440531c9fcd0fcc10877fb261f68ad7a55011074454ddb1c71cf3b229338454f

Resubmissions

24/10/2026, 00:04

261024-ac2gjs1wfx7

23/10/2026, 23:47

261023-3s2rgaew9s7

Analysis

user interaction
yes
max time kernel
107s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 00:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
saiko.exe
Size 12.3MB
Sample261024-ac2gjs1wfx
SHA256 440531c9fcd0fcc10877fb261f68ad7a55011074454ddb1c71cf3b229338454f
MD5 d6413fa50f354e4ec4872777d20073a2
SHA1 1474e6745d2190d555941c6bc6ed2a37799105d9
SHA512 5fce9e9af0c5ce52e60bb09d3dd1d56b3e614caf15df37f6151d0b076f32afc4298ce18332a1ea4ef4174df253bece12e8010618d1f9f04c4d820a1d5191dc89
SSDEEP 196608:SVYFdOjqirel6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeUS1RPRmv5:S6Srel2YEm6y4lsjg4+f/h42jBS1fmv5
TLSH
T1ADD6CF03F25190B8C05EC3B5875F9632EA72B88D052471BA57F86B212F7BE106B2D79D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware defense_evasion discovery spyware trojan

Malware Config

Signatures

Executes dropped EXE 4 IoCs

pid	Process
4732	luau-lsp.exe
2280	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
4476	RobloxCrashHandler.exe

Loads dropped DLL 4 IoCs

pid	Process
4980	saiko.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	saiko.exe

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
4840	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 64 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	saiko.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	saiko.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	RobloxPlayerBeta.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerBeta.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	RobloxPlayerBeta.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\RobloxPlayerBeta.exe = "11000"	RobloxPlayerBeta.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1"	svchost.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\roblox-player\shell\open	saiko.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\roblox-player\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\saiko.exe\" \"%1\""	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\roblox-player	saiko.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\roblox-player\ = "URL:roblox-player Protocol"	saiko.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\roblox-player\URL Protocol	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\roblox-player\shell\open\command	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\roblox-player\shell	saiko.exe

Suspicious behavior: EnumeratesProcesses 44 IoCs

pid	Process
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
4980	saiko.exe
4980	saiko.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2916	RobloxPlayerBeta.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
2512	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4980	saiko.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2916	RobloxPlayerBeta.exe
2916	RobloxPlayerBeta.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 4980 wrote to memory of 2512	4980	saiko.exe	90
PID 2512 wrote to memory of 4100	2512	msedgewebview2.exe	91
PID 2512 wrote to memory of 460	2512	msedgewebview2.exe	92
PID 2512 wrote to memory of 460	2512	msedgewebview2.exe	92
PID 2512 wrote to memory of 460	2512	msedgewebview2.exe	92
PID 2512 wrote to memory of 460	2512	msedgewebview2.exe	92
PID 2512 wrote to memory of 2824	2512	msedgewebview2.exe	93
PID 2512 wrote to memory of 5304	2512	msedgewebview2.exe	94
PID 2512 wrote to memory of 5304	2512	msedgewebview2.exe	94
PID 2512 wrote to memory of 5304	2512	msedgewebview2.exe	94
PID 2512 wrote to memory of 4616	2512	msedgewebview2.exe	95
PID 2512 wrote to memory of 4616	2512	msedgewebview2.exe	95
PID 2512 wrote to memory of 4616	2512	msedgewebview2.exe	95
PID 2512 wrote to memory of 4616	2512	msedgewebview2.exe	95
PID 2512 wrote to memory of 4616	2512	msedgewebview2.exe	95
PID 4980 wrote to memory of 4732	4980	saiko.exe	97
PID 4980 wrote to memory of 2916	4980	saiko.exe	100
PID 2916 wrote to memory of 4476	2916	RobloxPlayerBeta.exe	102

C:\Users\Admin\AppData\Local\Temp\saiko.exe
"C:\Users\Admin\AppData\Local\Temp\saiko.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4980
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=saiko.exe --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4980.4136.4031257994995840831 /pfhostedapp:d77d78d42126fcd27fa096194885f4cc55e876b5
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2512
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView /prefetch:4 /pfhostedapp:d77d78d42126fcd27fa096194885f4cc55e876b5 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x140,0x7ffdae775fd8,0x7ffdae775fe4,0x7ffdae775ff0
    3⤵
    PID:4100
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1768 --field-trial-handle=1772,i,13759932340297220326,18115543020045513269,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d77d78d42126fcd27fa096194885f4cc55e876b5
    3⤵
    PID:460
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2248 --field-trial-handle=1772,i,13759932340297220326,18115543020045513269,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d77d78d42126fcd27fa096194885f4cc55e876b5
    3⤵
    PID:2824
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2460 --field-trial-handle=1772,i,13759932340297220326,18115543020045513269,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d77d78d42126fcd27fa096194885f4cc55e876b5
    3⤵
    PID:5304
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3080 --field-trial-handle=1772,i,13759932340297220326,18115543020045513269,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d77d78d42126fcd27fa096194885f4cc55e876b5 /prefetch:1
    3⤵
    PID:4616
- C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe
  "C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe" lsp --definitions @roblox=C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\globalTypes.d.luau --definitions @executor=C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\executor.d.luau
  2⤵
  - Executes dropped EXE
  PID:4732
- C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe
  "C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe"
  2⤵
  - Executes dropped EXE
  PID:2280
- C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe
  "C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Reads the TCP/IP host and domain name from the registry
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2916
- - C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe
    C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe --no-rate-limit --crashCounter Win-ROBLOXPlayer-Crash --baseUrl http://www.roblox.com/ --sentryUrl https://sentry-relay.rbxinfra.com/api/11/minidump/?sentry_key=812d501908401e9ad67861e1d6d1edbb --sentry-upload-via-crashpad --buildVariant Win64 --attachment=attachment_0.744.0.7441080_20261024T000630Z_Player_9CB3C_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.744.0.7441080_20261024T000630Z_Player_9CB3C_last.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://upload.crashes.rbxinfra.com/post?format=minidump --annotation=AppVersion=0.744.0.7441080 --annotation=BaseUrl=http://www.roblox.com/ --annotation=BuildVariant=Win64 "--annotation=CPUMake=Intel Core Processor (Broadwell)" --annotation=EnableSessionEndCallback=true --annotation=EnableSessionStartCallback=true --annotation=EngineVersion=0.744.0.7441080 --annotation=Format=minidump "--annotation=GPUMake=NVIDIA GeForce RTX 3060 TI" --annotation=OSPlatform=Win32 "--annotation=OSVersion=Windows 11 - PlatformId 2, Version 10.0, Build 26100" --annotation=PID=2916 --annotation=PlatformId=2 --annotation=RobloxChannel=production --annotation=RobloxGitHash=70999ba587065cc543d2ccc1542c849d4693791d --annotation=RobloxProduct=RobloxPlayer --annotation=TotalMemoryGB=16 --annotation=UniqueId=3928464401499334654 --annotation=UploadAttachmentKiloByteLimit=1000 --annotation=UseCrashpad=True --initial-client-data=0x6d8,0x6fc,0x700,0x6d4,0x704,0x7ff66f1ee798,0x7ff66f1ee7b0,0x7ff66f1ee7c8
    3⤵
    - Executes dropped EXE
    PID:4476

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
PID:2844

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:4840

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Modify Registry

T1112

Credential Access

Discovery

Debugger Evasion

T1622

Network Service Discovery

T1046

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AppSettings.xml

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\AppSettings.xml
Size 149B
SHA256 893a58e7946728c9dd5caac10e5bdc306a465e406c1f979ded52a13dafebce2d
MD5 48f58abeaac832f838efd2beb25f4c90
SHA1 7878e28b62e5d9bc9042a3e44094e39668f03384
SHA512 c5e3025b63eead12a0f8192ea41afd1216dd87b14a07d22ebafc6d3d899a06e80da947b3fcd1b3f2cf53b89b3de9967f89c415394d66c277556373b620dc827e
TLSH
T117C09BA85361CC1697A5DE38977FFF50F3A17574447140989491347B0DC11C427D13E2
MD5 SHA1 SHA512 TLSH

Submit Download

UniversalApp.rbxm

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\ExtraContent\models\UniversalApp\UniversalApp.rbxm
Size 12.5MB
SHA256 edfac3c00080c7d531752f729711982551d8fb69d29404a12cc4bed5840cb839
MD5 1e8e274bcb45c3b007d66eb018d3d500
SHA1 3dcec7d368f2ea9885fa885363be8567ba25a0b6
SHA512 5f50b0aa383cfa066d126454e73e4201f4e5e7066c46468d0428b750801d25c59338e623c22d5967ca0363f918ea1824fbf45774518df95ab219ccaaea613940
SSDEEP 196608:gmZdByBa0yfL2FQmM8tnmySgek/EKMl4mELq4Ff6HX83xBMO3TsN7d:PByhBF5M5ySg5/EhlbcY383xG4Id
TLSH
T1A9D63360671A0CFD99632EE3778B8C6B56C99BF053C9033B36F34B94E94896C8049E57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mobile.rbxl

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\ExtraContent\places\Mobile.rbxl
Size 144KB
SHA256 4aeadcb64bda9db25ffc158d491aa5ac7a937755e7e1fc215d60d9998193ddfe
MD5 f7b9cba13b0bf94ca19f6d07c29f585e
SHA1 54041f3e1fef6e93bd3babc28a2fdb07141d4709
SHA512 025ad594f44cdc56bae08c93c06a5f56cbed9e947e1e47011292d0931979a5d9b1988238914e9e5239088c0abe971e55118ba58aaaa3d0730ed6be81115a06ce
SSDEEP 1536:rNglKZaI+a5JQncnQVGlnm8wH4CvJJG6VuBgrm78U9MAT6gPQZgzJ30asR:r/ZO0ln9lneTy6gB77VxT6gPQuuZR
TLSH
T1E4E34CF6F5348937C4997272B449499223315B8D92C5C32DF3DCB8B76C8E26F1BA8249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Module.dll

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\Module.dll
Size 13.0MB
SHA256 e1cf54f9c82e6bb9e17fb691f5c481b5b605c12ed78a228782ece3b907d06b5c
MD5 842b869935f6767342a9f85a2186ac6c
SHA1 44039973d7104286b38d0bf2cc3c34a81ee8b02d
SHA512 16b33a95f317bd0ed9d9be4800bfcc60c4cb5cda36c5222cbea3072d77887655d5146a89617f505fa03a572fbe9ffb95e7b0ebe97d476634d88b6f34ef8e63e3
SSDEEP 196608:v7zlXX+JJJJJ/nJJJJJJucN58BGkHiepRbvzfD7isvBorLMWWnt8uO7HI69BuWv5:5XrcjMRpxXvyquF7VBHEGKQ
TLSH
T1E7D60207FB45C64EC812DA7594635B20B366AC265B6293076114333CEDA73D88DABBFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansCJKjp-Regular.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\fonts\NotoSansCJKjp-Regular.otf
Size 15.7MB
SHA256 f18253affd968c8ea592d8df6d84b1d4c5d3a46d267e53a1f6749e6c4f76a23d
MD5 7ed4b9a7daaf1d1c71903a92059434fb
SHA1 03d1f98398da4ba4137aa177d419a2240ebe17fe
SHA512 993b2457eb9b9ffa3f023e9bfac77f97444df196047951dd22de0fa683b97eb5ff46fc01bb34697c9307794b0f9d8a24fbff531416bfd7d11597a8cfac891c61
SSDEEP 393216:WaxAaLuP4Khf/ypeQIesikPbvTuYbRvl8bJTimvAOopd/NtZCnpI4w1FT1IixLtv:WlaCP46f/ZQIykPbruYlvl8F//YhJCnM
TLSH
T145F6127E68FC6828CC57D1367646A53E66D90848854FE0FCE4D39FB23EE52240B6D6C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c94f4ea02188704a1a40f58b2c82ff034a26bc2be981f126c1a3434f869b7915.dict

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\shared_compression_dictionaries\c94f4ea02188704a1a40f58b2c82ff034a26bc2be981f126c1a3434f869b7915.dict
Size 1.4MB
SHA256 c94f4ea02188704a1a40f58b2c82ff034a26bc2be981f126c1a3434f869b7915
MD5 f2adff532b36d5b060f78f56da920d90
SHA1 50e99fbbb41081a907c4d66df168770ea167c94a
SHA512 99f33f04e432b3e64dbe100b128126bf4d6d68d02c2bc18f2363c816a91a8f4a3fe0da0b1a043c5012a950ddbcd096a3b4290d7508fe44c8f6be32a0bf19fc18
SSDEEP 12288:S3PG5bjnTx573sbnC8toNde+BhZADesWmo9Yih6E:L8tohBhZ4/ih6E
TLSH
T17F650961D6483EA282DE427E7557ED03376CD7DD42C448ABB781C58E3FA8185322EACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

indoor512_bk.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\indoor512_bk.tex
Size 170KB
SHA256 b22d568bd008b8132ac4a072abc596bfac12e2992c2a3d9987bddb6baa51cb08
MD5 ff8ed71e27291dab5a4b3afd7e00fe04
SHA1 3d0afcfbd795a06025525a064f7732b77f09ea28
SHA512 fb7286193081c0649e46f76a12c24a064e2e5823847515fb2f1bb9e7687806792dbd4d4baaa8c2392939fac53578170b4783d231815eb708b5b7ae85cf68ad84
SSDEEP 768:uPIW3cZjbfkBMPsKB1xXZ0xtvM1hG8axfPkGG8GGyPkV05MMMMMwh3NMr5IdjZNd:u73MZfv3imRbUJOOZqH
TLSH
T1FA04F1812826D259E5D8585C111F7E12FEE02F82BDF8D1B84D7BE716E073D8D9288C9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

indoor512_rt.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\indoor512_rt.tex
Size 170KB
SHA256 a97b3e18bc877d18c864716c55303b28a6c68d553d932016298ed31b1320b6d8
MD5 e56ae116b49b0805ed4b571dd1458589
SHA1 d8011e6723c9eea8a0ee01253838365e7a408b8f
SHA512 edacb0d32f56b517879e2471c135f9189ae300fa828cecaa39132146af879aba6d8079979e2817882dbf5dae8137d2f5a0bb471b71d0498dd9d051701d426261
SSDEEP 384:BTWq1W2iK4HoSKK5+OGvKDq2QnC6fkuwdochdyZbfX7k97KI/Ey38/k/E004KIXu:hWuw+fQXTCVm2
TLSH
T12804A0602D1ED795D1D958AE11EF6D01EAD80B81BEFCF1A40C3FD622D1B3D88A685C93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

indoor512_up.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\indoor512_up.tex
Size 170KB
SHA256 17f78d2d24e9a8715575c1b55996d8c5384a1ae9a1c028dccd5735e77fa15d5c
MD5 eaac23d0e0c512d10bb4933a534518d4
SHA1 86c5bcbeeb9510fcb2d983fbd547bf6cde3856d2
SHA512 5ce475b024439a9cb7896e4e1055468f6e01ab2b29cb26a8c853f79fa5106800c15e9542a1fa18e306f622c020a18889e85acc6a6e14aa07f6e12a152ef213d8
SSDEEP 3072:2mNbKbuvdP0+KMoPY6duRO5n40UD8jO0vUhGCBvlC5U:2mNbKbuvdP0+KMoPY6duRO5n40UD8jOX
TLSH
T1320458C0213626E4B0EA4E957C672435F8F96D80C6BCBB565E9BFA2F2033C55D18189F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_bk.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_bk.tex
Size 682KB
SHA256 eae298532fcc04ac380d78d7cf64a26d37984b8e8af56f34ae6c18cfb2439418
MD5 4ce299ee102e97588c9ce7aace046cab
SHA1 931f0e08bf641ecbab53b080f3ae9bbd8f620cce
SHA512 14e97b2c0449cda57280140ab7737c58d79de7f405d576672bad1ddc413a207cb3def3903ee62b7b4904cf4c6b7abf451863a87479cbeba0fbc873e51c5b883b
SSDEEP 6144:QZcAjXUwfXUQcaujBQ1OYoD/6N76c3uGN9hIFbqQ5xUcB:yct68auBQExDw6c3uG1Ij5ucB
TLSH
T11AE4098E767550CE3F3723DAAA15B4B2E306E21DB26335F61B2F5188367742DC9B1920
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_dn.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_dn.tex
Size 682KB
SHA256 97b98273a4261e4d36829a4aae4892837ca27c70bd22251bd7799c50516d605e
MD5 383fe0258cda26e908ea4a9bd2522b14
SHA1 18fc467f81197db8532e4784d72e9e32e122a810
SHA512 7ef6fdadb1e7e27468bf80ebe95059e6a2857f360d8dc1f4b0ca4a86fc5eb8c6156b6c38a1a17aa45f0d5fac3e247d838f27412c83f095f2c1052b0b54659f56
SSDEEP 3072:DS7zPPGKhNAXYIX/w1xMhryRBi1NjB7C6ZQUDPkWF0SU/r5eJiWwUeWd8qF:eGhYyRhryRBi1NjB7C6lk3Si5CCW6qF
TLSH
T15EE4EECCA27565C6851B57E0E920EDA1E30A726EF950306E177FE1AC743B82DDE26C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_ft.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_ft.tex
Size 682KB
SHA256 714c08b0dde8049a501eb81dc2f5e720ef785770970929934e58a575548f92d8
MD5 5a466b46a2e25c0f26c595ac6adcf9fb
SHA1 cb1ea78d4dd31f88e32946005f43115bf94b27a4
SHA512 20b7c9c164b089859490019338c2e9b73351f29cfd38db97063e12485ffb6d6eb79ffcbe6c64750886e755c5753f4e201e51d4ed07f358e5a9bdce484ccbebde
SSDEEP 6144:Sag6EnqqMMgKdVcoCSUR2R2LxfDx+Ofyz+vvBVftTmM:fgRnMMpV67R2R2Njfyz2
TLSH
T1C3E4A64EB67640CA5E3727E55A24B465D31AB32EF1B139FA167FA088347F43DC8B1812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_lf.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_lf.tex
Size 682KB
SHA256 46dd4ba796c65d23ca6b4cc4d8ae48f6535f2f888a3bcfbc581d5f767a3b747f
MD5 eeddf22de1228bc4ea67f1128cdfaad4
SHA1 676cdd7a49b8d5d18b20d1beb8a43555f3d96553
SHA512 a614c0d2bb4320c70fc96e4c02b79d60b16992475f60254d5d3cc55b5aa939e116cf3724422dc7129b426e031f3176469c7b4e482a3469050b480c7361d07a28
SSDEEP 6144:aHuGtOkr2lfrKunWhy+0tjYz9UOYuszCBdZNEMX/V+VbhbVPzNH:aO5kCEunaojHAszY1XN+Vbh9zNH
TLSH
T14CE40ACD7A7550C97B2323D6AE15B4B1E20BF26EB16234FA1B1FA0443277428D9F5D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_rt.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_rt.tex
Size 682KB
SHA256 8719aac7d496b20e4198b5407b64c5571e3f241309edc9480a41806efb046560
MD5 1991a94396b8f0ed2b28805cfc17d2e8
SHA1 4c2b313b4c542bc4e007c7f47c3d3ece6dc3f6e9
SHA512 ca13c926f238351acb5a8209c1596f917c0fe91dd91f8012a34950d0d99bbaac57de6a40c8c05522da8c74b0f3dbd0b492f09b87a142badb5b15b1c21a44f678
SSDEEP 6144:tlKydRE1sZ/pRzQNakQaMaOgIqUXb5b0hJjpr0JCxpsaTC5t:tQydRosZ/TzQqgZUXd0hJjpr5xpfTkt
TLSH
T196E4550EE23790CA9E6B17E55A246861E30EF22DB1B135FF1BAB509974BF03DD8B5011
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_up.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_up.tex
Size 682KB
SHA256 672375765f9c10387d204bc319dc98537a0e077a8ef395824f0f2dcde6de0f0e
MD5 f89f7a41395b548fa07bd0d295840e99
SHA1 8b61b2244fc9a505539b066da38cb0385b76bec8
SHA512 65345167dfe1ed1f141f3a939ca1f252539553e656f50e911c81dbba145d815d4243893e285756d7c9f8f703f41db1d50dc428c6425833a690744f1b410cb93f
SSDEEP 12288:4cHF30Onio8y6DUgD7YQ7MDOYwBoY01Lo:4cHD38ygFPYQoDOYwBoY01Lo
TLSH
T138E42D2AD86969C78733EB10A07494E1FC9640EE3C43862D497799ACB4B3EE53B1F543
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxCrashHandler.exe

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe
Size 13.1MB
SHA256 02f889967017c958393bcd01a8994b4fd5ef35a2853e99303c22af5cd024ea39
MD5 19b8231e7b1eff15b1720d457dffc688
SHA1 f9fc353f7fb442c0fe58b67d5469574fc77436f0
SHA512 8f66b8826d3c211d0db5fa972b6ce439315f4bf7670a26a1e36f746be28ea96954710e896e3b5dd9dab213e339deae6bda0e678c2c0c5a48788fdcfea4e519c0
SSDEEP 196608:sF+3Orhg0R0dKhiPd3fmP+y0KKvgqSZejnYP:sF+h0iZx+myTKvSZR
TLSH
T124D6AE6AA2BC00E8D4BBD1B8C6569617E7B1781503705BDF16A04ABA1F63FE45F3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerBeta.dll

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.dll
Size 27.3MB
SHA256 0cf163e4e562ba5b225f9f6b4efa4d376a85f8315af617b0b0c9263b8bbb5a07
MD5 59e41e080ed5c8aad069a5308aa778bd
SHA1 2b9c1ce8b91b805979b067fe0469802c1cc5e530
SHA512 fcd8c93dd584f9a693cc5eb582bcb089b30c8e64796602938f926feda4ba59cec86c467227edf7bcec24472581ab81241d4265b5193ced6eb718d996eda6c751
SSDEEP 786432:kO6j69USClAmpox4wgrcOMuuetLtAsV3SztSMJ7X:kO6j6mSCGmpox4TIOMu3pd3ynJz
TLSH
T18457332FE7025949D01BE773B03B07A197273F0713069A82E5C9D5B88DE4BA4C997B78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\WebView2Loader.dll
Size 162KB
SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
MD5 e2f9d2ef3446e70b50de50f577c6939e
SHA1 48e7721704249cebd1267280459b7b36ce99e177
SHA512 f5d7790bb2eacc78405a91a65adc0f30a248542de22ed10cfe91bc87e4f953a93d738281c13480a070681e7169fca6ec49e20c5fb7b89d76f3a9bad912c6d87d
SSDEEP 3072:erQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Tv+EtJfy2aQutH:gMMTlTRTzWiThTNTFSzjiBM2h9P5oZNr
TLSH
T190F35B4772E5407BE16A8274C9A34A11E77774510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gamecontrollerdb_new.txt

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\configs\GameControllerConfigs\gamecontrollerdb_new.txt
Size 580KB
SHA256 a6fa5944bb8808724b574e513bc63594c08fccbdf090fb8efab9fe26cbb43f05
MD5 53edf0b12265fe567db8208d9ce596c1
SHA1 fbbc12799e3d6068970b302f67ec976fdb11e7bb
SHA512 9c51be1048e627052d2355a71ac19b77cb3804fc6b77798991b1e31153255d021d6ab5d4d51115d61186f122052516572eeed405ec68f5b826b6c4819da27d45
SSDEEP 1536:iiB3ubi9z5AjjE/FveTYOrOx8deRx1o5sTPhudsCfdevQ3jtcgw2dPy91ejZDrbf:KYytE8K3LcW0
TLSH
T180C43C282BB64A0FCF1F4973D6CFF961587BB08C39EB556C7E9409E46D25F618084E28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UniversalAppPatchConfig.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\configs\UniversalAppPatchConfig\UniversalAppPatchConfig.json
Size 253B
SHA256 3c6ae12b2bd66dd708db3d47cf9d68bf3dc9f2c0861c5bda9078aa920aefec0a
MD5 fddee86cdded01457412096bdaa0fd05
SHA1 5b13f104035ddf183c2b7bc165b208ab4ce03c0a
SHA512 237fe0c39898c252bab11a4d403a142774c8f2b5c86ef8bc1e96ac781d958fef405f5a6568a156c417dc8dcb11a04a28afbe2a5d2bd8f9e9dd10642af7079db8
TLSH
T17DD05E94B620C8A790AA5B6C24AE2115131807FE2364DA0CD2D27820E53D97D7B33E69
MD5 SHA1 SHA512 TLSH

Submit Download

Arimo-Bold.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\Arimo-Bold.ttf
Size 310KB
SHA256 ad88e47fa64708183695e3039a3a2d7699f212b6a1ba5f6cd6a5eb37ca71bea5
MD5 a0ffdc02427eba7e57df5d5c32836515
SHA1 55cd1f277429c65e26433da5d122044142f76d58
SHA512 31276de0322bd332f7ec24037d648b4007645ff1caea58aebdd9fa842f6f1341f13b287cef961495832a4004a0824df4ba7135d6f7484b3b3c92fb51cb8adf82
SSDEEP 6144:jEtjQVR5YvZImRrnZIKGNvrWK+hXygTgAA:/V/stJnGFx+hi2A
TLSH
T129647C03D767DF5DD3912CB8C71AC3D2BB95EC62DD69930FB84A6822D4CB4A08D905E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Arimo-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\Arimo-Regular.ttf
Size 310KB
SHA256 f770502d7caad307e5b2131d4d763e22ed506ae4eb93775e29667bd0f8d3af1f
MD5 d9cc167ee50270d831c5f35ea5018f14
SHA1 c7d2ac919d1331a6340279e18d15f5de4c8f3df6
SHA512 9e1fb900765d58e44998af139f4f854bcf5888ece5a264856ebbf7a50cdded9e37fb9ede2226f9557dc04e1d564f2e3016f82fffc88e154a34279daf518851a3
SSDEEP 6144:APwrDTqTUbweajsa86FvjN09xlxoM2FPtMmbETOIpK:A1TUbgjRdjm9L2nNtMmbETO/
TLSH
T19A648C03C367DF1DD6956CBAC7168392B3A9FC7ADD2D530BE40A6821C88F0A49DE15E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BuilderSans-Bold.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\BuilderSans-Bold.otf
Size 76KB
SHA256 30a9f5a26fd341c2b4a8ee1418b3061445c7c6ce8b4b2565b04480c1b1328af4
MD5 77a419dff724a557cab2753cf0f0cf08
SHA1 0e24d25d6750ea77b7733cb5a052147c24e1b27c
SHA512 e9ab9182ad9281ad20ac352d6d46de900a91ff5f6f22eadb00e12ac470f917f97c3878353d0921b33ff2d7b8607d60b4d37be21a5907091b2e9cc6b2067ba6ee
SSDEEP 768:3MFYeUNcXFDFbM77leB8Sjb3K/vqol1ihlU8h6F/nLTLc8z6FuC4srmCEG1pLUZ2:3KDFbM77vSH3jouh+yiPYZECE7ZwGc
TLSH
T128736C19B715E709DAD14E39FE71C3342332BDB9BF1E821B75C4A38E2D5A081CA11B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BuilderSans-ExtraBold.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\BuilderSans-ExtraBold.otf
Size 75KB
SHA256 0837070a1713fc7647e74ec51b80ab9d4bce6af5448117c5711bc8a139f3adf0
MD5 b7d31dfc704f1cfda12126daf9ef52e2
SHA1 7c0a764d5828d8b518157323a19c8e39d32f15ea
SHA512 c5d9c1da8705ed9abdb141f436bfa144574fa1873052f7aa5f2c977f8eb3ee8dc4c76f0517ccbf8d279a893f0802f5dd70cfdcc515a5d335958203bd909b76ad
SSDEEP 1536:pDFbM778UR/76rpTctBWSD+/YlTsSWBgc:Hb07T/erpTctBigF/s
TLSH
T1BF735CA57B61A318EAD14F34FF61C3703376BD69BF2F8207B184294D299A181CA117DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BuilderSans-Medium.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\BuilderSans-Medium.otf
Size 76KB
SHA256 9f2d5253ab8ecefddfdebaef4c578eb3d1a2985589615604982d84fcabf6221d
MD5 e54102f0231b5c8eb6b43c6b11bd874a
SHA1 4fa83c457866175f58ce41b27c37b3afe43f2423
SHA512 e946bcb649568677533f1240a3d8c31e81f68636c762aa9c837080fbbc165d8c6bf1f0ef1f0ce672498b6b138c4d6efb649cc0ba865623e8dc483b3c3dfb6a73
SSDEEP 1536:9DFbM77XARZg6dwUnfhykkz6W7TvV0nILCO8kc:bb07XARiofhgz6Az9LCOK
TLSH
T1A7737D09B665A708DB838E39BEB2C3302336B9BEFF1F8117764469596C890915F213D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BuilderSans-Regular.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\BuilderSans-Regular.otf
Size 75KB
SHA256 40a248a2229bdd7f0c8f924ef8c94356437d903ac58cf69a06217b9382e88af4
MD5 3bad043047220d1c3b2b10e8b65eae9c
SHA1 6562136d8165b67ec0f115f70fb9c89595f19915
SHA512 f4b0f0eafc9a268b200602247341bfa306a9f24d5305a290343d5cae14d8b868ff2ccaf1a5b2577e66da1952d73b6662440d8ed2f7e9d51836ad9297249f47ec
SSDEEP 1536:RDFbM77DVCYso6MiOT9STthp3B1Yic+gw8Wc:fb07DPXAZ1dgwi
TLSH
T100737C1873A5E70DCFD60E34EEB1C3303326B8ADEF1E4217B390665D6C894959A293D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoNaskhArabicUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoNaskhArabicUI-Regular.ttf
Size 274KB
SHA256 506409fd55a521fa145921772e946bafcef0e2582e54fd1517540798277d3b24
MD5 1f76d8d6960d002d6bf62ab89b64b40f
SHA1 9e052c6d098b4df3ef6b79f55ec206677d50bfc4
SHA512 1d35847c789dd0c0326b43404ffd812f49dc09f63bad7443f9e04d48b1675ceb573839d5ee1a43704cc3c047c7d7e0019bf4aa559bfaec83371d9fb9a43ed235
SSDEEP 3072:Jhjdk4nZJEI170IUFiEGNZCm9nnJNkIG+bSMJIi+qzrdT8WbXgqiSxz5c:JhhkIZR67y9nJ++bSMJIi+8rd7bX/lzc
TLSH
T1CA545B03F717C64ADE455C78A7912B82339DFC7B6BABA24BE8473B29ACD758011075C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansBengaliUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansBengaliUI-Regular.ttf
Size 186KB
SHA256 c074bbc92c33267768ed397ad4419778853fd0e806e907f3359719c8d53a8297
MD5 8940e5b149489458023b0992dfe347c7
SHA1 acce50f3a9634d3fe2bc33dac7fc72c590a0babf
SHA512 70379eba5dac39accf6fc09fd49af7c278918798176c7abadf1816a7bd7d7492432ba3e0e9d99aa9e0755741677f703e2e10e17af635cc56653d21271b727788
SSDEEP 3072:PVDtqJ0ngIPwcJavGmSPcwKhwC22W6C/ta2nwOSRazWrH8k1H9m3fqtmY8vRu/wZ:6GngIPw9emGcVwC2R/ta2nwOEazWrH8J
TLSH
T12D145D4AFB6B8A59EB1B2FA922569351B1E1F0331F6F0FCF424527B6B8C94D04942385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansDevanagariUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansDevanagariUI-Regular.ttf
Size 195KB
SHA256 5ddc66056fbc894bf66b191a02135b906eadf7871c60100575ad329362948667
MD5 4bd531977940a9ff13b28d42cd111db9
SHA1 da5e0c6806b2f01fc850e00ef8e4e971603ae697
SHA512 bca17cb465c1040ab7b529fa3272160bb1dd95ccd29cd6c8bb14b229760f32ff84ff34c7176d7f10081c4aec38eeafc0f1e1283df935f9699a98ae696240a86d
SSDEEP 6144:GpwcXIV1KQq90u23X+5Ad8ECYpnCHkMu3qNH/wY8xwIhjpilukrtupH:t+5Ad8UCHkMTR//8xwIhjpQuuY
TLSH
T10D145A12F397DE06F6175B7C81E39391A39AF861372B878F41443AAF9CC51C01D86B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansGeorgian-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansGeorgian-Regular.ttf
Size 40KB
SHA256 ad4a9552816a72905311ed88255e9afdf564f3ceff6894dddd3257b5c3fdd8d8
MD5 fdd15a9ba438b8ff71433b8b7c0d1831
SHA1 d242a1f9b22b9a7a3191137be059d82ab3dff3cd
SHA512 95fa08be485e8ed19a138b4204bde4255d3af0fad930989ec231f186ee987fe4dd3b6e90f99a0fba5184d2a5c10cfe7f42c3fcccada2ae6471107e858f0dd56e
SSDEEP 768:cvNUjsHsHo8eqlCFdH5rYbSTtKqlBU021kj1y7nZhvS38YU3Qrk:cvKex8eX5rSSTtKqlHtwDZJ5YU3r
TLSH
T13D131807E267A24AD5172D7800F68A36C769FC71BEFA43DA515912F9F1AB1824C933C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansKhmerUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansKhmerUI-Regular.ttf
Size 73KB
SHA256 c100af4b836aa81707a56d6012ba9083c6a21d562178cf5e1bd8855056258285
MD5 1b477089a1b730f39510f59f18612ae6
SHA1 71af7312d37853dc68e4fda07849a352d3634376
SHA512 3704ce6c9e5406546da2dc91ab36d0675268baa51e9e33b8ae70319ce5f584f1891d3faf6b4fef3cdcdac2bc515cac4579d2f851347aa2d48d47770dee178f90
SSDEEP 1536:dbxJbTqQdY1FazC9o+2lFzL1L1Bkcusji+6:dbxJbukYO7+GzrBkcn6
TLSH
T11D734C13F391DA51EE2B1B35486A23569272F4A07B27B74B010937669CBF0E94B473CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansMyanmarUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansMyanmarUI-Regular.ttf
Size 186KB
SHA256 aa4cebf5ba28ffa3a3bb38e3d45b472fad42df754bba600c7f87168fca2f7e52
MD5 2097d437b372c3463775d4d51ebbe058
SHA1 46a28b576e852429d2b6cb417259ea8b7157dff3
SHA512 2afb1cbd226e24356329724f34254f5d6128b51113fda1c174c917ca641e262b58d1018d4d981545e34b8392756c0dd0ea4ee519bd4683f23dad4c7ba7511c1e
SSDEEP 3072:T/19Y4K6/vyb+AEqAWbgVdwbwucwACAeACwh2yonvUayIA3ATAkAGAEAY6qhDQ5Z:T/nYz6/KbuqxbAe0/wVTd7nvAIw8fJPq
TLSH
T197143913E3438B0AE6372F7981A61BA643EDF5362B17478E59403275ED8B4E1BCC26C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansSinhalaUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansSinhalaUI-Regular.ttf
Size 302KB
SHA256 6ae00f6f97ef3feee343941ed76161b351743e3beb9f60cf8c81615b0a799827
MD5 3832a972a8b64eeea6db1538024d701b
SHA1 aae4c53b5e91c0020f82d38e9d7ea8b99e825b6d
SHA512 cc01aa631cf0a11beb8a2e00ed6a799bb32183e8121b9d1c20d2f1525b14b764b3f02b73a1cac0ef61dc337291b52669fa048e282f8c4a480698a15aa3a380f6
SSDEEP 6144:LW85Xivpq7i+yfma0mOqSW77McG7DjE5SAPdMz2BHlfBMPgMaC2ejabqCBePQ6Zn:yYXqpqe+oH0mO07ocGSSAGz8lfyg51et
TLSH
T160648D43F1B39E4EFF1726B95271D373C2C4F0324B376A9ADA6A27B2C4DD0609995281
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansThaiUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansThaiUI-Regular.ttf
Size 38KB
SHA256 1e1c3c723eb35a3a8fc69749ec75073343cf731c9a6e8ce201343a1e1dfaff46
MD5 e411cbc8e9adf554a063d5a9af0a1106
SHA1 159173045fb37178d4e93c3f26938d736c67fabf
SHA512 512e7774277885f917a1f7cf52e5d7ccbd8dae2d6b56434349c8de2d4b923d9289aaa06ff83a660979639dbfd18ae9c7651b9526ac285fc6151f0db7eb2dd770
SSDEEP 768:OqyGDuAabaOR7YYWKOS+V+3Vz1fTOG31JmsMgv90rw:OqRHiZRUVKEV+3VzNlAY9/
TLSH
T1A7033A43B3D6D28DEF765E382A7D4346936AF4328F268759C18823AEDC5B0940D5A3C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxEmoji.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\RobloxEmoji.ttf
Size 1KB
SHA256 f4f680cfe35df739854a37bf2ee79cc76934feb55bbd796eeae8ad61d02056f3
MD5 0c41b5d675b466505538499b5c5ae6c3
SHA1 73d4f4147aa7adefe9fa581a45a3c42af9ec862f
SHA512 0117d4a00bf2a382abd86c5edeeb8eaf067988046fc709fab33b123505da2beaafd648a87631c4242253309b7f2764872361c5018a92d3497949a749e64cf99d
TLSH
T134313116DF3DEE84E9450334A8EA9744E370ED116752E38B8466A30F6C621C6CE6176F
MD5 SHA1 SHA512 TLSH

Submit Download

SourceSansPro-Bold.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-Bold.ttf
Size 261KB
SHA256 9cbab47276fc04c65ac78098e9a2069c55e26f21701b29092734ce4e830f80fb
MD5 8669b8706bbbdd1482e2fccc4ed96850
SHA1 11238b0fab1c3d884aec3c8d8e04dfc4ce74ff91
SHA512 e72da072747f7c9880196757f624036e581d8760ccbffcf27716e8a11d2da11dd703d9e999fd74697627fc99b191c805f9b7feb891ecab467d565f7900a33cbc
SSDEEP 3072:GerYf82fMN6LSbLmEQgdM3x6Fu/93PRORHt/ooyZQHrM7DjJmhcV:GiYfuN6LPvqhF66RHt/ookQLwYhcV
TLSH
T13E441A8BFBFB460BEB861DF08ED2C3B95630F857BF70A10A7951AA91C99F25105039C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceSansPro-It.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-It.ttf
Size 92KB
SHA256 1b78bc1c8104348e13fcc043331926f818ce290556350b1a90a735fe038c73d4
MD5 3d7cb86547ce5075625915f2e86d0687
SHA1 e2c802b01d5437f3901773b2183c461efa49eaa4
SHA512 d2ff0d2bfe01d3a1dddf6c04f2cd3aa6b65c77eb7b0e9774aed3cd4b7096ed4ffff45e4373850348c0321d27361b2a95b63151f48d9e96baf29afa751302b3fc
SSDEEP 1536:RknOCowsSiyOKF6aUCPCJvil+MvEqELElU+HB6:RknIwsS5nF6aU2GilvMSHI
TLSH
T176930943BBFB9957EF265EF8CDE1C3A54375F802FF74A50E9851AA91C89F2010807A94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceSansPro-Light.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-Light.ttf
Size 262KB
SHA256 3eb3ad852d98c139c78064804524d0d2472b3efb872dc176b217fb57ae6a6f78
MD5 81cd217e4a8160a930c6d5fb8d1e8e82
SHA1 6150358395ba0c580e04841a7a4635ba014dbbc1
SHA512 4c2abde3813a9ccd332cb84a4a91f7e1854b9efa641b60facf19b3fb21f08d67b8d32ec1f7aeb3ac704238e754477fbd9a135a46357e96a001954dcd89f7b044
SSDEEP 3072:4gie4yh11CJ6ManpFSU/EyQfpBDPRORxt/oo6rGpxJvE53hcV:r4yowF1/EyKp2Rxt/oo66pxu53hcV
TLSH
T169441A8BFBFB5A0BF7562DF08ED2C3A95770F802BF70650B7852A6A0C99B25405039D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceSansPro-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-Regular.ttf
Size 262KB
SHA256 c9868de61ff2bab0b5a3a6d01c4b76f299459f08c6ae2f2c0383b4f9f6bedbf3
MD5 c1678b46f7dd3f50ceac94ed4e0ad01a
SHA1 fa4e303960cd8bf37a2171c4bc6186684f2d4178
SHA512 1b3ee35f20fd8245f9178a34a7c7754e30eac6f863ebf686116f87f41eabf39465fa09f576a5df2369808a3c3cc0a8ecd2da9cf01a29e67db9123c5cd2be61b8
SSDEEP 6144:Q7ojGvahXMjAtl3sRTt/ooor+iErBnhcV:QcltyACPnhq
TLSH
T1E2440787FBFB460BE7865DF48ED1C3A96671BC43FF70650A7852AAA1C8DB24144039D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceSansPro-Semibold.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-Semibold.ttf
Size 261KB
SHA256 3ba5c382a7ee6a8831bdf90192addceabe6db4278a679e67fe7e9c0226b729cf
MD5 83476a890be79f84e97b792c9c40d743
SHA1 9e10e37c75e13f896382fb5ff0475edc454f4589
SHA512 fcf87cfefa1e700d47d59b05f9d427811a2104e0cf03ceecb7b0b52164540551725ca042dbfbfb65225c0792cef5ed5af76c6eb7af67fab4ef6cadd939a2c682
SSDEEP 6144:LptH9GTD/sNctyXZK9R0t/oo0/5fi+RpohcV:FtdGTttyXZK9LVpohq
TLSH
T1F0441A47FBFB860FE7862DF4CED1C3A96671BC47BF70A00A7851A6A1C99B25109139C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TwemojiMozilla.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\TwemojiMozilla.ttf
Size 1.3MB
SHA256 860b69e096e5805015cf5b5d64e4ece06c5b987dc05da1f97835c79d9cc79b10
MD5 84f66d1842d3187d6803242430d4f9f3
SHA1 4bf59e07298f03d90bbcd6257c9810c2c4d7b72e
SHA512 5524850540279ae84139e973dfb2e5e64f50a20e146ee16a735c2d43e36cae2f36bd96e8ed807362bf47f8b237c866e215f6b33ede35df1b1914714ec746fc3b
SSDEEP 24576:oUxU2vjzy6D6ZUrj+ti8C0eT/0TTXvBkrIvRKsUgWFg:+SHrEJsTvIAgWFg
TLSH
T1A5556C3FAB04C6EAF4961AF5C8B40E26B0D18D8517021287FB4DF8BF9C9D3989C57652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Arimo.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\families\Arimo.json
Size 965B
SHA256 93ba9eb9d330aecdf71369695696abafc3d25175ce4b37bfc19c164232bc2ef3
MD5 f91f223dc91cd6f7b6e7a1fc60b581b6
SHA1 5a6d020d0ffb5b662b7d5ba5c82454ca1f7cf4d1
SHA512 76396b70f667ebe76da24f96043f02843dd22917b64df1c791bf191c61284e22bc8f76fa269b0d35de70b02a7cb750ac474fb64cbd71d94c87de3f34806f1cb5
TLSH
T12711065F968CB1D70E84088A613D65C4412C023BDA98C8E6FDBD8D3EB1D9972A136EF4
MD5 SHA1 SHA512 TLSH

Submit Download

BuilderSans.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\families\BuilderSans.json
Size 885B
SHA256 875a02d39749399fc7120268a8d0ff68c3610998febddab52e0baab20dce2916
MD5 72ba6456c723100d3c9735f4654f0d48
SHA1 2069a9daaafe3a4d1ed86364bf10dda27edf107d
SHA512 04622582a1fb397b0787a7b484e208abf62daa792d851bad0cbd6aa665d44f120255dfa6209a65cfee91e91e5c2761a7f861782b884c423e8d5094cd2b0240be
TLSH
T13311C89B9A8CA2C25BC4098F413C29D1122D027793C8C8D7F9395D3DB2E88356077EB4
MD5 SHA1 SHA512 TLSH

Submit Download

SourceSansPro.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\families\SourceSansPro.json
Size 1KB
SHA256 c09f02584dcfb24cc9eba138638789f7b44460c3e71455e29140439813336402
MD5 c1bc6a36c492967c5457a783280e55ea
SHA1 b0147fb9166d78ec8da07058191c508275299971
SHA512 59b3c72e37f7df31491df237349e76c3bed6c0c14ed8589a0259b98242d3c1e502c672f85425a5bb4af2410ada12a34fe818ae5abcee5ae2b8be0edd02eb02e2
TLSH
T148310B6FD54C61C74E90088E213C29C0516C13379AD8C8DEFE784C3AB1E88756177EB8
MD5 SHA1 SHA512 TLSH

Submit Download

moon.jpg

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\sky\moon.jpg
Size 7KB
SHA256 eb0ca1b1693fc7751882c1effb5905f413dfb89d3e5af31053baaf425774f121
MD5 10ece876a6e237350af036debdddebab
SHA1 7c1b65d966b095ab0543600a467a1368cd2aaa28
SHA512 541e219c2731c71c9bedd7aa242121fa3e396cfa3f9e1db8b23181f6b27af361c0cea397061eec77f27b5edf39110d829011eccfcd44124c7fd043b7afb2f005
SSDEEP 192:/HvbDZXeS85KOZfokkHl+ajx10aY4nConcBFz:/DDbzWfokkFxYZFz
TLSH
T148E17D5A7BB15D25F3C62A3C0A67DBD6F3124D08BEB71EEE2558724934F1382C489724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sun.jpg

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\sky\sun.jpg
Size 6KB
SHA256 48dcaa485aef95aac03ae3cd94dcd02912389bce9b796c2544c67866d6457a9b
MD5 3acab22ca5aa5c85ca0f31d6fa553dc3
SHA1 6c8936364420af59f49fe5858e4a891a4bc980f7
SHA512 11593d16e87d25658b6df8a7de18cb075ecbc06feff4099da6f121b15a0890554d320f2d912230f8f512ee74d9b83d571ea90b163b0b6379ecd5863ae027b7f3
SSDEEP 96:ltN26MT0D5MdtbZPAVwzVBUEU4RsZ1ylRWgjrzMn6T1e:OYNMtKw/Ul4Xlun6Be
TLSH
T1D9D18EB6FF56C353CD72D67815FB2B94B3E2722AF360230A2034573A41501C0AE4E245
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shaders_d3d11.pack

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\shaders\shaders_d3d11.pack
Size 22.2MB
SHA256 7e16649086c01f505cc2942aba5a834501e3b4894aebdf3584d0352de1011495
MD5 bd56e3f830c0b8e2a54e4b85e68122bd
SHA1 3e2c62fcb2b6df228f32f2ad74df25fbf7b73578
SHA512 fb1120e71ff9823f518cc287c808686e19ec2f742f2c26e9eb25eff61f656d30af82d985ad407baf7e820c2117615a43ed8202ebff1a0575206aa6acf63144fd
SSDEEP 24576:LjhA/ITVNFXlL0zFpVr5ISPlEaBMre2Z7hzGm2xhoND6yUT0wbsEqD:LjhA
TLSH
T1FB37890B6790AA76CAAD537BCCD72B307335A4601DE30BC30B9C62156CA63596D731FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

executor.d.luau

Path C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\executor.d.luau
Size 4KB
SHA256 6eeee1d862b5d4eb5f15c421cffc50cb854e3eac6378ab1e4ebe4f1425533db0
MD5 8d1ac5ae81cca9f7a735f3331a28bd9a
SHA1 9f2c215aba22e5e4e6c808e4d142c4c9206e1467
SHA512 5f1da6042846d149949debb328e536e65bc0e46d80bf5127e38d98bdb252c7ad3c533b9094b12c4868d5ae149cd2bce421b1b0ab9fecaa496b12c4a994967936
SSDEEP 96:9NyJxsEHioYSeIBIn2DDEeh69XBx5G5JC+:LSJQS9JuXBxAzC+
TLSH
T1DCB18988F758317AECAE6223F46F144DBC362780316134F0DAF9DA9619A50BE4673C8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globalTypes.d.luau

Path C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\globalTypes.d.luau
Size 831KB
SHA256 ae1be58cd7cd565c21018aace8d10b46942cc0ae81df943f0529a86e5c1b9604
MD5 ec51a4277ba63941d6b0afe437ed3f22
SHA1 7a741dd6d24c93d2935e0c6bdac8fbb5862f5255
SHA512 0919e259d345e6bd678cd75b1cf389afe8299f36c282fbe67faf556b8f663693aa29fae93aba161c93e1193725c9abb827c6755ceea16bf881ccc33f152be4bc
SSDEEP 6144:zwk1ZUqKkVqx2CZEzBXlyvGbttxQc3zVvDeO/RGyaTFY/OSRlXAOAPplFm3TU2AZ:/xQc3zVvDeMDR7X8f
TLSH
T16805550DB604A130594F53F66E9F8884ECB5D2C5612C90F494FCBB461B7F83E26A6ADC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luau-lsp.exe

Path C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe
Size 17.0MB
SHA256 3c834f9402c82681ef2b8cc171c769f239eb094028bb31469296e1f0f4c489a6
MD5 8f890ca7382ce4517422a73ec3c432b0
SHA1 0a69749e532f7bc7a08a09c711b8d87149b22876
SHA512 692a35d1494649f96851ec333a0265805e46cc6f8f2688371a88ba3b4b8d899ea403dfd3bd2e4ee94a9d1c4eb7fe4a7b2d5a61c5092354a220e6edfc6f0f2552
SSDEEP 393216:dWfmgggFgl6ggDg/gpQiMRgFEggUggg3dgfgi1UBgggggUuMwFgggg6NggggggeD:YDggFgl6ggDg/gpQrRgFEggUggg3dgfF
TLSH
T1FA075B2A21AC10DCF17BD0BD8BDB9E47D6B2340903319ADF05D15A9E1E1BDED4A7E620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en.json

Path C:\Users\Admin\AppData\Local\Saiko\translations\en.json
Size 59KB
SHA256 07c114c164180daa7b5c72e7e9ae796e142d27f4df45bf2736cd587aa85d87c2
MD5 b6b744d6f5b89957557aacaa63ba3880
SHA1 3f1e913fa80fe50643c711b6caaef2b75a56a903
SHA512 76c5ca62e8169233551cf13138b0399d01a28efcd0c6a7315f06998d2516b08baad658633de425fab866c09835eaaec300e5e4d6f4062cafe984e0db56ba1afa
SSDEEP 1536:4pIGGDR7PnfmNQDQIDBt65PZz9w4Qm65M:4pIGGDFnwIDBt65PDw4Qm65M
TLSH
T17153732BEB40023B15E081813A5F53A77B114D3B1713391CAB9BA11D235E53F66BB5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

01e8eb11-87bd-4424-8e62-f7d82ea6b4e6.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\01e8eb11-87bd-4424-8e62-f7d82ea6b4e6.tmp
Size 2KB
SHA256 4435d2d974c956f07e9f34304c7ce7509b58d51ebaa2541e6747e978c8c5c1fa
MD5 d7259b765960c796e994d99e7c205be5
SHA1 7fa568305fd3772e61f6cc6a71146008fbca0662
SHA512 86bf3a8825d47cdad5ea23d6b4f6042658c422d3480a0194e34ae2b26e0e1fe0242d2e4901e04e5cd8f047f54ff5318ca7b772952a241cee85b0d4d5b9b1f255
TLSH
T1BB5195337964FEB79DA39B047A4A7F23CE78A0A5A6612F11C6DD0B18429719C3302C37
MD5 SHA1 SHA512 TLSH

Submit Download

3d817e42-ba5e-4ec3-b06d-fe0d131a94f3.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\3d817e42-ba5e-4ec3-b06d-fe0d131a94f3.tmp
Size 15KB
SHA256 7240513a0d3d91ca8c835204c5e4c6854a614ce1c8b5e8ed07a1b6dd7a5e7ea7
MD5 e1b76380c7fc47fcb7ef2dedc3f5e3b7
SHA1 e95144258bd48d2a26c2a44ee3e440c72c597f70
SHA512 9b54e32dc377a4724ea9a6d673bdb92cc0e75b59e4759a2740f3df62b0ea2b440ff1c7451f87c11acd0f4dd3516e18dff51c1df21c09be142213ac09fa382758
SSDEEP 384:E+OBqImmJvGBLx3NaFMJFnNBS1YEYvdARg6rk:VcvGtlNuYd1AzA
TLSH
T1CA72AF7A2D75AE672CB7C60ABB8A2B47CB74719381D17BE6CDEC8F0E421B0442352D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46f87e68-856e-4f32-ad1f-38076b746c58.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\46f87e68-856e-4f32-ad1f-38076b746c58.tmp
Size 17KB
SHA256 3d302bcf3438301a6b95fe6ac4e440fc0da431be3cfaec9355728bd333159caf
MD5 ebd3bef9ebf55931bf26e5a4c5aad0ee
SHA1 c0e922903cfac42f65d229a0b75c22e63d33b0f0
SHA512 112b8f9ef689677aff53d342910d9d38f3ed92fdc271354f492b7108f9172490085790227b17a72c4aac5a6dd35da0f14fa06c5a3bcdee510625843535dea845
SSDEEP 384:1+OBqImmJvGBLx3NaFMJFINl1YTYvJA4FARg6rk:YcvGtlNsYkiyAzA
TLSH
T17C728D7A6D76EA272CB7C24ABB4B7B87CBB4629381C06BD5CCEC4F0D42575892352C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0b8f8039900c1d1c4cda0346b14628682041e9da126a2a26e04fd00b16f90a5f
MD5 c2129aeeaecd5e0ecfb7d4e1a219fcc5
SHA1 c923c60647aa22b9908e15c70e5be7687ab6f35f
SHA512 30de1ceb238fe36c8cf75005c17e217d3b980aabd9712f61cb11df0f23da7eb78d3e36db1a023a210c084d952dcf6c30ae5cfdf61c59373fdd6ccd19a29ddefa
TLSH
T1B1D024133F414734C01031730443F10C0400C10FC145D000543CC55D1FFC0500F33441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 3c8562847c886a89e9b1837c949fdd0aedcc342103aa4ea6e56b6eb8d9defa2e
MD5 aab81832b81ddf24a52de995acfc3d34
SHA1 01671ec3ceb70f3c49acf4eae943c43bd91ee16b
SHA512 fa8b8bdb232cb1c171d001fe2deeea51d3ef2be4722d8c249077f07614eeccec1643d949d63929c220e1edd57bd08147b59ef6503fce57fbfe7d8d08d6c594f6
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

7c359355-cdac-48ce-a323-77e1bb925ed2.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\7c359355-cdac-48ce-a323-77e1bb925ed2.tmp
Size 6KB
SHA256 137826ee3c1cdbfd2beb5de0610df97b2300a94610af3b6f341b4e03094e2bc7
MD5 c87a07ee88412ceec20539d296cbfb81
SHA1 2f75411969d0a5d1c41e4abdad88d4a82352f6ea
SHA512 07ec997c17823b4a06d35754bf51790f582ec78289e406778243a70dd4cd931835c3f3c4e6258297d69ea3e5c1fb6c160b3ad8f035d21819cef6e4f516b9e3c5
SSDEEP 96:st+/ds6Qhb9b/kao5h16Z0/s7/x+6MhmuecJsJj0jeiK+gM28XM1C7K:stGmr/Non/sV+FdsJ4jWuG6K
TLSH
T15AD185015E64B9BB4CC6F209BA29BA16E2F9607170E51D58EBFC462C09DA6CC7317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 168B
SHA256 7a6f795440ee2aaa37960e34d8174a18c0cf344321b6f6b0990da1fdd62634a9
MD5 24be3e07deb1298f7f3dfceda7b1773d
SHA1 047138f5f5036aac261bc3cc867f1692748ca016
SHA512 a480feef05206b553bb95f9ae6a2e112a28317dad24c8186ceaa6fe6a1a19ad8d9ce0b366321a5c1ea443d18bc3f2de843a8b0599d4a9c85a3f2f918c4e487e5
TLSH
T17EC012287881111EC7432FB033F744C03FB0ABB065434E9604E82C34CC56300D80AC80
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 eb62a9429c27e80575f975f2ff01c409d0930dc0ac2b05f072d0f2271ca7ed8c
MD5 8bbec1e67f2b7bf6bd2f4f17c83171a1
SHA1 7dbd31b5032d82ae1b7f67075d83faecd0fe7784
SHA512 8547c1142c6f71c36060660c18b9792d73de74949d9b3b08f38c652d6b0a048e4f01e675d82bbdb9f279a8ca42cc4fea56ae8097cf127e14488b263b1b54a567
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

03cf1c05-6bf9-4778-960b-e758693a2fbf.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\03cf1c05-6bf9-4778-960b-e758693a2fbf.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

d5ef70c8-4ef2-4978-81c9-554947d78625.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\d5ef70c8-4ef2-4978-81c9-554947d78625.tmp
Size 6KB
SHA256 576228e2da7622eb686fb03e35c9fcef4c1a526794b157d4449d3d16282547e3
MD5 5dcd60a00d1cecefea10e13ff16c026a
SHA1 2f330c528dd1a9c22370b6b9589ed9a649b22582
SHA512 3664502227724016efbe5815a727528247d74da2832dc44688713ec2a68eddc5be3070c364457da7b5b7754067017a095d49ab7fc9545e009b2f4705aedcd0bc
SSDEEP 96:st+/dza6Qhb9b/kao5h16Z0/s7/x+6MhmuecJgCMFNjeiK+gb28XM1C7K:stGcr/Non/sV+FdgC2jWRG6K
TLSH
T1C2D196015E64B9FB4CC6F609BA39BA12E2F9607160D51E58EBFC462C09DA6CC3317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Local State
Size 1KB
SHA256 1405d4df6765f2f589bc250a23ae4b9d84a69af94da44e0b093b69237b0a663d
MD5 e958489cc701b6ce9741bec1b31f2252
SHA1 ea00da4d3a3fe3d89efcac835c681f5401599b1b
SHA512 57b762efe433d971b7cac5835c86994c68e7c44c91b241c65b907044c2c1eac761f5e2b9d7de0ed39c41cfbea152936055cb6a0e71536524c5b5ed10419ab1a4
TLSH
T101218773E664BFB2BC53974533067E139E3460AB92604F00D2DD8B18439719DA227C33
MD5 SHA1 SHA512 TLSH

Submit Download

f3e354e6-76a0-4188-8e2a-1e9654c859a9.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\f3e354e6-76a0-4188-8e2a-1e9654c859a9.tmp
Size 3KB
SHA256 6b33d0e565d8bf26190c48bb24514227b536c59360dd3eb57260fdfd06d75cfa
MD5 681b268659a96d1f7ada521a49985e8c
SHA1 ef31aecf17ca5c3c8efbb6746a6393a6b83e1521
SHA512 37d1c21a00337355a6c5bcef43765cfc9096f38da8e48b5a0972f2caaa57e398bc76bb1e0d187c6e58ba81b5f133a7222dd38fd953edaf09a3b9675df4733626
TLSH
T1356175376AB4E9774DB3DA057A862F12EBA45067E5913F55C6EC0F0C42D72982342C27
MD5 SHA1 SHA512 TLSH

Submit Download

WebView2Loader-83f8f5bafedf77a3.dll

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\WebView2Loader-83f8f5bafedf77a3.dll
Size 156KB
SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
MD5 b7f10b8066ee96c628e09c439b8d0b9b
SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
TLSH
T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/460-30-0x00007FFDC93B0000-0x00007FFDC93B1000-memory.dmp

Download

memory/2916-3178-0x00007FFD998F0000-0x00007FFD9CF8A000-memory.dmp

Download

memory/2916-3189-0x00007FFD998F0000-0x00007FFD9CF8A000-memory.dmp

Download

memory/2916-3409-0x00007FF666C40000-0x00007FF667C40000-memory.dmp

Download

memory/2916-3188-0x00007FFD998F0000-0x00007FFD9CF8A000-memory.dmp

Download

memory/2916-3420-0x00007FFDA3690000-0x00007FFDA4CB3000-memory.dmp

Download

memory/2916-3224-0x00007FF666C40000-0x00007FF667C40000-memory.dmp

Download

memory/2916-3411-0x00007FFDA3690000-0x00007FFDA4CB3000-memory.dmp

Download

memory/2916-3318-0x0000021C1DC90000-0x0000021C1DC91000-memory.dmp

Download

memory/2916-3399-0x00007FFD895B0000-0x00007FFD895C0000-memory.dmp

Download

memory/4616-102-0x00007FFDC93B0000-0x00007FFDC93B1000-memory.dmp

Download

memory/4980-3442-0x00007FF682CC0000-0x00007FF683919000-memory.dmp

Download

memory/4980-3191-0x00007FF682CC0000-0x00007FF683919000-memory.dmp

Download

memory/4980-484-0x00007FF682CC0000-0x00007FF683919000-memory.dmp

Download

memory/4980-3193-0x00007FF682CC0000-0x00007FF683919000-memory.dmp

Download

memory/4980-3463-0x00007FF682CC0000-0x00007FF683919000-memory.dmp

Download

memory/4980-3160-0x00007FF682CC0000-0x00007FF683919000-memory.dmp

Download