Overview

overview

8

Static

static

3

NepTunnel 2.4.4.exe

windows10-2004-x64

8

NepTunnel 2.4.4.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    639s
  • max time network
    634s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 17:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    NepTunnel 2.4.4.exe
  • Size 19.2MB
  • Sample260910-vjnt9avyaz
  • SHA256 e466cde927ae75554ba2340bfd81c8026d7954e001aef55b90818b9e874f7a5d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoveryspywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 4 IoCs
    defense_evasiontrojan
  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Service Discovery 1 TTPs 2 IoCs

    Attempt to gather information on host's network.

    discovery
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 18 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 10 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 21 IoCs
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 42 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 22 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NepTunnel 2.4.4.exe
    "C:\Users\Admin\AppData\Local\Temp\NepTunnel 2.4.4.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2456
    • C:\Users\Admin\AppData\Local\Temp\NepTunnel 2.4.4.exe
      "C:\Users\Admin\AppData\Local\Temp\NepTunnel 2.4.4.exe"
      2⤵
      • Loads dropped DLL
      • Modifies registry class
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      PID:6076
      • C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxStudioBeta.exe
        "C:/Program Files (x86)/Roblox/Versions/version-93202a13414c4131/RobloxStudioBeta.exe" -task StartServer -placeId 0 -universeId 0 -placeVersion 1 -port 55555 -creatorId Awawawa -creatorType 1 -numTestServerPlayersUponStartup 1 -userid Awawawa -parentSessionGuid B842711E-7FF0-4B7E-B5AA-179A365B6A86 -playTestSessionGuid 960D9859-558D-4A79-B9CD-1EF6CA315ADE -instanceId StudioServer
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks whether UAC is enabled
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        PID:4392
        • C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxCrashHandler.exe
          "C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 4392 --attachment=attachment_0.738.0.7381393_20260910T170809Z_Studio_1D582_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.738.0.7381393_20260910T170809Z_Studio_1D582_last.log --attachment=attachment_log_0.738.0.7381393_20260910T170809Z_Studio_1D582_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.738.0.7381393_20260910T170809Z_Studio_1D582_csg3.log --attachment=attachment_log_0.738.0.7381393_20260910T170809Z_Studio_1D582_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.738.0.7381393_20260910T170809Z_Studio_1D582_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.738.0.7381393 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=1287911486761fd455012ed182640d9514472a65 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.738.0.7381393 --annotation=UniqueId=2304115305379249063 --annotation=UploadAttachmentKiloByteLimit=10240 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.738.0.7381393 --annotation=host_arch=x86_64 --initial-client-data=0x438,0x43c,0x440,0x414,0x448,0x7ff6d38a0c58,0x7ff6d38a0c70,0x7ff6d38a0c88
          4⤵
          • Executes dropped EXE
          PID:4880
      • C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxStudioBeta.exe
        "C:/Program Files (x86)/Roblox/Versions/version-93202a13414c4131/RobloxStudioBeta.exe" -task StartServer -placeId 0 -universeId 0 -placeVersion 1 -port 55555 -creatorId Awawawa -creatorType 1 -numTestServerPlayersUponStartup 1 -userid Awawawa -parentSessionGuid A1D9F6DF-240A-45FD-A1C3-521AE4E72CCA -playTestSessionGuid 90CF58C1-DEE4-47EC-BF65-EF6083CBD2DF -instanceId StudioServer
        3⤵
        • Executes dropped EXE
        • Checks whether UAC is enabled
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        PID:3948
        • C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxCrashHandler.exe
          "C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 3948 --attachment=attachment_0.738.0.7381393_20260910T170941Z_Studio_D7541_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.738.0.7381393_20260910T170941Z_Studio_D7541_last.log --attachment=attachment_log_0.738.0.7381393_20260910T170941Z_Studio_D7541_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.738.0.7381393_20260910T170941Z_Studio_D7541_csg3.log --attachment=attachment_log_0.738.0.7381393_20260910T170941Z_Studio_D7541_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.738.0.7381393_20260910T170941Z_Studio_D7541_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.738.0.7381393 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=1287911486761fd455012ed182640d9514472a65 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.738.0.7381393 --annotation=UniqueId=609985214710299993 --annotation=UploadAttachmentKiloByteLimit=10240 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.738.0.7381393 --annotation=host_arch=x86_64 --initial-client-data=0x438,0x43c,0x440,0x414,0x44c,0x7ff6d38a0c58,0x7ff6d38a0c70,0x7ff6d38a0c88
          4⤵
          • Executes dropped EXE
          PID:5524
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe3d44c728,0x7ffe3d44c734,0x7ffe3d44c740
      2⤵
        PID:3104
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,7817075082948740436,17026758296078548688,524288 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2132 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:1748
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1704,i,12423219229855633348,15393465657466539430,262144 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2068 /prefetch:2
        2⤵
          PID:1416
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2408,i,8110354622863619137,7233633868772461038,524288 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2584 /prefetch:8
          2⤵
            PID:4520
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,8835940233028413160,8551226710250320186,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
            2⤵
              PID:3836
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,11940678589147788633,12874118528828787817,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3296 /prefetch:1
              2⤵
                PID:2656
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4476,i,7199725750839336178,13392474109870371070,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4484 /prefetch:2
                2⤵
                  PID:808
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,9129754792033980527,17061370831486035830,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
                  2⤵
                    PID:5716
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,4896556262006730320,10560061933047817126,524288 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5560 /prefetch:8
                    2⤵
                      PID:3508
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5888,i,8908259056628891503,13886693769543043144,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5580 /prefetch:1
                      2⤵
                        PID:4088
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3356,i,15191134644282103114,10891902259649822662,524288 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=240 /prefetch:8
                        2⤵
                          PID:4600
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3392,i,13520228255107091404,17940013816698042574,524288 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:8
                          2⤵
                            PID:1304
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3420,i,7958133667859849248,13097048435424166822,524288 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5844 /prefetch:8
                            2⤵
                              PID:4396
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4508,i,17578033389991751641,17916335983307327003,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3980 /prefetch:1
                              2⤵
                                PID:3776
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4608,i,2632481879554777088,3390595318283578220,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4772 /prefetch:1
                                2⤵
                                  PID:5536
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5976,i,3795018643877143139,8011852685723023268,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3644 /prefetch:1
                                  2⤵
                                    PID:512
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6296,i,987249013173802090,14229071071405112779,524288 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=868 /prefetch:8
                                    2⤵
                                      PID:5272
                                    • C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
                                      "C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"
                                      2⤵
                                      • Executes dropped EXE
                                      • Checks whether UAC is enabled
                                      • Drops file in Program Files directory
                                      • System Location Discovery: System Language Discovery
                                      • Enumerates system info in registry
                                      • Modifies Internet Explorer settings
                                      • Modifies registry class
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of WriteProcessMemory
                                      PID:3880
                                      • C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxStudioBeta.exe
                                        "C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
                                        3⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Checks whether UAC is enabled
                                        • Enumerates connected drives
                                        • Enumerates system info in registry
                                        • Suspicious behavior: AddClipboardFormatListener
                                        • Suspicious behavior: EnumeratesProcesses
                                        • Suspicious behavior: GetForegroundWindowSpam
                                        • Suspicious use of SetWindowsHookEx
                                        • Suspicious use of WriteProcessMemory
                                        PID:4156
                                        • C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxCrashHandler.exe
                                          "C:\Program Files (x86)\Roblox\Versions\version-93202a13414c4131\RobloxCrashHandler.exe" --no-rate-limit --crashCounter Win-ROBLOXStudio-Crash --baseUrl https://www.roblox.com --studioPid 4156 --attachment=attachment_0.738.0.7381393_20260910T170345Z_Studio_F799D_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.738.0.7381393_20260910T170345Z_Studio_F799D_last.log --attachment=attachment_log_0.738.0.7381393_20260910T170345Z_Studio_F799D_csg3.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.738.0.7381393_20260910T170345Z_Studio_F799D_csg3.log --attachment=attachment_log_0.738.0.7381393_20260910T170345Z_Studio_F799D_dcd.log=C:\Users\Admin\AppData\Local\Roblox\logs\log_0.738.0.7381393_20260910T170345Z_Studio_F799D_dcd.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://uploads.backtrace.rbx.com/post --annotation=AppVersion=0.738.0.7381393 --annotation=Format=minidump --annotation=HardwareModel= --annotation=InstallFolder=ProgramFilesX86 --annotation=OSPlatform=Windows --annotation=RobloxChannel=production --annotation=RobloxGitHash=1287911486761fd455012ed182640d9514472a65 --annotation=RobloxProduct=RobloxStudio --annotation=StudioVersion=0.738.0.7381393 --annotation=UniqueId=6167952049213242905 --annotation=UploadAttachmentKiloByteLimit=10240 --annotation=UseCrashpad=True --annotation=app_arch=x86_64 --annotation=application.version=0.738.0.7381393 --annotation=host_arch=x86_64 --initial-client-data=0x44c,0x450,0x454,0x428,0x460,0x7ff6d38a0c58,0x7ff6d38a0c70,0x7ff6d38a0c88
                                          4⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          PID:2060
                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4156.2408.6624999136867239080
                                          4⤵
                                          • Enumerates system info in registry
                                          • Modifies data under HKEY_USERS
                                          • Modifies registry class
                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                          • Suspicious use of WriteProcessMemory
                                          PID:1228
                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ffe2204b078,0x7ffe2204b084,0x7ffe2204b090
                                            5⤵
                                              PID:5236
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1748,i,5876760001690600499,15009786994209182563,262144 --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:2
                                              5⤵
                                                PID:2500
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2064,i,5876760001690600499,15009786994209182563,262144 --variations-seed-version --mojo-platform-channel-handle=1368 /prefetch:3
                                                5⤵
                                                  PID:5664
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2348,i,5876760001690600499,15009786994209182563,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:8
                                                  5⤵
                                                    PID:5008
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3552,i,5876760001690600499,15009786994209182563,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
                                                    5⤵
                                                      PID:556
                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3720,i,5876760001690600499,15009786994209182563,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:1
                                                      5⤵
                                                        PID:1036
                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3632,i,5876760001690600499,15009786994209182563,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
                                                        5⤵
                                                          PID:2580
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4912,i,5876760001690600499,15009786994209182563,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:8
                                                          5⤵
                                                            PID:4512
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4904,i,5876760001690600499,15009786994209182563,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:8
                                                            5⤵
                                                              PID:3728
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4156.2408.5476248013858909932
                                                            4⤵
                                                            • Enumerates system info in registry
                                                            • Modifies data under HKEY_USERS
                                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                            • Suspicious use of FindShellTrayWindow
                                                            • Suspicious use of SendNotifyMessage
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:5968
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x180,0x184,0x188,0x15c,0x94,0x7ffe2204b078,0x7ffe2204b084,0x7ffe2204b090
                                                              5⤵
                                                                PID:5796
                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1812,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=1804 /prefetch:2
                                                                5⤵
                                                                  PID:5300
                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1844,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3
                                                                  5⤵
                                                                    PID:2396
                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2260,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:8
                                                                    5⤵
                                                                      PID:4004
                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3680,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
                                                                      5⤵
                                                                        PID:4260
                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4552,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
                                                                        5⤵
                                                                          PID:1184
                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4976,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:8
                                                                          5⤵
                                                                            PID:1944
                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4416,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
                                                                            5⤵
                                                                              PID:5556
                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=344,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:8
                                                                              5⤵
                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                              PID:4364
                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4592,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
                                                                              5⤵
                                                                                PID:5184
                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5008,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:8
                                                                                5⤵
                                                                                  PID:4384
                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 738, 0, 7381393" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4424,i,17632203351665847782,157962936288798454,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:8
                                                                                  5⤵
                                                                                    PID:860
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4604,i,10676703041152639159,11634351530345189762,262144 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3364 /prefetch:8
                                                                              2⤵
                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                              PID:5072
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6224,i,14790769838614028943,3901695110710845555,524288 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6164 /prefetch:8
                                                                              2⤵
                                                                                PID:1792
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6416,i,11474441236805201974,13933310051569849347,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6436 /prefetch:1
                                                                                2⤵
                                                                                  PID:1540
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3976,i,8019103073958498310,552905645648564385,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6456 /prefetch:1
                                                                                  2⤵
                                                                                    PID:4740
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6388,i,3482324742366565478,13394645350596486773,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6756 /prefetch:1
                                                                                    2⤵
                                                                                      PID:4892
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6796,i,4697591447997733764,13752062651538044203,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3652 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5912
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6852,i,6433187428435503913,10634812504684342486,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6892 /prefetch:1
                                                                                        2⤵
                                                                                          PID:952
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6612,i,14899076858874357395,3251745578967537800,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6488 /prefetch:1
                                                                                          2⤵
                                                                                            PID:3856
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6708,i,2469475982555825337,6054148741569285720,2097152 --field-trial-handle=2072,i,11329164342314808566,5041365452405497554,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3980 /prefetch:1
                                                                                            2⤵
                                                                                              PID:5792
                                                                                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                            1⤵
                                                                                              PID:3648
                                                                                            • C:\Windows\system32\svchost.exe
                                                                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                              1⤵
                                                                                                PID:4788
                                                                                              • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                1⤵
                                                                                                • Network Service Discovery
                                                                                                PID:1676
                                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                1⤵
                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                PID:4924
                                                                                              • C:\Windows\system32\AUDIODG.EXE
                                                                                                C:\Windows\system32\AUDIODG.EXE 0x45c 0xfc
                                                                                                1⤵
                                                                                                  PID:5680
                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                  1⤵
                                                                                                  • Drops desktop.ini file(s)
                                                                                                  • Checks processor information in registry
                                                                                                  PID:4804
                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                  1⤵
                                                                                                  • Checks processor information in registry
                                                                                                  • Modifies registry class
                                                                                                  PID:4448
                                                                                                • C:\Windows\system32\OpenWith.exe
                                                                                                  C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                  1⤵
                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                  PID:4288
                                                                                                • C:\Windows\system32\dwm.exe
                                                                                                  "dwm.exe"
                                                                                                  1⤵
                                                                                                  • Checks SCSI registry key(s)
                                                                                                  • Enumerates system info in registry
                                                                                                  • Modifies data under HKEY_USERS
                                                                                                  PID:4288
                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                  1⤵
                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                  PID:1660
                                                                                                • C:\Windows\system32\taskmgr.exe
                                                                                                  "C:\Windows\system32\taskmgr.exe" /4
                                                                                                  1⤵
                                                                                                  • Checks SCSI registry key(s)
                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                  PID:6004
                                                                                                • C:\Windows\system32\dwm.exe
                                                                                                  "dwm.exe"
                                                                                                  1⤵
                                                                                                  • Checks SCSI registry key(s)
                                                                                                  • Enumerates system info in registry
                                                                                                  • Modifies data under HKEY_USERS
                                                                                                  PID:1364
                                                                                                • C:\Windows\system32\taskmgr.exe
                                                                                                  "C:\Windows\system32\taskmgr.exe" /4
                                                                                                  1⤵
                                                                                                  • Checks SCSI registry key(s)
                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                  PID:2136
                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                  C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                  1⤵
                                                                                                  • Checks processor information in registry
                                                                                                  • Modifies registry class
                                                                                                  PID:7068
                                                                                                • C:\Windows\System32\svchost.exe
                                                                                                  C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
                                                                                                  1⤵
                                                                                                  • Checks processor information in registry
                                                                                                  • Modifies data under HKEY_USERS
                                                                                                  PID:5192
                                                                                                • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                  "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                  1⤵
                                                                                                  • Network Service Discovery
                                                                                                  PID:3684
                                                                                                • C:\Windows\system32\OpenWith.exe
                                                                                                  C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                  1⤵
                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                  PID:2008

                                                                                                Network

                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                      Replay Monitor

                                                                                                      Loading Replay Monitor...

                                                                                                      Downloads

                                                                                                      manifest.json
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_1106982980\manifest.json
                                                                                                      • Size 102B
                                                                                                      • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      manifest.json
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_1595913738\manifest.json
                                                                                                      • Size 116B
                                                                                                      • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Other
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_263482265\Sigma\Other
                                                                                                      • Size 34B
                                                                                                      • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      manifest.json
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_263482265\manifest.json
                                                                                                      • Size 132B
                                                                                                      • SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      manifest.fingerprint
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_348407074\manifest.fingerprint
                                                                                                      • Size 66B
                                                                                                      • SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      manifest.json
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_348407074\manifest.json
                                                                                                      • Size 43B
                                                                                                      • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      hyph-bn.hyb
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_82783811\hyph-bn.hyb
                                                                                                      • Size 703B
                                                                                                      • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      hyph-mr.hyb
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_82783811\hyph-mr.hyb
                                                                                                      • Size 687B
                                                                                                      • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      hyph-nb.hyb
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_82783811\hyph-nb.hyb
                                                                                                      • Size 141KB
                                                                                                      • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      manifest.json
                                                                                                      • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5968_82783811\manifest.json
                                                                                                      • Size 82B
                                                                                                      • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      BookmarkMergedSurfaceOrdering
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                      • Size 6B
                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      BrowsingTopicsState
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                      • Size 414B
                                                                                                      • SHA256 27265424a063c1a757084a958ebca0ad237e50a6600afef49fb4c992f4f472da
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      f_000007
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                                                                                      • Size 346KB
                                                                                                      • SHA256 06fb30c34e3d7cb64ec821dd7d1eee69613b4a84c3841c081dee7143c151555e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      the-real-index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 2KB
                                                                                                      • SHA256 79dc4ff6872cd84f45b47f01d815175fc08acb157545f8fac24cde5d1d359c8f
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      the-real-index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 2KB
                                                                                                      • SHA256 e3a20ab66a533e25a98fe5df51e0e38918aaf8e9ef81219726e81faa2968e3f5
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      the-real-index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 2KB
                                                                                                      • SHA256 86049883e066380f2ee761e662007dfc154140d0c3df50d49d57428d0d58387f
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 8KB
                                                                                                      • SHA256 d2d490b375c83300b680d84054719f1ebab80a97511e83a7db93877ba5c1c9a7
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 10KB
                                                                                                      • SHA256 e204bc2299de9b078ea36e94c53d41f49e1dbde035591c66a150cb3b8fe483c9
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 9KB
                                                                                                      • SHA256 895980e992651b8de4d711a853817b4b170b9ee613ea4616d250e17e45b7ba4c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                      • Size 7KB
                                                                                                      • SHA256 50537029805caba9ff43b50e04e2aecfaaab47a990f3d964b1651ea20e749f7d
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      SCT Auditing Pending Reports
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                      • Size 2B
                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      TransportSecurity
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                      • Size 3KB
                                                                                                      • SHA256 dad5d8f647dfff795d87a2a8d66426c4039a08dc0d45c4d8eadda818f3cf556b
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 15KB
                                                                                                      • SHA256 b62e8c923380e96ed5030dd6adf3c9354df0c2988b38db5c0e1b2bc9cfc82d1f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 15KB
                                                                                                      • SHA256 cd768c03103738ef3ec8690a1c33b6010602cc7edae5399c24be2eee8dc580e3
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 9a40f33fabd7605776e1c5abb9e7faa688dbec2960ed1ba04ed16b04e1b1ed30
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 0e1858a85c64a426cd5143008d485b042830d189780e1880f9c5ec0532c46bfe
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 12KB
                                                                                                      • SHA256 f1766c2991e12a5ce6199ec4d5253ba6205114971093a022378419b4889800a1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 b4c65f11d7489602981019b00118a4e3dcfed64288ad4b499780f482c1b5a8c5
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 2f9117c87d054a7f57dacc7b09ba6cf12b2360f83642ae53f224d0038ff109e3
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 13KB
                                                                                                      • SHA256 62fe8c16a0aa38298dcbfe49dea1da07a5d31e76b0879ce6d29d09c06d7539ee
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 13KB
                                                                                                      • SHA256 74711c6d4126c138f40321640d7dd0f4bfb7a45be9da6dd7e0f974f00811aac0
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 12KB
                                                                                                      • SHA256 b968bfc76f9650496b1528c39e6c18636fe2bccd15916a4395ab6302b75a36ed
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 ecf706b7c41686fd92828adc993fa49cacefe0646f7c1c4183b504bba5b1d0e1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 13KB
                                                                                                      • SHA256 1e773ecc6874d00368409ee2e7b024714a1c025a481ff8fa6ab78f9a64d29602
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 43cfd71a512b117b1f03c8a29578461c90245d5133b0226d75310dcc3f26ab23
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 4dbf783564e1b56ed5c1e6162ec250e79763eb4fe7fcee0e6343b3f1b575e8fe
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 15KB
                                                                                                      • SHA256 f3aba6301744bd9c3a42eaa420c27e201d2ea4659d30df8dc87914f4563be1e7
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 d13b11a655b950f79c33d8cf3c181100ceb1d3a5cd94018f4fe78dea8f7b788f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                      • Size 14KB
                                                                                                      • SHA256 557f8a43fc3389618db4e9f42ea44bef1c3fa78564dfae740ff5e35689faa069
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Secure Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                      • Size 17KB
                                                                                                      • SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      the-real-index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                      • Size 120B
                                                                                                      • SHA256 974da2d682deaa1f189bc9fad2e2e9ae628c07a461802e53d3988796b9bae9fc
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      the-real-index~RFe58a35f.TMP
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a35f.TMP
                                                                                                      • Size 96B
                                                                                                      • SHA256 b589759337f5283157d345f21d1d11fd73ff6ca7a2c626e372afbcb94fb4b43f
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      the-real-index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                      • Size 96B
                                                                                                      • SHA256 8fac34ba2706874cf51c40c9e762c396239e20fa6bd06dd4f20e303a5ef4a029
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                      • Size 242KB
                                                                                                      • SHA256 b249ee8683323f4f53c01b2822054dad75230065be36fe428f9fe003d288e74d
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                      • Size 242KB
                                                                                                      • SHA256 f67b343847c4d6cabbeea4728017178aea542b9a00688a7192865cdb9b6b8d02
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                      • Size 243KB
                                                                                                      • SHA256 cea669deb97c79006ac507976e292e3debac0fe042d028c44479f64387c95e5e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                      • Size 115KB
                                                                                                      • SHA256 9161bfd780e4e4126f4774532888ad8e785106e85e350bd312cc8ad0757ab7a2
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                      • Size 243KB
                                                                                                      • SHA256 11810c0722915f3a84944ab7faf4585a55195650e0254cd1c754de5e6142fc69
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                      • Size 242KB
                                                                                                      • SHA256 8a160cbbcb32b82428f6c890485fbc1c41ea9d30636461e496d85cf22b24d6ee
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                      • Size 243KB
                                                                                                      • SHA256 6ece542f24ef173a9dcb1a45d230fa745f43cdf39125c4fd67256d9a8b69b135
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                      • Size 243KB
                                                                                                      • SHA256 6ac3e447de0546543f7fcd565eecb205355b317f2968b74f35f91d0849d8536b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      settings.json
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\0\InstalledPlugins\0\settings.json
                                                                                                      • Size 2B
                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      settings.json
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\11560587121\InstalledPlugins\0\settings.json
                                                                                                      • Size 39B
                                                                                                      • SHA256 5666e3314c816e6df322b6ebdc5e47234d1c698538985f7db279183fdf09a7af
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      settings.json
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\11560587121\InstalledPlugins\0\settings.json
                                                                                                      • Size 700B
                                                                                                      • SHA256 3c57c047e034c0dcd21834e7e6a50863152d4c06d506bf20010bba1e0b163eea
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      OTAData.json
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Deployed\OTAData.json
                                                                                                      • Size 846B
                                                                                                      • SHA256 9a72804909054ef460b541659a9e129d8bca04f6d99d876062f3e096a646b422
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      OTAData.json
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json
                                                                                                      • Size 29B
                                                                                                      • SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      settings.dat
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                                                                                      • Size 280B
                                                                                                      • SHA256 8c5ee60a89a83972d59e345fc1b7eafde7641360e7229a393e127852aaba1f77
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      settings.dat
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                                                                                      • Size 280B
                                                                                                      • SHA256 78458bcea04031ba58e06de64aa0d06aa45fef0b97a5af8b31ba79967544f220
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      settings.dat
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
                                                                                                      • Size 280B
                                                                                                      • SHA256 ed31f2703796fb2d6cac75a3ed2dc659f3d2e5a3138e59d4e51d6dd86ae97875
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index
                                                                                                      • Size 24B
                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      the-real-index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 48B
                                                                                                      • SHA256 36d7ee870c65a119fb237c6ffa81e75001d9136b093c7775436332fcf3fd1922
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      the-real-index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 2KB
                                                                                                      • SHA256 404b6a506022cee77729272b701a339a39ac5f5f5c50558b7d9507005416b424
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      MANIFEST-000001
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
                                                                                                      • Size 41B
                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      ExtensionActivityComp
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\ExtensionActivityComp
                                                                                                      • Size 4KB
                                                                                                      • SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                                                                                      • Size 111B
                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                                                                                      • Size 2KB
                                                                                                      • SHA256 ba86a0d6c8d2492857d028a4ac1fce75ac7519681332fe4f71ea8d8895005ff7
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                                                                                      • Size 111B
                                                                                                      • SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
                                                                                                      • Size 2KB
                                                                                                      • SHA256 51e81202caa353f912db8353af041ed30469b7c937d352045b7caa398ed65bdd
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Sdch Dictionaries
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Sdch Dictionaries
                                                                                                      • Size 40B
                                                                                                      • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      TransportSecurity
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                      • Size 2KB
                                                                                                      • SHA256 5b5fe1a97804868e4decc33abe613fa5df359823e78ee28b2704f208c8a93511
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      TransportSecurity
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
                                                                                                      • Size 2KB
                                                                                                      • SHA256 52b386ef2bded821049dba3686e17fa2983dd86e6a37c7269f5a72321bf10d8a
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      TransportSecurity~RFe5a979e.TMP
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5a979e.TMP
                                                                                                      • Size 1KB
                                                                                                      • SHA256 342612e9d171b25fee87fbfe4577169ec3eb8c3e57369916935f1d2a85a7a3e3
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                                                                                      • Size 7KB
                                                                                                      • SHA256 0b8a61dde0781124620586724b5706bea3a9a4e1c260f4d4f780b53dd429b937
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                                                                                      • Size 7KB
                                                                                                      • SHA256 48aa06f3492041d849d57c89ed70db5d7eeaa59253e99eba96ac0eea73c0305f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                                                                                      • Size 7KB
                                                                                                      • SHA256 b2c4bdfb2aae33efb8e2d65d39cab638a87d66bfa476c1a696ab4cb1dcfcb59d
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
                                                                                                      • Size 5KB
                                                                                                      • SHA256 e32a1b7b943df298ce5309ddc1c0959c26542e6228ab88dd256d8483f1ecff3e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      CURRENT
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
                                                                                                      • Size 16B
                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      data_0
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_0
                                                                                                      • Size 8KB
                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                      Submit Download

                                                                                                      data_1
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_1
                                                                                                      • Size 264KB
                                                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                      Submit Download

                                                                                                      data_2
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2
                                                                                                      • Size 8KB
                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                      Submit Download

                                                                                                      data_3
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_3
                                                                                                      • Size 8KB
                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                                                                      • Size 1KB
                                                                                                      • SHA256 8dd06bae809642ac5231d85d290b4da3686ebff67259c43932abe3b8f9192d79
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                                                                      • Size 2KB
                                                                                                      • SHA256 971215f9bd60de0e95ea19a30da8da757796e82e97df6bddc8c766a2874a27e7
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                                                                      • Size 3KB
                                                                                                      • SHA256 7b26153a71d6549412b7c0a80fea06b8b0be184a200a833157d394c0afe7c7f8
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                                                                      • Size 16KB
                                                                                                      • SHA256 bca97ce0ff775fe0869010c212a1db8e61c06ed0a9bc8285be7e0341ecb488c3
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
                                                                                                      • Size 16KB
                                                                                                      • SHA256 54f359a3530bb93ebdedfb16a66375c10818302b580f40756a9f0893ac9d66ca
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Local State~RFe5a3f4c.TMP
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5a3f4c.TMP
                                                                                                      • Size 1KB
                                                                                                      • SHA256 ec65897278103f1e70915aae2be6be2e3202681289eca06286b5be3987ffc0c4
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      crs.pb
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\46.0.0.0\crs.pb
                                                                                                      • Size 233KB
                                                                                                      • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      ct_config.pb
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                                      • Size 16KB
                                                                                                      • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      kp_pinslist.pb
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                                      • Size 10KB
                                                                                                      • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Filtering Rules
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                                                                                                      • Size 2.1MB
                                                                                                      • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      LICENSE
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                                                                                      • Size 24KB
                                                                                                      • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Advertising
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Advertising
                                                                                                      • Size 19KB
                                                                                                      • SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Analytics
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Analytics
                                                                                                      • Size 3KB
                                                                                                      • SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      CompatExceptions
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\CompatExceptions
                                                                                                      • Size 689B
                                                                                                      • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Content
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Content
                                                                                                      • Size 4KB
                                                                                                      • SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Cryptomining
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Cryptomining
                                                                                                      • Size 552B
                                                                                                      • SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Entities
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Entities
                                                                                                      • Size 68KB
                                                                                                      • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Fingerprinting
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Fingerprinting
                                                                                                      • Size 1KB
                                                                                                      • SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      LICENSE
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\LICENSE
                                                                                                      • Size 34KB
                                                                                                      • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Social
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Social
                                                                                                      • Size 754B
                                                                                                      • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Staging
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Staging
                                                                                                      • Size 36B
                                                                                                      • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      TransparentAdvertisers
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\TransparentAdvertisers
                                                                                                      • Size 105B
                                                                                                      • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Advertising
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Advertising
                                                                                                      • Size 21KB
                                                                                                      • SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Analytics
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Analytics
                                                                                                      • Size 3KB
                                                                                                      • SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Content
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Content
                                                                                                      • Size 5KB
                                                                                                      • SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Cryptomining
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Cryptomining
                                                                                                      • Size 32B
                                                                                                      • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      Entities
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Entities
                                                                                                      • Size 128KB
                                                                                                      • SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Fingerprinting
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Fingerprinting
                                                                                                      • Size 2KB
                                                                                                      • SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      LICENSE
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\LICENSE
                                                                                                      • Size 66B
                                                                                                      • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Social
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Social
                                                                                                      • Size 3KB
                                                                                                      • SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Staging
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Staging
                                                                                                      • Size 1KB
                                                                                                      • SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      manifest.fingerprint
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\manifest.fingerprint
                                                                                                      • Size 66B
                                                                                                      • SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      the-real-index
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Code Cache\js\index-dir\the-real-index
                                                                                                      • Size 360B
                                                                                                      • SHA256 241895ec90a8da9b02e68bebc840688e060d89a5a16cafc27e58b70087bee26a
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      the-real-index~RFe5b11bf.TMP
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Code Cache\js\index-dir\the-real-index~RFe5b11bf.TMP
                                                                                                      • Size 48B
                                                                                                      • SHA256 6cb28e62e5063df696471e55f809696b826bc50e07aec46b9c54e394ebbc6b6c
                                                                                                      • MD5 SHA1 SHA512
                                                                                                      Submit Download

                                                                                                      ExtensionActivityEdge
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\ExtensionActivityEdge
                                                                                                      • Size 32KB
                                                                                                      • SHA256 aefb267ca50676ff14f1d504549d8a0a838339d3eae353c1366dd693a6d0ebc2
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      History
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\History
                                                                                                      • Size 184KB
                                                                                                      • SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Network\Network Persistent State
                                                                                                      • Size 1000B
                                                                                                      • SHA256 85bcf113567c2b19a6674d2509897e4571d217fec4134dd1828f18ca5f85aae5
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Network\Network Persistent State
                                                                                                      • Size 876B
                                                                                                      • SHA256 3d3c19f55136dfa7fd114c5af2d4a696b51b5b8174fd343897c07a1620ff8d41
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Network Persistent State~RFe5bb8cd.TMP
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Network\Network Persistent State~RFe5bb8cd.TMP
                                                                                                      • Size 59B
                                                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      TransportSecurity
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Network\TransportSecurity
                                                                                                      • Size 1KB
                                                                                                      • SHA256 9a7ae2c226bbb5ff5b41c8fd5504d44cd2cf0e0499b73ae34bfaecea72b063ff
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      TransportSecurity
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Network\TransportSecurity
                                                                                                      • Size 1021B
                                                                                                      • SHA256 67a0cfe6994f929ee25b13d32753c9e5cb584cb21a6908f8e2896b2dbf2ea084
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      TransportSecurity
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Network\TransportSecurity
                                                                                                      • Size 1KB
                                                                                                      • SHA256 c8270eff4355e7f1c28a8b8bed46768d6b1c1bbfecd77e10021a149a04372baf
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      TransportSecurity
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Network\TransportSecurity
                                                                                                      • Size 1KB
                                                                                                      • SHA256 d3514198d74ad56ac1faefa92e381ab36a43eade97aa7e658e99694b783826b9
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      TransportSecurity~RFe5bd3e6.TMP
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Network\TransportSecurity~RFe5bd3e6.TMP
                                                                                                      • Size 857B
                                                                                                      • SHA256 21e56e94a351824f63ab41c9571edad9e5858575d77da537c3493fd5b5e1a226
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Preferences
                                                                                                      • Size 6KB
                                                                                                      • SHA256 f40fe71136bb4e74d860374d30a718e8966331800f0c42e4a40aae4f5378f07e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Preferences
                                                                                                      • Size 6KB
                                                                                                      • SHA256 056b8e97fa6921d801f4b5013ac036d5b492a660c71362686a52716be4cace5c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      Preferences~RFe5b3c69.TMP
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\WV2Profile_user_11560587121\Preferences~RFe5b3c69.TMP
                                                                                                      • Size 6KB
                                                                                                      • SHA256 fa6d57537a2c2caaa4dbaa6b7c19e663ef34a1e203f2a983856dcbc32c3a1955
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      tmp-3948000000.tmp
                                                                                                      • Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\tmp-3948000000.tmp
                                                                                                      • Size 13KB
                                                                                                      • SHA256 6bc8c801ce7013da833329ccf2db1a1ff50ff3d2dc6f4b960602fb61a15eda1f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                      Submit Download

                                                                                                      _imaging.cp314-win_amd64.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\PIL\_imaging.cp314-win_amd64.pyd
                                                                                                      • Size 2.5MB
                                                                                                      • SHA256 b4e06283c347910b5973bd5732159ea9eb26eda48e3eed183be2e3382db26597
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _imagingft.cp314-win_amd64.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\PIL\_imagingft.cp314-win_amd64.pyd
                                                                                                      • Size 2.1MB
                                                                                                      • SHA256 7e6910e39fa06b4049f058a781a20bcac40c4844d46037859c76de76852dbb3e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      VCRUNTIME140.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\VCRUNTIME140.dll
                                                                                                      • Size 117KB
                                                                                                      • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      VCRUNTIME140_1.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\VCRUNTIME140_1.dll
                                                                                                      • Size 48KB
                                                                                                      • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _bz2.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_bz2.pyd
                                                                                                      • Size 85KB
                                                                                                      • SHA256 082a761a280b08afecf6fb0509050ffbf7e87d1638ca49466b8b3eb4c85009b4
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _ctypes.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_ctypes.pyd
                                                                                                      • Size 139KB
                                                                                                      • SHA256 a11d680d89f054584e6a5b2a03103d8731def86e367aff2f70cce8c6367f9025
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _decimal.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_decimal.pyd
                                                                                                      • Size 283KB
                                                                                                      • SHA256 dcc9555eaf911af7997777b94beea78f802a10f1e4f3c3d4df2f254d44c71797
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _elementtree.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_elementtree.pyd
                                                                                                      • Size 135KB
                                                                                                      • SHA256 20086a4dccbf8bf3df3894665dd69d8c73cc6bdab5076ac4481c3983a02c605e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _hashlib.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_hashlib.pyd
                                                                                                      • Size 67KB
                                                                                                      • SHA256 0c11671a2c572b4c016be263789f238125419df5711e281acdce8da50d9badda
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _lzma.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_lzma.pyd
                                                                                                      • Size 157KB
                                                                                                      • SHA256 2376cd374ce8c2c5ecf573226e563a96975599533f86a5f5eba5bdb705e341bb
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _socket.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_socket.pyd
                                                                                                      • Size 85KB
                                                                                                      • SHA256 42b84410269af5a5578679a3fe7b17d75d28f77a0c3c09d589adadd9d2d3e5f6
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _ssl.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_ssl.pyd
                                                                                                      • Size 180KB
                                                                                                      • SHA256 bc17486f149f7311839c70b1cda5a22e4546a9670d3136d665df95ff3cc43abd
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      auto.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tcl_data\auto.tcl
                                                                                                      • Size 21KB
                                                                                                      • SHA256 08113823951619d659eb03a1f6acd2f9500e1264795219125a5df7b83cabcb99
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      cp1252.enc
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tcl_data\encoding\cp1252.enc
                                                                                                      • Size 1KB
                                                                                                      • SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      pkgIndex.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tcl_data\http1.0\pkgIndex.tcl
                                                                                                      • Size 746B
                                                                                                      • SHA256 77265723959c092897c2449c5b7768ca72d0efcd8c505bddbb7a84f6aa401339
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      init.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tcl_data\init.tcl
                                                                                                      • Size 25KB
                                                                                                      • SHA256 acacce15658dd7ce8f69b1e3d3a94770a22972a8e906eb3b61cd06f0ecd5db59
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      pkgIndex.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tcl_data\opt0.4\pkgIndex.tcl
                                                                                                      • Size 636B
                                                                                                      • SHA256 68accee3eb8d0f134f9472c95425190ec08e7793df20a58d7d35325f42804695
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      package.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tcl_data\package.tcl
                                                                                                      • Size 23KB
                                                                                                      • SHA256 b471cec9056b62d562020b14d69d4bd1f92dfe158afc8ba81c6341836211ca46
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      tclIndex
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tcl_data\tclIndex
                                                                                                      • Size 7KB
                                                                                                      • SHA256 577f042bbe640e2739606a1f76098abdb8bd1d1f31526402fb82b21091644f65
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      tm.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tcl_data\tm.tcl
                                                                                                      • Size 11KB
                                                                                                      • SHA256 f0cc13daca21fee538cca757aa09e88a969a85174eda26e61e573dda6c7ba413
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      button.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tk_data\button.tcl
                                                                                                      • Size 21KB
                                                                                                      • SHA256 1f5dd8d81b26f16e772e92fd2a22accb785004d0ed3447e54f87005d9c6a07a5
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      entry.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tk_data\entry.tcl
                                                                                                      • Size 18KB
                                                                                                      • SHA256 6ac78f764434f932d37e8183aa6db5d04eb1848b774c92f7abc243ecb7d4a59b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      icons.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tk_data\icons.tcl
                                                                                                      • Size 10KB
                                                                                                      • SHA256 1264940e62b9a37967925418e9d0dc0befd369e8c181b9bab3d1607e3cc14b85
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      pkgIndex.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tk_data\pkgIndex.tcl
                                                                                                      • Size 376B
                                                                                                      • SHA256 6127926b94db2992ab450fc6cc2ec3d071f7bbc856656d0ae20cc3fd4036f547
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      tk.tcl
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tk_data\tk.tcl
                                                                                                      • Size 23KB
                                                                                                      • SHA256 b7fd24177b17f67da2ca671f711309c65cf246be1fd0cf4f1ab8f3ea9ca2c3f1
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _tkinter.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_tkinter.pyd
                                                                                                      • Size 67KB
                                                                                                      • SHA256 f1d7eebfe85d0b3ef56e9db4d23fe3421de7ed77bfd8bea1df83a1ae96600fea
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _uuid.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_uuid.pyd
                                                                                                      • Size 27KB
                                                                                                      • SHA256 d75d04aa989f8be9666505ac11339416719e38fc0701047388b061b4e576030a
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _wmi.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_wmi.pyd
                                                                                                      • Size 39KB
                                                                                                      • SHA256 a299a6caf7241cebb0081c3ed9e98f815c61feee3e4813c1fd32369bd3fe6f5e
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      _zstd.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\_zstd.pyd
                                                                                                      • Size 491KB
                                                                                                      • SHA256 8f04a54778d4f21202f1bb9cfd5d080c5c5022158016dcaaf5908f7e2350270c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      base_library.zip
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\base_library.zip
                                                                                                      • Size 1.3MB
                                                                                                      • SHA256 ca3df230d0f50b0a16a4a9da01998f03ac1b560a1e209a942e2e5126d61a91c0
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      blue.json
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\customtkinter\assets\themes\blue.json
                                                                                                      • Size 4KB
                                                                                                      • SHA256 c9417470c16ced7a43d6c4a8e027afa6edc62c24d5aee7c4c2dcd11385964d3b
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      libcrypto-3.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\libcrypto-3.dll
                                                                                                      • Size 5.0MB
                                                                                                      • SHA256 e03dd02fdcfb791981c9962827cfcf495f2a47a514c1526efb57f847a9df514a
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      libffi-8.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\libffi-8.dll
                                                                                                      • Size 38KB
                                                                                                      • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      libssl-3.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\libssl-3.dll
                                                                                                      • Size 776KB
                                                                                                      • SHA256 1e4bc0638682bfcbb36f4465d6a2e9944d917a60f05ecc8ddf9e96847e05e13f
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      pyexpat.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\pyexpat.pyd
                                                                                                      • Size 214KB
                                                                                                      • SHA256 85673f29fa2f16e70fb95c1da0e53e819033a19b43964662d1e487b307d8c400
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      python314.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\python314.dll
                                                                                                      • Size 6.4MB
                                                                                                      • SHA256 7ffe3ab11342db03cc18b026f27485c0f74f5bf10f239f1f6573394900596394
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      select.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\select.pyd
                                                                                                      • Size 32KB
                                                                                                      • SHA256 a0f7b2e00144794e497d11fffc14e7a968f59e207c702ca7b262b7037065b5ba
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      tcl86t.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\tcl86t.dll
                                                                                                      • Size 1.8MB
                                                                                                      • SHA256 2fd6035e9e26b90ee5cb5e6f22f9dbc2a3576c81a5da4c673e0d36a540c55c2a
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      msgcat-1.6.1.tm
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\tcl8\8.5\msgcat-1.6.1.tm
                                                                                                      • Size 34KB
                                                                                                      • SHA256 adca186be560f2236265f538d4cb6df1171bed91192118796988bb9c08a4bc7c
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      tk86t.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\tk86t.dll
                                                                                                      • Size 1.5MB
                                                                                                      • SHA256 abcabe172f982a2969ef45dd2c79630c2dd84562b657e11dd97cf2bcfce095c7
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      unicodedata.pyd
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\unicodedata.pyd
                                                                                                      • Size 740KB
                                                                                                      • SHA256 64844c24f67e7eafb77142b4cbe4a430f4db3b16f59191586ba6596ca19fc775
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      zlib1.dll
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\_MEI24562\zlib1.dll
                                                                                                      • Size 144KB
                                                                                                      • SHA256 3245e82143491f36fd67464949be58fbb7ce58b29607ddb305c6772491784d39
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      nep_config.json
                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nep_config.json
                                                                                                      • Size 204B
                                                                                                      • SHA256 bb972a7d1a57b3f8a9291d9ed1b093858e0fde55a7b66edc9d947b404cb8604a
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      Unconfirmed 345039.crdownload
                                                                                                      • Path C:\Users\Admin\Downloads\Unconfirmed 345039.crdownload
                                                                                                      • Size 9.6MB
                                                                                                      • SHA256 14e3e506d5cccc03eeb3ae006f2d55611fb0af64ac8d176dd23d8a3966099b74
                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                      Submit Download

                                                                                                      desktop.ini
                                                                                                      • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                                                                                      • Size 190B
                                                                                                      • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                      Submit Download

                                                                                                      memory/556-1930-0x00007FFE5BE80000-0x00007FFE5BE81000-memory.dmp
                                                                                                      Download

                                                                                                      memory/556-2081-0x0000029699530000-0x000002969959B000-memory.dmp
                                                                                                      Download

                                                                                                      memory/1036-2142-0x000001DF2C0D0000-0x000001DF2C13B000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4072-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4066-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4074-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4073-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4070-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4065-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4064-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4071-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2136-4075-0x000001DB26580000-0x000001DB26581000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2456-4028-0x00007FFE48150000-0x00007FFE483EA000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2358-0x000001B08ADF0000-0x000001B08ADF2000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-1834-0x00007FFE5BE80000-0x00007FFE5BE81000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2360-0x000001B08B020000-0x000001B08B022000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2362-0x000001B08B030000-0x000001B08B033000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2363-0x000001B08ADC0000-0x000001B08ADC6000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2359-0x000001B08ADC0000-0x000001B08ADC1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2376-0x000001B08B180000-0x000001B08B182000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2383-0x000001B08B150000-0x000001B08B155000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2382-0x000001B08B190000-0x000001B08B193000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2357-0x000001B08ADC0000-0x000001B08ADC1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2500-2367-0x000001B08B160000-0x000001B08B162000-memory.dmp
                                                                                                      Download

                                                                                                      memory/2580-2409-0x00000237AC970000-0x00000237AC9DB000-memory.dmp
                                                                                                      Download

                                                                                                      memory/3948-4365-0x000001B3073F0000-0x000001B3077F0000-memory.dmp
                                                                                                      Download

                                                                                                      memory/3948-4241-0x00007FFE27750000-0x00007FFE27C9D000-memory.dmp
                                                                                                      Download

                                                                                                      memory/3948-4371-0x000001B3073F0000-0x000001B3077F0000-memory.dmp
                                                                                                      Download

                                                                                                      memory/3948-4374-0x000001B3073F0000-0x000001B3077F0000-memory.dmp
                                                                                                      Download

                                                                                                      memory/3948-4375-0x000001B3073F0000-0x000001B3077F0000-memory.dmp
                                                                                                      Download

                                                                                                      memory/3948-4367-0x000001B3073F0000-0x000001B3077F0000-memory.dmp
                                                                                                      Download

                                                                                                      memory/3948-4369-0x000001B3073F0000-0x000001B3077F0000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-2095-0x000001D33C130000-0x000001D33C530000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-1706-0x00007FF6C66A0000-0x00007FF6C76A0000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-1810-0x000001D33C130000-0x000001D33C530000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-1707-0x00007FFE27520000-0x00007FFE27A6D000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-2103-0x000001D33C130000-0x000001D33C530000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-2106-0x000001D33C130000-0x000001D33C530000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-2101-0x000001D33C130000-0x000001D33C530000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-2099-0x000001D33C130000-0x000001D33C530000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4156-2097-0x000001D33C130000-0x000001D33C530000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4260-3001-0x000001BFC2AD0000-0x000001BFC2B3B000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3415-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3414-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3405-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3404-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3416-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3406-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3410-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3411-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3412-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4364-3413-0x0000020E636B0000-0x0000020E636B1000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4392-3954-0x0000014690A20000-0x0000014690E20000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4392-3824-0x00007FFE27520000-0x00007FFE27A6D000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4392-3952-0x0000014690A20000-0x0000014690E20000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4392-3960-0x0000014690A20000-0x0000014690E20000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4392-3962-0x0000014690A20000-0x0000014690E20000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4392-3958-0x0000014690A20000-0x0000014690E20000-memory.dmp
                                                                                                      Download

                                                                                                      memory/4392-3956-0x0000014690A20000-0x0000014690E20000-memory.dmp
                                                                                                      Download

                                                                                                      memory/5008-1889-0x00007FFE5B200000-0x00007FFE5B201000-memory.dmp
                                                                                                      Download

                                                                                                      memory/5008-1890-0x00007FFE5A680000-0x00007FFE5A681000-memory.dmp
                                                                                                      Download

                                                                                                      memory/6076-1083-0x00007FFE4CFB0000-0x00007FFE4CFD9000-memory.dmp
                                                                                                      Download