6b673f9d7fbdb450aa64fc857b989a
SHA512 db4c5b269ddfddca33339d3b79b4fa152ec9fcf978128f2198135925aec501b7814ddf1f2fa775b85aa15a8e25f943b7106d9ddfbd0ba6b8eed9c1b52854b544
SSDEEP 192:st30JkWfRZ8panX/S+WiTcUCyhu5OoLc6vKQ:stkJLcu/VnCSQ
TLSH
T109F1C8079E2859BB4CC7E61DB925BF57D2F91412ABC10E48EBFC861C08D66DC2307A4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 453ac28ac1141953be40c745162bdcd601d4922a2a1ecd5f0eb8ac8a1c700c3b
MD5 d540cf439f4a5fa97c764bd870cf2a4d
SHA1 06a2b74d82aab7ecf9f8a104a7087f895e375581
SHA512 3d2bccc81b617b494d49300df7a0b10d211406f8eb66dca36c2eb79cb79429039904e67cde3550af42f21dc064b75ee2725f81164ec7912ec3de64af3a0e56e2
SSDEEP 192:st30JkWfQZ8panX/S+WiTu1oyhu5OoLcGYMQ:stkJLHu/VUoNQ
TLSH
T108F1D9475E6859B74CC7E618BA25FF17D2F91422AAC50E88EBFC861C08D65DC2307A4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 a0e8642647cdef545d5ef106d2b60c38ec54d16eaffca1d4bdf62a01d41719a8
MD5 db0d9c5c268be50a46956a3bf5df5b2b
SHA1 f05233e9854c2a17b68ce9cec513136f771b66c6
SHA512 5098e87695f6e352aa8506b0507b4558c39e53ba0adc898d90f12acb01ecc2b51cb75129d9b68927f20a31f9ad46ae296dd9148858fe061426aa71300ca37703
SSDEEP 192:st30JkWfQZ8panX/S+WiTAnwyhu5OoLcaYMC:stkJLnu/V4wNC
TLSH
T1A3F1B8475E6859B74CC7E619BA25BB17D2F91422AAC50E48EBFC861C08D65CC2307A4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 27ba30f30f7d4e698db8a44db69fb9b06f4744bcf2091bbd7cb97408c9b1ae73
MD5 02975ad69d3daf7c30f78eb9160b705e
SHA1 916852def9601050ee1378b5ff35abd5452271d3
SHA512 e08a71fe13111463595ae40f10af5361698588765b0ca34b5d8b7272b8a5069b19ee0180c6b67d93d3a020c91ee3b536219f9b5187753a4967d1a47fa690a50a
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 2KB
SHA256 72af4b8592a401033720392f87c18815d39ae77bd3d3b4707a4f3b4bc7d98026
MD5 651bdd558af6234aef174976b397b4cd
SHA1 132ac6e82eab1c6643ea089514e27bd27946c633
SHA512 785ffde929a2734cbb93410e524a6be2b6a8beed503774ef137f0297e9e074479f8691f38317d39dfa6de2121e429ca6daf56cd1ea02dfc19af41614f67db560
TLSH
T16951A7B3B84897B38CE39A84B84D7F43AD75416ADB522F546ACD0F0C01EB29C1342C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 d01747307dd4830990df608c77ae1378be95635b96b12fd08f5f5f00cdab0073
MD5 9a3242f15e11e35a751bc9352dcf1dcf
SHA1 e49f680e7ed0933d9e4998c8c79ba5027578f74e
SHA512 69e4bb8f822afe0dd8e0a106c1cd0aa1b300eb9e194ddace2de081a6862ebd6a70cbd6c8f0f57ce3ab7e0a32c41477ecd76d451f2cb0dca69becfc6691922291
TLSH
T1BF71A777A8A8A6774DE39A84B8892F02BAA50127D6D13F58E9DC0F0C01D73981342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 16KB
SHA256 d48e3765e57ef8ec29d8621991ee868f2749047df03dd55843f7e00c91d0298f
MD5 5ed23d517a7a12a1cce409324c8b7c54
SHA1 6ba571aceec52fe1aa366a4e96efdb774c05d5f2
SHA512 c88184bcd509188d24571f325dc8f2b21fe572b8275c0ffd04e67a990b1ecbf686d542673ddf050768e0b1334091325d9d909861c07c6727a34b4d09092e6a18
SSDEEP 384:zU+aQikB+z/xvxjg/qhEwNbSeKsodMyxO5K9zV:P/UxvxjgC+JrdMyxO5KFV
TLSH
T18C729E2B546D6E2398F3EA44795D0B8BDBB8987291C26EBC4EED1F0907DB2D40302D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 19KB
SHA256 48869029a49bafb0af45aade89586f6e2d3526d478656e69ac91e61844c8a707
MD5 b09cc1a31a14a9acd8779fc2fc9fdbfa
SHA1 f3f530560b3d90beb81e292f6b1b8ebe5c1cd9ce
SHA512 69c353485802aec8f25c0aa2b417d473da0ed98396b5925ea5295b5c503970e6928cc20900c394f8d8ced8b497711c33dc592abed102a2a3e68f1e4ef79e8be5
SSDEEP 384:zk+aQikB+z/xvxjg/qhElN9//pVCK+KNQcryxO5LukDzB9zW:f/UxvxjgC+lAKNQcryxO5jFW
TLSH
T100927C3F9469AE235CF2A58076195B8BEAF4452295C56EFC8DED1F0E06C73D80307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 19KB
SHA256 ada96e1df336b2928b8c4cd8a50702eea80bbdfccceeb9a716c98beb9c476b45
MD5 e82568379211f06aeca06bc72f245340
SHA1 dc108df5c170862a43923642d023fc23c34f1b0a
SHA512 e547dd3512e1f4d6737f49dbca41fb7f39f9b833401fcc8c9bf104871dc1c82c11c02b01d272f9427a5eeb79adc50c803bdbffca6ef312de81f8aea91ac5dd57
SSDEEP 384:z4+aQikB+z/xvxjg/qhE6N9//KVCK+KozQcryxO5LukDzB9zW:D/UxvxjgC+TAKozQcryxO5jFW
TLSH
T1DA927C3A9469AE235CF2A98076191B8BEAF4452295C56EFC8DED1F0E06C72D80303C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 17KB
SHA256 560b4cd10bf626d9515fbfb8ca838e35d48410a76dbca6d9f1f7ddbf2f92bb70
MD5 6b0b3e58de7d4fdd7fa7dfb22778521b
SHA1 df17a6fca88a243d63b2849c29b22f6740579832
SHA512 285be88109808eaa914f7f917f6115cefcbc02e9e95e5d421f3889d39b7181716fefda88a2657c6c9a64da8bf65f9cd022986cde2d01920093423365949c6063
SSDEEP 384:zz+aQikB+z/xvxjg/qhEMNg//BsK+KNQd/yxO5K9zV:2/UxvxjgC+x6KNQd/yxO5KFV
TLSH
T1BF828E3AD46DAE3398F39681761A5B8BDBF4496291C56EE84EED1F0D06C72DC0307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 19KB
SHA256 ddf70cb0e334d58496b1b03a67589f08b46b81066e59928e060c5055875a725b
MD5 aed733f0a4e642b87f4c83792d1169e2
SHA1 f0cf6f35330835ba72c4c059b6772820250740dc
SHA512 91be2c3fc99f26c73f3f1ffade506d1c7bed45da7604f096a085762a44337f7c55f358dd1cffea93ac6a360d8d7a0f0e5976f649ad8751c1d58beb06adde15d6
SSDEEP 384:zR+aQikB+z/xvxjg/qhEA8N9//KVCK+KNQcryxO5LukDzB9zW:Q/UxvxjgC+uAKNQcryxO5jFW
TLSH
T103927C3E9469AE235CF2A5807A1A5B8BEAF4452295C56EFC8DED1F0E06C73D80347C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 1KB
SHA256 5291fc263abaf377415075cf887fb66083a3c25a0695cd12d0250a1ed3f6b0e3
MD5 22cd2de67b6fdef1f1d70803e28f76d2
SHA1 0e5f83af4b7ae2dcb70fc4e325259b39ef398ef6
SHA512 8d704c3185d727df1da0d2e0387ed82488e4a6f2ebaccb4ef17e6dfba9ad8d18985b8c8277c3d0986e33d31a42b63666ce38fd0a280e4436f4a0fb31edcd2a63
TLSH
T1853142B7E4D467B3AC9266C5B149BA836D60045AC7519F0876CD0B1802E729C9226D26
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe59ae47.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe59ae47.TMP
Size 1KB
SHA256 aad31ea80ec9a825fe191e5059b147dda9d9c479901e47abd1578f26176e4ea8
MD5 1dc8716ac5e98e25ef8583b5e0fe0571
SHA1 be758cbb0ec6ad5d998351d2388d3465968a0011
SHA512 2cb05d9f6e84a245bc1fb16a306129a682224d6516f786a8e77370179135aa247d3053276188be8948aa87af4b2cb1f1b2e2f28264e506a3d9c25a4065ac8a43
TLSH
T15C2140B7E4C867B3AC915AC5B109BAC62D90446ED7509B08B6CD1B1902EB59C8263C37
MD5 SHA1 SHA512 TLSH

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\TrustTokenKeyCommitments\2026.3.23.1\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 b7a9b3bd7bdcbec96b7b99f26774265040cea59779af20820878741a95d9b0eb
MD5 4144be9d7b523e38b1c97290c2fd0671
SHA1 c2fbecf0f5c5d645cc6205d7475e042f2a6aa01b
SHA512 8860977510d31c013cc49d4ee1dcdec3f59935a74254b3fc4ade7a377dcf5c4910fda5fbc6a1d011c57da3c2c4e84075939c048475054b372445f93fcabd5c89
TLSH
T144E017D080C70487FF65D23A09704C8D19794920E814E7230DA5A9DDF35F3D3D91144B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 2e03f5898987298388bbc0a49d5e6066852e9dcb1dbd2fad76433fd2fda69cee
MD5 bc585a99f1c770d40676a46217c53d97
SHA1 a7279cd507c54288ae71960cabc169abfc791397
SHA512 9e28494694cb2bb8e066142f9ea1ce6aa40e279a8208212833e070a08ce9eda97081427ace9c8cc07c0310881ea3c12ee965c21da14e4236f780fb7b63fdb8c9
TLSH
T1A4F022D052C20483FF36D27748B00C0A74B88640DAC0D3131E9429F9F68F3A3C242087
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 a97285ced60495177cc59074d98ffbdf48f2458d057848f16196f7f911816de0
MD5 86e97f7bcf1e594a87a5ef3c8d8a6f2a
SHA1 4b16b586da78fbaad1782cab50ea6f77a18bae87
SHA512 b0ae66886a9a4c6b088904325d61d47a26d6f76c2b72852e6ca57dad55c077586c50725bf11fcbe6c57d7ae23f8b9af419a821ba46f2555221cc902baaaa2ba4
TLSH
T150F027E052C20497FF72D27708F04C0E75A84644CA84EB135E9415B9F64F3E3D642483
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 b9c1c85f0b5ca0804b5945d71dde81f456057a14db7a923333fb12ee656ac139
MD5 192b055730ad63aeda514ad0660c5b4b
SHA1 8af8f6a09a323a2ace5a7f399072f6116595a4c4
SHA512 9865212201ae2f7f8d11145eee9cd99e2c28326de24c5a5ef8dfd5ee42de529c06659c72cfb8e267d73b8bd136940d82e32d2ddcefe00dcd34dc23abb37d345f
TLSH
T1D4F027E141C2055BFF71D27759B04C1E65A842948984EB235DA426B8FA8F3E2D501483
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 7ce55c2bc00be1c299cd90ddbce86a7bab59e027a83e78912107b8cb9c6d9275
MD5 7f037f95358368e119d9deeb6e893b9c
SHA1 6de8db582c877daa241065f282a3a82d5466e28d
SHA512 da0f39824076615260733cc39103d83d6f846898fa68b4a5b1255c250360185c92a5ec35838b2f75232091d055e9504f21d65606e26fbc2d2cf9685decc23fa0
TLSH
T150F0BEE0D1C2004AFF65E27618A0481D256A4694CA84AB175E98A5B8F64F3A3E901487
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 d431470f396b85eab17305c751c4f7a9a02e5066c63903d0eb0e020aefb85a26
MD5 10cd549a0bfa1aa20a63baa54cecb090
SHA1 7f2728cd049ba1ca092d02c24e29d007b8d42e11
SHA512 a539affa6301b8e62e7a1d764998e3b9887a765e5988eef92ff0df3dc4857302c233eb8b6d32141b7ceda80e11970fc792cc38c89caa929c0a502e26051808a3
TLSH
T1DCF059EC41C74067FF31D2B75AF0084E1D680A448956DB531DA854ADF68F3A2D981843
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5dd535.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Code Cache\js\index-dir\the-real-index~RFe5dd535.TMP
Size 48B
SHA256 1d179389c6cd69d716e593828908ed9e21167bfd7af33523b9c4fb91ca7d5529
MD5 4d5a5732e26cedfea9d8c36401033c22
SHA1 47b3a11c5e279bae6b28b3720e6a209a88f3061d
SHA512 002f0dd663a2b4509cc970647d014bb9754ef9f731c20fb11013108010b5c308c98c01863f4268d75d75d7280d8624a1bcd0c02aad263eec4a447ca33df0958a
MD5 SHA1 SHA512

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\ExtensionActivityEdge
Size 32KB
SHA256 aefb267ca50676ff14f1d504549d8a0a838339d3eae353c1366dd693a6d0ebc2
MD5 045d83499804e4725dbb720cd0a98b63
SHA1 b0f459d9e7ee2b6925fc1a09ea1ca099d928288f
SHA512 2e147102da4144eac91f9010da93dfdb2e648b7481e7f48d99438c745adde13fbb9495493158bd85848a474459648ee03f270bae8ccde6cf60058c430da00a7b
SSDEEP 24:TLcJhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/5eQQ:TAm+BE9ZW9v/3WOT/
TLSH
T130E23A2A5E3C7121CD66713A7C61A42658B910DA977336F23EE000796F8268BC474CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fa62c72-ab76-4599-8f6c-bbe321bafdbb.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\5fa62c72-ab76-4599-8f6c-bbe321bafdbb.tmp
Size 1KB
SHA256 479278dc825d1d18906006facc0bdba09d9ef126fe079372f868eefc70bb10fb
MD5 891797b74d7b3fb5be83bd9843294abf
SHA1 7534d6f5057f37f6eaf34c23f28fcb8850d16164
SHA512 d151d7df8d056a5909f96c8c9595b9c51672784095b23609214dc820b7a883765d07ff068da828b518d8568a2bcf8fb762673fedbbd8451ef9f28e2d1eed1c5b
TLSH
T1103168F743B0856DAB1642F41A299C1BCE9C0530071CA5B6C6E0BF6793A25A1E311BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State
Size 1KB
SHA256 28efb943a77a02c0683b378c3e1ff1be07f704a25229c5f68af898ebafaec49b
MD5 2294b27f9da5668745bc49e51c2ca556
SHA1 f37022eb53897124fd2ee338bac6b419ac343b18
SHA512 8eeee68de21d4ae35f5d40dc92d3382f925285db6b36d5ceb03edb9e1f84e6287c562a0d38a59296d2d8443ccf064527c1226e81b561585e603b6b61d7037683
TLSH
T19E3148F743B0856DAB1642F41A259D1BCE9C0530071CA5B6C6E07F6793A25A1E311BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State
Size 1KB
SHA256 1437bcd9e61dd6cd7b878ebbd7b13a8a7bc477267c99f5a81959fdf152e7b6af
MD5 5d0b57fa9c0fcee7f3a5d31f8387fe24
SHA1 060a667829c4460d9a3ad4c72c9d79a04b9e9764
SHA512 8896a85e51012a87a3a85291fed1bc412a98fa36fbfb30f258e3562ce750f4bf9f0b9dcd934ce2a1849cc862712ca054cddf1a4c6e0cc667f93de8540b283c04
TLSH
T1B63168F743B0856DAB1642F41A299C1BCE9C0530071CA5B6C6E0BF6793A25A1E311BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State
Size 1KB
SHA256 7a7a10874b4246dfb20b97215c49ab2bb6bac1c453d676c964fa87b62a6b4a8b
MD5 0c5381525430e0ca7041a6b61465eaf8
SHA1 7a40eaeb742a4281f9a88e9b2cd228fc2a01cc26
SHA512 8e3ea94c0049e83146dc3e32df1c9682437eb8eba1b2f4a60c646364e14be170fd5b7b9270ffd60e1fe4a6e6f9de8a7899a020f4d12990c30781569b35c28d79
TLSH
T158318CF743B0856DAB1643F41A299C1BCE5C0530071C65B6C6E07F6793B2561F310BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State
Size 1KB
SHA256 2652048a6230b76ed73999ead1385b78093ab80564d39f5f73d07ebbdae5305a
MD5 8d7b5ed907d010258d909f6060bf2e84
SHA1 193fdb92f1a52ba99ff09cb7e369a45184c030b8
SHA512 32a6d6b60fe94d2cc20aa9fe562c0a3f705cf730742d6e4f2ed721c992127fedfad072040d8aa9d908f963c2a417f7a75f74d31422d9fee9bb8af6d8b9b3ac66
TLSH
T18A3148F71370896DAB1642F41A199C1B8F9C0530071CA5B6C6D07F6393A36A1F211BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5e754d.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\Network Persistent State~RFe5e754d.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 4557fdef318f508e768696b496dfbb5d5f85d8bda1ebfec30a0b51559db054f5
MD5 d113c26421b21cb1745354407b871095
SHA1 93514abfb43968d1925b1dd732d77ad0609f2f2b
SHA512 b7f0736aeea215121065f399a9b4414c638118d08587a8df344b05da8dfe23a0eeddc9c19a5e8fb2d0feb7ec9fbbc3be5da6e5965b27b70bc3146e328fe88dbd
TLSH
T1B83177E782FFF42A10380E3E0E04BC199DB6E0364192ADF1CB96817DB0855FB4B12826
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 88468620ced99232d683965b7ef789ff57a0b1b498049cedeb2d3de6e3dc3f2f
MD5 6936f39e9f8dcad63a419fafbe34b09c
SHA1 cfb56633de3aab4e25f707196a1c4878e032fa7c
SHA512 7b3f6d36e3950eb8aee424a68517e8b500744d4bd7a90cb24d5d0784ac8702ae39037961714fafa39d2a4f99b1f6835c9929c574d9549ca9e77d73093d2eacb5
TLSH
T14D3157E782BFF82A10380E6F1E08BC195D79E4354182A9F5CB96816DB08A9FB4712856
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 e4fe2d53701802177e25c93767bfe1895a3b18ad380458a9a1dcd9408383c6c9
MD5 52a819bc3b067aae8b060aac6833c908
SHA1 d2cd08818a0ef2a21a2ce6321d59dc9045f96c09
SHA512 9c665f4e6cb3997d404e84f446fe342c5a21d645ce7e0a60c21d237cf8314b77a8288dd852f04e730bc9e2ecab3d597f59adb34b4ecfe59d072ed6fdec42ab89
TLSH
T120317CE796BFB62B10780A6F1E45BC055E7AF4300183A8F4DB96816DB08D9F70B12566
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 2e83713401e096ed4610a321d18e17af7d6133f4bc85af086caf88a3e42f34a7
MD5 db01c7f439306a485155b2dd246dcba4
SHA1 d689a4b39101a4a2c50f68d336c7d2ba5bc0571c
SHA512 2c7f1235062ee2411e6b40432bea2118cc41513cdd2c510cac314a71aac01b0b2f11f64ca6c6df7c1e5f54bcece98310a38a0379dd8d8b3207df0ffcceb7c2d3
TLSH
T1C5316FFF92BFB41B10380AAB2E44FC056E79E8344182E4F4DB96826DB0459F70B53966
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 8150c453a43352b1c1c4a9b6f6dd92b078045d7f905a2234186dd637389768c7
MD5 8ead25996b0a28b1c8caac760fc375ea
SHA1 9f545451cbaa9c4551ea7c8bebd7264689724240
SHA512 1b48bb28752db28f50e7df464d744cef8f4331683ee0ec078ed13dc43e2de17e9669c26375dfe3bf7f250505a411982375b844992bdef7eba8cd3afa1bd93776
TLSH
T1EA315EDB82BFB51B1078496F1E04BD0559BAF4340183E8F5DB96816DB08A8F70712916
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 0ce308f6440526a27001872b410f32618356993bff1583b1c93c9231c4601686
MD5 133bfca184c1974f1658f0a1c46051e5
SHA1 8f713a365d704f29662cdfc9a451397434485f54
SHA512 b5fc66d535e9c7e7d1be842a8a6c84efa416382948526a63b0c229bc4f72b5625dbdf2502b6483795ec8ff6408bac526a1c767442d4d5e3d4e5157520684056b
TLSH
T1162137E785FFF42620280A7E5E48BD295E76E0300182A8F9DB96826CA1515FB4712952
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 07c88a0f1436240d3ab9d0078812969894ee5a04b6fe318b0eda0622e91c2f8a
MD5 ba6c07b79bef83074234a782989d760e
SHA1 e91913688b926137dfabd300a4d5ad56ddd86bee
SHA512 5c5912c509efcc2b1eb501e77340c687357defc8e8cde24686334e13fa0f737af28cc1abcfc88de6fc88c4af174edec315480cdce50a67e9750901ea6a5928f6
TLSH
T105315BEF87BFB41B1038066A2E44FC096A79E8344192E8F5DB96812DB089DF70B53526
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 102061d44471226082150f23763f949366fe4469560d6f11dc9132a96cf8b143
MD5 c5dbba64cf0dd5a21d24f1d9f95da148
SHA1 e22653356c56c57ca322fab842037542a82fee57
SHA512 19caa3992ea3f38b937d68cda8a83c0185a1891e269a09aefb9dbcc31b08583931038dce33aded7a22f95372a44afd7790f8f75f9c5fa7b1900d80501a2d6a6c
TLSH
T179315EEB86BFF51B107C0A6E1E44FC055979F4344182E8F5DBA6816DB08ACF70713556
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity
Size 1KB
SHA256 cd0827545fa6c07373e3fa876e2d1ab3fc3742ff3eadc0263abd5fb62dacfe7f
MD5 748f34ac9904a0e5e041c439c093244b
SHA1 a50de153fe7418547a92d0f3573a339507ab0357
SHA512 29ec43d0f9945bdc823e9c7e97a4d00ae293b3cfecc80ccb492c0183d37b2d44116c3f446877b091c34f30e453d8eab530e53c1a82f0a7d8834f6ca9812eb75c
TLSH
T1393190EB92BFB62B1078096F1D44BC055A7AF4340143E8F4DB96816DB089DF70712526
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5db20d.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Network\TransportSecurity~RFe5db20d.TMP
Size 1KB
SHA256 015ab14ce781d71876fef5c3a176b33620687829352fafd6cd84455062b7f963
MD5 802b4d99e68a81868fb7d3d490affffd
SHA1 17047317f2614d755646d9eb044c08b34f7771de
SHA512 3d4aa0124fdbed462dbd219f4a418a792671e5dcb83447bfbe8b62609d80777a31ab978c9ce5c6df1608b3cc5487f2caf3d025a8da7a5499a79b835705809d23
TLSH
T126216BE785FFF427103C0E7E0E48BD299E7AE0300182A8F9DB96826CB1515FB0712952
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 1855e9520a0a4a517e8e63736177291c7456cd43e2c2e3a8bb96abeb6b82041a
MD5 c9c81054096f5cf51b596e36cc5213ee
SHA1 a896166ec4d0182cb97216a2d334501b4e389b26
SHA512 277ddc65b1be02aeb6a4a274e62ac240c7d85821f28f4f2c832718a8c85d43e6c672e20338e7a051c7bba6e5a1ee6421b725901aace88f0e95e4e5eb9a0c3c6a
SSDEEP 96:stSMoIFRb9YffHdC8i0oEokbnm/7qx+WVHMSm+uec+Dk6Mk8ykQjDo+gRwMEB:stSzWEflC8pFpm/S+Wi8k6QykZ7wM8
TLSH
T143D1C8075E6C59B74CC7E2097B39BE16E1F66162A6C10E98EBF9871C04D66CC630B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 7KB
SHA256 017ad06fef0c39a8be499d610a637504dd901dd629d4c0aec4805a71ef226aed
MD5 89ca5c28839322fff1c403cb1ae47619
SHA1 ae65819adb7e3a90954a5e7e35956b3e6f6d74f9
SHA512 6c5b64f79fcc7945648bcd59cfbfe81e257b1606edea5768e38f5668b713d7dc8629afa15897fd2f49e9e5b458e10ee2016b476677384e68264366732a1bd1ab
SSDEEP 96:stS05CI1wbDYffq/C8i0vhEdkbkm/7qx+WVHMSm+uec+Dkjf8RycQjDo+gsq8MOB:stS0UgfwC8paOt/S+Wi8kjWycZ78MC
TLSH
T1AEE1B7576E2899774CC7E61DBA35FF52E2FA615267C00E88EBF9861C04D66CC630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 51ecd626784c5401aa2e5b25f4259254738bd0acd3d78bc7beed2161a38c26be
MD5 20535606a3e0dafdf540c08b04bd7807
SHA1 a394280a0ed1436a17f96d31384581791408644e
SHA512 85331f779a8052bd78047a6c2cd1a7f43dc741ff82c3b68d66162bcd96a8edcbd420bd7a92b120c9d5d86e0591731f5cd6e87f9ba92533b1097ff6556472898d
SSDEEP 96:stSMeIFRb9Yffq/C8i0vhEokbnm/7qx+WVHMSm+uec+Ds6jUykQjDo+gsqEKOB:stSBWEfwC8papm/S+Wi8s64ykZXEKC
TLSH
T1E0E1A7576E2899775CC7E21DBA35BF13E2F5616267C00E88EBF9861C05D66CC630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 9fe0f0b2398f4c11d10cb1388e76f4742ed3ad0ced1146975fc73e49c9629504
MD5 7e5b98411462d994648cfa00c59dcf3c
SHA1 9622e7d41a0c7e89820c8a3405555f2856edb3c3
SHA512 f89b6d11df72463a0976be7033e63f6eb5e3ae2a7cf40194fb4a7aeafbd8ae890ceb9f22a6a2bc9fde342ecc87c1b0900ba55fdaba22ca9ec0bd427e00190338
SSDEEP 96:stSMrIFRb9YffzC8i0vhEokbnm/7qx+WVHMSm+uec+DHtEZykQjDo+gTuPwMOB:stS0WEf7C8papm/S+Wi8HtWykZywMC
TLSH
T1B3E1C7436E28597B4CC7E2197B35BF12E2F6616266C00E9CEBF9870C05D66CC230B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 2bcf6c071e66f488be9fa1dedaf26039758f32fe3497a56b612a2c17247aa9fd
MD5 f18062a80450a8b158e68130a5cd1e5b
SHA1 35a9b8b962bdd5cd22dbd2094857e5bdc1389c8f
SHA512 68c4a12c4deebc08d20af4ec93df4e8eb6e4542a7d885aa2e5d1f1e494228b9cef426e431d1542c2ff6febda92e0728fdeab1c703ed6daf7964303bb8cd2a190
SSDEEP 96:stSMeIFRb9YffzC8i0vhEokbnm/7qx+WVHMSm+uec+Ds6jUykQjDo+gUGwMOB:stSBWEf7C8papm/S+Wi8s64ykZ5wMC
TLSH
T15EE1B7436E2859774CC7E21D7A35BF12E2FA616266C00E98EBFD870C05D66CC630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 6KB
SHA256 9df883915f65a24434d1b19516c54770218c42c93429077a7610028da10a89f4
MD5 0cce802da8a083f3e5355e0c9708f74c
SHA1 88c4a954c4984fef9e6e47e4e279b43f4a9a2672
SHA512 1a30ce219c992125c48abc9455db538029df9b115d3e0399b0b494cad29bc311d1a48329fb21c3aea58fae3df929aa18117339ade1cc58a0f61feff79047b075
SSDEEP 96:stSMrIFRb9YffHdC8i0vhEokbnm/7qx+WVHMSm+uec+Dk6Mk8ykQjDo+gRwMOB:stS0WEflC8papm/S+Wi8k6QykZ7wMC
TLSH
T144D1B8035E6869774CC7F2197B35BE12E1F66162A6C00E9CEBF9871C04D66CC630B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 7KB
SHA256 6918e24d4aa0b75df368890fe866fbc8baadff5fce631d20051aef80c6b5bb11
MD5 ed18133f1e7f8342261c838a92e39a0b
SHA1 43b82f1769477cc474671177f59ac81bfb9405d8
SHA512 5c18834a32c4f09664b539d12041cb9a25374f4a60a8dd1e2aa91107de20937fe57267d235e7ff070dfe80b772ca95ea9e6e379409cd39e922f008dbbd58ddf8
SSDEEP 96:stS05CITbDYffq/C8i0vhEdkbj4m/7qx+WVHMSm+uec+DwBlKycQjDo+gkqYMOB:stS0UbfwC8paON/S+Wi8wBoycZTYMC
TLSH
T152E1C8476E68997B4CC7E619BA35BF13E2F61152A6C10E8CEBF98A1C04D67DC630740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences
Size 7KB
SHA256 daac5a62046dbfa59dee0eed3bbb99b5caf04d154ea92eb909e57aa0836b4bef
MD5 033e9e717f8363afc3a3535aeb7cb4ff
SHA1 17a3fce1455bf7f1c79d331fc0bde6183304837d
SHA512 969c6bba80e97c584cc5c1d80fa1f55730b4f0b79a48b840510a4d96735db6fd75079c2b5d88633ce3b3d5d96a7219d070a63d3370263772ab4215c59166b82b
SSDEEP 96:stS05oITbDYffq/C8i0vhEdkb3m/7qx+WVHMSm+uec+DXIz76ygQjDo+grqYMOB:stS0ObfwC8paOW/S+Wi8XIzuygZ8YMC
TLSH
T176E1B8575E2C997B4CC7E619BA35BF13E2FA5152A6C00E8CDBF9861C04D66CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5dfdbc.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_3055822459\Preferences~RFe5dfdbc.TMP
Size 6KB
SHA256 e5c87e3c6d9b708e98f1349339fe8437b75e5fb70e48b6cfb30178d7f9df0520
MD5 f572fc8346981bbff168e69c3eb7c374
SHA1 1a2eab8fc50b76e4f97980101ea0038881b1f6d2
SHA512 95fe6d7454a15ea0834414661a6530b957bf86807f255f1f5820f36de62a069d9ccfd47f3609fea0cbd5bbddd6403b60aebebfc8aa474a56b090c3096d110a27
SSDEEP 96:stSMCIFRb9+ffHdC8i0oEokbFm/7qx+WVHMSm+uec+D6G1iygQjDo+giwMEB:stSpWyflC8pFpo/S+Wi86GwygZgwM8
TLSH
T126D1A8175F2C997B0CC7E319BA39BA16D2FA115166D10E9CEBFD861C08D66CC630B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxStudioInstaller_B1C18.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\RobloxStudioInstaller_B1C18.log
Size 7KB
SHA256 41bb7a5289271980d45e776c043794f6da6cab40d3af2cdb4d8b6eb94d20df32
MD5 7a5b0ad5a5326f7066009dd574342e5d
SHA1 9f9b221b39823390d0706fb226e46db6e365f77c
SHA512 b28bb3f6691fb7c3cd5d71e76a0a7e38282e2ff4abd3709dfcb3427cff604381921e6790170600b0c53deba55a127a64371e3c35f10c260a6a365cd6971b9f8f
SSDEEP 96:KXLvmc2pSQQKYGi6y6uhS+wOhcZK2xSWPj/Wl/Km3L5QJDU3M2:SLvmc2lY9F29+75QDU3f
TLSH
T134E1F05DD3980434334D214F975A5EAF9E82BC0471D5B270F7DFA20E53D8287AADA2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
Size 223KB
SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
MD5 2ef00fa979161001a3a5cd5169a7de48
SHA1 0d3ee6044ef954db79d4db9984cad411dfd4c3c7
SHA512 f0b7f015d3e766b390a663ca5b1498175fa241259cad73f4b8d2b9646b56bc08a698fea7f5a28324b9a59af1622296ef79d77830a50bce14fd5f02f7f9228fdb
SSDEEP 6144:EqU9NgI6FdZL52dTOgwQh1hV1AP2A2FTR:knh6fZL5mOi1hXAP+9R
TLSH
T1E624AEAACF953C4A28E3F094C9AB037ED919C3629DDAB0B31D593845C78972D61FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmp-5792000000.tmp

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\tmp-5792000000.tmp
Size 13KB
SHA256 6bc8c801ce7013da833329ccf2db1a1ff50ff3d2dc6f4b960602fb61a15eda1f
MD5 c9660dc6998f1207f94dd98d9617a29e
SHA1 fdcab238d88db829563e60556f694254df4a6248
SHA512 ddda1c81cde63c5266a87234da892370c32944b797ce47e99a9eaaa120fc21145b049c9eb5ca64e36a3b384c46d56ac25b14e4ea41b06293e5bd192dd56b4681
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkg:Ye
MD5 SHA1 SHA512 SSDEEP

Submit Download

8913724486d5e3c463c493b25346ca31

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
Size 64B
SHA256 013cf536337c907f3941ec697cc8f9ddd14f7d17854056fc24f80d5a256a7b5b
MD5 b1b8927f614aedc5dfa0a09050fc8618
SHA1 c7e439f8a287f6cbdb7a490ddc8188d57f18de46
SHA512 294a898519b547188f6d284333c5e4b876c5da65f64b3630ac5af2b1225b1568180e2b49e42d0c29a66c6adea1ae27f2fa7effef491ff4665388377d9fe0b649
TLSH
T1FDA02282238A0000E80B383330002F280C88880020088023F02A238002023808C3CF02
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Unconfirmed 759901.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 759901.crdownload
Size 9.7MB
SHA256 a33eeac3fde1d1f99de2df08d63faa818ffdfcf2ace6a37e11bec1fe59409c5f
MD5 ad0dfa05fcbf007b1e2e535139317ae1
SHA1 8bff45114123dad46374913eac070a7255ca57df
SHA512 98e470bec6520eff7ff701d3448dff3682c39a1a9f95211595cb6fd5fde63ba26aeb79ccd32fe7adc1ab3e27d551474e41d4e56c1e2d8f01d4cfe9715c7c234b
SSDEEP 196608:ivgkZi/+KxW/hvjyysmsxP66IM5e5QIfqZzcz9P:iv3KpysmsxC6d5e5QI8G
TLSH
T17FA6AF22B900C032E8D100B296BD5FFA997D9E340B7954D3A7D41DB95A705D33B3AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1840-683-0x00007FF682B70000-0x00007FF683B70000-memory.dmp

Download

memory/1840-2553-0x000001D401300000-0x000001D401700000-memory.dmp

Download

memory/1840-686-0x00007FFAB52B0000-0x00007FFAB57FC000-memory.dmp

Download

memory/1840-3104-0x000001D413320000-0x000001D413720000-memory.dmp

Download

memory/1840-754-0x000001D401300000-0x000001D401700000-memory.dmp

Download

memory/1840-3102-0x000001D413320000-0x000001D413720000-memory.dmp

Download

memory/1840-3107-0x000001D413320000-0x000001D413720000-memory.dmp

Download

memory/1840-2551-0x000001D401300000-0x000001D401700000-memory.dmp

Download

memory/1948-1343-0x000001B2B2FA0000-0x000001B2B2FA2000-memory.dmp

Download

memory/1948-1334-0x000001B2B2E30000-0x000001B2B2E32000-memory.dmp

Download

memory/1948-1333-0x000001B2B2DE0000-0x000001B2B2DE1000-memory.dmp

Download

memory/1948-1345-0x000001B2B2FB0000-0x000001B2B2FB3000-memory.dmp

Download

memory/1948-1346-0x000001B2B2F70000-0x000001B2B2F75000-memory.dmp

Download

memory/1948-1336-0x000001B2B2E40000-0x000001B2B2E42000-memory.dmp

Download

memory/1948-1335-0x000001B2B2DE0000-0x000001B2B2DE1000-memory.dmp

Download

memory/1948-1339-0x000001B2B2DE0000-0x000001B2B2DE6000-memory.dmp

Download

memory/1948-1338-0x000001B2B2E50000-0x000001B2B2E53000-memory.dmp

Download

memory/1948-1341-0x000001B2B2F80000-0x000001B2B2F82000-memory.dmp

Download

memory/1948-822-0x00007FFADA6C0000-0x00007FFADA6C1000-memory.dmp

Download

memory/4440-894-0x00007FFADA400000-0x00007FFADA401000-memory.dmp

Download

memory/4440-893-0x00007FFADB330000-0x00007FFADB331000-memory.dmp

Download

memory/5172-1568-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1574-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1575-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1576-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1577-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1578-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1579-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1580-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1569-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5172-1570-0x000001D320CD0000-0x000001D320CD1000-memory.dmp

Download

memory/5536-929-0x00007FFADA6C0000-0x00007FFADA6C1000-memory.dmp

Download

memory/5728-3775-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5728-3768-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5728-3772-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5728-3770-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5728-3769-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5728-3776-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5728-3777-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5728-3773-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5728-3774-0x00000278025D0000-0x00000278025D1000-memory.dmp

Download

memory/5792-4691-0x000001CD468D0000-0x000001CD46CD0000-memory.dmp

Download

memory/5792-4070-0x00007FFAB9C30000-0x00007FFABA17C000-memory.dmp

Download

memory/5792-4620-0x000001CD387A0000-0x000001CD38BA0000-memory.dmp

Download

memory/5792-4622-0x000001CD387A0000-0x000001CD38BA0000-memory.dmp

Download

memory/5792-4695-0x000001CD468D0000-0x000001CD46CD0000-memory.dmp

Download

memory/5792-4693-0x000001CD468D0000-0x000001CD46CD0000-memory.dmp

Download

memory/6004-6149-0x0000021818AB0000-0x0000021818EB0000-memory.dmp

Download

memory/6004-6144-0x0000021818AB0000-0x0000021818EB0000-memory.dmp

Download

memory/6004-5600-0x00000218033C0000-0x00000218037C0000-memory.dmp

Download

memory/6004-5598-0x00000218033C0000-0x00000218037C0000-memory.dmp

Download

memory/6004-6147-0x0000021818AB0000-0x0000021818EB0000-memory.dmp

Download

memory/6004-5168-0x000002186A290000-0x000002186A34F000-memory.dmp

Download

memory/6004-5074-0x00007FFAB5C80000-0x00007FFAB61CC000-memory.dmp

Download