Analysis

  • user interaction
    yes
  • max time kernel
    1799s
  • max time network
    1791s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 16:46

General

  • Target
    roblox-studio-1-6-0-7330989.exe
  • Size 9.7MB
  • Sample260809-t9z5jasbjd
  • SHA256 eea5136d2e39678414ffacd6b0cd17d827b94ca5e09e9468a07da262ccbf226b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 29 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 2 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 4 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 22 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 12 IoCs
  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 35 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe
    "C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe"
    1⤵
    • Checks whether UAC is enabled
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Enumerates system info in registry
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:4696
    • C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxStudioBeta.exe
      "C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Enumerates connected drives
      • Enumerates system info in registry
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2128
      • C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe
        "C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 2128 --attachment=attachment_0.733.0.7330989_20260809T164830Z_Studio_B6B1C_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.733.0.7330989_20260809T164830Z_Studio_B6B1C_last.log --attachment=attachment_log_0.733.0.7330989_20260809T164830Z_Studio_B6B1C_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.733.0.7330989_20260809T164830Z_Studio_B6B1C_csg3.log --attachment=attachment_log_0.733.0.7330989_20260809T164830Z_Studio_B6B1C_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.733.0.7330989_20260809T164830Z_Studio_B6B1C_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.733.0.7330989 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=6468eec5ddfa1510f06a43d039a72a6d9307e028 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.733.0.7330989 --annotation=UniqueId=6093277206441222486 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.733.0.7330989 --annotation=host_arch=x86_64 --initial-client-data=0x47c,0x480,0x484,0x458,0x490,0x7ff7cd704ed8,0x7ff7cd704ef0,0x7ff7cd704f08
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Enumerates system info in registry
        PID:2388
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2128.4496.4214148834737288925 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
        3⤵
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of WriteProcessMemory
        PID:3480
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x198,0x7ff862bc5fd8,0x7ff862bc5fe4,0x7ff862bc5ff0
          4⤵
            PID:5572
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1800 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
            4⤵
              PID:5880
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2216 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
              4⤵
                PID:6100
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2288 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                4⤵
                  PID:5948
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3472 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
                  4⤵
                    PID:4396
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4000 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
                    4⤵
                      PID:5352
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3588 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
                      4⤵
                        PID:4780
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4676 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                        4⤵
                          PID:108
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4680 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                          4⤵
                            PID:4864
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4904 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                            4⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:4680
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4920 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                            4⤵
                              PID:2956
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4916 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                              4⤵
                                PID:3100
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4888 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                4⤵
                                • Modifies registry class
                                PID:2308
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4940 --field-trial-handle=1804,i,17160251986204988589,453616145633216327,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                4⤵
                                  PID:3040
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2128.4496.13671859374086717859 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                3⤵
                                • Drops file in Windows directory
                                • Enumerates system info in registry
                                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                • Suspicious use of WriteProcessMemory
                                PID:2816
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1a4,0x7ff862bc5fd8,0x7ff862bc5fe4,0x7ff862bc5ff0
                                  4⤵
                                    PID:5316
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1860 --field-trial-handle=1864,i,16270640588366888364,14147755457611890482,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                    4⤵
                                      PID:4592
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2068 --field-trial-handle=1864,i,16270640588366888364,14147755457611890482,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                      4⤵
                                        PID:3580
                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2504 --field-trial-handle=1864,i,16270640588366888364,14147755457611890482,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                        4⤵
                                          PID:4016
                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3580 --field-trial-handle=1864,i,16270640588366888364,14147755457611890482,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
                                          4⤵
                                            PID:1844
                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4872 --field-trial-handle=1864,i,16270640588366888364,14147755457611890482,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                            4⤵
                                              PID:3260
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4832 --field-trial-handle=1864,i,16270640588366888364,14147755457611890482,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
                                              4⤵
                                                PID:2004
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4500 --field-trial-handle=1864,i,16270640588366888364,14147755457611890482,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                                4⤵
                                                  PID:1128
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 733, 0, 7330989" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=5024 --field-trial-handle=1864,i,16270640588366888364,14147755457611890482,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                                                  4⤵
                                                    PID:6736
                                            • C:\Windows\system32\AUDIODG.EXE
                                              C:\Windows\system32\AUDIODG.EXE 0x00000000000004C4 0x00000000000004D0
                                              1⤵
                                              • Suspicious use of AdjustPrivilegeToken
                                              PID:4316
                                            • C:\Windows\system32\svchost.exe
                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                              1⤵
                                                PID:5528
                                              • C:\Windows\system32\svchost.exe
                                                C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                1⤵
                                                • Modifies data under HKEY_USERS
                                                PID:5732
                                              • C:\Windows\System32\GameBarPresenceWriter.exe
                                                "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                1⤵
                                                • Network Service Discovery
                                                PID:712
                                              • C:\Windows\system32\OpenWith.exe
                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                1⤵
                                                • Suspicious use of SetWindowsHookEx
                                                PID:3728
                                              • C:\Windows\system32\svchost.exe
                                                C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                1⤵
                                                  PID:3388
                                                • C:\Windows\system32\svchost.exe
                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                  1⤵
                                                  • Drops desktop.ini file(s)
                                                  • Checks processor information in registry
                                                  • Modifies registry class
                                                  PID:5600
                                                • C:\Windows\system32\svchost.exe
                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                  1⤵
                                                  • Checks processor information in registry
                                                  • Modifies registry class
                                                  PID:5624
                                                • C:\Windows\system32\launchtm.exe
                                                  launchtm.exe /2
                                                  1⤵
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:2356
                                                  • C:\Windows\System32\Taskmgr.exe
                                                    "C:\Windows\System32\Taskmgr.exe" /2
                                                    2⤵
                                                    • Checks SCSI registry key(s)
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                    • Suspicious use of AdjustPrivilegeToken
                                                    • Suspicious use of FindShellTrayWindow
                                                    • Suspicious use of SendNotifyMessage
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:3848
                                                • C:\Windows\system32\svchost.exe
                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                  1⤵
                                                  • Checks processor information in registry
                                                  PID:848
                                                • C:\Windows\system32\sihost.exe
                                                  sihost.exe
                                                  1⤵
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:6064
                                                  • C:\Windows\explorer.exe
                                                    explorer.exe /LOADSAVEDWINDOWS
                                                    2⤵
                                                    • Boot or Logon Autostart Execution: Active Setup
                                                    • Enumerates connected drives
                                                    • Checks SCSI registry key(s)
                                                    • Modifies Internet Explorer settings
                                                    • Modifies registry class
                                                    • Suspicious use of AdjustPrivilegeToken
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:5704
                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                  1⤵
                                                  • Modifies registry class
                                                  • Suspicious use of SetWindowsHookEx
                                                  PID:1964
                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                  1⤵
                                                  • Modifies registry class
                                                  • Suspicious use of SetWindowsHookEx
                                                  PID:4104
                                                • C:\Windows\system32\svchost.exe
                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                  1⤵
                                                    PID:3624
                                                  • C:\Windows\System32\SecurityHealthHost.exe
                                                    \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                    1⤵
                                                      PID:1088

                                                    Network

                                                          MITRE ATT&CK Enterprise v16

                                                          Replay Monitor

                                                          Loading Replay Monitor...

                                                          Downloads

                                                          AppSettings.xml

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\AppSettings.xml
                                                          • Size 144B
                                                          • SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
                                                          • MD5 SHA1 SHA512 TLSH

                                                          qgif.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\imageformats\qgif.dll
                                                          • Size 42KB
                                                          • SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          qjpeg.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\imageformats\qjpeg.dll
                                                          • Size 447KB
                                                          • SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          qwindows.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\platforms\qwindows.dll
                                                          • Size 1.4MB
                                                          • SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          qwindowsvistastyle.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Plugins\Qt5\styles\qwindowsvistastyle.dll
                                                          • Size 144KB
                                                          • SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt5Core.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Core.dll
                                                          • Size 5.8MB
                                                          • SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt5Gui.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Gui.dll
                                                          • Size 6.5MB
                                                          • SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt5Network.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Network.dll
                                                          • Size 1.0MB
                                                          • SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt5Widgets.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Widgets.dll
                                                          • Size 5.3MB
                                                          • SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt5Xml.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\Qt5Xml.dll
                                                          • Size 215KB
                                                          • SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          QtitanBase.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanBase.dll
                                                          • Size 1.1MB
                                                          • SHA256 6d4446068285a95a51395eb594c67c8df28b979684f54bba9c7c8c0912ecd662
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          QtitanDocking.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanDocking.dll
                                                          • Size 621KB
                                                          • SHA256 f1014458a598e679f17f3a328daef9d4b7efcea203422ac744744692134c884c
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          QtitanRibbon.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\QtitanRibbon.dll
                                                          • Size 3.1MB
                                                          • SHA256 001218df55b7c412a38086f0b90edef8f232ed1ca75ff0a4a1563b5f59b32fbb
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RobloxCrashHandler.exe

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\RobloxCrashHandler.exe
                                                          • Size 11.7MB
                                                          • SHA256 0d26dbf578ecf5af61e8796109c27f8861a0296491767b3244ffbbb5bdf58dbd
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          WebView2Loader.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\WebView2Loader.dll
                                                          • Size 162KB
                                                          • SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          dd-win-prof.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\dd-win-prof.dll
                                                          • Size 3.8MB
                                                          • SHA256 1e5998697cbad5d9800428bec8afd88285f7411fc05de9cb9453e776b01ee6f3
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          libfbxsdk.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\libfbxsdk.dll
                                                          • Size 9.7MB
                                                          • SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          msvcp140.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\msvcp140.dll
                                                          • Size 540KB
                                                          • SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          msvcp140_1.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\msvcp140_1.dll
                                                          • Size 34KB
                                                          • SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          vcruntime140.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\vcruntime140.dll
                                                          • Size 120KB
                                                          • SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          vcruntime140_1.dll

                                                          • Path C:\Program Files (x86)\Roblox\Versions\version-b2d03e4efaa04174\vcruntime140_1.dll
                                                          • Size 46KB
                                                          • SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          prep_Activatable Class_Hermes_perf.cache

                                                          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                          • Size 595B
                                                          • SHA256 d4e60617c2afab8263febabe7f14f18595715078d71307a8cefe0707dae76dee
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
                                                          • Size 2B
                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                          • MD5 SHA1 SHA512

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                                          • Size 39B
                                                          • SHA256 5666e3314c816e6df322b6ebdc5e47234d1c698538985f7db279183fdf09a7af
                                                          • MD5 SHA1 SHA512

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                                          • Size 67B
                                                          • SHA256 d883376273fccb2d7c6ce0329c1c319557cdd50c87e49e81b7dd81d9bd424c8b
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                                          • Size 2KB
                                                          • SHA256 a21e124cc6b1979ad7aa461d9c1112cbcbc52ba7cd6cf09a47fba1190eccb133
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                                          • Size 3KB
                                                          • SHA256 c2e172ca4e6cd5b17838a694fbfa21a12883bb8b443c0ca846e800b7138853c5
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                                          • Size 3KB
                                                          • SHA256 9df7b4a0aff21aa7364d61e917f46a85b52fd370ae8b8b42a8fc3dc97b2c446d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\1274343708\settings.json
                                                          • Size 99B
                                                          • SHA256 7bbc04677ae5efb122b15f3d363ea948848635da72b980448ffe53a57863a1ba
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\13916111004\settings.json
                                                          • Size 548B
                                                          • SHA256 d2db3d88ec129b0cf611fbd78548ce08bcfebb18dc9bab259c27981c4de533dc
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\84725827043434\settings.json
                                                          • Size 431B
                                                          • SHA256 4ca0ab541b222c2892d93ca3460dc8c991cb2211b56530cdecf78b310ac27a49
                                                          • MD5 SHA1 SHA512 TLSH

                                                          OTAData.json

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json
                                                          • Size 29B
                                                          • SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
                                                          • MD5 SHA1 SHA512

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 279c0208eab7652a95677b197826c04b8f0909fcd86156b7c0f3f728c2f9c816
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 e89fb8e800d9ac6f9e586c4813410f788254e00fddc842e8cb99089f727dc30e
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 f269eb98e429912f9ec90be85fe2b6fd737de861b9b753ae2bf4c7d6254ac851
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 fc818f95921f7e72def1f2b4c08be7d41c5c3b0d632011a345be3d0fada29f90
                                                          • MD5 SHA1 SHA512

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 2a4cb1210d2497e1f4a68f111bf9fba0780ede202d3881ae60fcbb3447e1d59f
                                                          • MD5 SHA1 SHA512 TLSH

                                                          throttle_store.dat

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\throttle_store.dat
                                                          • Size 20B
                                                          • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                          • MD5 SHA1 SHA512

                                                          14bf288e-e34e-45e4-b0a1-00080eba2f30.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\14bf288e-e34e-45e4-b0a1-00080eba2f30.tmp
                                                          • Size 6KB
                                                          • SHA256 1c0007df43155ce0acb432770d5c0465dca87c9a55c7b8a0330e186dfc27f096
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          data_0

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_0
                                                          • Size 44KB
                                                          • SHA256 d11baa444a1e69e38c050d827f6e7d1e6f3a2fb9dd4e270d16b10ecb69f62a0f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                          • Size 48B
                                                          • SHA256 5dde844d7f7f42dadd2e50420c185b3dc5607911974d4107f7c2ccd1a1ce2fcf
                                                          • MD5 SHA1 SHA512

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                          • Size 2KB
                                                          • SHA256 0039da9b0f433e4322fe3e4f4bcfdff2d7fdf9db52c18763192ca21af4e22714
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                          • Size 2KB
                                                          • SHA256 06f2afc02ed3ce24c28ef5b806cd523b13dbc63d341bc44a854571b3749f25b9
                                                          • MD5 SHA1 SHA512 TLSH

                                                          MANIFEST-000001

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
                                                          • Size 41B
                                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                          • MD5 SHA1 SHA512

                                                          History

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\History
                                                          • Size 164KB
                                                          • SHA256 a6c82607b7cef8b6f108d73c1c3567fe60e2b41a91f58ef2d064194f641893b0
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                                          • Size 2KB
                                                          • SHA256 9e09f84639b92916a7cac2d123c42eb60242932919ac64df5c4d4bd5d60ed925
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                                          • Size 2KB
                                                          • SHA256 8b77f1003b95b00e21af5ef9c310f820b8fbe04f5df017e6d7066545c64d57f4
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                                          • Size 2KB
                                                          • SHA256 0593d278e95b14ec7609ce2b1aae59811f7424350847474d6f4a7702b6427bec
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                                          • Size 2KB
                                                          • SHA256 151ebc33c20dd4d600ce527cd8c681774258f28cc26fe6bffb5719015aa580c3
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Network Persistent State~RFe5badff.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5badff.TMP
                                                          • Size 59B
                                                          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                          • MD5 SHA1 SHA512 TLSH

                                                          SCT Auditing Pending Reports

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                          • Size 2B
                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                          • MD5 SHA1 SHA512

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                          • Size 2KB
                                                          • SHA256 a2bfe09251ce308d825008fe9528a2697fda8aba469de7f785288b1011721a55
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 9760136d71ebf80dfe128c2a1c9512adf628d7720edf4fe576452b45150e0d06
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 56674336e1b772360314577386565dbbcd33c192949ba25afe1d2353cee289c8
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                          • Size 2KB
                                                          • SHA256 949826d84fc867ebffbc1e3a687498bc0ef81bf2dae0ae4fff336c1f19cfd737
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 80e8b5ae7d56e6a7de5ce24db802e0287307df2872c42d6f442f19ae3e17a329
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 e16a813c09190337bc6dda49ccdc9b0d0a02cdf311c6c9451ed193d0fdfd2d7f
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                          • Size 2KB
                                                          • SHA256 17962ba404b566ba61d598b7fe8c3f00a4153f06d6ea8690166c5a1394efec0b
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 795bb4081e0b02e0b422f0c4d759fd16d47a4dd805308348fb8e9af8c5508e01
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity~RFe5af0f9.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5af0f9.TMP
                                                          • Size 1KB
                                                          • SHA256 ff8af13e5da5b4c51ce5d92aeb722c60412a94911267b5ffac8b30c56ef6f94b
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                                          • Size 6KB
                                                          • SHA256 9d7e82111e317379adaf070a1f1af45921496b5d729d708e82faca4a6020d89c
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                                          • Size 6KB
                                                          • SHA256 742ee380ecae6858ec408e4d6dc49217894cd6c7a60d87c3d2afcd3f401e128d
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                                          • Size 6KB
                                                          • SHA256 f96067890f6f7113777a0a141619e270f14be7459b9b41c491d168f171d6ed55
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                                          • Size 6KB
                                                          • SHA256 b16aea0813eb47bed23d8f4f3062ead8e24493c363934006815373d1e0d6aad9
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences~RFe5aea23.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe5aea23.TMP
                                                          • Size 6KB
                                                          • SHA256 c456d8119c2ec25ddc7cbcef9bd1b4ecc71c4b82a90466d207801f4b095fd927
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Secure Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences
                                                          • Size 6KB
                                                          • SHA256 ce8ece28f82394e0a5603e345e4fc4eeae11387bc6eb12dace0bff28d3524b32
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          CURRENT

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
                                                          • Size 16B
                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                          • MD5 SHA1 SHA512

                                                          data_0

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_0
                                                          • Size 8KB
                                                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          data_1

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_1
                                                          • Size 264KB
                                                          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          data_2

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_2
                                                          • Size 8KB
                                                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          data_3

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_3
                                                          • Size 8KB
                                                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          Last Version

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Last Version
                                                          • Size 14B
                                                          • SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
                                                          • MD5 SHA1 SHA512

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                          • Size 2KB
                                                          • SHA256 14672ff20c0e703f1f1d7768cefa8ea5263849fc15f526fe39385a36b1e55e16
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                          • Size 3KB
                                                          • SHA256 3e068fb6ed41b109fc874204ba4bbb021a4cd8b2861d98cd106f4d5108d0710b
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                          • Size 3KB
                                                          • SHA256 7367bc681485dbcdecbecd4a3d071d59ee9e064c5f62d3a090f1eb3fb7ba8483
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                          • Size 15KB
                                                          • SHA256 d5e52b9171c66f800504493374d675004d0e7786636a53f6dd0b755520ca32be
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                          • Size 17KB
                                                          • SHA256 d9e3e314717ab2b9ac4bc77c1a161e2039de1ef4982f0a18679f2cb3dac6e2d4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                          • Size 17KB
                                                          • SHA256 6bd5004cbe073b1ff0fd13b3d506f4471e758eb755af118137673e926999160c
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                          • Size 17KB
                                                          • SHA256 7b89c68b877a097dd093071f7d8e135e72b2319e0d375b29739a366493a6468b
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State~RFe5a981b.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5a981b.TMP
                                                          • Size 1KB
                                                          • SHA256 e969bce4b8432c377279a89df4224be7ac63d34855154a3b0a42392ec8cd514c
                                                          • MD5 SHA1 SHA512 TLSH

                                                          data_1

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\ShaderCache\data_1
                                                          • Size 264KB
                                                          • SHA256 29211b8d6b03ff9cb74c3681a33e40cf2a387ac6911646d9edcbb1844f78bb4d
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          index

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\ShaderCache\index
                                                          • Size 256KB
                                                          • SHA256 477deec15a9219231f1b8d4d3435b416cc0d672ba7eb8b0561e0342a998545c6
                                                          • MD5 SHA1 SHA512 SSDEEP

                                                          Variations

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Variations
                                                          • Size 86B
                                                          • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                          • MD5 SHA1 SHA512 TLSH

                                                          2f4223a4-cefa-4e37-9375-64b44efda0af.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\2f4223a4-cefa-4e37-9375-64b44efda0af.tmp
                                                          • Size 5KB
                                                          • SHA256 845c948389e01a7b1506c3559ba50bd97e20fb936cb4f9903f95bc7d91b7e68f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          temp-index

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\temp-index
                                                          • Size 408B
                                                          • SHA256 1401fe5d1941f5d0e26b6a403f641edbc860254dda142a1e81d5633cad093e84
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index
                                                          • Size 360B
                                                          • SHA256 d257e4179e7b05a317ec90d185d93f198d2358a0c0d4118e9fd8cf28547cdf27
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index
                                                          • Size 576B
                                                          • SHA256 e3086852a9617a74ae6c3b2363828fe80bf64a6cb12877239ee4f7185491b50f
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index~RFe5ddf47.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index~RFe5ddf47.TMP
                                                          • Size 48B
                                                          • SHA256 7c669cf9419c2a618d5cd055a5f392a96b1d020ffb91c2a6b05ecd4408eb0b06
                                                          • MD5 SHA1 SHA512

                                                          index

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\wasm\index
                                                          • Size 24B
                                                          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                          • MD5 SHA1 SHA512

                                                          ExtensionActivityComp

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\ExtensionActivityComp
                                                          • Size 4KB
                                                          • SHA256 9827429749037198cb3d19a851ccff2adafad344fbade7220aa022d3c9e2fa85
                                                          • MD5 SHA1 SHA512 TLSH

                                                          2bea27db-b5f4-49b4-9f06-e55f2e691c8f.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\2bea27db-b5f4-49b4-9f06-e55f2e691c8f.tmp
                                                          • Size 40B
                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                          • MD5 SHA1 SHA512

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State
                                                          • Size 1KB
                                                          • SHA256 62ebb511c4f0f95f5dcdfd8140ba51a03ad35820c841180a8ebd44961c41ce82
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State
                                                          • Size 1KB
                                                          • SHA256 65bb72db7f535d73d0aab5ae173539717fc49f20a29c7c4681df1e5564b4945a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Network Persistent State

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State
                                                          • Size 961B
                                                          • SHA256 7695440ba0ce2822dfcab0c472e248372aeb5059b11bba5800a39389b03df95e
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                                          • Size 847B
                                                          • SHA256 29c514216b58ed327815fc085d28285957bbd9a38146b70279045529286cde74
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                                          • Size 1017B
                                                          • SHA256 73f699441c94fa87860cea822d650fd09f8a676e849d44c07cad51c09315f5e0
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                                          • Size 1019B
                                                          • SHA256 2fad73e29f23c34b73f01dd9eee5548d2aa044abe18e527549a1890897e3138f
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                                          • Size 847B
                                                          • SHA256 4908f354911649f4ba641eb5de860b1933b6a5e15274fdaf0e1142d3892e59ac
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 b938e1f2cf4d271a62069e0cfe17d5f8822c85f48b8cb76652bc40b086d02d14
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 8879e25c51ea145f26b6acceb37b7ba4f47a1c6e7b4b38f2b38e3d20f0156c8f
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 e8e662f102ae0d6aa4f23461df841e9940ae179a84b683fb81e27f2114d5daa7
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                                          • Size 1KB
                                                          • SHA256 9db85f90e6b2aca21b37c731f3597b39e0d3b9c0f6b4617f1cb788a3557bc2ce
                                                          • MD5 SHA1 SHA512 TLSH

                                                          TransportSecurity~RFe5de523.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity~RFe5de523.TMP
                                                          • Size 681B
                                                          • SHA256 ebc6b9c8b4d337fb519f5f2441dcd2c937ea622f5d3781720e7d281a35480765
                                                          • MD5 SHA1 SHA512 TLSH

                                                          daea7760-6b16-4861-8934-f3511e155226.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\daea7760-6b16-4861-8934-f3511e155226.tmp
                                                          • Size 1KB
                                                          • SHA256 d7bf6e9c8392a37f0b4847f98d1fc3e37aed81447c9dc789d345e1262982cf34
                                                          • MD5 SHA1 SHA512 TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
                                                          • Size 6KB
                                                          • SHA256 5082a46c859aea12f6adc0848670ae2ff1d59517754142d8d79d60ad3229e4f2
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
                                                          • Size 5KB
                                                          • SHA256 4233d14d132f1d89ca6ebb2f30cfa278a5b53e750eb7ed7c2b7bb829b5bd5888
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
                                                          • Size 5KB
                                                          • SHA256 e8f8fc189b22ff695402d432d225a0da1394fba461f6b9490802d8be716a68b2
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
                                                          • Size 6KB
                                                          • SHA256 9fd17a887a567faf7ef65e6698080d1019a2569061be78c6c2492695d91cce43
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          cacert.pem

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
                                                          • Size 223KB
                                                          • SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          attachment_0.733.0.7330989_20260809T164830Z_Studio_B6B1C_last.log

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\logs\crashes\attachments\d53f6371-f812-4471-99de-37974e35a2af\attachment_0.733.0.7330989_20260809T164830Z_Studio_B6B1C_last.log
                                                          • Size 274KB
                                                          • SHA256 dfaea0ce33911f4749707521b4a96fe75a4d081eadd14d4429ab907464026d77
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          roblox-studio-1-6-0-7330989_5AF3D.log

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\logs\roblox-studio-1-6-0-7330989_5AF3D.log
                                                          • Size 7KB
                                                          • SHA256 0f0ebf78cffd9d189d9476949e96003923a8970e0be0815ee442ea08b6649ebf
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          rbx-storage.id

                                                          • Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage.id
                                                          • Size 8B
                                                          • SHA256 c15ffd7327485158ba459248e51887b67568f26f47bf1dad2f7717a6f32f1665
                                                          • MD5 SHA1 SHA512

                                                          8913724486d5e3c463c493b25346ca31

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
                                                          • Size 64B
                                                          • SHA256 28646db5890cff29bf87c39f5b540f6e920f257b1c3b6b7d43ac029308a87e92
                                                          • MD5 SHA1 SHA512 TLSH

                                                          RBX09FF6C08334142FA825DCC46D98DE6AD

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX09FF6C08334142FA825DCC46D98DE6AD
                                                          • Size 1.7MB
                                                          • SHA256 42d5c0fee75228453277d1c6b628b542992956e348ca424275030ffca9de77ab
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX0C1FB02006BD4967B6E204C900B37E97

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX0C1FB02006BD4967B6E204C900B37E97
                                                          • Size 2.2MB
                                                          • SHA256 73dd9671312c77bf2eed5733dcf63198005c0ffd0551daaa5718f00bb7ff416d
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX0E6399A7B29444D9AFCF68A06D234FF4

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX0E6399A7B29444D9AFCF68A06D234FF4
                                                          • Size 684KB
                                                          • SHA256 520ebbbc465f7af873fff7abeffce13eae788b4037f18d3121dc534b812bd0ac
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX128239D17BA94933A153BA58A369717F

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX128239D17BA94933A153BA58A369717F
                                                          • Size 1.6MB
                                                          • SHA256 4002d5fff231bff11eb9af4045b0b32741ca089940d23fdff1d5c8a5937d7723
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX16630B98256144459CAA02D65B38549C

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX16630B98256144459CAA02D65B38549C
                                                          • Size 2.1MB
                                                          • SHA256 a61c34bb2cc3eff47c35b06559f2f1b38e795e24cd5ef717736f491a914ee4f4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX191590ED467D4713B6A994231147A640

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX191590ED467D4713B6A994231147A640
                                                          • Size 3.3MB
                                                          • SHA256 be92f790f1533676e6efe31ae31f9f5b23f23c6e19562e3a6f729d541b9937fb
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX7650E11E94B040939C1314B4F0653CF1

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX7650E11E94B040939C1314B4F0653CF1
                                                          • Size 1.8MB
                                                          • SHA256 89dbe33183a79242fcb5cf2b06d7b91fcc68e06f2dabed133bf3b153b83ba465
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX77BA1B572678416A9EE62B60F4882972

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX77BA1B572678416A9EE62B60F4882972
                                                          • Size 3.2MB
                                                          • SHA256 e5fb3078bfb3ce4717108e384a54a0b13c893e8ee79373c5e3cf44fefb5ccd5f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX83A50356C1834B1CAC1D05946AB43B27

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX83A50356C1834B1CAC1D05946AB43B27
                                                          • Size 2.7MB
                                                          • SHA256 a2c392a4d90ee1f10498d82adc0ba0ed4d0d981eaeee9fb1d3f892a8b18e698b
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX84EDD7E6C9F846DD93FB60ADCBB51D8B

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX84EDD7E6C9F846DD93FB60ADCBB51D8B
                                                          • Size 2.5MB
                                                          • SHA256 e3bfbd616083bdfaacd55534cfca622c895c859d72304e34de1abf90aba29652
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX8B81359A926740238F67A350D5202D88

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX8B81359A926740238F67A350D5202D88
                                                          • Size 1.4MB
                                                          • SHA256 c9fcd72987c266c31fe1484d2371fd2550c7048fcba66267093c2ac14272db42
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBX9C6F0A9EE35E44C7828B9AB66CF4860A

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBX9C6F0A9EE35E44C7828B9AB66CF4860A
                                                          • Size 2.6MB
                                                          • SHA256 a0a4a352707dbeab7f8a42a93d89482d34fa85f3c284040b3993482c6bc5e95f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBXA6420EDACCBA422DA913C88A5C6B280D

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXA6420EDACCBA422DA913C88A5C6B280D
                                                          • Size 3.4MB
                                                          • SHA256 bd01d319fd02fdc83b210e2261311c47070803197cf37c40b37d1d6f7c80a483
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBXC4F866D0089B42E68F58CD751AE2FECC

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXC4F866D0089B42E68F58CD751AE2FECC
                                                          • Size 2.9MB
                                                          • SHA256 7d14f67cc87abddf752269fbbac71dc443e9da2a6a039d180cafcf062979d40f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBXC8FF9A32F31F45A19D4FD357253B15A7

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXC8FF9A32F31F45A19D4FD357253B15A7
                                                          • Size 2.6MB
                                                          • SHA256 ceab32c1a489798ca58f763041ab58759be62c9d578e2fc81d9161467a77c407
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBXCBDD333E6E6B4A029E0DFE84B76B8BDF

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXCBDD333E6E6B4A029E0DFE84B76B8BDF
                                                          • Size 3.3MB
                                                          • SHA256 50b8240974a29d68a1179653d3cb3650fe04cf5e0e516cfb5cd2e0ebe1bd5931
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBXDB66A2D77CD44281BA1ED51A8F20B7CD

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXDB66A2D77CD44281BA1ED51A8F20B7CD
                                                          • Size 1.3MB
                                                          • SHA256 78e142a332888e31ae17b558d30c0a262b78384a859bd11508cf7970ee339d77
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          RBXE52D377E9DBF4C39AD0A4ACEB53C1465

                                                          • Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXE52D377E9DBF4C39AD0A4ACEB53C1465
                                                          • Size 2.2MB
                                                          • SHA256 e4a4d7a191dd9cee7603d1d7087933c03c30cb58fd531a321c59f4b7fdc75629
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          desktop.ini

                                                          • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                                          • Size 190B
                                                          • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                                          • MD5 SHA1 SHA512 TLSH

                                                          memory/108-695-0x00007FF887360000-0x00007FF887361000-memory.dmp

                                                          memory/108-696-0x00007FF886070000-0x00007FF886071000-memory.dmp

                                                          memory/1128-5595-0x0000019D0F8A0000-0x0000019D0F8A1000-memory.dmp

                                                          memory/1128-5593-0x0000019D0F8A0000-0x0000019D0F8A1000-memory.dmp

                                                          memory/1128-5597-0x0000019D0F8A0000-0x0000019D0F8A1000-memory.dmp

                                                          memory/1128-5598-0x0000019D0F8A0000-0x0000019D0F8A1000-memory.dmp

                                                          memory/1128-5601-0x0000019D0F8A0000-0x0000019D0F8A1000-memory.dmp

                                                          memory/1128-5600-0x0000019D0F8A0000-0x0000019D0F8A1000-memory.dmp

                                                          memory/1128-5599-0x0000019D0F8A0000-0x0000019D0F8A1000-memory.dmp

                                                          memory/2128-3711-0x0000018EA5030000-0x0000018EA5430000-memory.dmp

                                                          memory/2128-112-0x00007FF7C0940000-0x00007FF7C1940000-memory.dmp

                                                          memory/2128-4382-0x0000018EB3C20000-0x0000018EB4020000-memory.dmp

                                                          memory/2128-214-0x0000018EA5030000-0x0000018EA5430000-memory.dmp

                                                          memory/2128-4372-0x0000018EB3C20000-0x0000018EB4020000-memory.dmp

                                                          memory/2128-111-0x00007FF863900000-0x00007FF863E4C000-memory.dmp

                                                          memory/2128-4380-0x0000018EB3C20000-0x0000018EB4020000-memory.dmp

                                                          memory/2128-3709-0x0000018EA5030000-0x0000018EA5430000-memory.dmp

                                                          memory/3848-1397-0x00000176A9560000-0x00000176A9561000-memory.dmp

                                                          memory/3848-1400-0x00000176A9560000-0x00000176A9561000-memory.dmp

                                                          memory/3848-1399-0x00000176A9560000-0x00000176A9561000-memory.dmp

                                                          memory/3848-1398-0x00000176A9560000-0x00000176A9561000-memory.dmp

                                                          memory/3848-1401-0x00000176A9560000-0x00000176A9561000-memory.dmp

                                                          memory/3848-1391-0x00000176A9560000-0x00000176A9561000-memory.dmp

                                                          memory/3848-1393-0x00000176A9560000-0x00000176A9561000-memory.dmp

                                                          memory/4104-1507-0x0000027702E50000-0x0000027702F50000-memory.dmp

                                                          memory/4104-1547-0x0000027714760000-0x0000027714780000-memory.dmp

                                                          memory/4104-1506-0x0000027702A30000-0x0000027702A50000-memory.dmp

                                                          memory/4104-1501-0x00000277001E0000-0x00000277002E0000-memory.dmp

                                                          memory/4104-1533-0x0000027702C70000-0x0000027702C90000-memory.dmp

                                                          memory/4396-324-0x00007FF886940000-0x00007FF886941000-memory.dmp

                                                          memory/4680-777-0x000001BA69D80000-0x000001BA69D81000-memory.dmp

                                                          memory/4680-775-0x000001BA69D80000-0x000001BA69D81000-memory.dmp

                                                          memory/4680-779-0x000001BA69D80000-0x000001BA69D81000-memory.dmp

                                                          memory/4680-780-0x000001BA69D80000-0x000001BA69D81000-memory.dmp

                                                          memory/4680-769-0x000001BA69D80000-0x000001BA69D81000-memory.dmp

                                                          memory/4680-771-0x000001BA69D80000-0x000001BA69D81000-memory.dmp

                                                          memory/4680-776-0x000001BA69D80000-0x000001BA69D81000-memory.dmp

                                                          memory/4680-778-0x000001BA69D80000-0x000001BA69D81000-memory.dmp

                                                          memory/5732-615-0x0000029021A50000-0x0000029021B13000-memory.dmp

                                                          memory/5732-1482-0x0000029021A50000-0x0000029021B13000-memory.dmp

                                                          memory/5880-582-0x000001FA23200000-0x000001FA23203000-memory.dmp

                                                          memory/5880-590-0x000001FA23320000-0x000001FA23325000-memory.dmp

                                                          memory/5880-587-0x000001FA23650000-0x000001FA23652000-memory.dmp

                                                          memory/5880-583-0x000001FA231B0000-0x000001FA231B6000-memory.dmp

                                                          memory/5880-589-0x000001FA23660000-0x000001FA23663000-memory.dmp

                                                          memory/5880-579-0x000001FA231B0000-0x000001FA231B1000-memory.dmp

                                                          memory/5880-585-0x000001FA23330000-0x000001FA23332000-memory.dmp

                                                          memory/5880-580-0x000001FA231F0000-0x000001FA231F2000-memory.dmp

                                                          memory/5880-577-0x000001FA231B0000-0x000001FA231B1000-memory.dmp

                                                          memory/5880-578-0x000001FA231E0000-0x000001FA231E2000-memory.dmp

                                                          memory/5880-322-0x00007FF886940000-0x00007FF886941000-memory.dmp