eea5136d2e39678414ffacd6b0cd17d827b94ca5e09e9468a07da262ccbf226b

Analysis

user interaction
yes
max time kernel
899s
max time network
901s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 20:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
roblox-studio-1-6-0-7330989.exe
Size 9.7MB
Sample260808-y8b4jafd34
SHA256 eea5136d2e39678414ffacd6b0cd17d827b94ca5e09e9468a07da262ccbf226b
MD5 a5f81d2116ef82c09ef6390931e3e516
SHA1 41bf5bc16a0461378735c770328db29958f219d5
SHA512 ea06f9a9da51c5f9121a15fe82571cdbf88e49bd142719d3217436191f7d10c6c1c99b197f7a0150b1d0200a529f0db5bb82046d39f3f178a5ab4cea9cabf121
SSDEEP 196608:Zjj7ZtY620KULyMqDzi1msxtpEdDHTXom5KRZck3T:ZDZKli1msxtGFzXom5p8T
TLSH
T1B3A6BF22B900C032E8D100B2A6BD6FF6993D99341B7954E3A7D45DBD5A305D33B3AB1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4544	RobloxStudioBeta.exe
1512	RobloxCrashHandler.exe

Loads dropped DLL 23 IoCs

pid	Process
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
1512	RobloxCrashHandler.exe
1512	RobloxCrashHandler.exe
1512	RobloxCrashHandler.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	roblox-studio-1-6-0-7330989.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioBeta.exe

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\D:	RobloxStudioBeta.exe
File opened (read-only)	\??\F:	RobloxStudioBeta.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
1676	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\Chat\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\Moments\Reactions\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\Rating\Rating.story.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Style\Themes\LightTheme.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\StudioContent\textures\AvatarCompatibilityPreviewer\empty_state_dark.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\Explorer\Light\Standard\checkBox_checked.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\Settings\Pages\ShareGame\getTranslator.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4364_462226325\Part-IT	msedgewebview2.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\InviteFriendsPage\init.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\InspectAndBuy\Actions\UpdateStoreId.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\TrustAndSafety\Actions\OpenBlockPlayerDialog.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\Dialog\DialogContext.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\GetFStringUGCValidateAnimationHeightTol.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\AssetManager\Dark\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\DraggerTools\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\SurfaceSelection.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\UnitTestHelpers\testWithComponent.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\FindReplaceAll\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\GenerativeAI\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\SingleButtonDown.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\common\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\Chrome\Integrations\Party\registerPartyIntegration.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Motion-31ab8d40-0.0.7\Motion\AnimatePresence\usePresence.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\ReactReconciler\ReactReconciler\ReactRootTags.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\StudioContent\textures\PublishPlaceAs\navigation_pushBack.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Navigation\Dark\Standard\ZoomIn.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\BuiltInPlugins\Optimized_Embedded_Signature\9SliceEditor.rbxm	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Providers\StudioPanels\usePanelsContext.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Shared\Shared\invariant.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Text\StyledTextLabel.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\FindReplaceAll\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\TextureGenerator\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\DragDetector.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\WidgetIcons\Light\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\scroll-bottom.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Utils\Utils\astFromValueUntyped.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\StudioContent\textures\LayeredClothingEditor\Icon_Pause.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\BuiltInStandalonePlugins\Optimized_Embedded_Signature\AnimationGraphEditor.rbxm	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\Chrome\ChromeShared\Hooks\useWindowSizeIsLarge.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\Settings\MenuBarIcons\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\VoiceChat\SpeakerDark\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\RoactNavigation\RoactNavigation\StateUtils.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\validation\rules\OverlappingFieldsCanBeMergedRule.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\StudioContent\textures\AvatarCompatibilityPreviewer\check_body.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\FileSync\Light\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\FileSync\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\FindReplaceAll\Light\Standard\ClearInput.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Navigation\Light\Standard\HorizontalDoubleArrow.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\EmotesMenu\Layouts\Large.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Utility\isPointInGuiObjectBounds.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\getEngineFeatureEngineUGCValidationExactLCDeformationSize.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\PlayerList\Actions\AddTeam.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Light\Standard\Checkmark.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\Controls\[email protected]	roblox-studio-1-6-0-7330989.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	roblox-studio-1-6-0-7330989.exe

Enumerates system info in registry 2 TTPs 7 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	roblox-studio-1-6-0-7330989.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	roblox-studio-1-6-0-7330989.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioBeta.exe

Modifies Internet Explorer settings 1 TTPs 4 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth	roblox-studio-1-6-0-7330989.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	roblox-studio-1-6-0-7330989.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306945446321216"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 37 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\ = "Roblox.Place"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place\ShellNew	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe\" %1"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe\" %1"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place\ShellNew	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\ = "Open"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-b2d03e4efaa04174"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\version = "version-b2d03e4efaa04174"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe,0"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\ = "Roblox.Place"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\ = "Roblox Place"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\ = "URL: Roblox Protocol"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe\" \"%1\""	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\URL Protocol	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell	roblox-studio-1-6-0-7330989.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4544	RobloxStudioBeta.exe

Suspicious behavior: EnumeratesProcesses 24 IoCs

pid	Process
4676	roblox-studio-1-6-0-7330989.exe
4676	roblox-studio-1-6-0-7330989.exe
4676	roblox-studio-1-6-0-7330989.exe
4676	roblox-studio-1-6-0-7330989.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe
6060	msedgewebview2.exe
6060	msedgewebview2.exe
4544	RobloxStudioBeta.exe
4544	RobloxStudioBeta.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4544	RobloxStudioBeta.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4364	msedgewebview2.exe
4364	msedgewebview2.exe
4364	msedgewebview2.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4544	RobloxStudioBeta.exe
520	OpenWith.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 4676 wrote to memory of 4544	4676	roblox-studio-1-6-0-7330989.exe	99
PID 4544 wrote to memory of 1512	4544	RobloxStudioBeta.exe	100
PID 4544 wrote to memory of 4364	4544	RobloxStudioBeta.exe	106
PID 4364 wrote to memory of 2764	4364	msedgewebview2.exe	107
PID 4364 wrote to memory of 4592	4364	msedgewebview2.exe	108
PID 4364 wrote to memory of 4592	4364	msedgewebview2.exe	108
PID 4364 wrote to memory of 4592	4364	msedgewebview2.exe	108
PID 4364 wrote to memory of 2416	4364	msedgewebview2.exe	109
PID 4364 wrote to memory of 4420	4364	msedgewebview2.exe	110
PID 4364 wrote to memory of 4420	4364	msedgewebview2.exe	110
PID 4364 wrote to memory of 2404	4364	msedgewebview2.exe	111
PID 4364 wrote to memory of 2404	4364	msedgewebview2.exe	111
PID 4364 wrote to memory of 2404	4364	msedgewebview2.exe	111
PID 4364 wrote to memory of 5372	4364	msedgewebview2.exe	112
PID 4364 wrote to memory of 5372	4364	msedgewebview2.exe	112
PID 4364 wrote to memory of 5372	4364	msedgewebview2.exe	112
PID 4364 wrote to memory of 5976	4364	msedgewebview2.exe	115
PID 4364 wrote to memory of 5976	4364	msedgewebview2.exe	115
PID 4364 wrote to memory of 5976	4364	msedgewebview2.exe	115
PID 4364 wrote to memory of 2952	4364	msedgewebview2.exe	121
PID 4364 wrote to memory of 2952	4364	msedgewebview2.exe	121
PID 4364 wrote to memory of 6120	4364	msedgewebview2.exe	122
PID 4364 wrote to memory of 6120	4364	msedgewebview2.exe	122
PID 4364 wrote to memory of 5176	4364	msedgewebview2.exe	123
PID 4364 wrote to memory of 5176	4364	msedgewebview2.exe	123
PID 4364 wrote to memory of 6060	4364	msedgewebview2.exe	124
PID 4364 wrote to memory of 1656	4364	msedgewebview2.exe	125
PID 4364 wrote to memory of 1656	4364	msedgewebview2.exe	125
PID 4364 wrote to memory of 5472	4364	msedgewebview2.exe	126
PID 4364 wrote to memory of 5472	4364	msedgewebview2.exe	126
PID 4364 wrote to memory of 5248	4364	msedgewebview2.exe	127
PID 4364 wrote to memory of 5248	4364	msedgewebview2.exe	127
PID 4364 wrote to memory of 5780	4364	msedgewebview2.exe	128
PID 4364 wrote to memory of 5780	4364	msedgewebview2.exe	128
PID 4364 wrote to memory of 2612	4364	msedgewebview2.exe	131
PID 4364 wrote to memory of 2612	4364	msedgewebview2.exe	131
PID 4364 wrote to memory of 2208	4364	msedgewebview2.exe	132
PID 4364 wrote to memory of 2208	4364	msedgewebview2.exe	132
PID 4364 wrote to memory of 5316	4364	msedgewebview2.exe	133
PID 4364 wrote to memory of 5316	4364	msedgewebview2.exe	133
PID 4364 wrote to memory of 1448	4364	msedgewebview2.exe	134
PID 4364 wrote to memory of 1448	4364	msedgewebview2.exe	134

C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe
"C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe"
1⤵
- Checks whether UAC is enabled
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4676
- C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxStudioBeta.exe
  "C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Enumerates connected drives
  - Enumerates system info in registry
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4544
- - C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe
    "C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 4544 --attachment=attachment_0.733.0.7330989_20260808T202837Z_Studio_14E88_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.733.0.7330989_20260808T202837Z_Studio_14E88_last.log --attachment=attachment_log_0.733.0.7330989_20260808T202837Z_Studio_14E88_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.733.0.7330989_20260808T202837Z_Studio_14E88_csg3.log --attachment=attachment_log_0.733.0.7330989_20260808T202837Z_Studio_14E88_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.733.0.7330989_20260808T202837Z_Studio_14E88_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.733.0.7330989 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=6468eec5ddfa1510f06a43d039a72a6d9307e028 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.733.0.7330989 --annotation=UniqueId=1825091524977986054 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.733.0.7330989 --annotation=host_arch=x86_64 --initial-client-data=0x428,0x42c,0x430,0x404,0x448,0x7ff68a834ed8,0x7ff68a834ef0,0x7ff68a834f08
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:1512
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4544.760.14423608177511791156
    3⤵
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:4364
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x178,0x7ffeb96eb078,0x7ffeb96eb084,0x7ffeb96eb090
      4⤵
      PID:2764
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1832,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=1776 /prefetch:2
      4⤵
      PID:4592
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2060,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:3
      4⤵
      PID:2416
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2356,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:8
      4⤵
      PID:4420
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3628,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
      4⤵
      PID:2404
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2516,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:1
      4⤵
      PID:5372
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4588,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:1
      4⤵
      PID:5976
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2752,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:8
      4⤵
      PID:2952
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1192,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
      4⤵
      PID:6120
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5244,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
      4⤵
      PID:5176
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=5428,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:6060
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5424,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
      4⤵
      PID:1656
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4344,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:8
      4⤵
      PID:5472
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4992,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
      4⤵
      PID:5248
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1264,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:8
      4⤵
      PID:5780
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5288,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:8
      4⤵
      PID:2612
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4996,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
      4⤵
      PID:2208
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4088,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
      4⤵
      PID:5316
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5392,i,4375365390147058413,4340770944828248148,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
      4⤵
      PID:1448

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:1676

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:520

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x40c 0x2f0
1⤵
PID:3492

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Service Discovery

T1046

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AppSettings.xml

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\AppSettings.xml
Size 144B
SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
MD5 431a6eb20932ec1c56682a1f60d231d3
SHA1 40bb32db040cabade103c21ba5b6f811dfb0773e
SHA512 0969b9484bb7c661d4e0452ff1c77396796333904b39f24c56d5a92ac4ed4ebde9b8981a985c6950b4af2852e8d9599e071a51ce4f9ef21ead778a2fdc76fcec
TLSH
T18AC09BA45351C4149795CF14977DF690E3B1797444504498D8A1785A0DC51D427D53A3
MD5 SHA1 SHA512 TLSH

Submit Download

qgif.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\imageformats\qgif.dll
Size 42KB
SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
MD5 9600a70636894f6a934f2a7f14d6ae0a
SHA1 d0a4e0dc7e4c61bebbd91579bf15d260c1fc7230
SHA512 6a80ca6c6b8ba3fcb1be5de6ea39bf6a75a6206266112bf23a81a249684b567e50babf257d011d0272d28d3d345c501d0f3e576f397a22abdea8b94abb3412bf
SSDEEP 768:dVRwrbBk3Xj+7yFZxK7+WHUgnNx1+MhYWeEJPxUo:d3wrbej+G3U7+lgnNx4MhYWLPxr
TLSH
T1E9136B56AB7844D2E513C678D9AA4D2BE935FA305B6297CF432181780F323D23E3C66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qjpeg.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\imageformats\qjpeg.dll
Size 447KB
SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
MD5 81b6df8cd8de9db1eeca252958ea9d1a
SHA1 e1ec20f7e3575d9595d38ca2ad8b5c521c7eccb4
SHA512 8cf35cc5b7a11aa7e7cdbc9dc626c5429b8f59079590092343b9b207839d34c46c1b9a2a7bbd4c5e136fae71396a698474c432428edcdc809825f003b6919231
SSDEEP 12288:/WbtMZ30x6oT93baQIYnMEMI3dZfsskUn5BLvUMCk//RFEciccjxRPCA4cTJF/eN:/WbtMZ3y1B
TLSH
T133A4A243F2605C87C7E54474EE6AC1A6E794B81CC7FB46F779C1ABD97A226F0B829100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindows.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\platforms\qwindows.dll
Size 1.4MB
SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
MD5 e81f163cbeb67ec8414c2ab3b4119647
SHA1 065921e56683b78097e125da120420136258ec55
SHA512 6700efcdae09a40e1907f56ee4fe2308422ce53ef76a13c434d1cd57a77d934e0bd583c8d96ced0fd250fd0ba727be6d7258692a6bbe19053b88fb48d188b13d
SSDEEP 24576:BgRZTqnadX9G01nyfcdGxOsFciSKi3kmbe7WAiYdZs9UIrIqrtQQ:oTqnadXw0xyfcdN8JQbOWAE/
TLSH
T11F658D57A3A48298C26BC23DC65B8B17D7B1700503619BCF11A88E597F63BE3277EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindowsvistastyle.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\styles\qwindowsvistastyle.dll
Size 144KB
SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
MD5 04a9a47fa806c912a22af17577566709
SHA1 2caca306233ef324d63ef3fd04937793ff2af912
SHA512 47c39a2e91f0444bec87055aa1592bea6b0fe5fa1996b4c1f3d38a1928381d8a536522e5f86cea3fb7c655920ccee66c468a1d02af152750a41fbe46c9aad032
SSDEEP 3072:AYfJgCoOdX7MNwr80krOTmUMVa/MFWxmqd0SQV8lWTxf:RBBXwL2Sa/MFWxmqd0SQVwWV
TLSH
T12BE34C13326602C6C463D2B8C55F0916F7B3B05853228BEF0667CEA92F533E27E79A55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Core.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Core.dll
Size 5.8MB
SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
MD5 f6c86aacc6126b0d2f442c6a88e57efe
SHA1 df1b891829c3005d045e3ba048292789d5e28fef
SHA512 8cb4d26c069074e2c5dd734e5d1cd085afd0742795024460d80b9b0b333dc01b5df7c5691c03ece34be20956daa63184eb8f028c5e1c27814124937ecb7c8ed5
SSDEEP 98304:kFO2h8E4EwNrZJsv6tWKFdu9CsViJQ8xqfSgw2:kFO2h8E4lNdJsv6tWKFdu9CsVOQ8xqfZ
TLSH
T10C569D8776AB0250D0B7C23CCAA7811BE672B8018B219BCF125CA7495EB77F1693F715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Gui.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Gui.dll
Size 6.5MB
SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
MD5 3bce6b45e07a747167349865b4bf4ac3
SHA1 d24d4b87ed035f897009cf0b5b711e6485533d89
SHA512 d7584ddd3c6cfc9bda1ddddd02b883aa974309770a478f138202f7540ae92b38cdc658149e4e8b4e76eb0280ab066e096558bd942367c20c018f0f716c09d1e4
SSDEEP 49152:jWM6LDUqcvRiHZHjTpTFpFEOPVQJqguaf5Q/J+5mkU7vo3qsJAGUD4topffcLnZN:wLDFv/+RmFaqBpfkCgnAiYCHecbp
TLSH
T18F662886725A6262C977E17D8B4F052EE1F3785283428BC748199B480F737EA1B7FE05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Network.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Network.dll
Size 1.0MB
SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
MD5 bb5ede48a003b21b63bb134435c4f5ff
SHA1 55d6cd8128d80c81a5fea49b9de4daa21d4a5ccc
SHA512 e5e62f3fbf1a9c82c13d0c192c1033d2c55d08ad3830ebbbe3b9252d0721651225ac39ab92d863ecd11bba62ac1c51f86422ffab9fcef6f5f20fdcf847a33afc
SSDEEP 24576:XKF0Nu0gZmVnhqMpH6Q7pX9U2BgrExZ8Wv:bNu04mVnf6cgrQf
TLSH
T10A355B67B36103A5D46AC1B8CA8B8502F67270018B669BDF5639DF693F737E1263E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Widgets.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Widgets.dll
Size 5.3MB
SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
MD5 5309de309fb00a4be24bb465f0053455
SHA1 a14ef29356dac72d882f663a426f16ab29bc3529
SHA512 0cebf0e1560f2ef8b140bfd4fba2b3d7a562923f1b45c84eff41dd02b5ce04a9402c937cb4708d4623ab02a8991bbe6a31acc3cbd17fe2079130313f33daa1e7
SSDEEP 49152:T8LcMQHZ/gD0bTG5/Zh4w0I6Lr86R21sQGxTkaeduxK6PBZrGBqfjoWjmqYjYhIb:qPQg6CHliIYKsonnYhIv7uP3S6x9W
TLSH
T122466B57B3A54184C16BD238CF8B8613D6B2700487628BDF256A8E592F737E22E7F705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Xml.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Xml.dll
Size 215KB
SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
MD5 a24011ba1cba9e517da2d89d530329cd
SHA1 867f44a65128db05ec1c2842a52b2752ba22346e
SHA512 76d7115d7b5f57a609cae61e768b28cc873f30a4aea46a2b385e9c8be1e5bba7c73ce84731708fe12f28d691b06ec6dbb8579f5eb9eca92ecf83d94e97b98620
SSDEEP 3072:4rZx2zOZ+kzW8MWXJBPlGyGv+RQxm7uFkgs7pkV9p7RM7jJWTx/:4FxyOZtLMWXJBPlBbaxp6kV9p7CVWl
TLSH
T18C245B4777258596E427C238CE5B881BE673B85017628BEF81548B792F33BD2B87E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanBase.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanBase.dll
Size 1.1MB
SHA256 6d4446068285a95a51395eb594c67c8df28b979684f54bba9c7c8c0912ecd662
MD5 3e5a63bb0cb4e57bf197d3e47bf1ce27
SHA1 777aab7aaece20fa6432461a5f1b704b49301e7b
SHA512 5931cc6483485de6ea4e22dda8520a15b8e153079950792db2d023672b5975a19aac673089ff4793ec08dbcdb1cd6745a7dfccda2c2690cc5cdbf11704a2c7ad
SSDEEP 24576:93nRLlUv+otWr8wY6S8dtuTbwQHtlvsMn:9XXUvNdwVu/VzvsMn
TLSH
T1AE45AE4B73964352D16BC278C69F8114F07734119B4286EF9A2BFE291E333E5383B6A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanDocking.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanDocking.dll
Size 621KB
SHA256 f1014458a598e679f17f3a328daef9d4b7efcea203422ac744744692134c884c
MD5 4ceac351567805f5d467efdb2547171c
SHA1 cfa884741daf18fcdba79a45b39889948b73d384
SHA512 1f0b96909eafd305912b241813550491dc51fe332df4637decc2fa64e09da6330ec9a275ca644066b10b993d06140443035fdd3dcc267750defe1f6305472fb0
SSDEEP 6144:eqpZco/36jOCZ0NesIZSNfFBg8UYS164o4TNQre4NMqINZIyavAj4/qkOh4BVhgv:es/CIkZ8fzvU564N4EWqkInNg
TLSH
T1AED46C1B72780391E067D138C65BC626F4B37842476295EF6216EA2D6F33BE13A3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanRibbon.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanRibbon.dll
Size 3.1MB
SHA256 001218df55b7c412a38086f0b90edef8f232ed1ca75ff0a4a1563b5f59b32fbb
MD5 391e42f9de3e8fae6b2ac13575b1f7ce
SHA1 311d994c2c0a63f27e8f61b867aa0c94f6ee7a75
SHA512 6da9b4acf64d9b89f9e3e97e1f8d0f1ab7a0c4d23e927ba5d65a22ca93ade40a24768f2c6c91679e696a3e1bfaca60f87b3b396fd06788b4b539353497e17560
SSDEEP 49152:6rTyq/LVyjq4LbhndL1ZsY0LUGGvVGvYEnCW/Ln+XY6Qcc/RotRNC7C7C7C7C7CU:6vLUjbLnL1ZsY0LUGNjCW/L+I
TLSH
T19EE5DF8B77AA4298D26EC17FD28B4155F5F7749A835386EB4826CD1A0F333E06C36B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxCrashHandler.exe

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe
Size 11.7MB
SHA256 0d26dbf578ecf5af61e8796109c27f8861a0296491767b3244ffbbb5bdf58dbd
MD5 1eede71ac5035030973deeb34d245d70
SHA1 173bbb31f8061c5885b1323e46679ebaf28b74d7
SHA512 4547c69391cac1ee463119b00661a1a605bf303b34e48114c4dadb0bc107d0e0b496e346de937e1bf3676f8b030e0035392cb5e4555008ebf51b24a0fd758091
SSDEEP 196608:8M5QgVTSEL7LHd+bAYcXeJahHBeYX5W3rI:TVjP00deJafeYY38
TLSH
T152C68D6AB2B800E8D4BBD17CC7469617E772741613709BDF16A086BA1F63EE41E7E340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\WebView2Loader.dll
Size 162KB
SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
MD5 e2f9d2ef3446e70b50de50f577c6939e
SHA1 48e7721704249cebd1267280459b7b36ce99e177
SHA512 f5d7790bb2eacc78405a91a65adc0f30a248542de22ed10cfe91bc87e4f953a93d738281c13480a070681e7169fca6ec49e20c5fb7b89d76f3a9bad912c6d87d
SSDEEP 3072:erQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Tv+EtJfy2aQutH:gMMTlTRTzWiThTNTFSzjiBM2h9P5oZNr
TLSH
T190F35B4772E5407BE16A8274C9A34A11E77774510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd-win-prof.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\dd-win-prof.dll
Size 3.8MB
SHA256 1e5998697cbad5d9800428bec8afd88285f7411fc05de9cb9453e776b01ee6f3
MD5 a0e645c21b4e8e8499f6e4af644dfe2b
SHA1 22c8205d8e5f40cb1688243df10ddf1c813a184b
SHA512 05a9f2dee061499527b615cb34614aff0eb150be3ed567614b9facb28cda328088b485a524e7402303c00c8b35da50cefac14b97b5d93d34f61b059cec3d4ced
SSDEEP 49152:LMbMlAt7HkrfnNhiM46GB8vGM535GN2j8dlZCEbIw0zUy+z/N0yooA9YIU6ieyV+:LXN0B8HoCzkxooA9n+
TLSH
T1D9066C02BF86996AC09DC874C34B4B638B2274CB0B35B6AF42D541253F6EBB15F6D358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfbxsdk.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\libfbxsdk.dll
Size 9.7MB
SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
MD5 51d82c0e8ad65126413ed39246b5cf46
SHA1 f73c0b2248ee11f8fde172e04c64b40452051521
SHA512 c60362c4a67bd11ee330d36ecb1a58d7619989072b48b652f9411884797852fca4805ea1aab77546b1d7fc3c158beb30dc6aef0f7dbfb99322affdc8dfec014f
SSDEEP 98304:4Zrqd/tYrwiI8gpR241UnQQjHNA256IJymNfJjWfELI1u0/QHnq:4ZrGewiI3pRf1UXNAUiF
TLSH
T103A67C8B227642E9D1BBD13DC9974903E6F2304117369EDB02964A6E1F237E0AD3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\msvcp140.dll
Size 540KB
SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
MD5 4e3fa9bd90ef020c14359639dc19312b
SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
TLSH
T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\msvcp140_1.dll
Size 34KB
SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
MD5 d433b3e8aec25afb1c65cccd97ddc7b1
SHA1 ffebb57d0bf8cdae0449302a691920cc22ed4a72
SHA512 b1d48de56a595ddd6fed36574f0d6f20fb21d047ef7a6e93a487d660bcb1090e45c6aed43a99bda9897c1ef524bd8032b33e35a48c796d3f467caad33f5dcff9
SSDEEP 384:FKzh5dQS8DzxhK4KWcS5gWIZ1gr4iSt+eMifX7R9zUkJCWEIHRN7/PFbR9z181q:FAQRDzxg4FMgU9nF9zUet/b9z/
TLSH
T13FF26DC5FA688443D866483082DAEE47BC3DB7D25F6092DB1392F25C0D937C5EA35A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\vcruntime140.dll
Size 120KB
SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
MD5 0d35c5e99871b4f02c490b9fd9dace34
SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
TLSH
T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\vcruntime140_1.dll
Size 46KB
SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
MD5 03b43160d21c08de07a79d0a1c5ee81d
SHA1 0a449093006af667432b83303614b53b62fc0d05
SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
TLSH
T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1231592945\manifest.json
Size 1002B
SHA256 dca3cd7a673d0776a085c0b8958a85bdd8392923db21a0b55f4d37210f752322
MD5 9be87722ce3608a2d38a79079feaa394
SHA1 34ed541044567272d5402b30fa99eff29d70e9b9
SHA512 d4d22a3c277a9cc3325f4f6f15f18c56efc6945ce8abccae32d66158b9f35039b347e93d0f1002b66336fbef2d750f78184e6a4b72644cb71a2ef944af52388d
TLSH
T10B119B00CC388DD322D4BAA21CC6580A93621DAF4CC23E84339E161D8F1C8AB927366C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1359104660\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1359104660\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1359104660\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1359104660\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1579899166\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1653609448\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1722078927\Sigma\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1722078927\manifest.json
Size 132B
SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
MD5 a4d9ab812da8b2906ff9d46f9ffc07c3
SHA1 48b428dc760bc008058e6df47a9f05f2f86b4abb
SHA512 5a2ba950ed85ee55bc1402d57d09ca8d54c0c2df5b43a402bb8bf3668920a40d584fa18d270376b046e23be00698bd1399ef6a0b695ee6c0b99fb454616b1cb6
TLSH
T1E8C09B115801797654DD77F00D29D7526672CB1D1494250546F5C218EC2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1727551789\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_1727551789\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_2051332572\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_462226325\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_533102776\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_688688829\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4364_720103823\manifest.json
Size 78B
SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
MD5 259f068207f60fb9d4448c02c27b74ba
SHA1 99131d95cce94750a928738a99caa5c710bbc924
SHA512 fa41eac9d1ca244d06083e3d4230dd94700861155359722c1d815d0d9933dcd39c113b6f0f6ea02ff7ee1acd2fbc6ed40267d557afde16f417e80b678e8136bd
TLSH
T173A02230AC02E23320C803B002B083C383A02C02302A388C0B0320A232C823BE2F323C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

a5f81d2116ef82c09ef6390931e3e516

Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-studio\a5f81d2116ef82c09ef6390931e3e516
Size 9.7MB
SHA256 eea5136d2e39678414ffacd6b0cd17d827b94ca5e09e9468a07da262ccbf226b
MD5 a5f81d2116ef82c09ef6390931e3e516
SHA1 41bf5bc16a0461378735c770328db29958f219d5
SHA512 ea06f9a9da51c5f9121a15fe82571cdbf88e49bd142719d3217436191f7d10c6c1c99b197f7a0150b1d0200a529f0db5bb82046d39f3f178a5ab4cea9cabf121
SSDEEP 196608:Zjj7ZtY620KULyMqDzi1msxtpEdDHTXom5KRZck3T:ZDZKli1msxtGFzXom5p8T
TLSH
T1B3A6BF22B900C032E8D100B2A6BD6FF6993D99341B7954E3A7D45DBD5A305D33B3AB1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 22f547b58752c8586ed069d50cfdd86a5372c19705d89b72a01151b158e6ad78
MD5 8a45fd4619f37ac580cc00937938ccc1
SHA1 071bd103864f5d530d4051e81b8b59b8fbe539e9
SHA512 201beab3b8a5b6d848a1391790c68f82b30b683dde4c06ae321c3bad52bc0eb076be78f8f43fab584c10045a46fb82b843f584d05f258bdf9072ed066e82d73b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 023e6dd5b73751ab0d0b5627d17e922f4fb2d58cc047d1fce4c8b9087f54982e
MD5 73322ec1a506ad119720df8aadecc4b2
SHA1 a5bd16003e9ce74a8e763bfb2513446c28c8f630
SHA512 92b660c12700f2bd036f9a42a124ab5a2e7e0263e82d02ea8967f663f135176150d66f491edd9829742dfe79ccfa32ce426aaf5c36688746e18405da819912ec
TLSH
T119D0121332021234C02035332023E14C1400D11B804544065829855F1E040500943881
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 dcc87b3b876ec1330ecf80b788513dc70b564fa8eec79b88c1a6054c1cc82e42
MD5 e6a109d3531cad604457c43382618386
SHA1 646c7217adcf595d1de2435ec2a59ae62439d90f
SHA512 362e3175158e665f7d6ffe040330ca7406cab6ebb8ecbeef515f57b61f21a166c7391326de9d7e79c4bdf17994bd6bba2ce8d503c8abbd257fad0c31c7a2c911
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f67abe5c1ea0d879d38445963a207f5d700271584f1c5e773dbfae4c6ac37f6b
MD5 b5151007cb6937d02c9cb7a7004fc229
SHA1 564819b1b62ac667bb0fcd5678d83c10e16ef352
SHA512 9277f5a86499ee69ed50ae2f3067c93cf49df63db2506009573767041b3227b1c2a2cf5c71d8c717685809a50ac958a5083485f13e60378b3aedb9321e29676f
TLSH
T1EE410F158DE0E08CCF1163B6C6E19D499E1D29EB05036F47928B2D23AC334DFA832654
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

324cf99c-84ff-4a57-980f-31e03d4794c9.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\324cf99c-84ff-4a57-980f-31e03d4794c9.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 6738ee4e472fce60d03254c162b62c62fe4ee301e8b89e55a20c0f95ec78af95
MD5 d6da29c00c847d51e3d9fe87db56838b
SHA1 1bcd178a1b73f09988657d1b7481e104def0fde5
SHA512 c02d023c87ec2614e8459ad48bee855e1b83def538a6c0ddb0577b430e0f7b00d1b1daa0206d14246174348b5f125f0a610000ff19acec0dcba5c4dc55d2dcba
TLSH
T1DB418BF353B08A7D9A1652F42A19AD1BCF9C0430071C65B6C5D0BFA793B35A1E211B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 fbd2767c5e4b7c0f0c40e2da142a5037e1f2b47437e740b603f5afadb7c862fb
MD5 b895d52e628d25702c0a12e982c1b39f
SHA1 1d583815ce8a7f148eddc5c3c8596ff9fc1a3303
SHA512 221fa59d91c1d1aa3cd33d00201acf463d438fc5a4791164cb1493ab54a63dbcc13e74a05c9a9f668e9d582f4f76f4349aad9f6304480074d123ea3692cac1e1
TLSH
T1A8418AF353B0CA7DAA1652F42A19AD1BCF9C0430071C65B6C5D0BFA793B35A1E211B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 d38ac1b0af366da0e38ea1b3d9af72f428de7bbfb5b8c92af8318dd762792e16
MD5 7b1c267036dad7c76762308faf078571
SHA1 3d8d1bb0f73b491b0e627f0d49d2e19c708004d6
SHA512 8530150a82de513dc759ed3d46f9d22143989434c508bff0c6d0226a36df199cbf1f379aa1f9eecdf8766478e7873e1a3ed779d4bcd97f894f494a673e5c2692
TLSH
T1924179F353B08A7DAA1652F42A19AD1BCF9C0430071C65B6C5D0BFA793B35A1E211B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 9b509ccddd3bcd3d131a657d986770e47f43389e555c345c199be8b716c74d7d
MD5 f8bf86373f0d81239544ecea86a0d7da
SHA1 e4f40137f8d8b753b267902a4e31012624784481
SHA512 ecb172f5e1d3c8932831fce5031a219b9686044bb39b881bf030b27546f25bed75ccdb7572dfc6bce34d7cb3d5c0d475c728429665de39023849bf850c54d09e
TLSH
T17A418CF353B0CA7DAA1652F42A19AD1BCF9C0430071C65B6C5D0BFA793B35A1E211B9B
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 9447919ecf623509d5e8214cd28d3f3321d84efad09ea5e28657792244805f17
MD5 44c5794163cb2243a74ce8064bdb20aa
SHA1 a9d59ae7975d38bad43e7586d5bd74fd01b87f7e
SHA512 4e7807d1278890df5ac30000aec75f984dee181b94cb229516c18fe383182050c169ad82175dfe2277340c9e6e834ead89e773d85056b01ddbb6f3509ffabb79
TLSH
T1F54127A7D1BAF43A2028197B1D44B80ED677A83919A16CFCDF57816EB0C69F21B15062
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 3a9d9333d38405d797eb68975b15df57183795d756b5637af8cc28f0bee418de
MD5 7696ca7464bac6c15e0235d4b90a9415
SHA1 e8c7d499498ccd1bd86bf75b9706809a63d80137
SHA512 509344fb582406d4545664f618226bd395a625648bd5dfd368e2044d537a2ad38ff68e251cabfb4bfefa72c7983e56b414b064a24df402e616ac612e016682aa
TLSH
T1F94127A7D1BAB43A2028197B2944BC0ED677A83919A16CFCDF57816EB0C69F21B15062
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 3fca6117286a77c924b25758346ad2030fe351460ac6b05652225119bc8a3494
MD5 a497e1214e14765f975f9fea0581cbe1
SHA1 6347d11b6cea61de6494f9d9d00bf3b218c43527
SHA512 03c8e6349ac20e3af8ed385e10cbf2a4680e5cbb1f9487f0e361f06ddcdfaa4f7cd365bb7687571156e0ffcf35886f5ddb289b7399027ea5095b6d994d993e9b
TLSH
T1CE4127A7D1BAB43B2028197B1944B80ED677A83919A16CFCDF57816EB0C69F21B16062
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 1e9afe5a8c1a6fa7c60fe1ebb78e80f90c9ee70abaa0e2d41e6450316136af10
MD5 121cdbe38d9a06b1abdada0ce867f1eb
SHA1 af3f3ee0f90e91346f82b093bb34c65a19ac20c5
SHA512 9528b38c53694857e73e773c86220a41fa69e157422908106cc17960d418e4bcf5cecde741f4f78b524ac21f516b3010828358e71c4efa3c8f22798f2654d649
TLSH
T1734147A7D1BAB43B20280A7B1944BC0EE677A83905A16CFCDF57916EB0C69F21B15062
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 eaa1eb85610b33d084a8d8e3a5cd679da54c124bcf213b894048dbae0c570bc8
MD5 210f3c72818cbf66dd2ac7694e14aaa6
SHA1 3e447fa8e538eae668cca8c33e67ef9e702f1f00
SHA512 682802d950a699d22681594f65abf4905f04d9a25aa697e553937f31c08ffd3148bc18099206549dabcd2aea0e9981b25525c1d16374edea7c9d4e14898c393f
TLSH
T13E413A97D1BEB43B1028197B2944BC0ED677A83919E16CFCDF57816EB0C69F21B15062
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 76f6bb9bebf856105798cd9d826459b25efeb77aff59c439d0a098f2d32e4008
MD5 468cfe7ee825ccb2de151a106c159b36
SHA1 72d1d1c328d4871f212294cab4f6737d10658019
SHA512 f9beb0f0f66a2715d36b78b48e01f4f1dc0e6d585bbb2f6ad8e0fd9d3b1bafba041de6ebbefe9ef3c3b5772b3d32bba98c77e37254680ec7099c192d42396f9d
TLSH
T1FC413A97D1BEF43B1028197B1D44BC0ED677A83915A16CFCDF57816EB0C69F21B15062
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe59ea37.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe59ea37.TMP
Size 1KB
SHA256 6ba60d725705ed9b7134b1f66fb46aaac7a8e5e377bc5ecb30f8d0779331401d
MD5 eaaeda13681dce2130d93e1f501fd4e7
SHA1 c6841f730ee8dca87e35edc4db0ee639525f4188
SHA512 4cf35399efbe96820fdde29903015ef169c407ec276ce9e6e4be55c97f0f29599bd72cc078f69a032d69f0343d06e0fe68ee3388ca8a44b2df264a8160071ad8
TLSH
T1FC416B97D1BEB43B10281A7B2944BC0ED677A83919E16CFCDF57816EB0C69F21B15022
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adb88e0a-5fdd-477d-af8d-11b9c01741c4.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\adb88e0a-5fdd-477d-af8d-11b9c01741c4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

db6e7e84-50c4-4f1e-86c6-baf0f7cf466d.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\db6e7e84-50c4-4f1e-86c6-baf0f7cf466d.tmp
Size 2KB
SHA256 8db6a7d3fe0c8e0fd7e1de5efb43578dadc880b3adbd042eae622a89a3837581
MD5 628ef1dd64cda918e0f3b7d82179c199
SHA1 01f8ecb89dd60404bf48a5160ef3116ce2f478c9
SHA512 71ea782594d550cc9b9aca65eefbf941d4ace3e6d2d4c462ba2fb5b9b292a70fc0bb4f1eb96fddf6e7ac828e6ca1cf897e4921c3aec88e6419123fdb2f16529b
TLSH
T132418AF353B0CA7DAA1652F42A19AD1BCF9C0430071C65B6C5D0BFA793B35A1E211B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 b405717840dc0e8aec1db855c8c296bfb2b49e75dbfdae4f80c98290ed6876a8
MD5 a7379c875a4f7112f5ceeb59bdbfe131
SHA1 b9b486d7f10753a9dd03a5f982e7e743ca8996f3
SHA512 4bb9af25dc13182e035fdb787f6cd5f311a1e0d48767de3a27d41203a5b871bf27081f112e5909ee27a7cc6fd0ad2adb13f57fc6de0e4240c3bf899530c4f41f
SSDEEP 192:stQQ1f7Z8papR/S+WiTfEwyEuekoDw5vjTME:st71qY/Vgw5E
TLSH
T15AE1B7436E686D774CC7E719BA25FB12E2F51022A5D01E98EFFC862C18D66DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 2bb00db668d5c437702c949b1720a61fdedee9e8f5f86e1414503a76e31b3c5c
MD5 519216b44005f4e8c717912aa46ed4dd
SHA1 4cbd0253714b906c39bf70bd16a67cf3082be822
SHA512 01be85a64ddaac98e893979af0e58deb0d81d090f714d429a79ee60cd17cc868a35617423ed202d252b707b76ae33ac2c85c7923ee37ccc884f2c380923a2408
SSDEEP 192:stQQHf7Z8papR/S+WiTfEwyEuekoDw5vTTMC:st7HqY/VgwnC
TLSH
T112E1A7436E78A9774CC7E319BA25F716E2F51022A5D01E98EFFD852C08D66DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59bb96.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe59bb96.TMP
Size 5KB
SHA256 da70393f6fbb5a3bf295634e1d035dff9ef05e656e96924852e0ed6372c00ebe
MD5 b67490fcb22f9a6c8cf461cef63cf669
SHA1 4bcdc06e06a02b4d0ef8963ba6c5a7f6ab75eea3
SHA512 075621a3753726bbc44bfca0eab26a14b46901cb4267678c41ce536fa48c8418991d888c63ab6dce9cf06b224b01392cc1d4fb2d7ced4eeccfd7761d6b53406e
SSDEEP 96:sto52sSdDb9QexCVGdZ8i0oELklm/7qx+WVHMSm+uecadQjm+gMz7KEB:stopckiZ8pFx/S+Wi8d3ivK8
TLSH
T1FBC196025E28797B4CC7E15D7A36BB42D2FA1022A5D51E58EBFD866C08D95CC530B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 168edd509dc87adbe077b33e2e182c2e735ed1d092182fb90e6eb6214f11fd1b
MD5 1b72dbbea2be6a0b20666b3a4f96f5a7
SHA1 6fcd2a2279e38c16299082b76dc0e00326139138
SHA512 d61a9565a04515dccf4c880e7afdbe1c566496e8fee6399531560616175b5dd8e27e6ed05da73f6f55d781faec35676e98876687e345233495e10d25365e2787
SSDEEP 96:HlR0iwpPlf/ROoKOpkF5d1RtiwD7sMaTEv9V5h5pg5+eezvK7qxXtBu7e:H9SWG7Q9lVcqxXtF
TLSH
T191D1C6A7456DC578BF444BEAEC3879CBCAB6009F88C54D1597E2C44C0BC2AFD21DE895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences~RFe59bb96.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences~RFe59bb96.TMP
Size 6KB
SHA256 1bbcebd2fcaf88c2cf804c1b35ccdb913d97811db5b3276fde6996b4e9e65b3e
MD5 ff1f888b3d30f897e6b39a69d69fb219
SHA1 de05271994e196c27252b240e32c9f7e0668173b
SHA512 8e1a792aae6b7a608f6a5ed93a36c32127cfcc4f2d820c9564feacf9c0aef011e79e828fa50933402f9e5d07dea5d199e5c0ff0b88ca559fd885fbb81d98a0d8
SSDEEP 96:Hl3ihPlf/ROoKOpkF5d1CiP7sMaTEv9V5h5pg5+eezj0gfK77qxXtBu7v:HApWGCL9lVj0NqxXt4
TLSH
T1F3D1B4A7466DC579BF444BEBEC387ECB89A6009F88C90D1597E2C48C07C2AFC21DD894
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 fdefabb3ba1b81de2e53e5e2d92a4e02731764897de31bc215bd6be069b88e0f
MD5 a9cf955d9c73a00f1a401287a3b0b09f
SHA1 ae488253dddbb3915880fa0f18b727023429a81b
SHA512 f5351efe0acf8d560dda328235191296e955296e6ecdb7daec352382f35517d3b788a788e7b719d2a93848fb0f45e85dd7ff0aa3052a1fc5e4d91efa2eba4496
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 1KB
SHA256 71a26b88d369aeea292c735afe567c5faf15789e5ee04c9e254a83e10f6e6794
MD5 e9b89e7d5052a45bbca44c60ed6d6a4c
SHA1 e042e5f76981d409b58e0e7e03cf968763231d62
SHA512 58a40c70a0501a84ff1a0221036ba93da1300249b49b66a0e2b4b0ed1f729a440f04c8196a350c8e9077bd0eb71c1e697974e62a2cc2c4971534667265cc0745
TLSH
T136317971D8847F335C8196C1B32ABB4B2E20107AD1105F4C9EDD5F2C12EB28C972AD32
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 2KB
SHA256 d4be4e0958bee6229d1387d3fa878436c21dbaebd9b83832e962dcd8c3e90dee
MD5 f72b84cf57f067722f66fbe1cd56feda
SHA1 8bb3fb70a8df696cf87d597baa026f6b313ea1d9
SHA512 8bfbcb8d2fe17f1004708822c9590910722b87b8ccca5b76dc79991d50a2a7e4b03eb9eb2316d776e53a4f376252c9f5f1ddb9fca8b6abbd233386ee0c5dd375
TLSH
T116519532BC48BA3789D28A84BA1A7F17AE315166D6513F649EDD1F2C01DB29C2306C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 d60b81f7d52535b84f9b20d4002ec5fa65e2343af7a6f72371048414a902301f
MD5 023281382193bb77fd7c6f318f62284e
SHA1 38ce81fccc9e04439f0bddab8a2ee07b090abd99
SHA512 cabb4e67963b4f6586b1848904921d6d198dd1661a5a4ae067b0b2468a402e62d8a9f154cf14738c297e531bcc8aee40ec6f06e2784ccc358e80057d724d15b9
TLSH
T1AB718632A994B9374DE3DA85B9893B06BA615137E5943FA8DEEC1F1C01DB3D82342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 16KB
SHA256 0856bc50ade5bb0941bcf9ccc7eb2944c114726b276fd3a2b5d6228489cc0e7e
MD5 78665eaa966edec83b754f7622376570
SHA1 7e87ba0bfc109a037ea280cd0a1d504ebc237c51
SHA512 c53c8812b13a43daaf4ddcf02315a235be320a2926afdf0480e3a2ed1451888dff54dc23722bd402ea2382b914071e6ecf24395fcbc4684b0392a133ac905777
SSDEEP 384:zi+aQikB+z/xvxjg/qhEwNbXjH18r8a09zS:Z/UxvxjgC++zP7FS
TLSH
T1E4727C2B59697E2795F3E6407A59078FDBB494B2D0C17EBC4EED6F0E069B3980302D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe598eb9.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe598eb9.TMP
Size 1KB
SHA256 9bcbeacba486d023f258c3b0565d12678edc0f1bb8c75ab0acc0261b48bba667
MD5 4860067c1a716a008abb83eb6e969ced
SHA1 4be71973a0f5e8e149d4c37ef479a4a04c9a9cdb
SHA512 e9443d870ae3272e308c8e3e0ae902d4433033e63004c248032f4cc614c5036a45499f00e58ecbbb59d2bd76185f9ff057bf65aeaa76674d5c4b98fea5598573
TLSH
T1B2216572D8846E37588185D1B236BB4A2E50117AD1045F1CDECD5B2C12AF18C9726C32
MD5 SHA1 SHA512 TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Advertising
Size 19KB
SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
MD5 3495430eefd1e96e8bd95b67ccab0f91
SHA1 54129d2d72e062ad36a66922331818e81bd34df3
SHA512 9197537719b70837ce997cd2b168c6bf6fe877811f81459a0c0f1363b7179960594761df147c85034c628b8e9a3463084ac26fb8bcc3fbc765089adfeea56f6b
SSDEEP 384:/jA5024xyUE2oAklQth8rYWepdFhgX/0lRwjTV2qh8NmrbijF4E5C65aNbC:q0WCoAklQcrJepdFeP0lmjTV2qSV9C6P
TLSH
T162925151887035622F2F50CEE0583F8E1199767540AEE6DE9FE48666F28C0F37494EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Analytics
Size 4KB
SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
MD5 db9a3dbc4820c8d84a0a569be1234dc0
SHA1 78fe9b49b800627cd2eb458cbe0251591a2a693a
SHA512 a6735713a801d28e644b31f34335e29d55a46d4b263e923cbec9b57fd18f8b0cecf9b78fab578065207080faa5e81156d04c8fbedb436b718893b6d17123742c
SSDEEP 96:2eHeEcb6eD0Hl1LJEmjwsi4RjBzGPeKkF7y5W4jNU/oyw:2/EcWeQ0d4OZkVkW4jNoo1
TLSH
T105817615A4A024423F2E5668E03C76F911E8253880F6F7D5EFB19975B30C0D778E497E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompatExceptions

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Content
Size 4KB
SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
MD5 26c006f350f70dbc8c18098b773c3d4c
SHA1 eb015f7010dd74c874675d0599e634027363b7b4
SHA512 0f56d119a5f89689d0e45a6163133048aa95255447c4156d4fb2565f45c32dbb95adc39666a833d2127ce57f3f4198ce45d2a174955ec088bcdd2f74f59b3f6b
SSDEEP 96:lApOOxO7bthcySBm1yJJzyEsQBCETe+yH:+xqT6mcJJz4QBXTeBH
TLSH
T13F91B8037E4409276E95D005C0ED209E2DB5ABB0C85DDDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
Size 668B
SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
MD5 95aa820d67ec466eb3444a9458eb7e56
SHA1 f93e178ff40310e071e4d596f0aff0514666f787
SHA512 15281c334f013f0200ca2d6faaaec81dc5602058cf3522b805e21ca5f031cb4ca68606d353e6745bfb86f07fdd6ccc892942aee5ad7cf0f9f0798a4d7f497a47
TLSH
T1FE01D3D7D86197676FE25AD1D02E73C9F04456F26050F7C10F55315857A8A432794CE8
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
Size 1KB
SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
MD5 3d90e5235a4bee8f1dccfc2aecf7c585
SHA1 5beb333084b3af33e7fbd8c83326e18650a87f85
SHA512 c81af723cadaa57f638b9dbc60aca5d2600cebb8282d78a7b86edc6b473bd3a1768c8fde1b11d50b6b967b2866495655de09577973778038434bf4b513ba74a7
TLSH
T180214F8685D038316E6E148CD55C3B9C12EA3A7040E6F6DCCEF486A0B50489F7280CA7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

TransparentAdvertisers

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Advertising
Size 20KB
SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
MD5 6959a6835772c67f4e72105e4be259a2
SHA1 72d1fe9070a5c0eed55d989cbd961dbc5442796c
SHA512 98085236a15e810642602e5dd475aa5a9532bb38917aef784e977bb398b3f9e39f7966370d39c1b554cf3e39858713e8b45bc27fbdb8a701b2a903e453a67591
SSDEEP 384:5z8Qpkm9jXUmEtMANAgFYNX8htrCoEeZCNyn9CbRqKi8iyZd0KE:1lb9TU/t9NAgFYNMhte1eZ0yn9is38iT
TLSH
T10292C261986035523EAF019DF1993FCD69A4633080E9FAE9CFA0C636B35D4D335948FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Analytics
Size 3KB
SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
MD5 e018dfa2df54c80ffbfd02c6d2ff5430
SHA1 de3f876b05355c6024d76f1bc24a552e532e2a2a
SHA512 b6d7886b4094837b271d1aa1f72b8c521970527552186604bcb83e17f85fa4a22e658628f79eca7d164ace781555abaa07c423a380fe87006aaed77f53e37838
TLSH
T16C61D918252024211F1B526AE55D3E8E69F4233904F8F7E08FF04EB5B10A4E738E5B77
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Content
Size 5KB
SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
MD5 dee2a727844dd3cea088941e82722406
SHA1 24ebec9b92eeb6af83841ab02e858f415580f719
SHA512 e48edf5f6dcbbd615f42f1b3181b2998bd700508094466009a6a48193a48c3e30e6c4d71cc43aae81d18a88ad9fd7e28eb50a0a52ca6889a270001fecdb64dfb
SSDEEP 96:PwYuGYJywH2R7pBBYy+wf0yhZ7RBJ1ja8nBwGhQmxpFD1Lcg:Pnf03H2/KwfNL7vNTBR
TLSH
T152B154B2855079922F7D01D2F9D6225088E482715CBEEBC747A1C61CCD1EDE735A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Entities
Size 106KB
SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
MD5 751e7cc660220e7464935a9b90643274
SHA1 05a725af45c74a9e129839b2fa7acca5d83066d8
SHA512 bc879a9bed224b6abdaed2581f948fcad53361b17dc76d5b5df10607ac893db2f39bc5ce5fbbe86e6392ae66f29fc93ac1079fd2d029b9338697b004325c4b36
SSDEEP 1536:PYNbfqJF3b6wgb6hh2Dgf+x8GC2kMYdSKySPxVMRjAxUR9Wv:Gbi3M6hjf+W2kMk26VMRjaUX4
TLSH
T131B3E73C9F70C4295EE7000B6C28B95846142BD59E87DDC4EEBF7A090272AF536A85F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
Size 2KB
SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
MD5 5330ccc991b45c6f2777d23c7d8afe8d
SHA1 d11187c035458fe1201608a91062962903de2e53
SHA512 2db42b7a6b7f2170f6cad2a26a606ff6357cb8c707ba9947baab14dd7f566df04a274e46e36cee72c43ee87ebf4d455b4af3f6da973f29bdbefeb0304f1d6f93
TLSH
T1A3414422581030617E7D49DCF59A3F0D29D9613A84C9F6D6DFE08936722E8E734A4896
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Other
Size 198B
SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
MD5 7bb2f4076e4f47781b77d811b21ef1ff
SHA1 fc0feddf6f52841bbd780d21b8e0ddff74fd70ac
SHA512 28356614bc38576ecb37218f9f6f631bd9e55573206c3aa854b91956a33fc828c71f42c7dc7dc6aa86540dab8e345b8f88bf9c6eb56e49824f492854c193b27b
TLSH
T1B4D01250151A5B0D6FEA41D1DA8055241DA19DF474CFF8CC5555B032E68895729C0DD3
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\Sigma\Social
Size 3KB
SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
MD5 fbfc314bba2160b09a3376521c762772
SHA1 3566357486c5d466958334e813c90c0a97bfc985
SHA512 e4383491ce5170d0daf4abee61484c62611dfc604549b537d0080f24bfb8cf379ec3efbfb6caf10e7c066ec06457fb077832d5f780d226f0a957f624e0ba9383
TLSH
T17161DD36C590A9932E5D0C41EEC55E700DD8157ECCA6F4D287B082F8F0AD8977D94BAB
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.34\manifest.fingerprint
Size 66B
SHA256 f96cf59ef5cdf10cdebb367e16c6736d188af934062a8721eb9d60539556a2a9
MD5 0f487a41f1bb9a49dfc5814815dc8b1e
SHA1 39e5af8034fab47bdfbaa2a66455c74185756f0a
SHA512 bbbd1619eead82c70cdc0f72867db2ffdd4a45cb908c81e852eec8c1293bcafb90c554bc3d51afab7fd7e478efc15aa9ad90fe1b56a01d0012ecee493184d36a
TLSH
T1B0A0024A47C1F51A80D137495D771D41C91755E1BEDF91481A929F2266379C0586C454
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\TrustTokenKeyCommitments\2026.8.3.1\keys.json
Size 8KB
SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
MD5 ee666d1b2290efa6cdbc89ea3d317333
SHA1 a8bdd2c1d7e76fef48a735a80524243cd453e0bc
SHA512 7b2b577c9a168f626a687ee158cc20fa0ad0f816fb0583abfe45f89222d1762eb4fc619e029856618479fb6096a02eb2f9934cb46334fa781cea5cbcec992ee9
SSDEEP 192:uNtGbR0m0GflPAyR9Pm4lOvMwkoR9PuGMXcy:O7mZpKjA
TLSH
T17F02B6BF14A41182CE7FC16D9F0774B78FB03C066BCA3A83925BEA49484196D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
Size 223KB
SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
MD5 2ef00fa979161001a3a5cd5169a7de48
SHA1 0d3ee6044ef954db79d4db9984cad411dfd4c3c7
SHA512 f0b7f015d3e766b390a663ca5b1498175fa241259cad73f4b8d2b9646b56bc08a698fea7f5a28324b9a59af1622296ef79d77830a50bce14fd5f02f7f9228fdb
SSDEEP 6144:EqU9NgI6FdZL52dTOgwQh1hV1AP2A2FTR:knh6fZL5mOi1hXAP+9R
TLSH
T1E624AEAACF953C4A28E3F094C9AB037ED919C3629DDAB0B31D593845C78972D61FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

roblox-studio-1-6-0-7330989_DE2A8.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\roblox-studio-1-6-0-7330989_DE2A8.log
Size 7KB
SHA256 88b2c30ff478808cdbcb56b8151511ecf90fc832fbe5b81b7934c4a577ad4e1c
MD5 dbbb905d66b3efe28109ade82f16aba1
SHA1 dd37bd6c21466b8b6b36cc1e77ae53da92125d10
SHA512 f879f4d048735041b61f0b325e97a308d58a07a33f9edf963eec35d7cf5f09e58e5c1f1006ef0c7836c3bc98de1f2f4167b71336db55ce4344ead05b961d5eb9
SSDEEP 96:KpLI2hbHS9XjXc0+a8HqHNOqa40XQuaaSROhcAP23nSokCOOCTDl/l5l/ll5T+G6:ULI2hGrc3D4C8E23vJOOCTD7tfT+GSgW
TLSH
T1B3E1F01ADBD8013D360E118F8B9A4C6A97133C012155A2F1F3EF611FE39A6C5ADE5E72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8913724486d5e3c463c493b25346ca31

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
Size 64B
SHA256 c9a151fd6435ac61b33bb111bad63a5db8d5772aa31e3c27c25a58c391058123
MD5 387761efd5f955b9b6129652de75567d
SHA1 af3a2f3a19e9f449158472cd8186486be39e356a
SHA512 dbd3a5a0b815ee913b459f0c3b74a08903c5d147611c9e3440bbb1903e0aca5ba8079f3640ef67c3a3e9e6f36edcb8822f933c66cd30e26a6b40f4ce002fa41d
TLSH
T16BA022200020A3388803003000B0BE802E2020A088B00080228EAB30032C0B288CE002
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2404-343-0x00007FFED9C30000-0x00007FFED9C31000-memory.dmp

Download

memory/4420-311-0x00007FFEDB1A0000-0x00007FFEDB1A1000-memory.dmp

Download

memory/4420-308-0x00007FFED9FF0000-0x00007FFED9FF1000-memory.dmp

Download

memory/4544-1468-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1686-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1348-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-301-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1419-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1429-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1431-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1328-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1310-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1458-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-912-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1308-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1480-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1482-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1298-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-108-0x00007FFEBBD50000-0x00007FFEBC29C000-memory.dmp

Download

memory/4544-107-0x00007FF67DA70000-0x00007FF67EA70000-memory.dmp

Download

memory/4544-123-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-902-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-922-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1801-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1771-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1752-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1742-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-177-0x0000020FBF390000-0x0000020FBF790000-memory.dmp

Download

memory/4544-1271-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1692-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1690-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1688-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1350-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1027-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1016-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1676-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-780-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1647-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1645-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-970-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1633-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4544-1643-0x0000020FA5930000-0x0000020FA5F0F000-memory.dmp

Download

memory/4592-767-0x000002B199FB0000-0x000002B199FB2000-memory.dmp

Download

memory/4592-766-0x000002B199F60000-0x000002B199F61000-memory.dmp

Download

memory/4592-247-0x00007FFED9C30000-0x00007FFED9C31000-memory.dmp

Download

memory/4592-779-0x000002B19A700000-0x000002B19A705000-memory.dmp

Download

memory/4592-778-0x000002B19A830000-0x000002B19A833000-memory.dmp

Download

memory/4592-771-0x000002B199FD0000-0x000002B199FD3000-memory.dmp

Download

memory/4592-772-0x000002B199F60000-0x000002B199F66000-memory.dmp

Download

memory/4592-768-0x000002B199F60000-0x000002B199F61000-memory.dmp

Download

memory/4592-769-0x000002B199FC0000-0x000002B199FC2000-memory.dmp

Download

memory/4592-789-0x000002B197660000-0x000002B19770D000-memory.dmp

Download

memory/4592-774-0x000002B19A710000-0x000002B19A712000-memory.dmp

Download

memory/4592-776-0x000002B19A820000-0x000002B19A822000-memory.dmp

Download

memory/6060-1272-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1273-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1279-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1274-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1280-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1282-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1281-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1278-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1283-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download

memory/6060-1284-0x00000235C8250000-0x00000235C8251000-memory.dmp

Download