eea5136d2e39678414ffacd6b0cd17d827b94ca5e09e9468a07da262ccbf226b

Analysis

user interaction
yes
max time kernel
1799s
max time network
1805s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 10:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
roblox-studio-1-6-0-7330989.exe
Size 9.7MB
Sample260809-l3qnhsvgrd
SHA256 eea5136d2e39678414ffacd6b0cd17d827b94ca5e09e9468a07da262ccbf226b
MD5 a5f81d2116ef82c09ef6390931e3e516
SHA1 41bf5bc16a0461378735c770328db29958f219d5
SHA512 ea06f9a9da51c5f9121a15fe82571cdbf88e49bd142719d3217436191f7d10c6c1c99b197f7a0150b1d0200a529f0db5bb82046d39f3f178a5ab4cea9cabf121
SSDEEP 196608:Zjj7ZtY620KULyMqDzi1msxtpEdDHTXom5KRZck3T:ZDZKli1msxtGFzXom5p8T
TLSH
T1B3A6BF22B900C032E8D100B2A6BD6FF6993D99341B7954E3A7D45DBD5A305D33B3AB1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4216	RobloxStudioBeta.exe
4460	RobloxCrashHandler.exe

Loads dropped DLL 28 IoCs

pid	Process
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4460	RobloxCrashHandler.exe
4460	RobloxCrashHandler.exe
4460	RobloxCrashHandler.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	roblox-studio-1-6-0-7330989.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxStudioBeta.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
216	raw.githubusercontent.com
277	raw.githubusercontent.com
372	raw.githubusercontent.com

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Videos\Captures\desktop.ini	svchost.exe

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	RobloxStudioBeta.exe
File opened (read-only)	\??\F:	RobloxStudioBeta.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
1928	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\WidgetIcons\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\btn_grey.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\getFIntUGCValidationLegThresholdTopBottom.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\WidgetIcons\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\WidgetIcons\Light\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\TerrainEditor\Dark\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\EmotesMenu\Layouts\Large.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\SocialLibraries\SocialLibraries\Components\AlertView\Images.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Components\TabRowButton.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Providers\Style\Tokens\Tokens.story.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\Tutorials\Dark\Standard\List-Selected.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\avatar\compositing\CompositTorsoBase.mesh	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\StudioContent\textures\LayeredClothingEditor\Icon_Preview_Animation.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Alerts\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\VideoDisplay.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\Flags\GetFIntVoiceJoinM3ToastDurationSeconds.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\textures\ui\LuaChat\graphic\gr-indicator-online-8x8.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Control\Pill\PillGroup.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Debugger\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\Controls\PlayStationController\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\RadioGroup\Item\init.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\Notifications\Light\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Navigation\Light\Large\ZoomTo.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\MessagingService.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\DeveloperFramework\Dark\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\StyleEditor\Dark\Standard\StyleSheetChild.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Dark\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Dark\Medium\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\ScreenshotHud\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\ColorPicker\ColorPicker.story.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\Text\Typography.story.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\TerrainEditor\Light\Large\Build.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\Feedback\Actions\ShowHelpModal.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\FindReplaceAll\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\TerrainEditor\Dark\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Alerts\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Light\Standard\RibbonStartServerAndClientSmall.png	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\textures\ui\Settings\Help\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\Core\Style\StyleContext.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\StartPage\Dark\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Light\Medium\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\scripts\CoreScripts\Modules\TrustAndSafety\Actions\EndReportFlow.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Control\Slot\SlotTray.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Utils\Utils\get-arguments-with-directives.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Lua\GenerativeAI\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\InsertableObjects\Light\Large\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\studio_svg_textures\Shared\Ribbon\Light\Standard\[email protected]	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\content\qt_translations\qtquickcontrols_zh_TW.qm	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\utilities\buildClientSchema.lua	roblox-studio-1-6-0-7330989.exe
File created	C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\ExtraContent\LuaPackages\Packages\_Index\Shared\Shared\ReactTypes.lua	roblox-studio-1-6-0-7330989.exe

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5708_336025329\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_2107536059\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_2107536059\metadata.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_2107536059\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_2107536059\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5708_336025329\manifest.json	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	roblox-studio-1-6-0-7330989.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	Taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	Taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	Taskmgr.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe

Enumerates system info in registry 2 TTPs 13 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxStudioBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	roblox-studio-1-6-0-7330989.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	roblox-studio-1-6-0-7330989.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxStudioBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies Internet Explorer settings 1 TTPs 4 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio	roblox-studio-1-6-0-7330989.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth	roblox-studio-1-6-0-7330989.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0"	roblox-studio-1-6-0-7330989.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe

Modifies registry class 41 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe,0"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings	msedgewebview2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\ = "Roblox Place"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{E57CA23D-D10F-4B84-966E-D486DC7E070D}	svchost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\ = "URL: Roblox Protocol"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\version = "version-b2d03e4efaa04174"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\Roblox.Place\ShellNew	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\ = "Roblox.Place"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{ECE8843E-9711-4682-AA2F-52CE7EEDDEE0}	msedgewebview2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\ = "URL: Roblox Protocol"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\DefaultIcon\ = "C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe\" %1"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl\ = "Roblox.Place"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\ = "Open"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\URL Protocol	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell\open	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxl	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\DefaultIcon	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place\shell\Open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe\" \"%1\""	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{E0308BAE-4A8A-4E00-B9D1-D4AB9B1106CA}	svchost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\ = "\"C:\\Program Files (x86)\\Roblox\\Versions\\version-b2d03e4efaa04174\\RobloxStudioBeta.exe\" %1"	roblox-studio-1-6-0-7330989.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\shell\open\command\version = "version-b2d03e4efaa04174"	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Roblox.Place	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio-auth\shell	roblox-studio-1-6-0-7330989.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.rbxlx\Roblox.Place\ShellNew	roblox-studio-1-6-0-7330989.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4216	RobloxStudioBeta.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4776	roblox-studio-1-6-0-7330989.exe
4776	roblox-studio-1-6-0-7330989.exe
4776	roblox-studio-1-6-0-7330989.exe
4776	roblox-studio-1-6-0-7330989.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
4216	RobloxStudioBeta.exe
3744	Taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5384	msedgewebview2.exe
1224	msedgewebview2.exe
1224	msedgewebview2.exe
5708	msedgewebview2.exe
5708	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: 33	2328	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2328	AUDIODG.EXE
Token: SeDebugPrivilege	3744	Taskmgr.exe
Token: SeSystemProfilePrivilege	3744	Taskmgr.exe
Token: SeCreateGlobalPrivilege	3744	Taskmgr.exe
Token: SeIncBasePriorityPrivilege	3744	Taskmgr.exe
Token: 33	3744	Taskmgr.exe
Token: SeIncBasePriorityPrivilege	3744	Taskmgr.exe

Suspicious use of FindShellTrayWindow 28 IoCs

pid	Process
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe

Suspicious use of SendNotifyMessage 28 IoCs

pid	Process
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe

Suspicious use of SetWindowsHookEx 22 IoCs

pid	Process
4216	RobloxStudioBeta.exe
5764	OpenWith.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
3744	Taskmgr.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe
4216	RobloxStudioBeta.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4776 wrote to memory of 4216	4776	roblox-studio-1-6-0-7330989.exe	96
PID 4216 wrote to memory of 4460	4216	RobloxStudioBeta.exe	97
PID 4216 wrote to memory of 5384	4216	RobloxStudioBeta.exe	100
PID 5384 wrote to memory of 6016	5384	msedgewebview2.exe	101
PID 5384 wrote to memory of 6056	5384	msedgewebview2.exe	102
PID 5384 wrote to memory of 6056	5384	msedgewebview2.exe	102
PID 5384 wrote to memory of 6056	5384	msedgewebview2.exe	102
PID 5384 wrote to memory of 6056	5384	msedgewebview2.exe	102
PID 5384 wrote to memory of 1592	5384	msedgewebview2.exe	103
PID 5384 wrote to memory of 5084	5384	msedgewebview2.exe	104
PID 5384 wrote to memory of 5084	5384	msedgewebview2.exe	104
PID 5384 wrote to memory of 5084	5384	msedgewebview2.exe	104
PID 5384 wrote to memory of 4088	5384	msedgewebview2.exe	105
PID 5384 wrote to memory of 4088	5384	msedgewebview2.exe	105
PID 5384 wrote to memory of 4088	5384	msedgewebview2.exe	105
PID 5384 wrote to memory of 4088	5384	msedgewebview2.exe	105
PID 5384 wrote to memory of 4088	5384	msedgewebview2.exe	105
PID 4216 wrote to memory of 1224	4216	RobloxStudioBeta.exe	106
PID 1224 wrote to memory of 4280	1224	msedgewebview2.exe	107
PID 1224 wrote to memory of 3912	1224	msedgewebview2.exe	108
PID 1224 wrote to memory of 3912	1224	msedgewebview2.exe	108
PID 1224 wrote to memory of 3912	1224	msedgewebview2.exe	108
PID 1224 wrote to memory of 3912	1224	msedgewebview2.exe	108
PID 1224 wrote to memory of 1296	1224	msedgewebview2.exe	109
PID 1224 wrote to memory of 5500	1224	msedgewebview2.exe	110
PID 1224 wrote to memory of 5500	1224	msedgewebview2.exe	110
PID 1224 wrote to memory of 5500	1224	msedgewebview2.exe	110
PID 1224 wrote to memory of 5496	1224	msedgewebview2.exe	111
PID 1224 wrote to memory of 5496	1224	msedgewebview2.exe	111
PID 1224 wrote to memory of 5496	1224	msedgewebview2.exe	111
PID 1224 wrote to memory of 5496	1224	msedgewebview2.exe	111
PID 1224 wrote to memory of 5496	1224	msedgewebview2.exe	111
PID 1224 wrote to memory of 2276	1224	msedgewebview2.exe	112
PID 1224 wrote to memory of 2276	1224	msedgewebview2.exe	112
PID 1224 wrote to memory of 2276	1224	msedgewebview2.exe	112
PID 1224 wrote to memory of 2276	1224	msedgewebview2.exe	112
PID 1224 wrote to memory of 2276	1224	msedgewebview2.exe	112
PID 1224 wrote to memory of 4176	1224	msedgewebview2.exe	119
PID 1224 wrote to memory of 4176	1224	msedgewebview2.exe	119
PID 1224 wrote to memory of 4176	1224	msedgewebview2.exe	119
PID 1224 wrote to memory of 1964	1224	msedgewebview2.exe	120
PID 1224 wrote to memory of 3920	1224	msedgewebview2.exe	121
PID 1224 wrote to memory of 3920	1224	msedgewebview2.exe	121
PID 1224 wrote to memory of 3920	1224	msedgewebview2.exe	121
PID 4216 wrote to memory of 5708	4216	RobloxStudioBeta.exe	122
PID 5708 wrote to memory of 1340	5708	msedgewebview2.exe	123
PID 5708 wrote to memory of 1792	5708	msedgewebview2.exe	124
PID 5708 wrote to memory of 1792	5708	msedgewebview2.exe	124
PID 5708 wrote to memory of 1792	5708	msedgewebview2.exe	124
PID 5708 wrote to memory of 1792	5708	msedgewebview2.exe	124
PID 5708 wrote to memory of 2604	5708	msedgewebview2.exe	125
PID 5708 wrote to memory of 824	5708	msedgewebview2.exe	126
PID 5708 wrote to memory of 824	5708	msedgewebview2.exe	126
PID 5708 wrote to memory of 824	5708	msedgewebview2.exe	126
PID 5708 wrote to memory of 1468	5708	msedgewebview2.exe	127
PID 5708 wrote to memory of 1468	5708	msedgewebview2.exe	127
PID 5708 wrote to memory of 1468	5708	msedgewebview2.exe	127
PID 5708 wrote to memory of 1468	5708	msedgewebview2.exe	127
PID 5708 wrote to memory of 1468	5708	msedgewebview2.exe	127
PID 4404 wrote to memory of 3744	4404	launchtm.exe	131
PID 5708 wrote to memory of 7040	5708	msedgewebview2.exe	133
PID 5708 wrote to memory of 7040	5708	msedgewebview2.exe	133
PID 5708 wrote to memory of 7040	5708	msedgewebview2.exe	133
PID 5708 wrote to memory of 7040	5708	msedgewebview2.exe	133

C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe
"C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe"
1⤵
- Checks whether UAC is enabled
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4776
- C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxStudioBeta.exe
  "C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Enumerates connected drives
  - Enumerates system info in registry
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4216
- - C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe
    "C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 4216 --attachment=attachment_0.733.0.7330989_20260809T100552Z_Studio_D7D0E_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.733.0.7330989_20260809T100552Z_Studio_D7D0E_last.log --attachment=attachment_log_0.733.0.7330989_20260809T100552Z_Studio_D7D0E_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.733.0.7330989_20260809T100552Z_Studio_D7D0E_csg3.log --attachment=attachment_log_0.733.0.7330989_20260809T100552Z_Studio_D7D0E_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.733.0.7330989_20260809T100552Z_Studio_D7D0E_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.733.0.7330989 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=6468eec5ddfa1510f06a43d039a72a6d9307e028 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.733.0.7330989 --annotation=UniqueId=6864263512042931159 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.733.0.7330989 --annotation=host_arch=x86_64 --initial-client-data=0x47c,0x480,0x484,0x458,0x48c,0x7ff71b034ed8,0x7ff71b034ef0,0x7ff71b034f08
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:4460
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4216.3480.12896536056876915727 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:5384
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ffaae285fd8,0x7ffaae285fe4,0x7ffaae285ff0
      4⤵
      PID:6016
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1844 --field-trial-handle=1852,i,9660871036202500166,15812192182803277352,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:6056
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2220 --field-trial-handle=1852,i,9660871036202500166,15812192182803277352,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:1592
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2320 --field-trial-handle=1852,i,9660871036202500166,15812192182803277352,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:5084
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3472 --field-trial-handle=1852,i,9660871036202500166,15812192182803277352,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
      4⤵
      PID:4088
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4216.3480.907650662850882417 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:1224
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ffaae285fd8,0x7ffaae285fe4,0x7ffaae285ff0
      4⤵
      PID:4280
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1744 --field-trial-handle=1748,i,14149112372890634946,9232799247108221342,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:3912
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=1892 --field-trial-handle=1748,i,14149112372890634946,9232799247108221342,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:1296
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2432 --field-trial-handle=1748,i,14149112372890634946,9232799247108221342,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:5500
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3588 --field-trial-handle=1748,i,14149112372890634946,9232799247108221342,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
      4⤵
      PID:5496
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3936 --field-trial-handle=1748,i,14149112372890634946,9232799247108221342,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
      4⤵
      PID:2276
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4332 --field-trial-handle=1748,i,14149112372890634946,9232799247108221342,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:4176
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=820 --field-trial-handle=1748,i,14149112372890634946,9232799247108221342,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      Modifies registry class
      PID:1964
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=5064 --field-trial-handle=1748,i,14149112372890634946,9232799247108221342,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:3920
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4216.3480.17604800006485864642 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:5708
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x190,0x194,0x198,0x16c,0x1cc,0x7ffaae285fd8,0x7ffaae285fe4,0x7ffaae285ff0
      4⤵
      PID:1340
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2084 --field-trial-handle=2088,i,11658355604567739298,569405923475732190,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:1792
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2112 --field-trial-handle=2088,i,11658355604567739298,569405923475732190,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:2604
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2580 --field-trial-handle=2088,i,11658355604567739298,569405923475732190,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:824
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3536 --field-trial-handle=2088,i,11658355604567739298,569405923475732190,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
      4⤵
      PID:1468
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4484 --field-trial-handle=2088,i,11658355604567739298,569405923475732190,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
      4⤵
      PID:7040
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4920 --field-trial-handle=2088,i,11658355604567739298,569405923475732190,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:7100
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4932 --field-trial-handle=2088,i,11658355604567739298,569405923475732190,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
      4⤵
      PID:8476

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3288

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004F0 0x00000000000004F4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2328

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:1928

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5764

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5080

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:1600

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:4416

C:\Windows\system32\launchtm.exe
launchtm.exe /2
1⤵
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Windows\System32\Taskmgr.exe
  "C:\Windows\System32\Taskmgr.exe" /2
  2⤵
  - Checks SCSI registry key(s)
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:3744

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:2420

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:708

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:8312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Network Service Discovery

T1046

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AppSettings.xml

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\AppSettings.xml
Size 144B
SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
MD5 431a6eb20932ec1c56682a1f60d231d3
SHA1 40bb32db040cabade103c21ba5b6f811dfb0773e
SHA512 0969b9484bb7c661d4e0452ff1c77396796333904b39f24c56d5a92ac4ed4ebde9b8981a985c6950b4af2852e8d9599e071a51ce4f9ef21ead778a2fdc76fcec
TLSH
T18AC09BA45351C4149795CF14977DF690E3B1797444504498D8A1785A0DC51D427D53A3
MD5 SHA1 SHA512 TLSH

Submit Download

qgif.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\imageformats\qgif.dll
Size 42KB
SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
MD5 9600a70636894f6a934f2a7f14d6ae0a
SHA1 d0a4e0dc7e4c61bebbd91579bf15d260c1fc7230
SHA512 6a80ca6c6b8ba3fcb1be5de6ea39bf6a75a6206266112bf23a81a249684b567e50babf257d011d0272d28d3d345c501d0f3e576f397a22abdea8b94abb3412bf
SSDEEP 768:dVRwrbBk3Xj+7yFZxK7+WHUgnNx1+MhYWeEJPxUo:d3wrbej+G3U7+lgnNx4MhYWLPxr
TLSH
T1E9136B56AB7844D2E513C678D9AA4D2BE935FA305B6297CF432181780F323D23E3C66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qjpeg.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\imageformats\qjpeg.dll
Size 447KB
SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
MD5 81b6df8cd8de9db1eeca252958ea9d1a
SHA1 e1ec20f7e3575d9595d38ca2ad8b5c521c7eccb4
SHA512 8cf35cc5b7a11aa7e7cdbc9dc626c5429b8f59079590092343b9b207839d34c46c1b9a2a7bbd4c5e136fae71396a698474c432428edcdc809825f003b6919231
SSDEEP 12288:/WbtMZ30x6oT93baQIYnMEMI3dZfsskUn5BLvUMCk//RFEciccjxRPCA4cTJF/eN:/WbtMZ3y1B
TLSH
T133A4A243F2605C87C7E54474EE6AC1A6E794B81CC7FB46F779C1ABD97A226F0B829100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindows.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\platforms\qwindows.dll
Size 1.4MB
SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
MD5 e81f163cbeb67ec8414c2ab3b4119647
SHA1 065921e56683b78097e125da120420136258ec55
SHA512 6700efcdae09a40e1907f56ee4fe2308422ce53ef76a13c434d1cd57a77d934e0bd583c8d96ced0fd250fd0ba727be6d7258692a6bbe19053b88fb48d188b13d
SSDEEP 24576:BgRZTqnadX9G01nyfcdGxOsFciSKi3kmbe7WAiYdZs9UIrIqrtQQ:oTqnadXw0xyfcdN8JQbOWAE/
TLSH
T11F658D57A3A48298C26BC23DC65B8B17D7B1700503619BCF11A88E597F63BE3277EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindowsvistastyle.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\styles\qwindowsvistastyle.dll
Size 144KB
SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
MD5 04a9a47fa806c912a22af17577566709
SHA1 2caca306233ef324d63ef3fd04937793ff2af912
SHA512 47c39a2e91f0444bec87055aa1592bea6b0fe5fa1996b4c1f3d38a1928381d8a536522e5f86cea3fb7c655920ccee66c468a1d02af152750a41fbe46c9aad032
SSDEEP 3072:AYfJgCoOdX7MNwr80krOTmUMVa/MFWxmqd0SQV8lWTxf:RBBXwL2Sa/MFWxmqd0SQVwWV
TLSH
T12BE34C13326602C6C463D2B8C55F0916F7B3B05853228BEF0667CEA92F533E27E79A55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Core.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Core.dll
Size 5.8MB
SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
MD5 f6c86aacc6126b0d2f442c6a88e57efe
SHA1 df1b891829c3005d045e3ba048292789d5e28fef
SHA512 8cb4d26c069074e2c5dd734e5d1cd085afd0742795024460d80b9b0b333dc01b5df7c5691c03ece34be20956daa63184eb8f028c5e1c27814124937ecb7c8ed5
SSDEEP 98304:kFO2h8E4EwNrZJsv6tWKFdu9CsViJQ8xqfSgw2:kFO2h8E4lNdJsv6tWKFdu9CsVOQ8xqfZ
TLSH
T10C569D8776AB0250D0B7C23CCAA7811BE672B8018B219BCF125CA7495EB77F1693F715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Gui.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Gui.dll
Size 6.5MB
SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
MD5 3bce6b45e07a747167349865b4bf4ac3
SHA1 d24d4b87ed035f897009cf0b5b711e6485533d89
SHA512 d7584ddd3c6cfc9bda1ddddd02b883aa974309770a478f138202f7540ae92b38cdc658149e4e8b4e76eb0280ab066e096558bd942367c20c018f0f716c09d1e4
SSDEEP 49152:jWM6LDUqcvRiHZHjTpTFpFEOPVQJqguaf5Q/J+5mkU7vo3qsJAGUD4topffcLnZN:wLDFv/+RmFaqBpfkCgnAiYCHecbp
TLSH
T18F662886725A6262C977E17D8B4F052EE1F3785283428BC748199B480F737EA1B7FE05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Network.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Network.dll
Size 1.0MB
SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
MD5 bb5ede48a003b21b63bb134435c4f5ff
SHA1 55d6cd8128d80c81a5fea49b9de4daa21d4a5ccc
SHA512 e5e62f3fbf1a9c82c13d0c192c1033d2c55d08ad3830ebbbe3b9252d0721651225ac39ab92d863ecd11bba62ac1c51f86422ffab9fcef6f5f20fdcf847a33afc
SSDEEP 24576:XKF0Nu0gZmVnhqMpH6Q7pX9U2BgrExZ8Wv:bNu04mVnf6cgrQf
TLSH
T10A355B67B36103A5D46AC1B8CA8B8502F67270018B669BDF5639DF693F737E1263E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Widgets.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Widgets.dll
Size 5.3MB
SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
MD5 5309de309fb00a4be24bb465f0053455
SHA1 a14ef29356dac72d882f663a426f16ab29bc3529
SHA512 0cebf0e1560f2ef8b140bfd4fba2b3d7a562923f1b45c84eff41dd02b5ce04a9402c937cb4708d4623ab02a8991bbe6a31acc3cbd17fe2079130313f33daa1e7
SSDEEP 49152:T8LcMQHZ/gD0bTG5/Zh4w0I6Lr86R21sQGxTkaeduxK6PBZrGBqfjoWjmqYjYhIb:qPQg6CHliIYKsonnYhIv7uP3S6x9W
TLSH
T122466B57B3A54184C16BD238CF8B8613D6B2700487628BDF256A8E592F737E22E7F705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt5Xml.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Xml.dll
Size 215KB
SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
MD5 a24011ba1cba9e517da2d89d530329cd
SHA1 867f44a65128db05ec1c2842a52b2752ba22346e
SHA512 76d7115d7b5f57a609cae61e768b28cc873f30a4aea46a2b385e9c8be1e5bba7c73ce84731708fe12f28d691b06ec6dbb8579f5eb9eca92ecf83d94e97b98620
SSDEEP 3072:4rZx2zOZ+kzW8MWXJBPlGyGv+RQxm7uFkgs7pkV9p7RM7jJWTx/:4FxyOZtLMWXJBPlBbaxp6kV9p7CVWl
TLSH
T18C245B4777258596E427C238CE5B881BE673B85017628BEF81548B792F33BD2B87E350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanBase.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanBase.dll
Size 1.1MB
SHA256 6d4446068285a95a51395eb594c67c8df28b979684f54bba9c7c8c0912ecd662
MD5 3e5a63bb0cb4e57bf197d3e47bf1ce27
SHA1 777aab7aaece20fa6432461a5f1b704b49301e7b
SHA512 5931cc6483485de6ea4e22dda8520a15b8e153079950792db2d023672b5975a19aac673089ff4793ec08dbcdb1cd6745a7dfccda2c2690cc5cdbf11704a2c7ad
SSDEEP 24576:93nRLlUv+otWr8wY6S8dtuTbwQHtlvsMn:9XXUvNdwVu/VzvsMn
TLSH
T1AE45AE4B73964352D16BC278C69F8114F07734119B4286EF9A2BFE291E333E5383B6A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanDocking.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanDocking.dll
Size 621KB
SHA256 f1014458a598e679f17f3a328daef9d4b7efcea203422ac744744692134c884c
MD5 4ceac351567805f5d467efdb2547171c
SHA1 cfa884741daf18fcdba79a45b39889948b73d384
SHA512 1f0b96909eafd305912b241813550491dc51fe332df4637decc2fa64e09da6330ec9a275ca644066b10b993d06140443035fdd3dcc267750defe1f6305472fb0
SSDEEP 6144:eqpZco/36jOCZ0NesIZSNfFBg8UYS164o4TNQre4NMqINZIyavAj4/qkOh4BVhgv:es/CIkZ8fzvU564N4EWqkInNg
TLSH
T1AED46C1B72780391E067D138C65BC626F4B37842476295EF6216EA2D6F33BE13A3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QtitanRibbon.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanRibbon.dll
Size 3.1MB
SHA256 001218df55b7c412a38086f0b90edef8f232ed1ca75ff0a4a1563b5f59b32fbb
MD5 391e42f9de3e8fae6b2ac13575b1f7ce
SHA1 311d994c2c0a63f27e8f61b867aa0c94f6ee7a75
SHA512 6da9b4acf64d9b89f9e3e97e1f8d0f1ab7a0c4d23e927ba5d65a22ca93ade40a24768f2c6c91679e696a3e1bfaca60f87b3b396fd06788b4b539353497e17560
SSDEEP 49152:6rTyq/LVyjq4LbhndL1ZsY0LUGGvVGvYEnCW/Ln+XY6Qcc/RotRNC7C7C7C7C7CU:6vLUjbLnL1ZsY0LUGNjCW/L+I
TLSH
T19EE5DF8B77AA4298D26EC17FD28B4155F5F7749A835386EB4826CD1A0F333E06C36B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxCrashHandler.exe

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe
Size 11.7MB
SHA256 0d26dbf578ecf5af61e8796109c27f8861a0296491767b3244ffbbb5bdf58dbd
MD5 1eede71ac5035030973deeb34d245d70
SHA1 173bbb31f8061c5885b1323e46679ebaf28b74d7
SHA512 4547c69391cac1ee463119b00661a1a605bf303b34e48114c4dadb0bc107d0e0b496e346de937e1bf3676f8b030e0035392cb5e4555008ebf51b24a0fd758091
SSDEEP 196608:8M5QgVTSEL7LHd+bAYcXeJahHBeYX5W3rI:TVjP00deJafeYY38
TLSH
T152C68D6AB2B800E8D4BBD17CC7469617E772741613709BDF16A086BA1F63EE41E7E340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\WebView2Loader.dll
Size 162KB
SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
MD5 e2f9d2ef3446e70b50de50f577c6939e
SHA1 48e7721704249cebd1267280459b7b36ce99e177
SHA512 f5d7790bb2eacc78405a91a65adc0f30a248542de22ed10cfe91bc87e4f953a93d738281c13480a070681e7169fca6ec49e20c5fb7b89d76f3a9bad912c6d87d
SSDEEP 3072:erQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Tv+EtJfy2aQutH:gMMTlTRTzWiThTNTFSzjiBM2h9P5oZNr
TLSH
T190F35B4772E5407BE16A8274C9A34A11E77774510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd-win-prof.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\dd-win-prof.dll
Size 3.8MB
SHA256 1e5998697cbad5d9800428bec8afd88285f7411fc05de9cb9453e776b01ee6f3
MD5 a0e645c21b4e8e8499f6e4af644dfe2b
SHA1 22c8205d8e5f40cb1688243df10ddf1c813a184b
SHA512 05a9f2dee061499527b615cb34614aff0eb150be3ed567614b9facb28cda328088b485a524e7402303c00c8b35da50cefac14b97b5d93d34f61b059cec3d4ced
SSDEEP 49152:LMbMlAt7HkrfnNhiM46GB8vGM535GN2j8dlZCEbIw0zUy+z/N0yooA9YIU6ieyV+:LXN0B8HoCzkxooA9n+
TLSH
T1D9066C02BF86996AC09DC874C34B4B638B2274CB0B35B6AF42D541253F6EBB15F6D358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfbxsdk.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\libfbxsdk.dll
Size 9.7MB
SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
MD5 51d82c0e8ad65126413ed39246b5cf46
SHA1 f73c0b2248ee11f8fde172e04c64b40452051521
SHA512 c60362c4a67bd11ee330d36ecb1a58d7619989072b48b652f9411884797852fca4805ea1aab77546b1d7fc3c158beb30dc6aef0f7dbfb99322affdc8dfec014f
SSDEEP 98304:4Zrqd/tYrwiI8gpR241UnQQjHNA256IJymNfJjWfELI1u0/QHnq:4ZrGewiI3pRf1UXNAUiF
TLSH
T103A67C8B227642E9D1BBD13DC9974903E6F2304117369EDB02964A6E1F237E0AD3F725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\msvcp140.dll
Size 540KB
SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
MD5 4e3fa9bd90ef020c14359639dc19312b
SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
TLSH
T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\msvcp140_1.dll
Size 34KB
SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
MD5 d433b3e8aec25afb1c65cccd97ddc7b1
SHA1 ffebb57d0bf8cdae0449302a691920cc22ed4a72
SHA512 b1d48de56a595ddd6fed36574f0d6f20fb21d047ef7a6e93a487d660bcb1090e45c6aed43a99bda9897c1ef524bd8032b33e35a48c796d3f467caad33f5dcff9
SSDEEP 384:FKzh5dQS8DzxhK4KWcS5gWIZ1gr4iSt+eMifX7R9zUkJCWEIHRN7/PFbR9z181q:FAQRDzxg4FMgU9nF9zUet/b9z/
TLSH
T13FF26DC5FA688443D866483082DAEE47BC3DB7D25F6092DB1392F25C0D937C5EA35A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\vcruntime140.dll
Size 120KB
SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
MD5 0d35c5e99871b4f02c490b9fd9dace34
SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
TLSH
T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\vcruntime140_1.dll
Size 46KB
SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
MD5 03b43160d21c08de07a79d0a1c5ee81d
SHA1 0a449093006af667432b83303614b53b62fc0d05
SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
TLSH
T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
Size 39B
SHA256 5666e3314c816e6df322b6ebdc5e47234d1c698538985f7db279183fdf09a7af
MD5 a773044ef32b20f96586aca3a5f80b20
SHA1 8f836a9f918b23e5563374d576a5a6a89561116e
SHA512 16c11e0ca1812ddf5e80a716d3472346ef8b162ab67cf5b8d3f0c296d86c1f02c9f2a98f7f00b735854da6f38f582cbc6937556cfa6be99cdc4a9877c64d548a
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
Size 3KB
SHA256 a2a6de166d9d33d56d77feba6eeb3c773a2f6b7ba6c2a9636457d588eb6a32bb
MD5 074422a85988b38c114ac01323584da5
SHA1 0f13524c9e3e215ca43b79b96af9f0a6b4b51a2a
SHA512 71856a7b77fe1bc98e86f5faa62a81ad38c6956ca3d57e63dc2d9815d0f0b1f4ad2454ed99bc28071ab4281c1ffdc6057f023d0f06b60d3ebba25a57a066077b
TLSH
T14F51896C69F40DBF624DFB5458E70B8A187840FA9448B88C91AC081CF5FF04937AFA89
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
Size 3KB
SHA256 c2e172ca4e6cd5b17838a694fbfa21a12883bb8b443c0ca846e800b7138853c5
MD5 085ff3eea107dd6b7954a8381a355503
SHA1 3c1b2d7620f87fcb01ec47f72cada711236200ea
SHA512 de7978471edbc9f7cbd507fbb953ae1be8f4c68ac6150be2dcda760c0642b1157eee33bc69e84089765129b2b0618a566234014bdfec48e0fd4f0636c451eb8f
TLSH
T10751896C6DF40DBF624DFB5414E70B8A187441FA9448B88C91EC091CE5FF05937AFA8A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\1274343708\settings.json
Size 99B
SHA256 7bbc04677ae5efb122b15f3d363ea948848635da72b980448ffe53a57863a1ba
MD5 de10b39321df8eefbfd4fc00fe08e867
SHA1 2c85fb4f84f00d035699d4605df67f8cf1486687
SHA512 2766f7d3cb5cc83661c8c1662f5c702cee2485aac33c3877ff7ce047d3689a95959ff995ceb73369a4767d1c433471a9e4f76249480ade40ad19cd177674f0b6
TLSH
T1E6B012A2E3048DB8D358DA0705583F572A6481F12CC9704F058C4120347463A3410003
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\13916111004\settings.json
Size 548B
SHA256 d2db3d88ec129b0cf611fbd78548ce08bcfebb18dc9bab259c27981c4de533dc
MD5 745b4e490c407b57b50452805d3be02c
SHA1 fee901e8d761b40f36733f6373d863c1ce88aa4b
SHA512 6bd1d2359fbff50b38b0ae1ed34d2d1994e65d9e89afe2118ae3b549a52993823114ebe12e21454a2e5d176f3dd23faad18d3c3ae3f94c099b4e3140ee550da6
TLSH
T1C7F0B4829435197A66D0D36295312A07CBA66CFBEA40A409C6EC00ED35EF15B1B1F647
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\84725827043434\settings.json
Size 431B
SHA256 4ca0ab541b222c2892d93ca3460dc8c991cb2211b56530cdecf78b310ac27a49
MD5 f83807db4fc2d320b6be7faa9c2ed191
SHA1 39cbab0662f48aff43c34bb7f9022d725f07c794
SHA512 4514c8f85c73d15b3d1168fd8a7fe3ece45f6aae8200196f4dfd3ab3c1282ce9ac8d659b08350711c53f3f164a3b6fcecdb65c8c5d2f166be0de281369ad4b37
TLSH
T179E0EC00BA0C467757F84A78A7297B468DD970E254ED644EC1CC5C3325BF10E5391752
MD5 SHA1 SHA512 TLSH

Submit Download

OTAData.json

Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json
Size 29B
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 fd842a034918c28458526115a5e153ad93a1fb420144fa645793e87df065205f
MD5 29bf172e64c166883b8872d9f43819f2
SHA1 9909ad2ecdd490f0a0c63fe3382253d5c8e8f1d2
SHA512 a0a4ebdb9aa9fae07ab6e268c8f552dd17593d41ccb2141fa538329439e6f16b56e94b2b5a92ba53f422f0dde50b21c6880c91f8ae7062d6d91cf1f33e0ebdfd
TLSH
T1DBD02B6322160631C21032338441F58C1100C81E014E8704AE35FD7D4E854F10CC5941
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2a1e8d34dd16465349d65a0a18deafd7c651c5662d7b6b20e131fb14a704a2a5
MD5 181556d8abec664bffe8d353923fa259
SHA1 50eb1c8d137e454e7d7bc293871d8cc6e8da9578
SHA512 4e25f40e3f57994ae82b6f278be4266fc123dc7dd1afbe038b89324d717f4c6dfef5751cb800afa44bc069fafa672ff426fe9833c791fbd47261072cf13c9ee4
TLSH
T1D3D02B6322160631C21031338441F58C2010C81F044E8604AE39FD7D4A844F10CC5941
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 6abaaa35c22a6ee31f9ded851fe6b38dde170ba1f0632b327436b0673a8a207e
MD5 a4f673ac90de931e95d78eca880b1617
SHA1 2cc58cdbc947de103a872b19117fd891b6979638
SHA512 6f88a5bca1e1d4a2f61416b85cc7fe41018890c5ca5a2210876c4761c9f25987ff0c088c1aa6b76afc6f15843e79743997aff3658c5eeea3b7947fc96e694e3e
TLSH
T197D0041151410501C04010335415D54401504CC0144D4705D410747D44D44D01445100
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e359dd0b2c308d1bd6fd98ad42b2655f4ae8b2a059bdd7491edbbdee96741605
MD5 b6833b7bddbdf7a8fe98ef53e6a87bbd
SHA1 9bc0d7409ed81bae9a1d0ad73db334750c8e7dcd
SHA512 267f0d969656b6d339713b33e53a6195f48f8f119ae427963b4a25bc70646d968b3c4424f9def6000e8da14d24db1c8be3a4e05065608e4346f909096e13e257
TLSH
T16DD0121332420634C01020331403B54C0440C94B404D8205E828E97E5A584E01D06441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e2968350a80b0df5cdcdd4553851a64beb65209bebc594e979e0f6c81af4a513
MD5 8c3fad076c6e56165c8610f6d929338e
SHA1 6de29a00814c74705de7142ed8bc0ad3646bc1fa
SHA512 46ebffc5037909d4af0aa03ec377487eea7f52adeb4784add9eb19942cf01765f84fb8b23f02a7707579c5b20b51bcd731443ecd4a2978be73f923cac6fbf519
TLSH
T16ED0121336420234C01021331402B54C0540C84A414D8305E828D97E5E584E01D46441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 8c6d386637a3f50180441fbee1117cf4434a5d9be15fffb8fb10e4ccf6f22e0f
MD5 ddee359ed6005d7c9ff6975d94042c51
SHA1 c3f3cfb05474d3ef7873fa4111b89378cfbc66cd
SHA512 e1bb869c75fa58d374911e44eb369de1021a828f15929f1860e499e4fe9dc6e8c75fdc06b9aa57bf12a0226cd30dc0b49cadbd238ed32c907c9038041464e07e
TLSH
T179A002F142C4D441E90446711C5206C0671088271145975780F62D54DA6A1D1C151614
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3445ebfd051bcdb91ed9a2da3cb14e8267995fa63e140beac349ee56675478fd
MD5 a691928c3f4b6fc0f662714cbd25e96f
SHA1 cea9d0bef1a9dea36c9de94a8bfa6dc591319624
SHA512 6c4084ee7a61bac5dd134e77df95fbbfbf6a64c6d632a3037bb70e008f76f07d5542da3273e7af4be359242fd573571c2046285a6f725465becf465f2cfe4f28
TLSH
T1DC41DC6DC6D1B013CF1DF9FE21E05F06A92229274637AB5BAA457C329C031F6B822243
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 f8bc4ec1d1cab359f313ab306af8a132dfb3443e020a8c100824ba9797a4d1e6
MD5 1ea58012b69ea2797144f0a4d439c89d
SHA1 0f82af3ea422f2fda4b8c0bbb5be2b26fe1c9382
SHA512 8c92c403280cc327187f1244cfa9ddcc8b281a5d1631f43d240b7918c29c41114386d77bb19f12633921c2bfb0b0aa795a7b9fd7058fc2ea239a1f960cf80437
TLSH
T11141C91DC6D2B413EF1DF9FE21E02F15682229179533AF079A457D728C135F6B511243
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

History

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\History
Size 164KB
SHA256 deba77bc71479c2e98a7f985233a7dc3a386ebc0dce33a347c6ac21d9ee1c573
MD5 a52a55fd35156c4962d5056465aa9d95
SHA1 c22a74097d6717d550758cf6f7ac16c3a4bce1e8
SHA512 2683277a6451aec89c9e40cc554ec5d16f22cb44c12ff404ea6c13acd8306552861b279f9a4e6aea3b715ece2e0f1969ff4c37f4c2e4b67336c4aa07d0a2adc7
SSDEEP 96:MBaLqL/uejzH+bF+UIYysX0fxQp97sXEHt/DfLVVVN6zRk/E0:MBGqL/tH+bF+UI3iWGVsXWNVVV63
TLSH
T10FF3EA1E5F643722CDBD923668E745B3597CF03F876326856CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44c0da3e-a845-409a-994f-14231e122f58.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\44c0da3e-a845-409a-994f-14231e122f58.tmp
Size 1KB
SHA256 b6fe015d75aeb994bcfb3fcfdac9bea9b3d4c698e5a955f42e4f49c2196c90eb
MD5 c24b824c3969b68ef46911013134612b
SHA1 48db81980bffeaecbe4bc726d386409fd2b10827
SHA512 2f96155c2d38dba38085d5f898f2dfac028d1644144bd77816ee1d40938a218fc0a06948b56f3373ddbbed546ec431551e20cf96fb731bd8432563af4f16c3b6
TLSH
T13F4188E791FEB52B20295D7F1E40FC1E1AA6B4352181BCFCCBA2812CB0C69F2571103A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 61B
SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
TLSH
T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 2deea2cbb0b0a1dd793c2696c8821ea532d863997ceeee0b33b04945c03ea7aa
MD5 d215c9762fc91e1113a2306b6ce99607
SHA1 29c209d3e81d3622f323905d9a5fb3f098e3ae74
SHA512 8dc4b48ed80c6ea37757e422aa3c94f44d87ec43f3b76a10e1a87fa2be96c6b75de812f5c1db865bc47548a10248cfbe35dd01d747f579c2eabe2e82940df8be
TLSH
T196418BF353B089BD9A1652F42A19AD1BCE4C0420071C6976C5D0BFA793F35A2E211B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
Size 2KB
SHA256 1ee457484ed37f247197f13c78203728f7afae3ff308e0602db55fd866f161a1
MD5 b1af1d5b8b8799b205b5b111e2c60534
SHA1 bacfbe71bd50d0a6f73005f857063be8f189c490
SHA512 3fe94a5cce984ff76ff9ea9d84be76ae0a8ff4309f013a726553dbb1c99193c838f29dff12bf65779098b0f499fe672fa2bbc606fb22bfc785f9cd667ba36c74
TLSH
T1114189F343F4896C9A1657F42A29AD1BCE4D0520031C697AC9D0BFA793F25B1E311B9B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 196b16b50b8358fbd6cf815fa8a2525dba1c21f919c0fabd609938c7837e234f
MD5 74949e87b7538a05714f01b99dac4774
SHA1 33496e103c5b861aa2315d1e19fb021b0d8b3439
SHA512 bc804b2b9b48223da19c1357dbf1e357938e1daa87e8953bec2f78a59f6eb12d2ebcd3fc26e4fcb6c13541362c4407a875cb73b218ca056451a35d2f5f4ca02b
TLSH
T151418AE7D1FEB52B20295DBB1E44FC1D1666B4351191BCFCCBA2812DB0C69F2571107A
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 1KB
SHA256 9d727cd3041cc8fe0a243139aa0cfd62e364d19a14a2966d419cb3f5b14720e9
MD5 49fe545f2e0bc093a86e8a3f818950bc
SHA1 f4707783842ab01600d18e987449c964a85b754f
SHA512 570dbf29a0b0f780f20bd3f18688641aa3dce9a4c0645d42912d60b11eb9994b8f24beb806d9113715546fc176421e0481c4a7b81acc528fe484d5931a839cfb
TLSH
T12741ABE7D1FEB52B20295E7B1E44FC1E1A66B4352191BCFCDBA2802DB0C29F2571103A
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 5de4808e7813f785fd3f1dffeed84ce0d7cfd5c3164206250dc46b7201ae99e3
MD5 94587e2a97bba64eb14db954cf1a46dd
SHA1 cedee7ce0d38e80b38eedbadc696e3a251c1bd34
SHA512 e5218f18cc3a1a9e6d5b148b0424c0278f0e974ba4cc1e0d99d8fdc31afe746cc897b854d05f86153ed873dc7acc57677595dc2643ed82371bcb8c11c1dc0847
TLSH
T1B9515C97D5BFB42B20285DBB1E44F81955B6B4352192ACFCDBA3C16CF0D28F2672106A
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
Size 2KB
SHA256 ddb741a13f66cbf250372b602155534bfe2e98052841ed7a4cc0019d8335a25d
MD5 c6d5dd05187c1282955dd242a10191b8
SHA1 a56be86b5bbdf513aab5d78c15d7b393597dc4a8
SHA512 c0db277f3727abcce4d1cf9e0cb0df4c5858f216bae1207cf79f2e1c76a93e0338666ac298b74b8f12e785b7c866d0cb8883a6c8eb1dd752e68034993c35f445
TLSH
T117517D97D5BEB42B20281D7B1E44FC2959AAF4352192ACFCDBA3D12CB0C24F2575147A
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5ba69d.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5ba69d.TMP
Size 692B
SHA256 acc7c2ed4cc08921530c466439d6d60795ec412beb3d3eae133b6ce220459509
MD5 fe3f6f59d853aa96f327996e8306084b
SHA1 c8c5f67317c76af263fcba442d35240117cf493f
SHA512 b49103c09928ede97c22193bf9a7194ac32c580ad5038a78d191e546bd8cf48be43befc1f2eeeb062d099e48757c56cd86e11594597ade92983e7f5c5adb1a79
TLSH
T195012B67C1BAB57F10780A7A2E44F81E56BBB03890D1ACF8CBD3452DB0C61F64712232
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 2d4ccf8ac8ae4f5c6ec8e0566210ff56585b6ba0290501a1a11ed9b23bfc226e
MD5 7289d4bdfbd73ed571278f95cb4c1939
SHA1 7c911f54243d9777a34666f4526a49c7e7aea244
SHA512 6e7d48e18b0317449807c4ac2c377b3cccf5bd6121077d51152d7e188ba1ea3cf62372b7611036938986dd0c84465dbd747fe8580e3a699f8470229a6d57a749
SSDEEP 24:TLB3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T131DtX5nDOvyKDhU1cSB
TLSH
T1D8F2689BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bf82512d-e22b-447f-a8a4-b02a174d9430.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\bf82512d-e22b-447f-a8a4-b02a174d9430.tmp
Size 2KB
SHA256 fc7acfa905b2f32ebfb9817dcd4f5d1628681ac264c8857c497dff48af249f50
MD5 a005847718801ba4b5a7c353b585257a
SHA1 0044a148280696af89d3f57a47ab89d9bdd2b218
SHA512 1ca1f388caefdeade55edcd3d7f093b828fc0daf1ae7e41cae309130fbc0b425ee81df4c02e171ab0854f221d9cc625be7f679bc47b9d050ce45188a9255b79d
TLSH
T163515C97D5BFB42B20285DBB1E44F81915B6A4351191ACFCDBA2C12CB0D28F2672106A
MD5 SHA1 SHA512 TLSH

Submit Download

ddadcb06-9a06-4dc0-865f-90f481f29b2e.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\ddadcb06-9a06-4dc0-865f-90f481f29b2e.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 49742ba997c37dc2b2e83bdce1bd44560de7e8bad8a70a2646fa0a93075f1758
MD5 4998226a659dbd108bc4f7b99b0b28a4
SHA1 1a50661bbf695feef50881c9071985c301ee6519
SHA512 7695cef7fa1dc399a7aa9cd66327005d127bb7f77ba4bf0877e6729ea46deae5eb2fcf15c69becc475025db464d214f13ceb9efd3f2c460f2c98704970ef6813
SSDEEP 96:r57/dcg8WobDykVdo616Zm5As7/x+6MhmuecRed1ejekK+gIAH28XM1C7K:r9GkMosysV+FtedQjABG6K
TLSH
T1DDD1A7025A24797B4CC6E518FA39BB57D2F6503275D61D58E7F89A2C04DB5CC330790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 487b444d7cd9c305d02a23191eb4b999feb9e7d3be0bb06425d9a864a47d26f5
MD5 4338aed2d5518b7906f6522ba1638dc4
SHA1 4377358bda62666b5ce9aed119160793ebb4297d
SHA512 e2fefee85f79fa4fe8a95110b0e73ddaaa9d886f8c4dccdb2a03bc436bb215a4a20e32055d707ba8682e13581f6f41678f0b2da73c4a44d506ad70c708b5c233
SSDEEP 96:st57/dcg8WobDykNdo5h16Zm5As7/x+6MhmuecRed1ejekK+gIAL28XM1C7K:st9GkCodysV+FtedQjAxG6K
TLSH
T11ED1A6025E24B97B4CC6E519FA29BB57D2FA503271D61E58E7F8962C04DB5CC330790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 5KB
SHA256 739a02818ffc60204e1e521e5b7a0940d49c62338f9d346e980353872e071176
MD5 f2391d116cea4f475a749f612a932cdb
SHA1 65659df54ebe008b028c4282885d2eaedf93ca56
SHA512 ecc22fb0b8b743ebc17a4f2ebfbd830ddb4869b54f4073b7e0e553577f8d96b096505a3b2ffc898e628def4dd4a7432d15d0260389c98035a93fc34d797de5f5
SSDEEP 96:r57/d/xg8WXlb9ykVdo616ZZs7/x+6MhmuecmjekK+gIAbI8XM1C7K:r9ZxvMojsV+FijAZg6K
TLSH
T14EC1B7066E28797B4CC6F518BA367A07D2FA603235D61D58E7F8862C08DB5CC731790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 d345ae30bdebb49795b54e96189f9045a49f6925e29a02c29b37379763132040
MD5 e53342f80706785781da38f306942c67
SHA1 a6dcef75daa53b4410c9d74776dfb5f1d9f8eb47
SHA512 62cbeef025aaa824c68816b30de47a75aa2b0c9b79544a3e3efd9dad65c2a9528e578dca322b121c2a8442fed60fe7105fe13dab38cc3bafd2902cc57ad09acb
SSDEEP 96:st57/dcg8WobDykZdo5h16Zm5As7xx8/x+6MhmuecR+SMHnjekK+gIAg028XM1CO:st9Gkiodys7W+Ft+SqjAdG6K
TLSH
T127E1B6025E24797B4CC6E518FA39BA57D2F6503275D61E98E7F88A2C04DB6DC330790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 7KB
SHA256 cf52d157bf35324657adf3867e91c5b95a638fa508d7efd74e341b8fc71a497f
MD5 c512404a7e739ac8f9aa37c87d0cd53a
SHA1 e9007fea96896ee2012da0f37f0757dfe7b379a2
SHA512 fb8aefd163da8f778f2f90e40e5dd3837a945dea69687155fb1a9dd59dd5462c42abd308198fbc35e086a8c8068f40ea7567f0ce410b7ebb5cf772a06894500d
SSDEEP 96:st57/dcg8tGxbbDykqRdo5h16Zm5As7xx8/x+6MhmuecRgQvGjekK+gIACmp28XE:st9GuGFodys7W+FtgQ+jA5G6K
TLSH
T18AE1B5065A24693F4CC6E51CFA25BA17D3F9103276D62E98E7F8892C04EB6DC630390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 a96a9e85ecd83467526398c57d9e742987b2cf76f1a83de4ccb71292687f0f76
MD5 151ab5d485877a13719ebf09356dd5ed
SHA1 feee54a427d2a5ce62d1422125488d2f940dd5cf
SHA512 b26226a26a522d1b5529623e91705e9bed6ab4966ebb23ebc1376d1401a65f30f237f9736040bc569db7a3b4b06409273e4308bba9ba8468f8ccd2974695fd21
SSDEEP 96:st57/dcg8WobDykqRdo5h16Zm5As7xx8/x+6MhmuecRgQvGjekK+gIACmcI8XM15:st9GkFodys7W+FtgQ+jAsg6K
TLSH
T142E1B6025A24A93B4CC6E51CFA35BB57D3F6103276D61E98E7F8892C04DB6DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
MD5 91dbaf73c1a8c55254d90272f998e412
SHA1 2b86b31c8c00c937291e5ac3b1d134a5df959acf
SHA512 109f4f59616cc1d1682b4d9468804f7668c77ce1878afec06a57037193f31a9c1c39f5d269277462936373b129d26488cddcc34d455c27185534e7754baaa988
SSDEEP 24:TLWr6bXYFpFNYJqH1kwIY6UwpQ9YH8rwZ6HfB:T+6LopFS+awWUOh8B
TLSH
T126926B4E5F346221C0F48B36EDE1855B2F7C201CD3B32655DA5860F3DE9299BF10956A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 122e8adf27e19dff790be4a70c9f7f41912bc897c9fd324cad2324c996e38c3a
MD5 f6d1d60f1a09b3e5f6e9c15e5c603eaf
SHA1 80f3b1ad8fab8b858f2a05efadfa176a9e75693c
SHA512 75dd7d84aa5f290fe169ff614b34103306852e24c122fb2fd5365514e6ee8d49fc93af5283a1439f6429d80bc547c72ef09901f07b2482c5e611f988ccb3e495
SSDEEP 96:vDiFPlf/ROo1pkF5d1ciN7VaTEv9V5h5pg5+e0hfkUoB4S8OBXU3SxBB:GFv079l5hXOht/
TLSH
T166C1C5970529C574AF054BEBEC387ECB9DA600CF99CA8C1687E2C48802C2EFD21CA4D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 53f571f48b2dd3461326ac2e778e84e57d93eb33d259a1dd7a32e556381a6eab
MD5 c965628df0bf6c0e9e95d2d69cd17f4b
SHA1 b12cad68abc7746fb00c4fd4c85f3b84dc58817c
SHA512 29edb2a8bf403fc9077b9041328de9d60e75e406ba466fb6d1759b01a2fb4d32e2a14bced4cfe01faa966f15554592820d1bb46bd44b0900c7ed746abcd97eeb
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
MD5 71ccdda9f3186c8e729bb559f93bb992
SHA1 3712c11bb21b8e2a74bb879d47b2819ed1ac14a8
SHA512 19f8134fcd1211964111b07884b52878b1649644b6ec623bb586df1a9b7dabc7f8c8a755d2a52c908b563bdd968135f4f703cc35103696e40d0ab0020c8dc4bd
SSDEEP 24:TL6iuaJhPwMuz6G0ZestjteXUSQeCl7ZIeNa6+6Uwg8hPq81fBG:T2TaOk17ZfnUdoqSB
TLSH
T1B0139A0F2E587564D1BD0635E9A34E6B2B7E30489B8329D125F02AF24DE251C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

ecc2f8e7-5a67-4325-80b5-1761982d8fde.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\ecc2f8e7-5a67-4325-80b5-1761982d8fde.tmp
Size 7KB
SHA256 e86f91447a28998df1d7d43ce8755fa04d04a52d6876500622d520834f294fe9
MD5 7d783071e3bf0748ef6c4ec3bdf349fb
SHA1 b9db0849b09c50707b85f631a28d33fea536a85e
SHA512 a36e49fd2f63900200e3219d9c18fb0abdc8b83ee6e4e0c63b216680b8456366f6b5f97111af0e10976ef2c26d8ce27ea5fcaff68fcaeae4dd336b260ed0fbd4
SSDEEP 96:st57/dcg8WxbbDykqRdo5h16Zm5As7xx8/x+6MhmuecRgQvGjekK+gIACmp28XMz:st9GwGFodys7W+FtgQ+jA5G6K
TLSH
T18EE1B6065A24693F4CC6E51CFA25BA57D3F9103276D62E98E7F8892C04DB6DC730390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Last Version
Size 14B
SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
MD5 3b746b6e8b8e101ee7cd41df1bb565d0
SHA1 ff5ff645ada097814fb4890d00dba8a309e1a506
SHA512 71d487cff7f744f046d993889c770a877075378b8d47d6c2f80fd94a5c1150a627f4a69d9e55f272f3aa4257e5dbb5296643591d5d23804a95550a3f2d91e2d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 2KB
SHA256 c58a525c3688e7099273587182586ed7ca86bf9d4186ed9c531d04debe9c3fa0
MD5 1efe13e8ec06e64d1e1c0136512f0c3e
SHA1 ba18b527164e4e1fd0f42baf75779d3a8310defe
SHA512 3bcc66406422db8a9c0bf197a5b046e88ccc3cd680578c2fee509b5989dd85063af1bcd89617d3ce656d146abc73d476ea55172c8d0e89b3d1deeae2b05bfb59
TLSH
T13851DA33B924A7379EF2460879473F138E7580A69B932F509ADC5B0C00CB25C2345C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 f7c6ce70ef27e8070a7b9785d668f2c6c71e2ecd07ddf90745549009978cad85
MD5 842d5e4384737a1b31ea5224e7c5ddcc
SHA1 32d1fe42a910bb4a9af86766d4c1e3f05920e4cc
SHA512 d096972dc60812932d05565ec8727867bd14c95a4cd2afc22ce392b50be43db98dbb327534451fd81c57b32910c359d53ac60e549e72765a9bb225b03a21d971
TLSH
T19E616637A974A6374EF28A05B9873B07ABA54067D5953F94CAEC1F0C01DB39C1341C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 8ebdcf511494fb54c8da80c82319409201598b146f0730f415b25090a13f6a61
MD5 fe2ecb74ccdec715767412ba0ad1a1eb
SHA1 df73e5b7c1041f76c56eb58729807eee9a91f849
SHA512 f8220064d4be8321cebd3d27091079883855efc3b06d764e70d7fb4e336ad3024f8548fc31e4b4f315b284baf3f5bb375458de02cd9c38a0942efe2a43d74f46
TLSH
T1AC719726A974A9379EF2CA05B9873B07AAA58067D5953FD4CAEC1F0C019B3D91341C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 a81d62cb05b1e49e51d9e0360c662522c308a2143a7185660c794ea4c9a6216b
MD5 2a1d0b165fa18cf4bf395aee929cd44a
SHA1 c978eb22e5d267a2511d43b62f7893cb36086cc1
SHA512 1612041476a2a584d5e1e881590415f6167b5951306a8d1b6f68f9081d4cb6f2d1a66a3d6c66c14161a56111ef148697ef15e206d5abc65ae81e21dff82a436f
TLSH
T1FC718626A974A93B5EF2CA05B9873B076AB58067D5C53F94DAEC1F0C019B3DD1341C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 477074634cd0822ff185784f5878395720b27a79070fc796b9a5501a5d614bbf
MD5 9565944757df1014260a6c42548c1bcf
SHA1 ffb55116b8eab49bde0fb3370e924804d9783ef6
SHA512 e2bb7c3287d118c3237ced5f18302d3120316fbf492c2e0a81a3bd0329f9261b44380558fb0d72d992efaa31f22ef92a8da49e2609e13518b5dfd4ffd1c75896
TLSH
T167819526A874AA275EF2CA05B9873B076AA4506795C53F98CAEC1F0C01CB29D1341817
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 14KB
SHA256 dc3675034c95031d03973e22658fe8642f6e96c8693003fcc0dbc67063f9ff7d
MD5 a629f1462836b39ced327b3b19b9b219
SHA1 b4e92953ec913260b499d45b2a37112458b3b9ff
SHA512 9ce05de645d842c7e6655e20696bab619a067db1b56e645a9db6cd384037c53de76ba638b9a6170a6f20937604db1c8ebdb382f948eca887d7eb745ac9a7e72f
SSDEEP 384:M+aQikB+z/xvxjg/qhE5NBStevXfZy9z/:r/UxvxjgC+/nZyF/
TLSH
T1DA629F2B65787D379AF3E604794A5B4BCBF994B290C26EB84AFD5F0C06C73980342917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 15KB
SHA256 7095f1a583c78905467db8fb4153ea7d5e1ede7c12abf0c9af5111ba07917a76
MD5 0a3f20d994e536eb55c5384a534e2ce2
SHA1 d365eb4eebd8b9c08bc11de55d5540e92724e826
SHA512 6e2e2d8b54251ca3af2991ed784bfab994d2194b61e1f74e93c5d7f37bca951a92a5fc0b9079ad8bd264edf5411620c75100c37f8ced322b19df55138a81cfa7
SSDEEP 384:3+aQikB+z/xvxjg/qhEhNBStrv0c33fXy9z/:G/UxvxjgC+YsQXyF/
TLSH
T180728E36E464BA37A9F3E6453A4BA78BCBF4446251C56EE889ED1F0C06C77DD0302817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
Size 3KB
SHA256 77da11dcf26e1699d023698b5e36fb03c41702dd3b6df48b5f8dd66cb6944439
MD5 a94ecba0c89c09cf78523ff3703387be
SHA1 720d0bd891b3ebd7f81ce96eb4e8a6f61d590585
SHA512 d45d51b388e814a281aa6d9d4d2f5579671d34da37671a1a44bf03031f9f8a4f395ab7159ac8ff2cf91ba88b295328f5f0d90ec7e220dd6b837b51d4750ce872
TLSH
T117718626A874A92B5EF2CA05B9873B07AAB59067D5C53F94DAEC1F0C019B3DD1341C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5b1edf.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5b1edf.TMP
Size 1KB
SHA256 8595c4379ec38cd48ebe6e1fe4910e3c70b27cabe4400a2d4df5e526359cffba
MD5 615a451ff837cdeca9ad934809612ca1
SHA1 c4f0c1fdb275ce07f5d0b58323d5f4cb58773174
SHA512 9312d6c9a16c3f3c901e4a1ab8855d890368f402620a358ddc5440657ab4eea970cc556e64ccc469276f034dc3b0f082d315d5528bca6636cb4907e72a2c9248
TLSH
T14C219572F1745732BED1560A32477A070EB040AB82510F4451DD9B0C059B18C9B5A837
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\ShaderCache\index
Size 256KB
SHA256 73c7b72938fed81e15c269a3dfb0583941a57e27c8f8f9f348015983127a837d
MD5 32bc0a68b434ba105f7fe98bf2c20e64
SHA1 de808990941c8c640694479b82373986d5025165
SHA512 19099f1a02f1ec1ca88b3ac670db3e9173d401d67f90a998f3403f00285926133d1d941f32e3db749d6c614fb434f21a5ba0c479a3ddb88e09a3620d76454ead
SSDEEP 3:LsOllllklkXl8P4ull:LsUlP8gull
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

49c60cf2-8209-4214-b9cb-9d6f4c83057a.tmp

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\49c60cf2-8209-4214-b9cb-9d6f4c83057a.tmp
Size 5KB
SHA256 1565f74460d883991f321f252a011cdf2883036ea6d60a7b730adf8d4bda61c9
MD5 00bd4ac8c47457a996b4faeaa7c0e5b0
SHA1 312e7ee027084ea9cfe563f7dff2019b9b1b208a
SHA512 4c02329297e206835309834ee9af6d4f06e2265f44d050f9d99203ca4d74c97fbc2a52195573ee731c117485da3247ba91b92700104753953322b0c6cb6c5b6e
SSDEEP 96:stqlJ/02b9+kmv5h16Zmvs7/x+6Mhmuec+D6PS1ejesK+g3828XM1C7K:stq3wPvdvsV+Fu66Qj418G6K
TLSH
T1C7C1C8025E38797B4CC7E159FA35BA13E2F5607265D62E58EBF8862C04DB6DC631380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\temp-index
Size 360B
SHA256 93a56b906d33f30c5144326ab6441873aead475036bc503a7fc3ce47a7fd479f
MD5 531ea6afc9ca14c600371e8202b9f1fe
SHA1 2ee649800b3e973cfce7dd1620bf5fbd6408ae63
SHA512 fe800323b4433069e4ef17b55c4c43259da60a88893d690506402e7eb397469c0d1ce94a8ec66ca1ee44947eacebae68b196e114313f00977ddac39b4e5f2cde
TLSH
T1F8E05E2283D33125DF14C6B519D03D41550C549705462F1B61BC3C8DC64F5DE8D80715
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index
Size 480B
SHA256 db31fdc47c9a443db22fcea9619f7cde12f4a2e620b51504743d5018b7360d24
MD5 c63c53a4e14a0defd22ffbcb6fc51a9d
SHA1 c4b25539aa516913f00b41f0e366cdfc68aeaf0a
SHA512 0749d4db2fd77034783cf8c6ed07575b18d51835c2f8e664907d4581bd835bca36fc4d9fbe85131b5620d64adec18051a38a335fe089dc582dfcee12974f6ca9
TLSH
T1A1F02241E383B625EFE4D7B149C23C42893E24D3028B1F0B00BC3C9C886B6EE4AC4600
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 1c4b7cc59829466c29ff9f111340eea01ccf5b791e1284824bf03ab4da3983f8
MD5 bd8587cdfdb2b0e9e7c918df4ac86535
SHA1 f6cb17f23d2618f90c50350e0420acbf965af655
SHA512 06de7216553fcec21829cda1ccb5334a575a2275a136dae1c94e2cfbf2f67d78f8a70def2515888dc2fd9c059346034989112dea8ba9ddbee6c4ce383d082333
TLSH
T12AF02242E783B225EFA4D7F149C13C92557E64970A8B1F0B10BC3CAC886B6DD8AC4A10
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d5815.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index~RFe5d5815.TMP
Size 48B
SHA256 c1b117a1c5697c5ba9bfba7e47263978a8128378c55f18d5cfc6b0c9ce056b03
MD5 f3f93656471ae357a85a475045bb4a9d
SHA1 7f1d7a09b1b8e803f819e267a2ae9a189c60ec84
SHA512 46331749c2a7d6a7a2bd365d3138a20640e51cc61c07bcbf1bc2ccabf4b8c1d91ab6259324d2182b01a1f3aa168747589dc36c1a00629279f08cfe7fba847304
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State
Size 961B
SHA256 6a010bd64de7f7f8242c90fba22a70b567d0228e8a442164e1744e9c9c0161c3
MD5 b2dee9cbb82571aaa2e78901e1fd7d7f
SHA1 5cfbb5829dd68ff266e178f271a5506779f7b7a8
SHA512 ce33158e7921d59bef39895a845f5da2b9ee7238bfbffd66b1089a6e2d9289963812eb70f3d58cb8479aff83bc544011064a9cbcdb0cb07f0e91ed50744f1373
TLSH
T1AB1197F383F1856C9A1603F02E24AC17CE5D05200B1C697AC6E0BF9B93E2060E210A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State
Size 1KB
SHA256 6810ca8ea79d98def4e1c082e0c78fddebb1a80e2f303ff70d7d575a7fd589ca
MD5 ed1d4681c1aab2d08c188d727954ba2a
SHA1 2de5f8474d98182d586b807dfa2b41f7e8507954
SHA512 3bf3e358e1cb9ff2f6112ac8701acc1b32cf2554c09056d02be2777462e19e038dc43c5bab4903f9e394fec50786778a38b6f0ccaac02de6fbfdc6eac9516af1
TLSH
T15C313AF71370856DAB1642F42A159C17CF9C0530075CA5B6C6E07F6793A35A1E211BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State
Size 1KB
SHA256 437e46917104aa8d7a3fed20c8f9c8a8f6a54f6ae8069964bfa24fe9afd746a5
MD5 809f601a5a5422d97480678a77d4a32b
SHA1 58a0ec47fea080475269561d36e3183f3a7142cb
SHA512 67729a4bf093559cb6e515e22078c474fe01608e95642484d06f30d094ced1e14cfffee0d1e250c2fd097368a3a33eb7ead5c7e3716cde1d82bc25db854021c2
TLSH
T1C93158F71370896DAB1642F46A299C1BCF9C0530071CA5B6C6E07F6393A35A1F211BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe616e0b.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State~RFe616e0b.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
Size 522B
SHA256 d0b81f9a5806a888ec99b7d1ae6b07e6567b554fb12461a1269d968c92f094d1
MD5 9eab0606ef5699b5a51ca01d12bbf564
SHA1 4c704b5c6c4c6384dcc64310d8888d2424e4ecb3
SHA512 d46f0d7bd5cba8c226006f4e3716e94b6c37367a95c20d55ed6eb9236f7bd5b368090d29b7975ad6cbe8d782cd3705b18ba3db7687db834fadb9be3707bf04ca
TLSH
T1ABF02B6395BDF53A506805591905FC411D3AE031024294F9DBA5822CD0518B35312477
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
Size 1KB
SHA256 21d4706da9a59bd2b87c7551d7926a71edf6b02f89b950002df7cde613703620
MD5 42e072fa896da3f3800f38c6f59c7401
SHA1 396b09b7b6425a5d4644016bc6857383f4adbe78
SHA512 2d0b1107dcb1633a3750d69ed1358ece39d42f6447e8c4529b32a4ecf86ae19ee6834c6d0dfbcd9b9e55506478edc5e47a076d5c4303230a5bbb4fc4b37f03ff
TLSH
T19D31AC9793FF713710280A6B1E46FC051A7AB8310583A8FCEF96816DE099CF34313466
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
Size 1KB
SHA256 e81e33cc4c4fcb08181dd5d451653bcf89f96aa11df9ebc7a0b0c6e933773935
MD5 e4ed0a6c9e9b3672bbf48a4328d93f0d
SHA1 fbece8edab1faf4af813b2b5a436af67de50e59d
SHA512 fc56e0ec1dd4c351d14fad6897ac9bad140979cb03d0f9ba030ffe3f6591de1ad749d23b32d505f1ae39728d8c6d349b859fc0ac48483a4abd62013304d3c975
TLSH
T193217F9392FEB47B102C096A1E45FC05197BB4311181B8FEDF67825CE0A14F74712476
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
Size 1KB
SHA256 1a496a962633f2b0ddb889ef90ac7e9ab5d3d448096419e2d2d2f1ee74bb6b50
MD5 9412e46e2a7f19cd4349b97628213bb9
SHA1 a75eb4604ea4b7853dddf733f83dfa09a6df108d
SHA512 88fffd0f2d96d5a9c45ae9476330528a27a3dc1a924109dad091bf7b53f69a2b28e44f906d800f604d7a65a882b04db839ef740ea7825567667ada92ba9e1fc4
TLSH
T1A1316BA792FFB537103C4A6B1E49FC05197AB8325183A8FCDF96826DA08D9F74312466
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
Size 1KB
SHA256 8b8ef74683760cb775a692a93588819ce7f1467e044274d38c43187b437260dc
MD5 28e209819f63a98c8ae99648955b4ad5
SHA1 8527dfe13fa8670f0d61ca25ed11cd7876daafb7
SHA512 78861c245ed5889367587010c2943fc03a635980ce6d6d4d43c356828b914bbc358536d1b7ec3629779169f7d6509334e284474ce6c82700cbd061ae514100e1
TLSH
T1A0319EA792FFB537103C096B1E49FC051A7AF835418368F8DF92826DB0899F34752427
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
Size 1KB
SHA256 9d683e6bf26d612b507592481a1fa2f6c8306a3e5dd4a1ce6eb29a0222ee9d32
MD5 a9b922c7257a38b16f89d59b78e403d0
SHA1 8b99904b6bb146b0440a7298ed669b3067aa7096
SHA512 698199d8085726531d0b83eb7510427a987671d6946e0734570207c4a8ef4b73e0a334e84a7ab9b4b57fbe4821933d3805e6f6e8ce264e39925c245ea9c8ceba
TLSH
T138316BA796FFB53710384A6B1E49FC05197AB8321583A8FCDF96816DA08DDF74312426
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5cfdc0.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity~RFe5cfdc0.TMP
Size 522B
SHA256 67a294748af4f07d70c48e83de712d46fe7411361cf74f38749d5a0ad8829403
MD5 b7f664c73ff54e534ed78114774a6a2e
SHA1 ddb45bed9c6e549dd51e9fe86a39304f19cea790
SHA512 a6f7eb0c939c1f0fce494e245e5da9c4a38964bea3193e097a9e2cf5cdd772d93ec32eca0fa6a7de835364ceac347e6d30f713f8171b1fbc4389f0081f1729f6
TLSH
T10DF02B6395BEF53A5068095D0905BD416D3BE0314242E4F9DBA6822CD0514B3571287B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
Size 5KB
SHA256 a663ea614ab7abb459db3482f74e3e2c8cebc17eab39a2ef896d488ecdeff04b
MD5 b669c1dd3a77445ea8ab9f4636dd74c1
SHA1 a4325f1c5d8887ba9269d7275e95136179e70f78
SHA512 992d752c4c25e37dc6f6b4896b37cd560fff6cc06ab436c2562a6d9e7aece5aacc6f2ea656e527b8155c26fb13b09c320cfc1f09e5a98c81f653bed76991679c
SSDEEP 96:stqlJH2b9+kmv5h16Zmvs7/x+6Mhmuec+D6PS1ejesK+g3A28XM1C7K:stqRPvdvsV+Fu66Qj41AG6K
TLSH
T15FC1B8015F28797B4CC7E159FA35B653E2F5607265D61E58EBF8862C04DB6CC631380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
Size 5KB
SHA256 cd16e90ce9cd2c84ae8f26d5ea608c3e3074d77f24777fff9f6db6331b4751d2
MD5 a9f66a89b414106f4712c0e3c7908dc2
SHA1 8f4ced12eebe15c9c108978d48e733daab15ff20
SHA512 01953740f886c6abac18e6e385660779b1847bfc2a78573820f3095d1d34677fbc80437ec935b26a242bc23f01e4a4f34915896633416c3ee3b64a96e9333a3f
SSDEEP 96:stqlJF2b9+kmv5h16ZmOs7/x+6Mhmuec+D11MkkjesK+g3L28XM1C7K:stq3PvdOsV+Fu11wj41LG6K
TLSH
T1F4C196025E28797B4CC7E159BA25BA13E2F9603265D61E5CEBF8862C04DB6DC631390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
Size 5KB
SHA256 87b621185825d078bfee7b83499def8a8c6a13c1f7f9edd8893edbc23e79726d
MD5 d97f3cc20b492407ea39405e9d6f0cc2
SHA1 5d73540324d241a794749a742ce1d32989825e0f
SHA512 0caa4d0efd281d96a578d4af591ea23e18960015bc631fc343a11f9bb0d99caefe29f53a1f3765693320ec0bbf018c924caf942084877ce24778d54d0dab3b8c
SSDEEP 96:stqlJB2b9+kmv5h16ZmOs7/x+6Mhmuec+D11MkkjesK+g3L28XM1C7K:stqjPvdOsV+Fu11wj41LG6K
TLSH
T16EC196025E28797B4CC7E159FA25BA13E2F9603265D61E5CEBF8862C04DB6DC631390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5d1dfa.TMP

Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences~RFe5d1dfa.TMP
Size 5KB
SHA256 05c065cd13702c2ef17107bd28a8e48c11e126bd219a785bbdac0471dc35e074
MD5 ecb466137f22c78e598bb6813e30d41c
SHA1 f101717925339d81d8c88b24150ed4409c2b6bed
SHA512 11c1000b3ed2a20b0e54a37e98e4a1c0747b5e5ea9c0f3072755f25d0e8b33005e291bdb1517a712f178267c29f3d5c930dc1662f9b2634107efac0fbffbf8cf
SSDEEP 96:rqlJH2b9+k4dv5h16ZZs7/x+6MhmuecmjesK+g3228XM1C7K:rqRhv+sV+Fij412G6K
TLSH
T1C0B185015F28797B4CC7E559BA39BA03D2F9A02275D62D58EBF4822C08DB5DC631790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cacert.pem

Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
Size 223KB
SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
MD5 2ef00fa979161001a3a5cd5169a7de48
SHA1 0d3ee6044ef954db79d4db9984cad411dfd4c3c7
SHA512 f0b7f015d3e766b390a663ca5b1498175fa241259cad73f4b8d2b9646b56bc08a698fea7f5a28324b9a59af1622296ef79d77830a50bce14fd5f02f7f9228fdb
SSDEEP 6144:EqU9NgI6FdZL52dTOgwQh1hV1AP2A2FTR:knh6fZL5mOi1hXAP+9R
TLSH
T1E624AEAACF953C4A28E3F094C9AB037ED919C3629DDAB0B31D593845C78972D61FD08D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

roblox-studio-1-6-0-7330989_7E255.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\roblox-studio-1-6-0-7330989_7E255.log
Size 7KB
SHA256 7cc6e46f7b1b7bf05a8fe27cacfd943386b6f8c1bf7e8a8d4c980b4fc5f76888
MD5 0285692f14dae68dd5ac016c5d161971
SHA1 9e15be26e596167031335b5e458efd3c998b642d
SHA512 ee2476effe582f2cad39843c71bd19715f5398f45fe2aed5251c6f2f2fb132edb3bbc98435f487de77f5d4e7f8ab71e6ba85c796361ef2387f0d4abfa15dc332
SSDEEP 96:K+Liop3SeajvZHcHYHwvT7au/vS/COhc4D2ed3S/CEET/el/OQ1kwrIAgT2:jLiopgj6vfbgl2edYCEDkLAgK
TLSH
T1DDE18B5AD7D24635361A124FC77FCC7FDB133C002165A2B0B2DF295EA789285ED8A683
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rbx-storage.id

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage.id
Size 8B
SHA256 83c7da2704ece6f5ec03ad2457f12beb8b693fd7c8c2f2b073920b90ecbd4577
MD5 d81d1bfda77f715e41cbc41d39a2daae
SHA1 69fa60576e255985c16b9b99df8d2b6ceb13ba00
SHA512 6f6cd99f3b5d53c2fac508039b672c2b1e49b8f4a37b4762ad45306144fe5f61a7e0590a43da1a85b2bb20f6fc3b3f9a67f3fec5832009f0c368f26753fd1954
MD5 SHA1 SHA512

Submit Download

12b38bbfa7f489ef3ccfc327709077ab

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\12\12b38bbfa7f489ef3ccfc327709077ab
Size 37KB
SHA256 1d363a557df19436b32e3279a3a03e920f1af8e1637ed995804b97523fbe3ea1
MD5 3de6dab8468aa8ca9cd5a55258b8a122
SHA1 5404921657d39209e0b8f58ef4bc8a57cc23f9ba
SHA512 4ff86251f5175d6728d1c1372cc614d554a75551921354ddda4bfd8b2baf9a447c75430c3c7cade0b6099c85369d7a95b407f38d666587408449f731ed4a29d3
SSDEEP 768:+nYdGTwajaA1Pg3r2UkvRDgb3wRBK6FfTZWpgJuxOc6/njtTc8pAZDuYFlF:zdipaAS3CLRDgbARU6FflogJMLKnjtwh
TLSH
T1B003BE625986C18AE03B39F49FDDBAC49BD03A0058C775192787F70A59F50BB20B9B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45d0e11b5bd5aa837ac287b8c98dee68

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\45\45d0e11b5bd5aa837ac287b8c98dee68
Size 21KB
SHA256 7ddc53816810ca69dee9aa2d10b420cfdf53d9380767b2057fe5cefd2012cecd
MD5 1f5aba640475c746731785a2bad68cb2
SHA1 61e1cbc16d76d8d8920f84bc9f96ed4d0e9ea316
SHA512 1c0d9b8d7ad886673bc2cdd5e18e81efbb422eedf45f04453dbae75ba9db3d6a48464737f77f75e845f1e0966689d2a313ae859feb3eb8645c4520a3ec547d54
SSDEEP 384:EtHlbcHrQ3BiagJoqP2h57yO4VYjmOEvnFlYPBWJio4cb8otu32:EtH+8ia+oqkcQmOinfJio1b8aN
TLSH
T1F0A25BA2DEC74A66D8FB02B507DFEF177B60780061972B1D9344E63628133B57218A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b4eec4bc17fa19228b10cdcbe640660

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\6b\6b4eec4bc17fa19228b10cdcbe640660
Size 62KB
SHA256 ff58a3fceba18d2cb79d759821279533de2940acc08e8d4764e4c47b6e6d2a29
MD5 b062d7911b059435749245d33fc16f28
SHA1 654533880e9c7a72d2152f4b16f8397d59c68ab3
SHA512 53aeac5e75f9875f031226d8b7fc4ded86710a6f0f824c345f9e02193ca369ad94fe41066d06c588ffa1524bd2f9fb20a1fe487ca191365b2fbdf6800902d2d0
SSDEEP 1536:EGOMpNE+QSrAaJuKNRiZhEhgORSSr0K4udwn:LOMpGJERwKeZOgON012wn
TLSH
T12753C09389C7815690BE36F90EDCFFA06E4135009207A5204743F38A5BA35FDA5B6B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c01daf5bc17bfdd89cbd6ff4ccd0bde4

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\c0\c01daf5bc17bfdd89cbd6ff4ccd0bde4
Size 37KB
SHA256 2d8139921dee07ad4f7d949d48fd167d3dd7ed20d9e7ecc1817cb78f8cf489f4
MD5 ed68bdcc1de0e57ce564e75ee324f4bb
SHA1 cc7a13dfb6dd33e16256862e07c7233c297c2019
SHA512 e5d7a0d82c83d6100130ed138fe054837814d0c687ee85680973b369c0efa521240aa7d5920d1735c0098fbe7126af7ea4a3fd7601ac71cfe3ce7503666ee40c
SSDEEP 768:TleFk7BsCkFEDqzX2caF2bJh1aUnKmXXfopqyQtQTZ:hBPkFxS0Jh1aTOXQ4o
TLSH
T18C03BFF56A93C9C9F0383EF48BCD9F404D543A38358396448B86F32A49F5165A2ADE1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8913724486d5e3c463c493b25346ca31

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
Size 64B
SHA256 fb1c799d70327eb9088bd73c2d0bbeb7585000b8e5974a7cf752a14bed0b8edb
MD5 fb0a4a1db7cb2a1b3fe2c472d7e99847
SHA1 9dc0f58df6b40757a4600f0f1fee57bfa7b2db9a
SHA512 75320efb81b8ddbe01abe8ee55fa15b43de7ac5a16fb18a9dc50ed0379a0fffe141f53428fb2400c9851d8bcb039774255c3ccc5f9bec4e50770ced9f84ea768
TLSH
T127A00236511899C4D27B5DA34A5506505324EB15B650554D4363D73A0C045229C6451B
MD5 SHA1 SHA512 TLSH

Submit Download

RBXAFD132EF0BE0489995FB5FDAAD4FA28E

Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXAFD132EF0BE0489995FB5FDAAD4FA28E
Size 1.4MB
SHA256 61b917b1b7c0787156f7af45611f7e279d39701c46f333b189c81523ab09b104
MD5 f0d47c40c31ce2509f5be4e0121a2a37
SHA1 1655e5e985be4f9d3ab18161458a73d685850f1d
SHA512 2714509bb6a63c123970d501ad9d2e052b291895f15b4aec4a3c08bb1735b6f1a551bfcbf4954f5009ed4f808d36655aa9fdfd25aec1939237836815f12cb607
SSDEEP 24576:H9BxKu4U4Nc3TfFZF9mdnDnJb4TRAjZN3xGaT4pF57ig8q7xyDu5ysBs1IyIe6y1:XxKu4UCc3x30DJGaNDK5Wg8qQDu5JDS1
TLSH
T1026533F4F3671DF6DC1152B07D2A29086BEA2B518B2F628F14F0D2B941D9A814C7F963
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RBXCFA8830E9AE84553803AEC29F478956D

Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXCFA8830E9AE84553803AEC29F478956D
Size 1.6MB
SHA256 2ac0e11031ff10d39b67b2135a08f46bddbdddd6c049c7396294df1d55434eb0
MD5 13694ee747b62db986b0978d10fe869e
SHA1 8b404157b652615717643fc9392d83a0ed8d5b57
SHA512 5e34c1dbe89c6b86897544d47b52bf0011cd3e2fe6dd7e2144dc8bbeaa6b479c2425a07cfab577ccaab42db9b0246d3dd1471b42606ce6eb0356b899aa1b5573
SSDEEP 49152:RMJVCe4YrFxb15hu7lRZHy+z8+MfpkED2+Ch:R6ZRbZqRl4+Mf662+y
TLSH
T13C75332CAFC79C9FD03A15361FBB05262DFCB468239461994DB3761F4E4E192B42A2D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3744-1389-0x00000254F6600000-0x00000254F6601000-memory.dmp

Download

memory/3744-1390-0x00000254F6600000-0x00000254F6601000-memory.dmp

Download

memory/3744-1386-0x00000254F6600000-0x00000254F6601000-memory.dmp

Download

memory/3744-1385-0x00000254F6600000-0x00000254F6601000-memory.dmp

Download

memory/3744-1387-0x00000254F6600000-0x00000254F6601000-memory.dmp

Download

memory/3744-1388-0x00000254F6600000-0x00000254F6601000-memory.dmp

Download

memory/3744-1381-0x00000254F6600000-0x00000254F6601000-memory.dmp

Download

memory/3744-1379-0x00000254F6600000-0x00000254F6601000-memory.dmp

Download

memory/3912-817-0x0000021C1F150000-0x0000021C1F152000-memory.dmp

Download

memory/3912-819-0x0000021C1F160000-0x0000021C1F162000-memory.dmp

Download

memory/3912-821-0x0000021C1F170000-0x0000021C1F173000-memory.dmp

Download

memory/3912-810-0x0000021C1F2A0000-0x0000021C1F2A2000-memory.dmp

Download

memory/3912-822-0x0000021C1F140000-0x0000021C1F145000-memory.dmp

Download

memory/3912-809-0x0000021C1F270000-0x0000021C1F271000-memory.dmp

Download

memory/3912-814-0x0000021C1F2C0000-0x0000021C1F2C3000-memory.dmp

Download

memory/3912-815-0x0000021C1F270000-0x0000021C1F276000-memory.dmp

Download

memory/3912-812-0x0000021C1F2B0000-0x0000021C1F2B2000-memory.dmp

Download

memory/3912-811-0x0000021C1F270000-0x0000021C1F271000-memory.dmp

Download

memory/3920-874-0x00007FFAD26C0000-0x00007FFAD26C1000-memory.dmp

Download

memory/3920-873-0x00007FFAD22E0000-0x00007FFAD22E1000-memory.dmp

Download

memory/4088-323-0x00007FFAD22E0000-0x00007FFAD22E1000-memory.dmp

Download

memory/4216-1374-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1326-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1409-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1411-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1412-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1413-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1414-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1415-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1416-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1417-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1418-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1419-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1420-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1424-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1426-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1474-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1391-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1343-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1903-0x000001FCBEA70000-0x000001FCBEE70000-memory.dmp

Download

memory/4216-1376-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1408-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1405-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1377-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-225-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1283-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-215-0x000001FCBEA70000-0x000001FCBEE70000-memory.dmp

Download

memory/4216-123-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-108-0x00007FF70E270000-0x00007FF70F270000-memory.dmp

Download

memory/4216-1243-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1187-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1407-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-749-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-107-0x00007FFAAEDD0000-0x00007FFAAF31C000-memory.dmp

Download

memory/4216-905-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-896-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-1406-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-648-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-833-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-823-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-800-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-783-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/4216-625-0x000001FCA4A70000-0x000001FCA50FA000-memory.dmp

Download

memory/6056-321-0x00007FFAD22E0000-0x00007FFAD22E1000-memory.dmp

Download