Overview

overview

7

Static

static

3

roblox-stu...89.exe

windows10-2004-x64

7

roblox-stu...89.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/08/2026, 02:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    roblox-studio-1-6-0-7330989.exe
  • Size 9.7MB
  • Sample260812-dffk2axdrg
  • SHA256 eea5136d2e39678414ffacd6b0cd17d827b94ca5e09e9468a07da262ccbf226b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoveryspywaretrojan

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 24 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 10 IoCs
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 38 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 20 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 23 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe
    "C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe"
    1⤵
    • Checks whether UAC is enabled
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Enumerates system info in registry
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:3480
    • C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\RobloxStudioBeta.exe
      "C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Enumerates connected drives
      • Enumerates system info in registry
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1868
      • C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\RobloxCrashHandler.exe
        "C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 1868 --attachment=attachment_0.734.0.7340915_20260812T025928Z_Studio_16BC0_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.734.0.7340915_20260812T025928Z_Studio_16BC0_last.log --attachment=attachment_log_0.734.0.7340915_20260812T025928Z_Studio_16BC0_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.734.0.7340915_20260812T025928Z_Studio_16BC0_csg3.log --attachment=attachment_log_0.734.0.7340915_20260812T025928Z_Studio_16BC0_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.734.0.7340915_20260812T025928Z_Studio_16BC0_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.734.0.7340915 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=daba48af7acd532126e9d1c4b3c2395182ed0748 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.734.0.7340915 --annotation=UniqueId=7661898209878486429 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.734.0.7340915 --annotation=host_arch=x86_64 --initial-client-data=0x47c,0x480,0x484,0x458,0x48c,0x7ff7fdbaf148,0x7ff7fdbaf160,0x7ff7fdbaf178
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2596
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1868.2996.13657154088747041079 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
        3⤵
        • Enumerates system info in registry
        PID:4216
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x194,0x7ffb44425fd8,0x7ffb44425fe4,0x7ffb44425ff0
          4⤵
            PID:1488
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1692 --field-trial-handle=1696,i,14996446441245720748,13882119582847953375,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
            4⤵
              PID:2016
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=1964 --field-trial-handle=1696,i,14996446441245720748,13882119582847953375,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
              4⤵
                PID:5736
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2232 --field-trial-handle=1696,i,14996446441245720748,13882119582847953375,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                4⤵
                  PID:1340
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3452 --field-trial-handle=1696,i,14996446441245720748,13882119582847953375,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
                  4⤵
                    PID:2880
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1868.2996.16374029384464474867 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                  3⤵
                  • Enumerates system info in registry
                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                  • Suspicious use of WriteProcessMemory
                  PID:868
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ffb44425fd8,0x7ffb44425fe4,0x7ffb44425ff0
                    4⤵
                      PID:5600
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1780 --field-trial-handle=1784,i,14481792567672933207,15617986307276253182,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                      4⤵
                        PID:1416
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=1952 --field-trial-handle=1784,i,14481792567672933207,15617986307276253182,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                        4⤵
                          PID:3392
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2708 --field-trial-handle=1784,i,14481792567672933207,15617986307276253182,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf
                          4⤵
                            PID:4564
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3564 --field-trial-handle=1784,i,14481792567672933207,15617986307276253182,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
                            4⤵
                              PID:2816
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 734, 0, 7340915" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4436 --field-trial-handle=1784,i,14481792567672933207,15617986307276253182,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:fa3bbf32ccbbb8e420a6abac8273a8637a33fddf /prefetch:1
                              4⤵
                                PID:4968
                        • C:\Windows\System32\GameBarPresenceWriter.exe
                          "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                          1⤵
                          • Network Service Discovery
                          PID:2900
                        • C:\Windows\system32\OpenWith.exe
                          C:\Windows\system32\OpenWith.exe -Embedding
                          1⤵
                          • Suspicious use of SetWindowsHookEx
                          PID:1744
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                          1⤵
                          • Drops desktop.ini file(s)
                          • Checks processor information in registry
                          • Modifies registry class
                          PID:4788
                        • C:\Windows\system32\AUDIODG.EXE
                          C:\Windows\system32\AUDIODG.EXE 0x00000000000004C4 0x00000000000004CC
                          1⤵
                          • Suspicious use of AdjustPrivilegeToken
                          PID:1576
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                          1⤵
                            PID:5452
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                            1⤵
                            • Modifies data under HKEY_USERS
                            PID:2648

                          Network

                                MITRE ATT&CK Enterprise v16

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                AppSettings.xml
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\AppSettings.xml
                                • Size 144B
                                • SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                qgif.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Plugins\Qt5\imageformats\qgif.dll
                                • Size 42KB
                                • SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                qjpeg.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Plugins\Qt5\imageformats\qjpeg.dll
                                • Size 447KB
                                • SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                qwindows.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Plugins\Qt5\platforms\qwindows.dll
                                • Size 1.4MB
                                • SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                qwindowsvistastyle.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Plugins\Qt5\styles\qwindowsvistastyle.dll
                                • Size 144KB
                                • SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Qt5Core.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Qt5Core.dll
                                • Size 5.8MB
                                • SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Qt5Gui.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Qt5Gui.dll
                                • Size 6.5MB
                                • SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Qt5Network.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Qt5Network.dll
                                • Size 1.0MB
                                • SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Qt5Widgets.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Qt5Widgets.dll
                                • Size 5.3MB
                                • SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Qt5Xml.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\Qt5Xml.dll
                                • Size 215KB
                                • SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                QtitanBase.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\QtitanBase.dll
                                • Size 1.1MB
                                • SHA256 efdcd38377fb9079d6b73b9bd1c624ae97ef6f2077933198129d68fd559743b3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                QtitanDocking.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\QtitanDocking.dll
                                • Size 621KB
                                • SHA256 ea44ae939d94e5b8d02c18d1e663938da522d47475a32257dd0f4fc3d1d2d2a2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                QtitanRibbon.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\QtitanRibbon.dll
                                • Size 3.1MB
                                • SHA256 034de2f705d8b4ebd9d853ec95ed12b9487cda26f6035d33836bfc5b5a6a6b95
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RobloxCrashHandler.exe
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\RobloxCrashHandler.exe
                                • Size 11.7MB
                                • SHA256 7b23cf99f528ad73a73882cba2b2be47bfcdb6be9c921bcfbb9fecf83f65be7f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WebView2Loader.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\WebView2Loader.dll
                                • Size 162KB
                                • SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                dd-win-prof.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\dd-win-prof.dll
                                • Size 3.8MB
                                • SHA256 1e5998697cbad5d9800428bec8afd88285f7411fc05de9cb9453e776b01ee6f3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                libfbxsdk.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\libfbxsdk.dll
                                • Size 9.7MB
                                • SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                msvcp140.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\msvcp140.dll
                                • Size 540KB
                                • SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                msvcp140_1.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\msvcp140_1.dll
                                • Size 34KB
                                • SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                vcruntime140.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\vcruntime140.dll
                                • Size 120KB
                                • SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                vcruntime140_1.dll
                                • Path C:\Program Files (x86)\Roblox\Versions\version-d679641ad17741aa\vcruntime140_1.dll
                                • Size 46KB
                                • SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                settings.json
                                • Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
                                • Size 2B
                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                • MD5 SHA1 SHA512
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                • Size 280B
                                • SHA256 d54031ca6a1c1e5015c61eb0248740f9138f428a58bca4d3209bee2eb554db79
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                • Size 280B
                                • SHA256 9d057f7a688c079c0306eff123748e2b9de72b09e63141e51bf82bce891fe89f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                • Size 72B
                                • SHA256 3894d2ab571d15065a0ce064a4c721213a52dc6649d83f63f472fb29d940d51e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Network Persistent State
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                • Size 61B
                                • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Network Persistent State
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                • Size 111B
                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                SCT Auditing Pending Reports
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                • Size 2B
                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                • MD5 SHA1 SHA512
                                Submit Download

                                TransportSecurity
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                • Size 692B
                                • SHA256 3b93f7573153f8dd0efd4cc7dc56e206a5072fee7fd6fa59dfd50d4901f51309
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                TransportSecurity
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                • Size 1KB
                                • SHA256 9caa5f66bc938b816b230ac16824f94a74b527dffdc49a5982b5a336dffa2a13
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                TransportSecurity~RFe5b11ee.TMP
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5b11ee.TMP
                                • Size 356B
                                • SHA256 2f8f0a06a8bf443c590933e5ba81a970ff4fe30e676f44808ac5977eeb68ae63
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Trust Tokens
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Trust Tokens
                                • Size 36KB
                                • SHA256 2d4ccf8ac8ae4f5c6ec8e0566210ff56585b6ba0290501a1a11ed9b23bfc226e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                • Size 5KB
                                • SHA256 bd7416097a2911e55bb065b75b0efe893a53018e2b312633332b86267ed5656f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                • Size 6KB
                                • SHA256 3a0754d1a22c4051b9ec845e2cb3ad3772dc3bed0d4ff1ae439e2337371d816e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Safe Browsing Cookies
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
                                • Size 20KB
                                • SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                index
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index
                                • Size 24B
                                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                • MD5 SHA1 SHA512
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
                                • Size 48B
                                • SHA256 3162e11f4b368efe21bf3085e5350443711485066e689cd8730f49dacaa3c4fb
                                • MD5 SHA1 SHA512
                                Submit Download

                                db
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\db
                                • Size 44KB
                                • SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                • Size 3KB
                                • SHA256 c155355f994530efb23387e352721b60167aca23aa643143484efbc5c8094f9b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                • Size 15KB
                                • SHA256 f979bdc6e6915880d009688176434de28bef23e01cc6729740226a9f9cd03fd8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                cacert.pem
                                • Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
                                • Size 223KB
                                • SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                roblox-studio-1-6-0-7330989_C7A5A.log
                                • Path C:\Users\Admin\AppData\Local\Roblox\logs\roblox-studio-1-6-0-7330989_C7A5A.log
                                • Size 7KB
                                • SHA256 63d737ccb4ad700d89d571386b504e796e019188d3378f160de5de3c438a9b46
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                8913724486d5e3c463c493b25346ca31
                                • Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
                                • Size 64B
                                • SHA256 744bf5cdf7bbd697a23c8c4d10559564a973c532385981bcd676cef0051b044f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                desktop.ini
                                • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                • Size 190B
                                • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                memory/1416-568-0x0000021F4B060000-0x0000021F4B062000-memory.dmp
                                Download

                                memory/1416-560-0x0000021F4AE90000-0x0000021F4AE91000-memory.dmp
                                Download

                                memory/1416-566-0x0000021F4B010000-0x0000021F4B012000-memory.dmp
                                Download

                                memory/1416-570-0x0000021F4B630000-0x0000021F4B633000-memory.dmp
                                Download

                                memory/1416-559-0x0000021F4AEC0000-0x0000021F4AEC2000-memory.dmp
                                Download

                                memory/1416-558-0x0000021F4AE90000-0x0000021F4AE91000-memory.dmp
                                Download

                                memory/1416-561-0x0000021F4AED0000-0x0000021F4AED2000-memory.dmp
                                Download

                                memory/1416-571-0x0000021F4B000000-0x0000021F4B005000-memory.dmp
                                Download

                                memory/1416-563-0x0000021F4AEE0000-0x0000021F4AEE3000-memory.dmp
                                Download

                                memory/1416-564-0x0000021F4AE90000-0x0000021F4AE96000-memory.dmp
                                Download

                                memory/1868-190-0x0000024031CD0000-0x00000240320D0000-memory.dmp
                                Download

                                memory/1868-106-0x00007FFB462A0000-0x00007FFB467EC000-memory.dmp
                                Download

                                memory/1868-107-0x00007FF7F0D20000-0x00007FF7F1D20000-memory.dmp
                                Download

                                memory/2016-229-0x00007FFB6A680000-0x00007FFB6A681000-memory.dmp
                                Download

                                memory/2880-232-0x00007FFB6A680000-0x00007FFB6A681000-memory.dmp
                                Download