Overview

overview

7

Static

static

3

roblox-stu...89.exe

windows10-2004-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    1798s
  • max time network
    1801s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    19/08/2026, 01:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    roblox-studio-1-6-0-7330989.exe
  • Size 9.7MB
  • Sample260819-ccbbgavbpc
  • SHA256 eea5136d2e39678414ffacd6b0cd17d827b94ca5e09e9468a07da262ccbf226b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoveryspywaretrojan

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 22 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

    discovery
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Enumerates system info in registry 2 TTPs 10 IoCs
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 39 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 40 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of SetWindowsHookEx 33 IoCs
  • Suspicious use of WriteProcessMemory 37 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe
    "C:\Users\Admin\AppData\Local\Temp\roblox-studio-1-6-0-7330989.exe"
    1⤵
    • Checks whether UAC is enabled
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Enumerates system info in registry
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2216
    • C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\RobloxStudioBeta.exe
      "C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Enumerates connected drives
      • Enumerates system info in registry
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1776
      • C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\RobloxCrashHandler.exe
        "C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 1776 --attachment=attachment_0.735.0.7351131_20260819T015702Z_Studio_9E4E8_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.735.0.7351131_20260819T015702Z_Studio_9E4E8_last.log --attachment=attachment_log_0.735.0.7351131_20260819T015702Z_Studio_9E4E8_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.735.0.7351131_20260819T015702Z_Studio_9E4E8_csg3.log --attachment=attachment_log_0.735.0.7351131_20260819T015702Z_Studio_9E4E8_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.735.0.7351131_20260819T015702Z_Studio_9E4E8_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.735.0.7351131 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=34a4b165d21ee6092fc02c0a60cd93784d47cfbe --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.735.0.7351131 --annotation=UniqueId=720830256809249133 --annotation=UploadAttachmentKiloByteLimit=10240 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.735.0.7351131 --annotation=host_arch=x86_64 --initial-client-data=0x428,0x42c,0x430,0x424,0x43c,0x7ff6c6cf9308,0x7ff6c6cf9320,0x7ff6c6cf9338
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3768
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=1776.540.9360780998658419415
        3⤵
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of WriteProcessMemory
        PID:3232
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7fffcb1ab078,0x7fffcb1ab084,0x7fffcb1ab090
          4⤵
            PID:768
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1740,i,5173698520446749223,16396178378330891681,262144 --variations-seed-version --mojo-platform-channel-handle=1684 /prefetch:2
            4⤵
              PID:4824
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2036,i,5173698520446749223,16396178378330891681,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:3
              4⤵
                PID:4560
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2364,i,5173698520446749223,16396178378330891681,262144 --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:8
                4⤵
                  PID:4144
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3664,i,5173698520446749223,16396178378330891681,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
                  4⤵
                    PID:2928
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2496,i,5173698520446749223,16396178378330891681,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:1
                    4⤵
                      PID:1280
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4436,i,5173698520446749223,16396178378330891681,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
                      4⤵
                        PID:3820
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5124,i,5173698520446749223,16396178378330891681,262144 --variations-seed-version --mojo-platform-channel-handle=1412 /prefetch:8
                        4⤵
                          PID:4268
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4836,i,5173698520446749223,16396178378330891681,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
                          4⤵
                          • Modifies registry class
                          PID:1564
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=1776.540.5506295452039395713
                        3⤵
                        • Enumerates system info in registry
                        • Modifies data under HKEY_USERS
                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                        • Suspicious use of WriteProcessMemory
                        PID:4912
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7fffcb1ab078,0x7fffcb1ab084,0x7fffcb1ab090
                          4⤵
                            PID:4564
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1788,i,11148609393629673231,1337949079323188232,262144 --variations-seed-version --mojo-platform-channel-handle=1784 /prefetch:2
                            4⤵
                              PID:1680
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1904,i,11148609393629673231,1337949079323188232,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
                              4⤵
                                PID:3352
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2276,i,11148609393629673231,1337949079323188232,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:8
                                4⤵
                                  PID:5048
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3676,i,11148609393629673231,1337949079323188232,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:1
                                  4⤵
                                    PID:2640
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4504,i,11148609393629673231,1337949079323188232,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:1
                                    4⤵
                                      PID:2340
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 735, 0, 7351131" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4956,i,11148609393629673231,1337949079323188232,262144 --variations-seed-version --mojo-platform-channel-handle=1180 /prefetch:8
                                      4⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2920
                              • C:\Windows\system32\AUDIODG.EXE
                                C:\Windows\system32\AUDIODG.EXE 0x330 0x37c
                                1⤵
                                  PID:364
                                • C:\Windows\System32\GameBarPresenceWriter.exe
                                  "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                  1⤵
                                  • Network Service Discovery
                                  PID:3812
                                • C:\Windows\system32\OpenWith.exe
                                  C:\Windows\system32\OpenWith.exe -Embedding
                                  1⤵
                                  • Suspicious use of SetWindowsHookEx
                                  PID:3940

                                Network

                                      MITRE ATT&CK Enterprise v16

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      AppSettings.xml
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\AppSettings.xml
                                      • Size 144B
                                      • SHA256 d5de39863fe721668ce1e115e0fc55a7c733747daff6235d27dad3d160c84dbb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      qgif.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Plugins\Qt5\imageformats\qgif.dll
                                      • Size 42KB
                                      • SHA256 50d4baa1db453301c19c091995fc7010206d7c97e59b21431baa5ef46a980219
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      qjpeg.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Plugins\Qt5\imageformats\qjpeg.dll
                                      • Size 447KB
                                      • SHA256 582054e0a0d49c5e5eb60e09200dc236ae69459fab9894f39a7521786c2be2be
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      qwindows.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Plugins\Qt5\platforms\qwindows.dll
                                      • Size 1.4MB
                                      • SHA256 117c9b304c2c8f6bc2fb466f9a8323591b9213d388252f142081a3e84d3b638e
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      qwindowsvistastyle.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Plugins\Qt5\styles\qwindowsvistastyle.dll
                                      • Size 144KB
                                      • SHA256 792ddc958db80cfdb7132acf698c02367c02e27cb69ed04b7f4f542b0478c157
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Qt5Core.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Qt5Core.dll
                                      • Size 5.8MB
                                      • SHA256 096b9818d0c825487069deba7709b718e78a53053e22124b8e4c537deb72ace3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Qt5Gui.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Qt5Gui.dll
                                      • Size 6.5MB
                                      • SHA256 946a04ae8bcb2c33fcb8c98ce7280dd4599974e85ffb86d9101e595c678ad6d2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Qt5Network.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Qt5Network.dll
                                      • Size 1.0MB
                                      • SHA256 bed1870edbf831cd654f1e609cb2f785b5904f743a3a14c70a1d624f9a8e0172
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Qt5Widgets.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Qt5Widgets.dll
                                      • Size 5.3MB
                                      • SHA256 24b14e67f6ae8a8b0191d68a3576300bd0ecc240ec9417e94f0f04dcc15a12f2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Qt5Xml.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\Qt5Xml.dll
                                      • Size 215KB
                                      • SHA256 7315e183382b81e65be9e3efb2ae151f6c95fad914a0dbfbf0400dfab868af48
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      QtitanBase.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\QtitanBase.dll
                                      • Size 1.1MB
                                      • SHA256 3104465fb99d5e4e90b3964ebd510394a020dd217ca72ab6852f540f0e7649b1
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      QtitanDocking.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\QtitanDocking.dll
                                      • Size 621KB
                                      • SHA256 6e2731e247d5b2abfbeefb2db4fd92463b26d640c484df56af64be7e58c94777
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      QtitanRibbon.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\QtitanRibbon.dll
                                      • Size 3.1MB
                                      • SHA256 611274fd6a12aa065e104b55d4c3f6b7cd58def5f8c8d67abe320465caf0a22c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      RobloxCrashHandler.exe
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\RobloxCrashHandler.exe
                                      • Size 11.7MB
                                      • SHA256 19b71f20b988884195f12b1309a01fb7e35c17949c1b13681d19b53fd7a69cc9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      WebView2Loader.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\WebView2Loader.dll
                                      • Size 162KB
                                      • SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      dd-win-prof.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\dd-win-prof.dll
                                      • Size 3.8MB
                                      • SHA256 1e5998697cbad5d9800428bec8afd88285f7411fc05de9cb9453e776b01ee6f3
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      libfbxsdk.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\libfbxsdk.dll
                                      • Size 9.7MB
                                      • SHA256 1ca21010e6872b44c0627dcc244b9b26c5879a97617e7b7c0b304939eade1f35
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      msvcp140.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\msvcp140.dll
                                      • Size 540KB
                                      • SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      msvcp140_1.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\msvcp140_1.dll
                                      • Size 34KB
                                      • SHA256 2dd670f874562fbdca5b022df1943d70a57ba91fde559280e3a1daebe4db2380
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      vcruntime140.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\vcruntime140.dll
                                      • Size 120KB
                                      • SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      vcruntime140_1.dll
                                      • Path C:\Program Files (x86)\Roblox\Versions\version-dcbeee682ce74ee0\vcruntime140_1.dll
                                      • Size 46KB
                                      • SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
                                      • Size 2B
                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                      • Size 39B
                                      • SHA256 5666e3314c816e6df322b6ebdc5e47234d1c698538985f7db279183fdf09a7af
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                      • Size 67B
                                      • SHA256 d883376273fccb2d7c6ce0329c1c319557cdd50c87e49e81b7dd81d9bd424c8b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                      • Size 543B
                                      • SHA256 c5b04823601717af75153f21b7020bfe4a1ae24be1f7971c3a2dd8bc185c0bb2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                      • Size 2KB
                                      • SHA256 5b5e46ea91e298372f91c63dc4a257e6d0deda0a9eb8b6a908ba2bdd8e5a43e1
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                      • Size 2KB
                                      • SHA256 a21e124cc6b1979ad7aa461d9c1112cbcbc52ba7cd6cf09a47fba1190eccb133
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                      • Size 3KB
                                      • SHA256 c2e172ca4e6cd5b17838a694fbfa21a12883bb8b443c0ca846e800b7138853c5
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\0\settings.json
                                      • Size 3KB
                                      • SHA256 ba101f7a91eefdd0207943d4ffee11091c2458181f30c22bda9fd3f4d8155b46
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\1274343708\settings.json
                                      • Size 99B
                                      • SHA256 7bbc04677ae5efb122b15f3d363ea948848635da72b980448ffe53a57863a1ba
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\13916111004\settings.json
                                      • Size 548B
                                      • SHA256 d2db3d88ec129b0cf611fbd78548ce08bcfebb18dc9bab259c27981c4de533dc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\84725827043434\settings.json
                                      • Size 431B
                                      • SHA256 4ca0ab541b222c2892d93ca3460dc8c991cb2211b56530cdecf78b310ac27a49
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\2234103132\InstalledPlugins\84725827043434\settings.json
                                      • Size 431B
                                      • SHA256 9ad75764b9de7bae59abc7cb1fdfbb3ef004f9a7a380ca1979f6743e5ab239fc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      2234103132.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\AssistantSettings\2234103132.json
                                      • Size 44B
                                      • SHA256 47ec1d04fdff66fcea7a81b8d75e488d2903145b2adf0da8c1800fb7a4858208
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      StudioAppSettings.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\ClientSettings\StudioAppSettings.json
                                      • Size 1.3MB
                                      • SHA256 dc312b02a70f7e1305684b964f6e377c723431c5e14757d4f5517867cc054b1b
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      67139697f94e1aca17e1ba7fc0e9fdb1
                                      • Path C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-studio\67139697f94e1aca17e1ba7fc0e9fdb1
                                      • Size 9.6MB
                                      • SHA256 adffa6e7af1a3b3c72acd302bcfa31145d13e849834f113ce78157b644f01b78
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      OTAData.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json
                                      • Size 29B
                                      • SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      OTADataCache.json
                                      • Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\OTADataCache.json
                                      • Size 831B
                                      • SHA256 0b0c080d2334b6c780c9a92d7454e7e45e26062e10e9bbeca33712fbb67e7e0f
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                      • Size 280B
                                      • SHA256 99b37972541d43471250aaea05c964d17e0eac1ee51777205699fe70dc467b26
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                      • Size 280B
                                      • SHA256 cbba0941f7d67d167bce4d05a23e1e6d963094b04844153e6590c81d03b7a5f8
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                      • Size 280B
                                      • SHA256 b1e0e8f0ec68b15c30d73ed49df1f00b42d1cc54d7b4f6972f9cff7371d4046e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                      • Size 280B
                                      • SHA256 61b13d7f1293de3be5cf96d216ed89e81dad9b93fac6e7367a2ad1bfa847dfb7
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      settings.dat
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                      • Size 280B
                                      • SHA256 9c7deabe9bd10e7350446bf3bd0486f447a8bc9120e6e7cbef17a47d98a62cf7
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      throttle_store.dat
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\throttle_store.dat
                                      • Size 20B
                                      • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      data_0
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_0
                                      • Size 44KB
                                      • SHA256 efb24ce31ac5a4dd34a2624ac978f6663191cab9068ce963aeb4c366babbb601
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      data_1
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_1
                                      • Size 264KB
                                      • SHA256 0e93f163c3895e38e5fdbfc607864bfb28d7c1eef21f2be9d5072e11f3fd2c8c
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      data_2
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_2
                                      • Size 1.0MB
                                      • SHA256 2737a65d5d3da560c16ba490d5155c5f0e249785a11144572fc8456832cfedce
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 48B
                                      • SHA256 d0b86112d3ddcf4cb2c94ff19d7bf1f31d80ad76082e2d801c03525ae44ab430
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                      • Size 2KB
                                      • SHA256 f495b1fc0ed71e8cc704d83307924930ae5f97156bc0dd4cda82656ca4e7950b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      index
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\wasm\index
                                      • Size 24B
                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      data_0
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_0
                                      • Size 8KB
                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_1
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_1
                                      • Size 264KB
                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_2
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_2
                                      • Size 8KB
                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      data_3
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\DawnWebGPUCache\data_3
                                      • Size 8KB
                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      MANIFEST-000001
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
                                      • Size 41B
                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      ExtensionActivityComp
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\ExtensionActivityComp
                                      • Size 4KB
                                      • SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      History
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\History
                                      • Size 184KB
                                      • SHA256 99c47ceb7a2c9afd3da655a70c3bc00609afad368506b57d03f76718949dafc9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Network Persistent State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                      • Size 2KB
                                      • SHA256 6c551fafa26433c5612394b66c464521c458f0bb395db3fa296d6c457632d4e6
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Network Persistent State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                      • Size 2KB
                                      • SHA256 8898b445ef31520d8cfa9bb9d04b0cb88db98ec1729084e44993a73088885ea2
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Network Persistent State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                      • Size 59B
                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Network Persistent State~RFe59716d.TMP
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe59716d.TMP
                                      • Size 111B
                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      SCT Auditing Pending Reports
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                      • Size 2B
                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                      • Size 2KB
                                      • SHA256 b0ff5476adbfb1580217f9683eadab53be6880c9fc5852c4f2015827a254ba06
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                      • Size 2KB
                                      • SHA256 8d18a847900582c2a01237d34a835950a0c10afc619a28b2ffc4058024cf3ccb
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                      • Size 2KB
                                      • SHA256 080f6d9451148c14dfa05308807528f6e139330f94c580146c679b8d569fb9c9
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity~RFe59a0ca.TMP
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe59a0ca.TMP
                                      • Size 2KB
                                      • SHA256 153351ff6e7f621b94025893a715634502be215775cba84f2b77c18a439c6a6c
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Trust Tokens
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Trust Tokens
                                      • Size 36KB
                                      • SHA256 d772e24f4fbec8a21439ffb57c335e6f2c945dd9f70fb56e5a84115e752e3797
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      d6060e81-99e6-4765-b79e-7a2256d6f7f9.tmp
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\d6060e81-99e6-4765-b79e-7a2256d6f7f9.tmp
                                      • Size 40B
                                      • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                      • Size 7KB
                                      • SHA256 cd01bb457dac32cdad31d3ac306e0dfcbd55caf68b21b4286de5838df2504b33
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                      • Size 7KB
                                      • SHA256 682feee17d23633d0fd2c01cc7e32c3e6c5124d6787d390c90e3fb576e868fdd
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                      • Size 7KB
                                      • SHA256 0d4e42b06d532a77dcefb9f4dc96ab030339550ece37138f29124dc90a548efa
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                      • Size 5KB
                                      • SHA256 4378ea15828fd32a71a8d77467caf65ea4239d7d76b56d9bc83de21b8195f195
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                      • Size 7KB
                                      • SHA256 7c2303e224e308fde1b6ad38cd656dd8a30f2466f27be6e1a21913f753494ab9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Safe Browsing Cookies
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
                                      • Size 20KB
                                      • SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Secure Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Secure Preferences
                                      • Size 6KB
                                      • SHA256 c7e536f6a7de584b175906d165e101ef8f513b7bbccc0f74b39b7cad014751a2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
                                      • Size 48B
                                      • SHA256 f0bb4b93463f65bb901a1ab53200b28d18e715263ff192d7d1cb1e6613863843
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      db
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Shared Dictionary\db
                                      • Size 44KB
                                      • SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      CURRENT
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
                                      • Size 16B
                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Last Version
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Last Version
                                      • Size 14B
                                      • SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                      • Size 1KB
                                      • SHA256 5c66e90c357551e53631105e349b09adb3c94f169176dada7cb9ce22aee2b821
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                      • Size 2KB
                                      • SHA256 8e260244b942ded612beb7a690018df784d13c06bf08cb5bc28f48f51f534f2e
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                      • Size 3KB
                                      • SHA256 631673cc19048693414d42a646a87a2c40b01a9f75595e99bbb0f18442f90bdf
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                      • Size 16KB
                                      • SHA256 9de988d296c50c68efadeefc211b2dc6a9ff175b37e8ed02330f19298fb03440
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Local State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                      • Size 16KB
                                      • SHA256 9d11452fe11394c53084df7419ecdfba4b2623c43df81a27c0ff88d2eb4197c9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Local State~RFe594220.TMP
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe594220.TMP
                                      • Size 1KB
                                      • SHA256 c7a290010b0ffa7d07a88dbd4a68b14506e08de44edc04574222807b7925cd52
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      data_1
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\ShaderCache\data_1
                                      • Size 264KB
                                      • SHA256 32ce1979a64d450b7347c084d7fe594ac6b9ced28d868635f2c6c5be8c4c48cf
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      index
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\ShaderCache\index
                                      • Size 256KB
                                      • SHA256 8deb49fe9b05aa95a47938d832febed86eb0a3561d904c1d3513426c8b34f06e
                                      • MD5 SHA1 SHA512 SSDEEP
                                      Submit Download

                                      Variations
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Variations
                                      • Size 86B
                                      • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      043f8237-ce8a-4ca7-8659-9e3b7f657d33.tmp
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\043f8237-ce8a-4ca7-8659-9e3b7f657d33.tmp
                                      • Size 6KB
                                      • SHA256 3c3d2d6cb89b8934a2f1fb997b305145ef694254936a26addce0800b32cde940
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index
                                      • Size 48B
                                      • SHA256 6d29901de39e8fa776bb9d552c21c021868a9d674a1d104ea4f3c15ddcae0261
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index
                                      • Size 360B
                                      • SHA256 838188e7f17c756f9a7b477cace4e5f23254577b3ce1c0d9a7d8c83f45584f50
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      the-real-index
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Code Cache\js\index-dir\the-real-index
                                      • Size 576B
                                      • SHA256 e697313f3b7f5ff6227c352625f41a73fa8b29b127da8894419531f4d543369a
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      ExtensionActivityEdge
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\ExtensionActivityEdge
                                      • Size 32KB
                                      • SHA256 aefb267ca50676ff14f1d504549d8a0a838339d3eae353c1366dd693a6d0ebc2
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      History
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\History
                                      • Size 184KB
                                      • SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Network Persistent State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State
                                      • Size 1KB
                                      • SHA256 89d0120f09b039cd100571c8ebb0dbe73e2dedfa4ceb00b3ed04fd86ee699a96
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Network Persistent State
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\Network Persistent State
                                      • Size 1KB
                                      • SHA256 146306315956f659de25c192e5b1f03ba44eb7213461b923e04925efb2f249d3
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 97c481afd8a1cf25ea18723c2d15d538bb646551e934d1bf7740a1e5fe5ac045
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 758e500495787655f93d8135bddfbac4cce3e3514317e6e98521a264f4e0cccc
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 b152d1cc4b60bf3e1f730b50809796a4705d1cd5a5b76ec4f81dc294f9566a39
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 2e046e32ba5c586e9efeb2789f4b8ab752eb7de83b98ccfe4aeb8d78d5e0f7fe
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity
                                      • Size 1KB
                                      • SHA256 9c9902265cd858d546a9b31b617875ad9ee98188263385167e0dd088d5b1111d
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      TransportSecurity~RFe5a281b.TMP
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Network\TransportSecurity~RFe5a281b.TMP
                                      • Size 516B
                                      • SHA256 8368e05651eee0a9577b7f06fbe26df777eff5618decc593936c29835341f72b
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
                                      • Size 6KB
                                      • SHA256 b5f7eb8623292e87655f42fb18ccc8553322d990023dfa20e00f88d0ac1aa767
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
                                      • Size 6KB
                                      • SHA256 d38fa076960c946ab489a8135ee6d6c2abe88609d597c46cc226fcf5727b46b9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
                                      • Size 6KB
                                      • SHA256 ab9312293789a651a33ef4c7165a66912f1155b3a3de8ca5dbe406c77b2c5d64
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      Preferences
                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_2234103132\Preferences
                                      • Size 6KB
                                      • SHA256 89b0fa10f6901b6c9c6281a8b267c50e701330b6d1c96577ce02acec8855a2ca
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      cacert.pem
                                      • Path C:\Users\Admin\AppData\Local\Roblox\logs\cacert.pem
                                      • Size 223KB
                                      • SHA256 2eba303a7b3c87f0c52fa8f977b703ec6dea7de703f97644546d2d34e53e4cd9
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      roblox-studio-1-6-0-7330989_698BF.log
                                      • Path C:\Users\Admin\AppData\Local\Roblox\logs\roblox-studio-1-6-0-7330989_698BF.log
                                      • Size 7KB
                                      • SHA256 d9682b07cdfdff2e970d7c0c3f0c29c92ca548546d97d0048c7e466132e01706
                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                      Submit Download

                                      rbx-storage.id
                                      • Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage.id
                                      • Size 8B
                                      • SHA256 c7acf779bb5e55a764d794d82eb8d651cf67b16914d1c416417c271d132cb69b
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      8913724486d5e3c463c493b25346ca31
                                      • Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
                                      • Size 64B
                                      • SHA256 5e1630d009ec334719cf87c7683c8a3e261ff13c35c9a3d83a8d90adfe990b95
                                      • MD5 SHA1 SHA512 TLSH
                                      Submit Download

                                      default.dic
                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                      • Size 2B
                                      • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                      • MD5 SHA1 SHA512
                                      Submit Download

                                      memory/1564-1126-0x0000013ADE4F0000-0x0000013ADE50D000-memory.dmp
                                      Download

                                      memory/1680-1418-0x000002164B460000-0x000002164B58A000-memory.dmp
                                      Download

                                      memory/1776-1992-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-2587-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-2003-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-2005-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-103-0x00007FFFCCE90000-0x00007FFFCD3DC000-memory.dmp
                                      Download

                                      memory/1776-104-0x00007FF6B9DA0000-0x00007FF6BADA0000-memory.dmp
                                      Download

                                      memory/1776-2602-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-2600-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-2591-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-2593-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-2595-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-2598-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-2001-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-172-0x0000024DB38B0000-0x0000024DB3CB0000-memory.dmp
                                      Download

                                      memory/1776-1999-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-1997-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-1996-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-2589-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-1978-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-1993-0x0000024DBDA90000-0x0000024DBDE90000-memory.dmp
                                      Download

                                      memory/1776-2582-0x0000024DCDBF0000-0x0000024DCDFF0000-memory.dmp
                                      Download

                                      memory/1776-1663-0x0000024DB38B0000-0x0000024DB3CB0000-memory.dmp
                                      Download

                                      memory/1776-1661-0x0000024DB38B0000-0x0000024DB3CB0000-memory.dmp
                                      Download

                                      memory/2920-2481-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2477-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2476-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2475-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2487-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2486-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2485-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2484-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2483-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2920-2482-0x0000023732CE0000-0x0000023732CE1000-memory.dmp
                                      Download

                                      memory/2928-365-0x00007FFFEA140000-0x00007FFFEA141000-memory.dmp
                                      Download

                                      memory/3232-1127-0x0000022C8A2B0000-0x0000022C8A436000-memory.dmp
                                      Download

                                      memory/3232-764-0x0000022C8A2B0000-0x0000022C8A436000-memory.dmp
                                      Download

                                      memory/3232-954-0x0000022C8A2B0000-0x0000022C8A436000-memory.dmp
                                      Download

                                      memory/4144-262-0x00007FFFEB2A0000-0x00007FFFEB2A1000-memory.dmp
                                      Download

                                      memory/4144-263-0x00007FFFEB2B0000-0x00007FFFEB2B1000-memory.dmp
                                      Download

                                      memory/4824-771-0x000002621EC10000-0x000002621EC15000-memory.dmp
                                      Download

                                      memory/4824-762-0x000002621E3F0000-0x000002621E3F3000-memory.dmp
                                      Download

                                      memory/4824-780-0x000002621B660000-0x000002621B78A000-memory.dmp
                                      Download

                                      memory/4824-757-0x000002621E360000-0x000002621E361000-memory.dmp
                                      Download

                                      memory/4824-239-0x00007FFFEA140000-0x00007FFFEA141000-memory.dmp
                                      Download

                                      memory/4824-768-0x000002621EF40000-0x000002621EF42000-memory.dmp
                                      Download

                                      memory/4824-758-0x000002621E3D0000-0x000002621E3D2000-memory.dmp
                                      Download

                                      memory/4824-770-0x000002621EF50000-0x000002621EF53000-memory.dmp
                                      Download

                                      memory/4824-763-0x000002621E360000-0x000002621E366000-memory.dmp
                                      Download

                                      memory/4824-760-0x000002621E3E0000-0x000002621E3E2000-memory.dmp
                                      Download

                                      memory/4824-759-0x000002621E360000-0x000002621E361000-memory.dmp
                                      Download

                                      memory/4824-766-0x000002621EC20000-0x000002621EC22000-memory.dmp
                                      Download