b7c9bb8af9128ed9f61e956f061ca66bd4fad4e78ee042a54bf0f22deca42e72

Resubmissions

30/10/2026, 04:11

261030-er95fswt4l7

30/10/2026, 03:58

261030-ejgsyaav5k7

Analysis

user interaction
yes
max time kernel
851s
max time network
866s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/10/2026, 04:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
saiko.exe
Size 12.3MB
Sample261030-er95fswt4l
SHA256 b7c9bb8af9128ed9f61e956f061ca66bd4fad4e78ee042a54bf0f22deca42e72
MD5 a2347e98c331e577f3abcc463c3ac68b
SHA1 41380d891fbd2c0f8c9a24423a0c52c34b597854
SHA512 1df4c0674c0e7acda8a120de4423aaafb875de69f2dbb13906361154a9eb788d54004057c56d7e42ae1e4aa0f693ca09baac766f70f86818b03e3a714c4c5448
SSDEEP 196608:KowcgHiwFC20Z6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeU5UbkLRHd:fEiwsx2YEm6y4lsjg4+f/h42jB57RHd
TLSH
T15DD6CF07F25190B8C05EC3B5975F9632EA72B88D052471BA57F86B212F7BE102B2D79C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware defense_evasion discovery persistence spyware trojan

Malware Config

Signatures

Executes dropped EXE 6 IoCs

pid	Process
4664	luau-lsp.exe
4716	RobloxPlayerBeta.exe
5140	RobloxCrashHandler.exe
716	RobloxPlayerBeta.exe
2556	RobloxCrashHandler.exe
2380	RobloxPlayerBeta.exe

Loads dropped DLL 9 IoCs

pid	Process
5684	saiko.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe
2380	RobloxPlayerBeta.exe
2380	RobloxPlayerBeta.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000\Software\Microsoft\Windows\CurrentVersion\Run\RobloxPlayerBeta = "\"C:\\Users\\Admin\\AppData\\Local\\Saiko\\Roblox\\RobloxPlayerBeta.exe\" --launch-to-tray"	RobloxPlayerBeta.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000\Software\Microsoft\Windows\CurrentVersion\Run\RobloxPlayerBeta = "\"C:\\Users\\Admin\\AppData\\Local\\Saiko\\Roblox\\RobloxPlayerBeta.exe\" --launch-to-tray"	RobloxPlayerBeta.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	saiko.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	RobloxPlayerBeta.exe

Contacts third-party web service commonly abused for C2 1 TTPs 16 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
542	raw.githubusercontent.com
560	raw.githubusercontent.com
561	raw.githubusercontent.com
511	raw.githubusercontent.com
557	raw.githubusercontent.com
558	raw.githubusercontent.com
563	raw.githubusercontent.com
568	raw.githubusercontent.com
569	raw.githubusercontent.com
572	raw.githubusercontent.com
555	raw.githubusercontent.com
559	raw.githubusercontent.com
564	raw.githubusercontent.com
587	raw.githubusercontent.com
570	raw.githubusercontent.com
584	raw.githubusercontent.com

Looks up external IP address via web service 1 TTPs 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
513	api.ipify.org
554	api.ipify.org

Network Service Discovery 1 TTPs 2 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
2244	GameBarPresenceWriter.exe
5876	GameBarPresenceWriter.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 64 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe

Drops file in Windows directory 61 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1414705469\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1786257785\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1414705469\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-it.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-or.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-af.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-as.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1414705469\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1786257785\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-da.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1786257785\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-uk.hyb	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	saiko.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	saiko.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	RobloxPlayerBeta.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedgewebview2.exe

Checks processor information in registry 2 TTPs 14 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe

Enumerates system info in registry 2 TTPs 13 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerBeta.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	RobloxPlayerBeta.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies Internet Explorer settings 1 TTPs 4 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\RobloxPlayerBeta.exe = "11000"	RobloxPlayerBeta.exe
Key created	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	RobloxPlayerBeta.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\RobloxPlayerBeta.exe = "11000"	RobloxPlayerBeta.exe
Key created	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	RobloxPlayerBeta.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "5"	svchost.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D	svchost.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "2"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "6"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "3"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "4"	svchost.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3562044790-535044693-348086427-1000\{339E0262-C8E5-4A8A-B0DB-9537C765BDC8}	svchost.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3562044790-535044693-348086427-1000\{08BF1AA0-C07D-481B-A19A-5113093D8BE1}	svchost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\roblox-player\URL Protocol	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\roblox-player\shell\open\command	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\roblox-player\shell	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\roblox-player\shell\open	saiko.exe
Key created	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\roblox-player	saiko.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\roblox-player\ = "URL:roblox-player Protocol"	saiko.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3562044790-535044693-348086427-1000_Classes\roblox-player\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\saiko.exe\" \"%1\""	saiko.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3562044790-535044693-348086427-1000\{3E64E387-0127-446E-A739-8A0C3173AE9D}	svchost.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe

Suspicious behavior: GetForegroundWindowSpam 3 IoCs

pid	Process
4716	RobloxPlayerBeta.exe
3760	OpenWith.exe
716	RobloxPlayerBeta.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
660	msedgewebview2.exe
4776	msedgewebview2.exe
4776	msedgewebview2.exe
2652	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4172	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4172	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
5684	saiko.exe
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe

Suspicious use of SendNotifyMessage 5 IoCs

pid	Process
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
4716	RobloxPlayerBeta.exe
4716	RobloxPlayerBeta.exe
3760	OpenWith.exe
716	RobloxPlayerBeta.exe
716	RobloxPlayerBeta.exe
468	OpenWith.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 5684 wrote to memory of 660	5684	saiko.exe	80
PID 660 wrote to memory of 2088	660	msedgewebview2.exe	81
PID 660 wrote to memory of 5864	660	msedgewebview2.exe	82
PID 660 wrote to memory of 5864	660	msedgewebview2.exe	82
PID 660 wrote to memory of 5864	660	msedgewebview2.exe	82
PID 660 wrote to memory of 6036	660	msedgewebview2.exe	83
PID 660 wrote to memory of 6032	660	msedgewebview2.exe	84
PID 660 wrote to memory of 6032	660	msedgewebview2.exe	84
PID 660 wrote to memory of 3176	660	msedgewebview2.exe	85
PID 660 wrote to memory of 3176	660	msedgewebview2.exe	85
PID 660 wrote to memory of 3176	660	msedgewebview2.exe	85
PID 5684 wrote to memory of 4664	5684	saiko.exe	88
PID 5684 wrote to memory of 4716	5684	saiko.exe	92
PID 660 wrote to memory of 3344	660	msedgewebview2.exe	93
PID 660 wrote to memory of 3344	660	msedgewebview2.exe	93
PID 4716 wrote to memory of 5140	4716	RobloxPlayerBeta.exe	94
PID 660 wrote to memory of 5968	660	msedgewebview2.exe	96
PID 660 wrote to memory of 5968	660	msedgewebview2.exe	96
PID 660 wrote to memory of 3628	660	msedgewebview2.exe	99
PID 4716 wrote to memory of 4776	4716	RobloxPlayerBeta.exe	101
PID 4776 wrote to memory of 596	4776	msedgewebview2.exe	102
PID 4776 wrote to memory of 2192	4776	msedgewebview2.exe	103
PID 4776 wrote to memory of 2192	4776	msedgewebview2.exe	103
PID 4776 wrote to memory of 2192	4776	msedgewebview2.exe	103
PID 4776 wrote to memory of 3428	4776	msedgewebview2.exe	104
PID 4776 wrote to memory of 5436	4776	msedgewebview2.exe	105
PID 4776 wrote to memory of 5436	4776	msedgewebview2.exe	105
PID 4776 wrote to memory of 1764	4776	msedgewebview2.exe	106
PID 4776 wrote to memory of 1764	4776	msedgewebview2.exe	106
PID 4776 wrote to memory of 1764	4776	msedgewebview2.exe	106
PID 4776 wrote to memory of 3948	4776	msedgewebview2.exe	107
PID 4776 wrote to memory of 3948	4776	msedgewebview2.exe	107
PID 4776 wrote to memory of 3948	4776	msedgewebview2.exe	107
PID 4716 wrote to memory of 2652	4716	RobloxPlayerBeta.exe	110
PID 2652 wrote to memory of 5440	2652	msedgewebview2.exe	111
PID 2652 wrote to memory of 5300	2652	msedgewebview2.exe	112
PID 2652 wrote to memory of 5300	2652	msedgewebview2.exe	112
PID 2652 wrote to memory of 5300	2652	msedgewebview2.exe	112
PID 2652 wrote to memory of 128	2652	msedgewebview2.exe	113
PID 2652 wrote to memory of 236	2652	msedgewebview2.exe	114
PID 2652 wrote to memory of 236	2652	msedgewebview2.exe	114
PID 2652 wrote to memory of 5664	2652	msedgewebview2.exe	115
PID 2652 wrote to memory of 5664	2652	msedgewebview2.exe	115
PID 2652 wrote to memory of 5664	2652	msedgewebview2.exe	115
PID 716 wrote to memory of 2556	716	RobloxPlayerBeta.exe	118
PID 660 wrote to memory of 3628	660	msedgewebview2.exe	119
PID 660 wrote to memory of 3628	660	msedgewebview2.exe	119
PID 5684 wrote to memory of 2380	5684	saiko.exe	120

C:\Users\Admin\AppData\Local\Temp\saiko.exe
"C:\Users\Admin\AppData\Local\Temp\saiko.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5684
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5684.3440.2777772135200056045
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:660
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x174,0x7fff1145b078,0x7fff1145b084,0x7fff1145b090
    3⤵
    PID:2088
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1716,i,16274543098350391995,10250419339309849049,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1712 /prefetch:2
    3⤵
    PID:5864
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1892,i,16274543098350391995,10250419339309849049,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:11
    3⤵
    PID:6036
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2288,i,16274543098350391995,10250419339309849049,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:13
    3⤵
    PID:6032
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3540,i,16274543098350391995,10250419339309849049,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
    3⤵
    PID:3176
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4552,i,16274543098350391995,10250419339309849049,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3988 /prefetch:14
    3⤵
    PID:3344
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4460,i,16274543098350391995,10250419339309849049,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:14
    3⤵
    PID:5968
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4664,i,16274543098350391995,10250419339309849049,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:10
    3⤵
    PID:3628
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView" --webview-exe-name=saiko.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3032,i,16274543098350391995,10250419339309849049,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:14
    3⤵
    PID:3628
- C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe
  "C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe" lsp --definitions @roblox=C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\globalTypes.d.luau --definitions @executor=C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\executor.d.luau
  2⤵
  - Executes dropped EXE
  PID:4664
- C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe
  "C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Adds Run key to start application
  - Checks whether UAC is enabled
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Reads the TCP/IP host and domain name from the registry
  - Enumerates system info in registry
  - Modifies Internet Explorer settings
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4716
- - C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe
    C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe --no-rate-limit --crashCounter Win-ROBLOXPlayer-Crash --baseUrl http://www.roblox.com/ --sentryUrl https://sentry-relay.rbxinfra.com/api/11/minidump/?sentry_key=812d501908401e9ad67861e1d6d1edbb --sentry-upload-via-crashpad --buildVariant Win64 --attachment=attachment_0.745.0.7451137_20261030T041313Z_Player_3D07E_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.745.0.7451137_20261030T041313Z_Player_3D07E_last.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://upload.crashes.rbxinfra.com/post?format=minidump --annotation=AppVersion=0.745.0.7451137 --annotation=BaseUrl=http://www.roblox.com/ --annotation=BuildVariant=Win64 "--annotation=CPUMake=Intel Core Processor (Broadwell)" --annotation=EnableSessionEndCallback=true --annotation=EnableSessionStartCallback=true --annotation=EngineVersion=0.745.0.7451137 --annotation=Format=minidump "--annotation=GPUMake=NVIDIA GeForce RTX 3060 TI" --annotation=OSPlatform=Win32 "--annotation=OSVersion=Windows 11 - PlatformId 2, Version 10.0, Build 22000" --annotation=PID=4716 --annotation=PlatformId=2 --annotation=RobloxChannel=production --annotation=RobloxGitHash=d2664f400cfdcaac1737922bdc152abd0f363f90 --annotation=RobloxProduct=RobloxPlayer --annotation=TotalMemoryGB=16 --annotation=UniqueId=5381742381593799677 --annotation=UploadAttachmentKiloByteLimit=1000 --annotation=UseCrashpad=True --initial-client-data=0x77c,0x780,0x784,0x778,0x754,0x7ff641d4db18,0x7ff641d4db30,0x7ff641d4db48
    3⤵
    - Executes dropped EXE
    PID:5140
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4716.4732.16084363182202782623
    3⤵
    - Checks SCSI registry key(s)
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:4776
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x1a0,0x7fff1145b078,0x7fff1145b084,0x7fff1145b090
      4⤵
      PID:596
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1936,i,72921860089123887,1584293986576788396,262144 --variations-seed-version --mojo-platform-channel-handle=1932 /prefetch:2
      4⤵
      PID:2192
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1644,i,72921860089123887,1584293986576788396,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:11
      4⤵
      PID:3428
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2312,i,72921860089123887,1584293986576788396,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:13
      4⤵
      PID:5436
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3544,i,72921860089123887,1584293986576788396,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:1
      4⤵
      PID:1764
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4220,i,72921860089123887,1584293986576788396,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:1
      4⤵
      PID:3948
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=4716.4732.18063621347063561936
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:2652
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x174,0x7fff1145b078,0x7fff1145b084,0x7fff1145b090
      4⤵
      PID:5440
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1796,i,6744490170768313021,143649266243653732,262144 --variations-seed-version --mojo-platform-channel-handle=1788 /prefetch:2
      4⤵
      PID:5300
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1428,i,6744490170768313021,143649266243653732,262144 --variations-seed-version --mojo-platform-channel-handle=1884 /prefetch:11
      4⤵
      PID:128
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2200,i,6744490170768313021,143649266243653732,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:13
      4⤵
      PID:236
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView" --webview-exe-name=RobloxPlayerBeta.exe --webview-exe-version="0, 745, 0, 7451137" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3084,i,6744490170768313021,143649266243653732,262144 --variations-seed-version --mojo-platform-channel-handle=3348 /prefetch:1
      4⤵
      PID:5664
- C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe
  "C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2380

C:\Windows\system32\WerFault.exe
"C:\Windows\system32\WerFault.exe" -k -lc WATCHDOG WATCHDOG-20261030-0412.dmp
1⤵
PID:1932

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
PID:5432

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:2244

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3760

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:4564

C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe
"C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe" --launch-to-tray
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Reads the TCP/IP host and domain name from the registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:716
- C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe
  C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe --no-rate-limit --crashCounter Win-ROBLOXPlayer-Crash --baseUrl http://www.roblox.com/ --channel zotapollingdesktopcontrol --sentryUrl https://sentry-relay.rbxinfra.com/api/11/minidump/?sentry_key=812d501908401e9ad67861e1d6d1edbb --sentry-upload-via-crashpad --buildVariant Win64 --attachment=attachment_0.745.0.7451137_20261030T041621Z_Player_3D2A6_last.log=C:\Users\Admin\AppData\Local\Roblox\logs\0.745.0.7451137_20261030T041621Z_Player_3D2A6_last.log --database=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --metrics-dir=C:\Users\Admin\AppData\Local\Roblox\logs\crashes --url=https://upload.crashes.rbxinfra.com/post?format=minidump --annotation=AppVersion=0.745.0.7451137 --annotation=BaseUrl=http://www.roblox.com/ --annotation=BuildVariant=Win64 "--annotation=CPUMake=Intel Core Processor (Broadwell)" --annotation=EnableSessionEndCallback=true --annotation=EnableSessionStartCallback=true --annotation=EngineVersion=0.745.0.7451137 --annotation=Format=minidump "--annotation=GPUMake=NVIDIA GeForce RTX 3060 TI" --annotation=OSPlatform=Win32 "--annotation=OSVersion=Windows 11 - PlatformId 2, Version 10.0, Build 22000" --annotation=PID=716 --annotation=PlatformId=2 --annotation=RobloxChannel=zotapollingdesktopcontrol --annotation=RobloxGitHash=d2664f400cfdcaac1737922bdc152abd0f363f90 --annotation=RobloxProduct=RobloxPlayer --annotation=TotalMemoryGB=16 --annotation=UniqueId=5103448545352796767 --annotation=UploadAttachmentKiloByteLimit=1000 --annotation=UseCrashpad=True --initial-client-data=0x56c,0x8e4,0x90c,0x8dc,0x8e0,0x7ff641d4db18,0x7ff641d4db30,0x7ff641d4db48
  2⤵
  - Executes dropped EXE
  PID:2556

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
PID:5444

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:6060

C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
1⤵
- Network Service Discovery
PID:5876

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:468

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
- Modifies registry class
PID:3720

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004C4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4172

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
1⤵
- Checks processor information in registry
PID:6716

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
PID:1272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Debugger Evasion

T1622

Modify Registry

T1112

Credential Access

Discovery

Debugger Evasion

T1622

Network Service Discovery

T1046

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

appStorage.json

Path C:\Users\Admin\AppData\Local\Roblox\LocalStorage\appStorage.json
Size 11KB
SHA256 59eb97db3361b11c898f01de99eca63f47ced182d2ceedc95888e3e1f2491c96
MD5 dfd2c74e08aed7b3ca2351e3bdc5d842
SHA1 76c6595df5718090785691be91114b79fef6dff2
SHA512 18885cde4ebbc4219fa45f09956e6247ebdee42ba7ad2ede48792de50650f135f6eb9a7da34b7a16e3c9a11c1b15f2632538e16be6ce841d328d889c4f7b6606
SSDEEP 192:awvp3slmrAO3cQqTYjctzMRut0F5Om18t8Bka4QOUx+/gLJxS9HtAK5nf9:am4lUwOTS9
TLSH
T15932BBE65048D4BBD0474829EBCB7F225A6114F538C63E3DE2ADBD0DDCBB0069E59A03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appStorage.json

Path C:\Users\Admin\AppData\Local\Roblox\LocalStorage\appStorage.json
Size 91KB
SHA256 fbd430c3b15cbc9c4f182694eca59284af58f70b7aef2df539039d4379465d2a
MD5 4a4e48745dbdb7149e308b34efd8437c
SHA1 e731d910e86137200c537c822ce55e94e4e1ede6
SHA512 1ddbdac6118b93ea1a7eaa397a1a2a2b7cc9bd21e9e065b333c4f44452004067cf0cacfabfca7b92cbefd70177ce7325b7ceb8d42eda888c07e6ce8eeb2c339f
SSDEEP 768:Tm8aBIe5ZOOxw7pVNsL+3MvvR1bbnTOXp9AX91mL3S3jc+hczcFCD89wwqaooCDa:y86pgp4LhR1bbFANYwpS
TLSH
T1229358F9640CC4F7C1C2991DA5FEBE321DA0546596C13C3CA28CEE1D85BF476BBA1A42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appStorage.json

Path C:\Users\Admin\AppData\Local\Roblox\LocalStorage\appStorage.json
Size 92KB
SHA256 8b90ddd442e28dfc5d7bb1da61a10dd15534c4c40175de5b6fa36a13d3849ed2
MD5 a8238b7e3a1fa537c69150009e55f877
SHA1 ac5957f748ef4475eb114704dae0ac24282d643c
SHA512 b6ae66e51da9479c7f8663badeb901e55ee00d6adb18e534d0e13a5dd75efbf9ee07a76cba1e34a6d65a8c6950f10adb5a769e18b81ff7e0bf7aad792c957ecc
SSDEEP 768:qOjKIe3ZqOxw7zWYsL+3M3R1bkX4qOcL/kX91mL3S3jc+hczcFCD89wwqaooCDEb:qeKpmzwLFR1bkqANYwpa
TLSH
T1FD9368F9640CC4F7C1C2992DA5FEBE321DA0546595C13C3CA28CEE1D85BF476BBA1A42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appStorage.json

Path C:\Users\Admin\AppData\Local\Roblox\LocalStorage\appStorage.json
Size 92KB
SHA256 481abcc5f1a646d0a2477603df56117b078a2e480cbe68b751fb581c341df576
MD5 b4f5c35bbe846bd9dc7ba67165c82d94
SHA1 9297896439e8053f43df4fe5860b39c5fa89a18e
SHA512 923bc9446b4d5c3def147eef4be4b6baa62ea276167e263f828f7f3e1391c5467774d6af5564d03f13d960ad751e68788b09f4b0fb27067cffb6edc518ac5da8
SSDEEP 768:vjTKIe3ZqOxw7zWYsL+3M3R1bkX4qOcL/UX9fmL3S3jc+hczcFCD89wTq7ooCDEH:bTKpmzwLFR1bk2CG7Ypa
TLSH
T1229368F9640CC4F7C1C2992DA5FEBE321DA0546595C13C3CA28CEE1D85BF476BBA1A42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memProfStorage4716.json

Path C:\Users\Admin\AppData\Local\Roblox\LocalStorage\memProfStorage4716.json
Size 32B
SHA256 c6419b4016fa1badb93e3e39e7a23eb479c8d276f939e445456f7284d44271d4
MD5 5399627f92e014b161ab44d471af59f9
SHA1 2410f75a2507be9b2d1a0c325074ec801e7c5677
SHA512 6a87dfb8e76c276ea96fcea92189dfdfabfcda798e815b8431e68d5d9ffdf66f7f10792a33d648264ae35298adf44920ae8e8a9891e9c507ea0fe150e425d208
MD5 SHA1 SHA512

Submit Download

63e548e5-cfed-4bd6-9c30-871852468512.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\63e548e5-cfed-4bd6-9c30-871852468512.tmp
Size 1KB
SHA256 24751b773398990d48e85e5f92cf1b18beb6401584807d80686fa5def393c820
MD5 c5160e4cd1cee5a38fbb2f3f209862b6
SHA1 b286d37d592e8dc232f80835351cec75bc3d29b5
SHA512 86c969e156e7daa6508533a4e4c8b30baf844a13b9a1d4866c294df471588babd5a872f88cde5a25ae17bc8f52b4a94f8ccf0753a3488c32d2ec623c82a3fef3
TLSH
T1EF31A9B2D4542F73BD95DA0A75066A53BE21902AD1447F44A6DE4B0802E39DDDA37C32
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 47b52624065b1a61611bdfddbab62c5611b87960776d9ba63cfd3a617736f872
MD5 7e767cfa3e1ab1f8b834c5676979f209
SHA1 97429d09c09d4a3cbe9a01c7c0b9f24ee893bfef
SHA512 0dd2f03b59abc29a23f4590ad5afb6b50e392f5ec768c517cfff5e065f127924da76b251524a01ff2101f8552c018d59bbbb7a9dd6c9ac64cc706aa91a2156c9
TLSH
T1C9D01213334202B8C01028730103614C0400CA1B800A4005643AAA1D2E248782D1A851
MD5 SHA1 SHA512 TLSH

Submit Download

499b4b78-7cbb-4683-811f-cf14adb2c8f8.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Default\499b4b78-7cbb-4683-811f-cf14adb2c8f8.tmp
Size 6KB
SHA256 95b5e951c9047e4d8ad61318a07e7a676252f74f5658392b4454eab7c35fdd60
MD5 e5dc5bbebaa2a34ac1463c5823d1e285
SHA1 18dfbd981625f2423f86d134e8a8fe9790684c1c
SHA512 387310695ff6e5a5fe53cdaa5c44aa390c26deed0fcc44982528ac3dcf45ef9b3e4d9522c567b21db1ac5468e2d9b33c647db69ae8defd2a4de8ee7fe145321e
SSDEEP 192:rnM0SgnfgEf1EZ8paJly/S+WiTxZwyOuMp4WGiK8:rnNSgnfgEtLZ/V3wU8
TLSH
T1CAE1B8439E38A9774CCFE619B935F716D2FA102265C41EC8EBFC852C08E66DD620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 960B
SHA256 0efd8fbb24fcd5960654cba99a729fe9ac8737433cf087d863113c96c0221e99
MD5 6861169c71869794f0c3f84b38c9f334
SHA1 530cf4c5ad63ab8ef3fbdea635314df8acf99706
SHA512 9373f2d5b8f237ba816a3d830e22cd2fdaf5dfe99725673ab9c9c99b38215a0c32dc5ae3cdea2a9f50214ace261a61d279a1bd71564206a036b8f84e3c73044a
TLSH
T16D11AC28B8E2A3A8CF7D0AF8BEB10DD472373504104F2B7B9898307499476C53035425
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 564b9cce38eba32b51f815da6e5c5cd913fceffe0080d145386b9c4126427475
MD5 cee201040a910f0e9fb8fab83173d4c6
SHA1 251b9035aed9d9a480174a901dfe3e55249c23b0
SHA512 2a9845a6e82609ea768c61d67fdacd4bae2a176be6dfb41f88f537adeeebf5542e6519792a0209cfae0e80a0cfdff0d0912a038fe18e78a8216ca2fa15cca84d
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\Local State
Size 1KB
SHA256 dc7a59820206a41688cac67a92ca5ec88038c0ebfdaa426dcf20c3114dc7534e
MD5 91ee376849860067b6b3679d2c08113c
SHA1 e9f59ef79a579aeaf74fe1f8cab648234f98609a
SHA512 045fdb80ef69da65613060e0ec6719048aed46a667e34df007ed66b3edf838147f2732db28446207c3c1598c9694aae43fd768e5b5082d6f0983abe38070bfd4
TLSH
T1422195B3C4442E77B8998909B20666577E20C02A91447F04E6DE460502E39EDDB37C33
MD5 SHA1 SHA512 TLSH

Submit Download

b471ca9b-ebe1-4439-80c6-d8335cad5aed.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\b471ca9b-ebe1-4439-80c6-d8335cad5aed.tmp
Size 3KB
SHA256 f594e1d3064cfbd2280a88a35377e08e09f62ec92455303a7877787878d7b6cc
MD5 8dc65a810187f1e20d0642fa0546ba7a
SHA1 5b06b6a63ae2601509057a475c5c18b86133c704
SHA512 8c456b5812d2f7bd02379b7654511b0b47f876982681dc54142a15c16e98187e4f59d336625808b97cc30038eabbcaad254efbee6d4dfa258b89ebecc8f1d0a6
TLSH
T1A671B472A864AA379DF6DE04B8862B12F6659137E0883F98DAED0F0C01D72DD1342C23
MD5 SHA1 SHA512 TLSH

Submit Download

c3a3c0a3-9329-4aa9-8fd4-f2e601acad3a.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\c3a3c0a3-9329-4aa9-8fd4-f2e601acad3a.tmp
Size 4KB
SHA256 b9e9500a3581f40c5ef9f873e9fa1a1830572f47133cad1d4a9735a0a6eb417a
MD5 70e384d1ee498204994699f826bbfbca
SHA1 37fc00d76ff5b0bc0e33558363fd30d59e20baf4
SHA512 7fd565f0aedd806374806900de935eaadd65d2a0a95f2d6c0a44abc48c6564ff9939a74997f5974bb2dca0e5df5e59f548707a42eaa7e180cf4e02f15e949886
SSDEEP 96:zunw3NkCEbf4WrCSm9SB7F8Frh/cInURoDotoN5m2D3BYZx6uHZ4TCwKTqylSa:z+w3NbjWOMgooDUatxYZ+TCwSqq
TLSH
T13F919472A864AA379DFBD909B9462F17F6649027E1983F98DAED0F0C01D72DD1342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2a94063-e9be-433c-92aa-ed01c9af591d.tmp

Path C:\Users\Admin\AppData\Local\Roblox\UniversalApp\WebView2\EBWebView\e2a94063-e9be-433c-92aa-ed01c9af591d.tmp
Size 2KB
SHA256 d9537381a10901570330d8520ac894be4b647e019c1859941b4b956e37fa6edd
MD5 0467e062fecbfea360113d9da4d63a6e
SHA1 9d7a50c663b2fd9a0162559e992177fe097b4268
SHA512 46103db30c19b9960b3e0a469a6f1e783f5236f870d072b42c26ed8718fc3f8aed9462fff22ee55d3ec76b3f49d1cba27a67df71692bd1b4302a348dc3e57328
TLSH
T1E351D7B3A804AF779DE78E08B90A3F23EA35912595553F50DADE0B0801D75AD2703C33
MD5 SHA1 SHA512 TLSH

Submit Download

0.745.0.7451137_20261030T041313Z_Player_3D07E_last.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\0.745.0.7451137_20261030T041313Z_Player_3D07E_last.log
Size 70KB
SHA256 30fb0b290c2c463dae5047f0bf685db987dbe07ded3c264fad4e7a4d27a350e3
MD5 7a848aa478f4b7a2257f7bb1d2a224be
SHA1 975a88ce4f8b6878e3e41afe5e6db81edf2bd51e
SHA512 49bed363c142b8b0e47df6890fb2826fe8778750793cf8a1ce9406e52018c86eb00d3a479fffd7f759e287bef3f80a22e6c0049fb373e63b8a30f1389b5b9d29
SSDEEP 1536:lb1nUrKJpmfzwle15eGgbRIqOUKiYGGI23m085HAzp23n0BZmJm/8i9Ws/kg4cOY:u/jjunJ4VczE69UupC
TLSH
T11163A4E392088415A54EA396C6F9584F5DEB7271A209B2FC379CEBCC70DC1D0CB6B661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0.745.0.7451137_20261030T041621Z_Player_3D2A6_last.log

Path C:\Users\Admin\AppData\Local\Roblox\logs\0.745.0.7451137_20261030T041621Z_Player_3D2A6_last.log
Size 29KB
SHA256 83713663d9b29f3ab8c2f358340f96ddfbfb201c84269f395178f34abe1837c8
MD5 92199bdf06c98937f4e318c3d7459fe1
SHA1 dd6304e1057b28d3066f57814726e795721d59b0
SHA512 d3dbdd48697f89577a94ddd8182b9a71155170d27cc67f607a70a2c2f077933554cc26e499338d61843055e90bbcdc062dd705eb7f50a4c9e93cca5abddc70a6
SSDEEP 768:jPhRYFuLraZdUXiHbi6k8C3l3XTZnvl77AW1mEsPlYJLj3m1FEXYGUFOk8theYdV:jPhRYFuLraZdUXiHbi6k8C1HTZnvl77h
TLSH
T146D22F948214841BD05EA2D789FE090E0DBB75667218727C731DDECDB0EE986CBF9361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

07269a666146638bd289e9640af6b8ca

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\07\07269a666146638bd289e9640af6b8ca
Size 37KB
SHA256 c9136c73d2f3c88147336134437c0c75f7d020d55e060d1e374d635f2f6b6322
MD5 b1db9c53bd0821762c8cc804745f9eae
SHA1 4b48eae6df24bebcec880461667653c16fd0582a
SHA512 ed797fd707ac1e2adcd2439614bea3ebe4f9bc4b69f2d6066226c526b39b5b5c7569992578783422d8a12feb9178f867f5955eb06cfec1a93f6b5f66fad9fafa
SSDEEP 768:1IQMBx/iRBQYzY1hq+HxTEuh4LXncWB5qdHoHXWXH3U5A/xz/xFEgCjaLVLsW7/+:2bxaLQDhqATEuAJB5qyHXYHE5CRxCgCF
TLSH
T1A203E1D9146D20F5C4E9D83A8B5B1BADAB1F4F2330FEA544F5328E952A044DB3F48DA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f65b987587278a2d04276b0e27f27f5

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\1f\1f65b987587278a2d04276b0e27f27f5
Size 24KB
SHA256 6b7db08139a65e87d0c3fa4320773b84cf579cbbf6f4e1df7519ad0cbff23289
MD5 916bb2dfbee5e8258e8167dcf1fbf572
SHA1 ef25a4b1e8fe32a06dd3139e0dc11d2ffc92aa3d
SHA512 c9e19acbedc0a446429c32071f5073a616b343ef875d8785cfb0d349df17bcc67f162f0b502ba82a4a6ea14df11e1bad8fec9467c5cc1c024c5fe7dce2771d24
SSDEEP 768:X8a4Wd2wTWpmj4PQjr86yIhagMQKN1XrD:X8a4Wd7UIgc2DX/
TLSH
T111B2D092CAB6AE96F5788475F26B1C53E60AE71F43421BA50B81C13DB58237D2F02397
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d81835b5d072768448085c0234be3a1

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\3d\3d81835b5d072768448085c0234be3a1
Size 65KB
SHA256 38155396e8e5c4c3be7412e7bdff6b8f9bb0307e41dc84cd5e9c4725f2e34838
MD5 4df707bc3c6d26ffa9e3d88710e6f190
SHA1 d0874e504ad040ff9bfabe2abd7fa8b95c59b9c9
SHA512 6e73dcaf7b6ea83fdd122c088fa2a4739352566adb573365a3970f56f02cfaf1824562674a637b46d1730844dfb4b1d4f3f97703494eb1563dbbf9b8e08e0ca5
SSDEEP 1536:fhnNoiGzXKzJ5Ycyhm1nwM5Fn70HIqPwnMLxiuhgxQFuCg:fhnNoikK9W/hmJweZ7BM8xSfg
TLSH
T1BC5302E2BDC48450E3C172F5D15E73E0A4FE935B4BEF45944BA0D247A2123BECA616CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ebf05b200a605c8d3bdbc53ee90059c

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\3e\3ebf05b200a605c8d3bdbc53ee90059c
Size 24KB
SHA256 ca466acea530ac429ad454313ff0b852dc722d0fa425498f7d2d782001775e06
MD5 3a76ba4bbde057c393f7b253852116f4
SHA1 3997bd2a95dc140f641fe4efeb5a5ca508ea2dae
SHA512 47209e550f2bd3501438b450087688d32932b445083df5f8099657b50163bc1fa673950c19398ee7499bbd545d2cef0fc60b82dee87feac5825832b189ac90d0
SSDEEP 384:8OnesOW0nc5jXwoZKR5cq/xiyiD5p/GFzQejLxlV8jpc8S3FzdjmTprEGkAuf5uJ:s7mjXj6cMDlp5lasZcCGkZ5+
TLSH
T183B2E12131F57889C6070EFA37FAAD287D2CD411E4869EF3722F78761972C3445E2195
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b32d227839d544982f5a9c2fe4ca2a9

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\4b\4b32d227839d544982f5a9c2fe4ca2a9
Size 18KB
SHA256 368d8fabe86cd7aa2ad6fe6f66d9b7dc788a4a6f47c32f9dbf63a58b26f81e36
MD5 faae9565f6028b19a5b385637bb6db5d
SHA1 0f0293adabfdf58b82eeb0b1f6590e9f37919f3c
SHA512 c66d2cf883bd5fdb19baaca195e312a7b14540c347803245070666ac1decf79a91404cec89f21fb9598eb43dd1d6a00e799e401aa832c477b4f8e8478163ceff
SSDEEP 384:o9A8XUOEoUqA2yewVsS1cwpQPbhXhqHfoSaz5:mA8XUv0yfcwpEDqdaz5
TLSH
T14092AF3102420FDAC8F699F018D73F8AADD1962B4373962D970A041BFE07769B18E7C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5232f87f4ad78454f1982614d70e4a5f

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\52\5232f87f4ad78454f1982614d70e4a5f
Size 14KB
SHA256 796ae610d3a96880891312030608a938591accde3766a82710056c3fa010307b
MD5 56134b7eb9277032d466a8e6ffe27608
SHA1 5ab65d0a84620bb458c93c0c2e31c955b7fa9cc2
SHA512 2edb34c568aaa750f8bcdd344613ea320b67e1d74d2f0517ace0de46933237e0f625f59c093fc87c4c6e3e0b6711c5a96ad7c27dacd3959fb929c07e5a67b31d
SSDEEP 192:+obhnwflfcJVzs5M3jmVZIBeFCnCLt9EhO93GAYlkxdqCU0HwcMMzG9EZ23p1JFl:rtzzb3jmV5ce2lXGzeZ1JFCJCOEKor5
TLSH
T18F62D093C2B212A82873C473758AE64D3245E99F55B7688AF344467D0BB7793CB0E938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5232f87f4ad78454f1982614d70e4a5f

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\52\5232f87f4ad78454f1982614d70e4a5f
Size 14KB
SHA256 f6dcdb564cbadc24529126442318ea581169310da2c9ccea174e813c518151ac
MD5 ae3e0cdfaf10aed3897e602ac9452df7
SHA1 f85da3e7506580e51aba6169568b444273342855
SHA512 283fc217debd06466d5e9a705771b46852eee4e29ce2928c557449ab190ea3968e48c3d31b877e76efaf19210e70cb4abe2a8600152d62073bf03c090d1f69a4
SSDEEP 192:+7bJnwflfcJVzs5M3jmVZIBeFCnCLt9EhO93GAYlkxdqCU0HwcMMzG9EZ23p1JFl:81zzb3jmV5ce2lXGzeZ1JFCJCOEKor5
TLSH
T16D62E0D3C2B202A82873C473758AE64D3245E99F55B3684AF344466D0BB7793CB0E938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5232f87f4ad78454f1982614d70e4a5f

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\52\5232f87f4ad78454f1982614d70e4a5f
Size 14KB
SHA256 f463865e57bb8834e1c1e6100258bf0462337a3d5953b154e86e5d7dc0ee0dfd
MD5 cadfe82ccf3b19ed0ade2a6c0cf4ae5f
SHA1 138bf165eaa77fd79494c186e515a3be19b22db3
SHA512 63425a35fb0d7c5bbbcf0535a062af73dada0a3cf243b2c80036470c9c72dad1b9ce0b4f9e8969c1aa7a73e0b224bccfbbaf6e8a6fca12330ec517b267bd532d
SSDEEP 192:+Qb5nwflfcJVzs5M3jmVZIBeFCnCLt9EhO93GAYlkxdqCU0HwcMMzG9EZ23p1JFl:Dlzzb3jmV5ce2lXGzeZ1JFCJCOEKor5
TLSH
T1FA62E193C2B211A82873C473758AE64D3244E99F55B3684AF344466D0BB7793CB0E93C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52591f50c05302b0832d4d2454d2a6ab

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\52\52591f50c05302b0832d4d2454d2a6ab
Size 228KB
SHA256 b30e0e496d0243832ef4999bc7888bf9eb643376dfb021c8f15c0b66cd972ebb
MD5 e7e0624a73209c32697adcaf7f22da33
SHA1 2767a30ac70b9dfa7ff0639050f8f69a368dbf74
SHA512 5fda12308e821521aa5acf820758ca3368546c2ad018538a308997c2ae8f026f5cc922b5b62092a23a777fc1558beb2a6cbffc53144e73e994f554148a3d0a49
SSDEEP 6144:f2wKkfeAr6GbnfZfZBRMnLIi2BWZQBLE6Fe1EYQ:WIa8l
TLSH
T16F345C35E7B79A5EFC36C1BF0C83726159E1AD03A3972593B98F5706A01E0D40AE718E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RBX235804BD0F944B658FE999027FA2D00A

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\52\RBX235804BD0F944B658FE999027FA2D00A
Size 14KB
SHA256 676a572d2df30a27e1e3373ac966faf4779757eafb60d39a08a9730505ae99f7
MD5 2548054f79da966528cd7c438e3fa66e
SHA1 79f340e366e66d7d50dd0a56239454f7481884a7
SHA512 cce14bd361f946384e791755c0352b0efc388389fcdd4b0e0f7645bad82fa17c7e29398213add18fafe9b3435fb86d270ac215c6d5b04a0f4bff3327291b6f9b
SSDEEP 192:+2lRrnab4ccJVzs5M3jmVZIBeFCnCLt9EhO93GAYlkxdqCU0HwcMMzG9EZ23p1J/:xacpzb3jmV5ce2lXGzeZ1JFCJCOEKor5
TLSH
T16862D093C2E212682873C473758AE64D3345E95F99B7684AB344466D0BB7793CB0E938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5f48d2e58c7be88f392a3d97bf7700c

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\a5\a5f48d2e58c7be88f392a3d97bf7700c
Size 16KB
SHA256 04067a9050fa786f7c19ce60e7f3c92419ad2a2823166196466cd43e37a30f6a
MD5 7eead80c84fc796c8fa535e0c854f6de
SHA1 58f9c18dce495e0f123e43e9e7d71fcb4cf5b1e0
SHA512 45b0134fd2d3d506fdc439bed4a29169034e7e94abde486893743e8324b61bb71b076445ba650c55326623b07369e40b4d73c6eb171315cdbb97f60b9a77674a
SSDEEP 384:4pnPVEaZrLUpr40UBq7z/RCxcagziLADFBmSzuj+QyEv:8NEaFgpr4iz/CcagM8BSjhyQ
TLSH
T1AF72E1190685E740D0147BBC7EFD5D72F7BFCB7C151BECA01602A60A58D8B96DB35904
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a77c6306fa43ce19e244f4eb691e7888

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\a7\a77c6306fa43ce19e244f4eb691e7888
Size 13KB
SHA256 e161f5e8865684599567b1c43612ad245fe2205210bde2b3ea8da6ec294f9257
MD5 1472b3c3db729e5366dedbed20020373
SHA1 656b1901c83e793295a64f374e4ce2bada19b6fd
SHA512 e22be71dc0141cf3c1e181e8e2a64608f955a68a28c00542936a436e977feaf7cffdae96803b25a41eef39bb4d70f63df979bbd8c3b02d0fac698f2c1c7ed617
SSDEEP 384:fh5p5A4arWQ4mGLRJ5pyidES3cA9RY9GdK8A+a7:Vh63XGdJr1d5sh
TLSH
T1D952BF12572C3132DD7D1BB9C4EE3978BE0DC519945388A399B182EDBDE739E0E4520B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7e62c2b88981458411c7f19a510492e

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\a7\a7e62c2b88981458411c7f19a510492e
Size 345KB
SHA256 7d749d4846325c8d0d22391c085bcb54f6cb1bac0eb8e3bd6333a91c35687b8d
MD5 3198db4853aae8e698becb0b37590a72
SHA1 c3eebcc6f95a8736f019a1d1b9cd7b5d6e94435a
SHA512 5aeb6b76bdfe9e78c9495121c86a83415438d6490db39da2fdf63f10696678c23b4982ec8dbee0477283352d3f725d0b5c08b81c59dfbeb944025b7efe777bb9
SSDEEP 6144:6k5HIAaHlzJTPE7l3Ov5VlR/8o1AjoG5b4FpGdMsiP5K1fklYNKxoTx1FPqTZoK:/ajEEvlZvABVMwMsio1V99i
TLSH
T10A74F116A28DD087DCD8A07665499933E18ACC7F41BED911BD00B95EA83DD9F03ACFD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9c48f27735ae265a4c241fa5ae5abdb

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\a9\a9c48f27735ae265a4c241fa5ae5abdb
Size 24KB
SHA256 d1ccfe9faae253ac762772bdeb2eef3c03db8dbe05a94cda0a65c6af691950be
MD5 9b6b61619f986851735402fe80429a6d
SHA1 e5852e0e450758e9e188244208c46d2bb46a453b
SHA512 24f1457a2637735fd127259e980272e1437cba3a27fe3ad1d124624cb7fd2f313f372fdb5e076e5dd999637a98e439140e10cfbb50cc9b097339130e2835c0cb
SSDEEP 768:CYoPKPje/IZWsTtwF1waNYTNqhxw1mBAD:CYoPKvcsTtw7YTYhaUBAD
TLSH
T1C5B2E18CE09DDFA9EEB053381FC5D31D6653E891ABF21997B26E4090D41862A93C8593
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0a10164abe47e7c60e19a2e863e025b

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\c0\c0a10164abe47e7c60e19a2e863e025b
Size 41KB
SHA256 2bfc760e13e5ee10988b31d36b2436dcc556f5a86809fa7fc07127ea50644889
MD5 97feaf140b00d77ef693efda7c786718
SHA1 779f8dcd7ae0f54f6de0778270cb79e139a2bc8d
SHA512 4ee26230f2596bf1bd9649414e7b40e20d74aa9f2eba2938a7b3792d3cca0189a64471e6247f17e0491d778b98d4b6072c1fcb4d491f989087c3dcbb1f60030f
SSDEEP 768:T5a5DWzd6+cMN+FTJ5m/9uUKkR9sMJtpNrHnSjuhK2mrHiGe6PmibOuYzjwtn5dl:la5DWzd6+cMoFTDm/9uUKkR/JtvrHnSn
TLSH
T13D13F778987E508AAEF2E9D25ED26FC3E429D741F9D0C5AE714CA329C7D0314E887316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d71945d7c15ce5a7b263505dbee7724d

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\d7\d71945d7c15ce5a7b263505dbee7724d
Size 32KB
SHA256 1eeb4c1dd6e6196acf70ed18b6d47be510704810711fb044a4489fccd468948d
MD5 23fa3121609767e9153f2d604887420a
SHA1 f4a3fd7f23155a2ede0528dc9c50507b9eea9edd
SHA512 ed56f711fc086f0b314948e56bf6056efd769b8124b219c57a5db6c03cf4cbf6a9f9f5e882a140ee52e90352bf5682a45cbb6713d09a18a880ef67eb95624dc0
SSDEEP 768:of/ur5BCAZu8F1d6goleiqgEc/AySzs9li:c8C6u8Fb6gW3qgiMli
TLSH
T192E2E1FC6F155066E902F7B21A37590AA2A77D249070408F1EDC5AF0C73DE277C586EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1014beb24eb60459167ffd30554b67c

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\f1\f1014beb24eb60459167ffd30554b67c
Size 8KB
SHA256 8cc788b4b879a3cb2f827a50c50f24c07cc198dbfdf54bc83eda90f1badf03d8
MD5 b07ad25f2cd2f2d673f76bd0e01093e2
SHA1 69f5207ae70d55488c50aa8191804160c77abb5a
SHA512 651df26a4618d34d77e98d9b3e27ecd60d8ef0748aa9161dc18df1e201a2814d2aeb1ca01ef45012ff18e88f757c3bc1af7770764a838c1271659554165a107a
SSDEEP 192:l4G60Wkl2oI06rPN13rsIGoPWMB35TpOQWZXe3g7ev9ZraXiFiN5m:lf601/B6rzrT+MB35AQWiyQ9oiYy
TLSH
T1AB02AF347C292121E48841779A9164CA1C3A0B75AA2F5CE338350BF371B73E57A186A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3c9a8887acbd0a88ba406e4f9178976

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\f3\f3c9a8887acbd0a88ba406e4f9178976
Size 22KB
SHA256 60776f34b8f18691ae38d4f6e67230106ab40dfcf8bd7102902ad710e3785b0a
MD5 bca82fab53b844ea0b23a713a4d8d521
SHA1 6371d88a74e77f9504c9bf1a0f43e97bc0a33e1c
SHA512 196e2569548d0382c8ab019b911ae4b48449a6816b5ac546793b491b2bc9c1c9ec46d597ef3000ea75b4207aaa0398d73a008c599b3b1dcdf71982d4a08e2943
SSDEEP 384:zX9VQZ0Fc0MwKbhuPYsPG1/qV4kLkykXvYJ30ba44lBNVIJ8XblSllM2YN:LCspK0PYsOxqV4rvYJ30u5jNapYN
TLSH
T195A2E18A016556C9C37633F46DFB431A2BFB7459706B8741FB27866C49CA23C38836A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f96cde5c20c7af50ce864cb46f19371b

Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\f9\f96cde5c20c7af50ce864cb46f19371b
Size 252KB
SHA256 e7f1daf45f5f5115f6769d895703ea3ed7d9b3f3bf87f2d46f4c5eb38c9d266e
MD5 05124b23fd4410bbeed0b6a24a96a9c6
SHA1 e400fe3236410dfdd4df2efa02285ff4738eaddf
SHA512 ab66b1f5310ac569a3240581ab68ba27382bc714a2e1816c21d6d426c547144df0d35ccc55e712da487f84c7e17f85db4c4bd7d161bd398d1702547529464850
SSDEEP 6144:ItFlCWGDzr0OY9MUkabtcj4MY8husfZfXpfB2MnLIia+9X6Fe7EY0:OS3h1C
TLSH
T1BD447C36D7B75B4EE836C17F44936612E9A1EE02D3AF3593B48B2607B01E0E80DE1576
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.ipc.json.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\.ipc.json.tmp
Size 128B
SHA256 8d425d903506c1df2600d0b20085c05473dbf40f1004d1feeb4fd6f5d4be1340
MD5 6f72b9ce1048b7d082efcc2fc52b0ef0
SHA1 d334b74513044dc5a8515eb08bb67a8137369f75
SHA512 c2e2722d07d812553109905ea1a3666d890c6aedb68cd39d8d5cbfc22b3f46c03f1891c1c9baaf1ebc6067c66e92594ce3deebb0be55e58f1e0e3198f96221dc
TLSH
T188B02BB991C08412443635040858440EDC5D62407E8701105EC0524C44784220BC3526
MD5 SHA1 SHA512 TLSH

Submit Download

.saiko-binaries.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\.saiko-binaries.json
Size 124B
SHA256 cab81de9b9aa4037c1843cbe6da041646718fefbb9aefafa185a90cc96597d3b
MD5 72df80e63123dfa432b68226195fb627
SHA1 bf91b6b8bb798ca8f996321bea88d07ad51096e0
SHA512 b90368a1f892c47b78bf9a528fe90652b50690fdf43e558d0fcf6202369423b9a49f1c41f45f06f21bb8479d8d78f12a9147792d0cd66a0b28d30e4778a5e00e
TLSH
T1C0B092F75F0B68AB4518B78299502C97965B05DB281FD1039126E18D93E482C46D99D4
MD5 SHA1 SHA512 TLSH

Submit Download

AppSettings.xml

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\AppSettings.xml
Size 149B
SHA256 893a58e7946728c9dd5caac10e5bdc306a465e406c1f979ded52a13dafebce2d
MD5 48f58abeaac832f838efd2beb25f4c90
SHA1 7878e28b62e5d9bc9042a3e44094e39668f03384
SHA512 c5e3025b63eead12a0f8192ea41afd1216dd87b14a07d22ebafc6d3d899a06e80da947b3fcd1b3f2cf53b89b3de9967f89c415394d66c277556373b620dc827e
TLSH
T117C09BA85361CC1697A5DE38977FFF50F3A17574447140989491347B0DC11C427D13E2
MD5 SHA1 SHA512 TLSH

Submit Download

UniversalApp.rbxm

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\ExtraContent\models\UniversalApp\UniversalApp.rbxm
Size 12.6MB
SHA256 7d213f92870eeb85b2bcc2e2ea79c85d8b157140b558ee573c8726a59e477aff
MD5 e9051f4df764d6d264e17243e35fb0bd
SHA1 bfb8b7e5fbdd1598e91afc0fd9f80da3a2df23c4
SHA512 9c61558265dc7323dfa3b17bfa82deb80e0cf4ff1428d11694654e95d067e464c048f271befd13cc8448203f57bdd31861b2b85c26d016aa5e24337274794d0c
SSDEEP 393216:nJDP5mzSNOfcQVe0vctkSjbyJ2SSX1EfvF:RPEwIkaSXRZX1El
TLSH
T1D3D6333E34903AF81E1686E9087FD8AD14A58FC103ED42347FB19695A05A7BC5E8EDC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mobile.rbxl

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\ExtraContent\places\Mobile.rbxl
Size 144KB
SHA256 4aeadcb64bda9db25ffc158d491aa5ac7a937755e7e1fc215d60d9998193ddfe
MD5 f7b9cba13b0bf94ca19f6d07c29f585e
SHA1 54041f3e1fef6e93bd3babc28a2fdb07141d4709
SHA512 025ad594f44cdc56bae08c93c06a5f56cbed9e947e1e47011292d0931979a5d9b1988238914e9e5239088c0abe971e55118ba58aaaa3d0730ed6be81115a06ce
SSDEEP 1536:rNglKZaI+a5JQncnQVGlnm8wH4CvJJG6VuBgrm78U9MAT6gPQZgzJ30asR:r/ZO0ln9lneTy6gB77VxT6gPQuuZR
TLSH
T1E4E34CF6F5348937C4997272B449499223315B8D92C5C32DF3DCB8B76C8E26F1BA8249
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Module.dll

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\Module.dll
Size 13.0MB
SHA256 af562dab8a2005390e556c4a98dc1f34abca07661d3981ce81f35656d77b110b
MD5 980e58fb205cdf39288b88ea675472fe
SHA1 82e04b47221ccb93151f021189f5b43181bd2605
SHA512 46da849b93f762a5ee7810e7cec11d9ff2a1446a8c3d4f74ce21a2ea5749d458b4508a23b96a437bdf64c32e40ba4468f3baec01c8daae89318a9e2619d3305a
SSDEEP 196608:c7LfaClwBXXy7E1Q9Y0cH9nsssitXrKr0KCPud1F06y+7x7U2:IaNVyYwY0cVlHjPee6fd
TLSH
T174D60247FB45860EC813DA7184635B60B366AC215B6653076114337CEEAB3D88DAFAFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansCJKjp-Regular.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\fonts\NotoSansCJKjp-Regular.otf
Size 15.7MB
SHA256 f18253affd968c8ea592d8df6d84b1d4c5d3a46d267e53a1f6749e6c4f76a23d
MD5 7ed4b9a7daaf1d1c71903a92059434fb
SHA1 03d1f98398da4ba4137aa177d419a2240ebe17fe
SHA512 993b2457eb9b9ffa3f023e9bfac77f97444df196047951dd22de0fa683b97eb5ff46fc01bb34697c9307794b0f9d8a24fbff531416bfd7d11597a8cfac891c61
SSDEEP 393216:WaxAaLuP4Khf/ypeQIesikPbvTuYbRvl8bJTimvAOopd/NtZCnpI4w1FT1IixLtv:WlaCP46f/ZQIykPbruYlvl8F//YhJCnM
TLSH
T145F6127E68FC6828CC57D1367646A53E66D90848854FE0FCE4D39FB23EE52240B6D6C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35659ed0421961bc16f9bd3955ac6b8e583db18147d4c97c4ad62dc9f9d48438.dict

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\shared_compression_dictionaries\35659ed0421961bc16f9bd3955ac6b8e583db18147d4c97c4ad62dc9f9d48438.dict
Size 1.4MB
SHA256 35659ed0421961bc16f9bd3955ac6b8e583db18147d4c97c4ad62dc9f9d48438
MD5 d8699abaeb73773b5c13ecab22ecc212
SHA1 d8a4005bb783de5fc20e71f49f2c9ef0f66bab0f
SHA512 b40dcb5355b3ac9378375326089f358acfe42f75817fa35cdc55c8cc58b3a666b5b830097733d9c6a8f966e2d43b580c96d36b62409f59532ffd9fd28dfb5bc7
SSDEEP 12288:j3PG5bjnTx573sb+G8jFNd51ehZADtwI4o9XjXYy:F8jFrehZ5IjXYy
TLSH
T106650961D6483EA282DE427E7557ED03376CDBDD42C448A7B781D58E3FA8181322EACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

indoor512_bk.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\indoor512_bk.tex
Size 170KB
SHA256 b22d568bd008b8132ac4a072abc596bfac12e2992c2a3d9987bddb6baa51cb08
MD5 ff8ed71e27291dab5a4b3afd7e00fe04
SHA1 3d0afcfbd795a06025525a064f7732b77f09ea28
SHA512 fb7286193081c0649e46f76a12c24a064e2e5823847515fb2f1bb9e7687806792dbd4d4baaa8c2392939fac53578170b4783d231815eb708b5b7ae85cf68ad84
SSDEEP 768:uPIW3cZjbfkBMPsKB1xXZ0xtvM1hG8axfPkGG8GGyPkV05MMMMMwh3NMr5IdjZNd:u73MZfv3imRbUJOOZqH
TLSH
T1FA04F1812826D259E5D8585C111F7E12FEE02F82BDF8D1B84D7BE716E073D8D9288C9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

indoor512_lf.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\indoor512_lf.tex
Size 170KB
SHA256 971142c2f6c1738604fb4453ecaeb87a98cf624caa3215b94ebe3a5b315e1c78
MD5 7165610b9401e8f857576c3998d8985c
SHA1 c94a7e4e1bc77a04b9e92b71efeb54256ec651b2
SHA512 6e13be2f85e620d6b6b4711178946ea4efd1460313eb3935ac2802785ba9fc7ca6dbf36e6cf04f01adb42d78afc2acf764eea9abf5356479724fe32a572f41e9
SSDEEP 768:6GWn657zX+5D07tXYxdiBavGIaw7gUx5JXii3Uul6:NPZnBw7gUHJii3Uu0
TLSH
T180047EC0153657A4E0E15C99649F3D22F9E41EC0EEFCE2590DABF72A60B3C5992858CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

indoor512_rt.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\indoor512_rt.tex
Size 170KB
SHA256 a97b3e18bc877d18c864716c55303b28a6c68d553d932016298ed31b1320b6d8
MD5 e56ae116b49b0805ed4b571dd1458589
SHA1 d8011e6723c9eea8a0ee01253838365e7a408b8f
SHA512 edacb0d32f56b517879e2471c135f9189ae300fa828cecaa39132146af879aba6d8079979e2817882dbf5dae8137d2f5a0bb471b71d0498dd9d051701d426261
SSDEEP 384:BTWq1W2iK4HoSKK5+OGvKDq2QnC6fkuwdochdyZbfX7k97KI/Ey38/k/E004KIXu:hWuw+fQXTCVm2
TLSH
T12804A0602D1ED795D1D958AE11EF6D01EAD80B81BEFCF1A40C3FD622D1B3D88A685C93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

indoor512_up.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\indoor512_up.tex
Size 170KB
SHA256 17f78d2d24e9a8715575c1b55996d8c5384a1ae9a1c028dccd5735e77fa15d5c
MD5 eaac23d0e0c512d10bb4933a534518d4
SHA1 86c5bcbeeb9510fcb2d983fbd547bf6cde3856d2
SHA512 5ce475b024439a9cb7896e4e1055468f6e01ab2b29cb26a8c853f79fa5106800c15e9542a1fa18e306f622c020a18889e85acc6a6e14aa07f6e12a152ef213d8
SSDEEP 3072:2mNbKbuvdP0+KMoPY6duRO5n40UD8jO0vUhGCBvlC5U:2mNbKbuvdP0+KMoPY6duRO5n40UD8jOX
TLSH
T1320458C0213626E4B0EA4E957C672435F8F96D80C6BCBB565E9BFA2F2033C55D18189F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_bk.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_bk.tex
Size 682KB
SHA256 eae298532fcc04ac380d78d7cf64a26d37984b8e8af56f34ae6c18cfb2439418
MD5 4ce299ee102e97588c9ce7aace046cab
SHA1 931f0e08bf641ecbab53b080f3ae9bbd8f620cce
SHA512 14e97b2c0449cda57280140ab7737c58d79de7f405d576672bad1ddc413a207cb3def3903ee62b7b4904cf4c6b7abf451863a87479cbeba0fbc873e51c5b883b
SSDEEP 6144:QZcAjXUwfXUQcaujBQ1OYoD/6N76c3uGN9hIFbqQ5xUcB:yct68auBQExDw6c3uG1Ij5ucB
TLSH
T11AE4098E767550CE3F3723DAAA15B4B2E306E21DB26335F61B2F5188367742DC9B1920
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_dn.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_dn.tex
Size 682KB
SHA256 97b98273a4261e4d36829a4aae4892837ca27c70bd22251bd7799c50516d605e
MD5 383fe0258cda26e908ea4a9bd2522b14
SHA1 18fc467f81197db8532e4784d72e9e32e122a810
SHA512 7ef6fdadb1e7e27468bf80ebe95059e6a2857f360d8dc1f4b0ca4a86fc5eb8c6156b6c38a1a17aa45f0d5fac3e247d838f27412c83f095f2c1052b0b54659f56
SSDEEP 3072:DS7zPPGKhNAXYIX/w1xMhryRBi1NjB7C6ZQUDPkWF0SU/r5eJiWwUeWd8qF:eGhYyRhryRBi1NjB7C6lk3Si5CCW6qF
TLSH
T15EE4EECCA27565C6851B57E0E920EDA1E30A726EF950306E177FE1AC743B82DDE26C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_ft.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_ft.tex
Size 682KB
SHA256 714c08b0dde8049a501eb81dc2f5e720ef785770970929934e58a575548f92d8
MD5 5a466b46a2e25c0f26c595ac6adcf9fb
SHA1 cb1ea78d4dd31f88e32946005f43115bf94b27a4
SHA512 20b7c9c164b089859490019338c2e9b73351f29cfd38db97063e12485ffb6d6eb79ffcbe6c64750886e755c5753f4e201e51d4ed07f358e5a9bdce484ccbebde
SSDEEP 6144:Sag6EnqqMMgKdVcoCSUR2R2LxfDx+Ofyz+vvBVftTmM:fgRnMMpV67R2R2Njfyz2
TLSH
T1C3E4A64EB67640CA5E3727E55A24B465D31AB32EF1B139FA167FA088347F43DC8B1812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_lf.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_lf.tex
Size 682KB
SHA256 46dd4ba796c65d23ca6b4cc4d8ae48f6535f2f888a3bcfbc581d5f767a3b747f
MD5 eeddf22de1228bc4ea67f1128cdfaad4
SHA1 676cdd7a49b8d5d18b20d1beb8a43555f3d96553
SHA512 a614c0d2bb4320c70fc96e4c02b79d60b16992475f60254d5d3cc55b5aa939e116cf3724422dc7129b426e031f3176469c7b4e482a3469050b480c7361d07a28
SSDEEP 6144:aHuGtOkr2lfrKunWhy+0tjYz9UOYuszCBdZNEMX/V+VbhbVPzNH:aO5kCEunaojHAszY1XN+Vbh9zNH
TLSH
T14CE40ACD7A7550C97B2323D6AE15B4B1E20BF26EB16234FA1B1FA0443277428D9F5D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sky512_rt.tex

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\PlatformContent\pc\textures\sky\sky512_rt.tex
Size 682KB
SHA256 8719aac7d496b20e4198b5407b64c5571e3f241309edc9480a41806efb046560
MD5 1991a94396b8f0ed2b28805cfc17d2e8
SHA1 4c2b313b4c542bc4e007c7f47c3d3ece6dc3f6e9
SHA512 ca13c926f238351acb5a8209c1596f917c0fe91dd91f8012a34950d0d99bbaac57de6a40c8c05522da8c74b0f3dbd0b492f09b87a142badb5b15b1c21a44f678
SSDEEP 6144:tlKydRE1sZ/pRzQNakQaMaOgIqUXb5b0hJjpr0JCxpsaTC5t:tQydRosZ/TzQqgZUXd0hJjpr5xpfTkt
TLSH
T196E4550EE23790CA9E6B17E55A246861E30EF22DB1B135FF1BAB509974BF03DD8B5011
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxCrashHandler.exe

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxCrashHandler.exe
Size 13.1MB
SHA256 ae96e0505e1b61b7a51cae44aee24df6f41d4a6af17defe9e06dae135d23ea33
MD5 1a3dce1c7d8f0aaac1e46a4aab318bf2
SHA1 c5f8eda22cee479d500d7366d0e664c1b77722f7
SHA512 38087fff77ff87c907456cea72e27fc329b7da6deb1e922233e731201a99e250424db6a51c949779cc816286674cdf4f95f21c1c2550631dfef9b3ef1affdf58
SSDEEP 98304:n/J6JioBDtBJDGX9pMu9zJ6wZLHXTG78AOYBi80F6vPFHa+7+FdqbgILaezh:x6UoBDtBJwZLHXTC8ANBi8I6v96IMq3
TLSH
T1ACD6AE6AA2BC00E9D4BBD178C6569617E7B17815037067DF16A04ABA2F23FE05F3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxPlayerBeta.dll

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.dll
Size 3.9MB
SHA256 8195ff1c541f5fdf7aa321b8518c4e475b5ef9cf503af0b25c925bfb6102ca31
MD5 2690933c050fd865d4fc06f5b5c7874e
SHA1 5b7c23d93c22a06b139784f7015172529d6f5fb2
SHA512 e48766308df7d0466adb8e3bda3686935f153da486f91e6ec69b18527a902a2af29c4fd299a68b9dbc9668f8c4047b97207f1f91feb8db0a326de5e5809028d9
SSDEEP 98304:EUevny2mWa048LMl9M6aIVhuMlaQjDyKvOPDR1PmYGDt8Y:YQyMPM6PVhumPybd1OYc
TLSH
T16B16121BE7154D56C41B9373D0630B963391AF0A0360FBC73603AAA56F123D9DCB6AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3631dc5a-cf71-4d89-b100-542605c09943.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\3631dc5a-cf71-4d89-b100-542605c09943.tmp
Size 3KB
SHA256 6f38a8e8759d3dd059dcf4a62a92c444777a869091c0d495271ca912d1333fb5
MD5 e5329bbb5e1497858ef65576af6ecd62
SHA1 7a951e0efb5b76d0dfdb0f54a8888d9869682842
SHA512 80dc0df50ac4228ad2ef51c916c8c6a7afbdca0dc550d389b8750110f2feebb8025c9d881c1beff1a2d695e7b8e0adeaa630cdd9f97cb16e1feb3d2df6831d41
TLSH
T18271C4326864AA371DF6DA41B9812B02FA755027E9843FA8CAED0F1C01D73DC2316C33
MD5 SHA1 SHA512 TLSH

Submit Download

87cd6591-99e2-4ba2-8034-ea59fe65fd37.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\87cd6591-99e2-4ba2-8034-ea59fe65fd37.tmp
Size 2KB
SHA256 aa4e90b0ebb935b19df0fa313c31980ddc16a2292c95a7cdcc3fdac8f7633133
MD5 2fb8f54ff4f6b04bc469e4ac94b08b0d
SHA1 b8d125ff5e9cda2238c3d2823fa31bcd22b7ae99
SHA512 95e6572ff5c13cb524bfa99ce077d055934dec0a23d90cd73cceb4ce3220c5d1629a45f8f8cd61cc2543567425a2070b4acb1e808a91cfe6479fdae413eac57e
TLSH
T1F751D77278146B375DF6CA85BA063F13DE3550569A553FA096DD0B2C00DB69C231BC37
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 11dba82545183fc8e2e81b597da57a705e7c5b185e42532d45b29694e1a4717a
MD5 77490750cdf2b81daf7c7753afa3c0e9
SHA1 51bf92e8f478d604e0ef5fbac4dcf3e43f737d90
SHA512 fbdef26a2344cbab1ac37f0360db2fe17339af5ded09d104a57a870530cafc45d7c6b281c4dfec51cc5f152205b50f1344613fc9dde0e7c51cc09b5bd3a2105d
TLSH
T1F5D0127377528934C41430330083E1481800D10B400540426828955E1A844640943546
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 ea844bfeeacf63b2e06a81cff53ff6c4f04b47667331d5df0b916ef132f59668
MD5 0c5755ef0e68c3c8fae4f4bac51c7ad5
SHA1 4b15b2eee03b37dad0bcb8bfafa31529dcce98b7
SHA512 3df53a74fd8937c50ba2f442b1f1de4964eb1a7024c5dc0c0bde9806ae58161569a2f9777d2a001b8345a22be9ebf0d3b623350f22084043c0a736acd0c983f3
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Default\Extension Rules\000003.log
Size 38B
SHA256 1c43a1bda1e458863c46dfae7fb43bfb3e27802169f37320399b1dd799a819ac
MD5 51a2cbb807f5085530dec18e45cb8569
SHA1 7ad88cd3de5844c7fc269c4500228a630016ab5b
SHA512 b643a8fa75eda90c89ab98f79d4d022bb81f1f62f50ed4e5440f487f22d1163671ec3ae73c4742c11830214173ff2935c785018318f4a4cad413ae4eeef985df
MD5 SHA1 SHA512

Submit Download

History

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Default\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\Local State
Size 1KB
SHA256 03ea54a386a68a0aec9365eed69112a073738793a7104577c22eac0e890ce209
MD5 ea63baecee9744aabe86ae91210cd719
SHA1 b5601d662dcbb0967ecd61d7515d420ce23d9ab8
SHA512 c401568b33458581fb06c75879d8844022a1b26e874e4facad1764ce159e620b42d25b854b1c33c8bd8d3f8ee8626b458f72f1086062be89b4cfc27dcf5d7ee8
TLSH
T1F82192B2D8942A7678658992B202EB879D20006A5204AF18C2DE463801D79DC573FC33
MD5 SHA1 SHA512 TLSH

Submit Download

bb24e5ec-bde7-48ff-9db2-8616a96515a0.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\bb24e5ec-bde7-48ff-9db2-8616a96515a0.tmp
Size 1KB
SHA256 77cff40a8b3d013f0b5b32501f37766325751c9e18541030baf53d5ca18c19d3
MD5 98da527a1f2b3dbb57e6fb5b67f2fd09
SHA1 1ac4d257e724de77e2faf40f082c5b0445a935de
SHA512 d3788da710144cb33943e0ee9a1fab81585327beb3f7a020e6067b8e1c973f0b88e69937b33e1a2b810cc4202fc42dd724167fb8b0ea286c14a4c4c0e8d29860
TLSH
T1FB31A7B2A4A02F727C65D6C6B201AF939D31106A8114BF5892DE4B3801E25CC673FC33
MD5 SHA1 SHA512 TLSH

Submit Download

c5df2903-6f1a-464f-8dfd-c6368ad7a98a.tmp

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\RobloxPlayerBeta.exe.WebView2\EBWebView\c5df2903-6f1a-464f-8dfd-c6368ad7a98a.tmp
Size 3KB
SHA256 b9ed8f97a46ab59dda54ef1e84e7ff489785044fbd47f5a7db47407e7f17cdec
MD5 bdab69217d0302642a78e0a6a8be151e
SHA1 03124437e84aad2d01ef8ad410a89b727f51bd32
SHA512 d087efd78a4e88a344aea384307b55cb0eb6a26276b8da1fa50139392acf3db1f5ea973a2c5ec206503561425b0c7117113cd258734b20656a06e888ff46c919
TLSH
T1C781C422A864AA375CF6DA45F9462B07AA75402795943FA8CAEC0F1C01DB2DD1346C27
MD5 SHA1 SHA512 TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\WebView2Loader.dll
Size 162KB
SHA256 a8a6cd8d6df1f913671bcd96b6298b6f53fd066a84ae891e4d865bc1b8e8e9e4
MD5 e2f9d2ef3446e70b50de50f577c6939e
SHA1 48e7721704249cebd1267280459b7b36ce99e177
SHA512 f5d7790bb2eacc78405a91a65adc0f30a248542de22ed10cfe91bc87e4f953a93d738281c13480a070681e7169fca6ec49e20c5fb7b89d76f3a9bad912c6d87d
SSDEEP 3072:erQJpSFTlTRTzWGbThTNTFSkD0bHYVNqGM2h9P58LZZ5Aalq/Tv+EtJfy2aQutH:gMMTlTRTzWiThTNTFSzjiBM2h9P5oZNr
TLSH
T190F35B4772E5407BE16A8274C9A34A11E77774510B60ABEF03A4477A1F23BD4EE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gamecontrollerdb_new.txt

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\configs\GameControllerConfigs\gamecontrollerdb_new.txt
Size 580KB
SHA256 a6fa5944bb8808724b574e513bc63594c08fccbdf090fb8efab9fe26cbb43f05
MD5 53edf0b12265fe567db8208d9ce596c1
SHA1 fbbc12799e3d6068970b302f67ec976fdb11e7bb
SHA512 9c51be1048e627052d2355a71ac19b77cb3804fc6b77798991b1e31153255d021d6ab5d4d51115d61186f122052516572eeed405ec68f5b826b6c4819da27d45
SSDEEP 1536:iiB3ubi9z5AjjE/FveTYOrOx8deRx1o5sTPhudsCfdevQ3jtcgw2dPy91ejZDrbf:KYytE8K3LcW0
TLSH
T180C43C282BB64A0FCF1F4973D6CFF961587BB08C39EB556C7E9409E46D25F618084E28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UniversalAppPatchConfig.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\configs\UniversalAppPatchConfig\UniversalAppPatchConfig.json
Size 253B
SHA256 e98c750b489db508b45271719cb9cfff5a9493e3466a088deb7754af062fdecf
MD5 679a907d0617606bf10c251145da77cc
SHA1 00ad57375a41ced55dcd7ed249a1a6169e871ce6
SHA512 c050ef18e877b430b44df559c42a94837b3c5735b798811299f3573d0fba2b61b50ad8b8a969b8a17e76f1642b139f96b7da1db5b544767a8894f52aa70bcbd8
TLSH
T1D1D02E807920C8E3A08A1B1C20AA2100132C03BE2300CA0CA0C3B820D42EA7D2B32EA9
MD5 SHA1 SHA512 TLSH

Submit Download

Arimo-Bold.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\Arimo-Bold.ttf
Size 310KB
SHA256 ad88e47fa64708183695e3039a3a2d7699f212b6a1ba5f6cd6a5eb37ca71bea5
MD5 a0ffdc02427eba7e57df5d5c32836515
SHA1 55cd1f277429c65e26433da5d122044142f76d58
SHA512 31276de0322bd332f7ec24037d648b4007645ff1caea58aebdd9fa842f6f1341f13b287cef961495832a4004a0824df4ba7135d6f7484b3b3c92fb51cb8adf82
SSDEEP 6144:jEtjQVR5YvZImRrnZIKGNvrWK+hXygTgAA:/V/stJnGFx+hi2A
TLSH
T129647C03D767DF5DD3912CB8C71AC3D2BB95EC62DD69930FB84A6822D4CB4A08D905E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Arimo-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\Arimo-Regular.ttf
Size 310KB
SHA256 f770502d7caad307e5b2131d4d763e22ed506ae4eb93775e29667bd0f8d3af1f
MD5 d9cc167ee50270d831c5f35ea5018f14
SHA1 c7d2ac919d1331a6340279e18d15f5de4c8f3df6
SHA512 9e1fb900765d58e44998af139f4f854bcf5888ece5a264856ebbf7a50cdded9e37fb9ede2226f9557dc04e1d564f2e3016f82fffc88e154a34279daf518851a3
SSDEEP 6144:APwrDTqTUbweajsa86FvjN09xlxoM2FPtMmbETOIpK:A1TUbgjRdjm9L2nNtMmbETO/
TLSH
T19A648C03C367DF1DD6956CBAC7168392B3A9FC7ADD2D530BE40A6821C88F0A49DE15E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BuilderSans-Bold.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\BuilderSans-Bold.otf
Size 76KB
SHA256 30a9f5a26fd341c2b4a8ee1418b3061445c7c6ce8b4b2565b04480c1b1328af4
MD5 77a419dff724a557cab2753cf0f0cf08
SHA1 0e24d25d6750ea77b7733cb5a052147c24e1b27c
SHA512 e9ab9182ad9281ad20ac352d6d46de900a91ff5f6f22eadb00e12ac470f917f97c3878353d0921b33ff2d7b8607d60b4d37be21a5907091b2e9cc6b2067ba6ee
SSDEEP 768:3MFYeUNcXFDFbM77leB8Sjb3K/vqol1ihlU8h6F/nLTLc8z6FuC4srmCEG1pLUZ2:3KDFbM77vSH3jouh+yiPYZECE7ZwGc
TLSH
T128736C19B715E709DAD14E39FE71C3342332BDB9BF1E821B75C4A38E2D5A081CA11B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BuilderSans-ExtraBold.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\BuilderSans-ExtraBold.otf
Size 75KB
SHA256 0837070a1713fc7647e74ec51b80ab9d4bce6af5448117c5711bc8a139f3adf0
MD5 b7d31dfc704f1cfda12126daf9ef52e2
SHA1 7c0a764d5828d8b518157323a19c8e39d32f15ea
SHA512 c5d9c1da8705ed9abdb141f436bfa144574fa1873052f7aa5f2c977f8eb3ee8dc4c76f0517ccbf8d279a893f0802f5dd70cfdcc515a5d335958203bd909b76ad
SSDEEP 1536:pDFbM778UR/76rpTctBWSD+/YlTsSWBgc:Hb07T/erpTctBigF/s
TLSH
T1BF735CA57B61A318EAD14F34FF61C3703376BD69BF2F8207B184294D299A181CA117DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BuilderSans-Medium.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\BuilderSans-Medium.otf
Size 76KB
SHA256 9f2d5253ab8ecefddfdebaef4c578eb3d1a2985589615604982d84fcabf6221d
MD5 e54102f0231b5c8eb6b43c6b11bd874a
SHA1 4fa83c457866175f58ce41b27c37b3afe43f2423
SHA512 e946bcb649568677533f1240a3d8c31e81f68636c762aa9c837080fbbc165d8c6bf1f0ef1f0ce672498b6b138c4d6efb649cc0ba865623e8dc483b3c3dfb6a73
SSDEEP 1536:9DFbM77XARZg6dwUnfhykkz6W7TvV0nILCO8kc:bb07XARiofhgz6Az9LCOK
TLSH
T1A7737D09B665A708DB838E39BEB2C3302336B9BEFF1F8117764469596C890915F213D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BuilderSans-Regular.otf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\BuilderSans-Regular.otf
Size 75KB
SHA256 40a248a2229bdd7f0c8f924ef8c94356437d903ac58cf69a06217b9382e88af4
MD5 3bad043047220d1c3b2b10e8b65eae9c
SHA1 6562136d8165b67ec0f115f70fb9c89595f19915
SHA512 f4b0f0eafc9a268b200602247341bfa306a9f24d5305a290343d5cae14d8b868ff2ccaf1a5b2577e66da1952d73b6662440d8ed2f7e9d51836ad9297249f47ec
SSDEEP 1536:RDFbM77DVCYso6MiOT9STthp3B1Yic+gw8Wc:fb07DPXAZ1dgwi
TLSH
T100737C1873A5E70DCFD60E34EEB1C3303326B8ADEF1E4217B390665D6C894959A293D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoNaskhArabicUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoNaskhArabicUI-Regular.ttf
Size 274KB
SHA256 506409fd55a521fa145921772e946bafcef0e2582e54fd1517540798277d3b24
MD5 1f76d8d6960d002d6bf62ab89b64b40f
SHA1 9e052c6d098b4df3ef6b79f55ec206677d50bfc4
SHA512 1d35847c789dd0c0326b43404ffd812f49dc09f63bad7443f9e04d48b1675ceb573839d5ee1a43704cc3c047c7d7e0019bf4aa559bfaec83371d9fb9a43ed235
SSDEEP 3072:Jhjdk4nZJEI170IUFiEGNZCm9nnJNkIG+bSMJIi+qzrdT8WbXgqiSxz5c:JhhkIZR67y9nJ++bSMJIi+8rd7bX/lzc
TLSH
T1CA545B03F717C64ADE455C78A7912B82339DFC7B6BABA24BE8473B29ACD758011075C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansBengaliUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansBengaliUI-Regular.ttf
Size 186KB
SHA256 c074bbc92c33267768ed397ad4419778853fd0e806e907f3359719c8d53a8297
MD5 8940e5b149489458023b0992dfe347c7
SHA1 acce50f3a9634d3fe2bc33dac7fc72c590a0babf
SHA512 70379eba5dac39accf6fc09fd49af7c278918798176c7abadf1816a7bd7d7492432ba3e0e9d99aa9e0755741677f703e2e10e17af635cc56653d21271b727788
SSDEEP 3072:PVDtqJ0ngIPwcJavGmSPcwKhwC22W6C/ta2nwOSRazWrH8k1H9m3fqtmY8vRu/wZ:6GngIPw9emGcVwC2R/ta2nwOEazWrH8J
TLSH
T12D145D4AFB6B8A59EB1B2FA922569351B1E1F0331F6F0FCF424527B6B8C94D04942385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansDevanagariUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansDevanagariUI-Regular.ttf
Size 195KB
SHA256 5ddc66056fbc894bf66b191a02135b906eadf7871c60100575ad329362948667
MD5 4bd531977940a9ff13b28d42cd111db9
SHA1 da5e0c6806b2f01fc850e00ef8e4e971603ae697
SHA512 bca17cb465c1040ab7b529fa3272160bb1dd95ccd29cd6c8bb14b229760f32ff84ff34c7176d7f10081c4aec38eeafc0f1e1283df935f9699a98ae696240a86d
SSDEEP 6144:GpwcXIV1KQq90u23X+5Ad8ECYpnCHkMu3qNH/wY8xwIhjpilukrtupH:t+5Ad8UCHkMTR//8xwIhjpQuuY
TLSH
T10D145A12F397DE06F6175B7C81E39391A39AF861372B878F41443AAF9CC51C01D86B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansGeorgian-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansGeorgian-Regular.ttf
Size 40KB
SHA256 ad4a9552816a72905311ed88255e9afdf564f3ceff6894dddd3257b5c3fdd8d8
MD5 fdd15a9ba438b8ff71433b8b7c0d1831
SHA1 d242a1f9b22b9a7a3191137be059d82ab3dff3cd
SHA512 95fa08be485e8ed19a138b4204bde4255d3af0fad930989ec231f186ee987fe4dd3b6e90f99a0fba5184d2a5c10cfe7f42c3fcccada2ae6471107e858f0dd56e
SSDEEP 768:cvNUjsHsHo8eqlCFdH5rYbSTtKqlBU021kj1y7nZhvS38YU3Qrk:cvKex8eX5rSSTtKqlHtwDZJ5YU3r
TLSH
T13D131807E267A24AD5172D7800F68A36C769FC71BEFA43DA515912F9F1AB1824C933C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansKhmerUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansKhmerUI-Regular.ttf
Size 73KB
SHA256 c100af4b836aa81707a56d6012ba9083c6a21d562178cf5e1bd8855056258285
MD5 1b477089a1b730f39510f59f18612ae6
SHA1 71af7312d37853dc68e4fda07849a352d3634376
SHA512 3704ce6c9e5406546da2dc91ab36d0675268baa51e9e33b8ae70319ce5f584f1891d3faf6b4fef3cdcdac2bc515cac4579d2f851347aa2d48d47770dee178f90
SSDEEP 1536:dbxJbTqQdY1FazC9o+2lFzL1L1Bkcusji+6:dbxJbukYO7+GzrBkcn6
TLSH
T11D734C13F391DA51EE2B1B35486A23569272F4A07B27B74B010937669CBF0E94B473CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansMyanmarUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansMyanmarUI-Regular.ttf
Size 186KB
SHA256 aa4cebf5ba28ffa3a3bb38e3d45b472fad42df754bba600c7f87168fca2f7e52
MD5 2097d437b372c3463775d4d51ebbe058
SHA1 46a28b576e852429d2b6cb417259ea8b7157dff3
SHA512 2afb1cbd226e24356329724f34254f5d6128b51113fda1c174c917ca641e262b58d1018d4d981545e34b8392756c0dd0ea4ee519bd4683f23dad4c7ba7511c1e
SSDEEP 3072:T/19Y4K6/vyb+AEqAWbgVdwbwucwACAeACwh2yonvUayIA3ATAkAGAEAY6qhDQ5Z:T/nYz6/KbuqxbAe0/wVTd7nvAIw8fJPq
TLSH
T197143913E3438B0AE6372F7981A61BA643EDF5362B17478E59403275ED8B4E1BCC26C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansSinhalaUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansSinhalaUI-Regular.ttf
Size 302KB
SHA256 6ae00f6f97ef3feee343941ed76161b351743e3beb9f60cf8c81615b0a799827
MD5 3832a972a8b64eeea6db1538024d701b
SHA1 aae4c53b5e91c0020f82d38e9d7ea8b99e825b6d
SHA512 cc01aa631cf0a11beb8a2e00ed6a799bb32183e8121b9d1c20d2f1525b14b764b3f02b73a1cac0ef61dc337291b52669fa048e282f8c4a480698a15aa3a380f6
SSDEEP 6144:LW85Xivpq7i+yfma0mOqSW77McG7DjE5SAPdMz2BHlfBMPgMaC2ejabqCBePQ6Zn:yYXqpqe+oH0mO07ocGSSAGz8lfyg51et
TLSH
T160648D43F1B39E4EFF1726B95271D373C2C4F0324B376A9ADA6A27B2C4DD0609995281
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansThaiUI-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\NotoSansThaiUI-Regular.ttf
Size 38KB
SHA256 1e1c3c723eb35a3a8fc69749ec75073343cf731c9a6e8ce201343a1e1dfaff46
MD5 e411cbc8e9adf554a063d5a9af0a1106
SHA1 159173045fb37178d4e93c3f26938d736c67fabf
SHA512 512e7774277885f917a1f7cf52e5d7ccbd8dae2d6b56434349c8de2d4b923d9289aaa06ff83a660979639dbfd18ae9c7651b9526ac285fc6151f0db7eb2dd770
SSDEEP 768:OqyGDuAabaOR7YYWKOS+V+3Vz1fTOG31JmsMgv90rw:OqRHiZRUVKEV+3VzNlAY9/
TLSH
T1A7033A43B3D6D28DEF765E382A7D4346936AF4328F268759C18823AEDC5B0940D5A3C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RobloxEmoji.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\RobloxEmoji.ttf
Size 1KB
SHA256 f4f680cfe35df739854a37bf2ee79cc76934feb55bbd796eeae8ad61d02056f3
MD5 0c41b5d675b466505538499b5c5ae6c3
SHA1 73d4f4147aa7adefe9fa581a45a3c42af9ec862f
SHA512 0117d4a00bf2a382abd86c5edeeb8eaf067988046fc709fab33b123505da2beaafd648a87631c4242253309b7f2764872361c5018a92d3497949a749e64cf99d
TLSH
T134313116DF3DEE84E9450334A8EA9744E370ED116752E38B8466A30F6C621C6CE6176F
MD5 SHA1 SHA512 TLSH

Submit Download

SourceSansPro-Bold.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-Bold.ttf
Size 261KB
SHA256 9cbab47276fc04c65ac78098e9a2069c55e26f21701b29092734ce4e830f80fb
MD5 8669b8706bbbdd1482e2fccc4ed96850
SHA1 11238b0fab1c3d884aec3c8d8e04dfc4ce74ff91
SHA512 e72da072747f7c9880196757f624036e581d8760ccbffcf27716e8a11d2da11dd703d9e999fd74697627fc99b191c805f9b7feb891ecab467d565f7900a33cbc
SSDEEP 3072:GerYf82fMN6LSbLmEQgdM3x6Fu/93PRORHt/ooyZQHrM7DjJmhcV:GiYfuN6LPvqhF66RHt/ookQLwYhcV
TLSH
T13E441A8BFBFB460BEB861DF08ED2C3B95630F857BF70A10A7951AA91C99F25105039C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceSansPro-It.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-It.ttf
Size 92KB
SHA256 1b78bc1c8104348e13fcc043331926f818ce290556350b1a90a735fe038c73d4
MD5 3d7cb86547ce5075625915f2e86d0687
SHA1 e2c802b01d5437f3901773b2183c461efa49eaa4
SHA512 d2ff0d2bfe01d3a1dddf6c04f2cd3aa6b65c77eb7b0e9774aed3cd4b7096ed4ffff45e4373850348c0321d27361b2a95b63151f48d9e96baf29afa751302b3fc
SSDEEP 1536:RknOCowsSiyOKF6aUCPCJvil+MvEqELElU+HB6:RknIwsS5nF6aU2GilvMSHI
TLSH
T176930943BBFB9957EF265EF8CDE1C3A54375F802FF74A50E9851AA91C89F2010807A94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceSansPro-Light.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-Light.ttf
Size 262KB
SHA256 3eb3ad852d98c139c78064804524d0d2472b3efb872dc176b217fb57ae6a6f78
MD5 81cd217e4a8160a930c6d5fb8d1e8e82
SHA1 6150358395ba0c580e04841a7a4635ba014dbbc1
SHA512 4c2abde3813a9ccd332cb84a4a91f7e1854b9efa641b60facf19b3fb21f08d67b8d32ec1f7aeb3ac704238e754477fbd9a135a46357e96a001954dcd89f7b044
SSDEEP 3072:4gie4yh11CJ6ManpFSU/EyQfpBDPRORxt/oo6rGpxJvE53hcV:r4yowF1/EyKp2Rxt/oo66pxu53hcV
TLSH
T169441A8BFBFB5A0BF7562DF08ED2C3A95770F802BF70650B7852A6A0C99B25405039D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceSansPro-Regular.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-Regular.ttf
Size 262KB
SHA256 c9868de61ff2bab0b5a3a6d01c4b76f299459f08c6ae2f2c0383b4f9f6bedbf3
MD5 c1678b46f7dd3f50ceac94ed4e0ad01a
SHA1 fa4e303960cd8bf37a2171c4bc6186684f2d4178
SHA512 1b3ee35f20fd8245f9178a34a7c7754e30eac6f863ebf686116f87f41eabf39465fa09f576a5df2369808a3c3cc0a8ecd2da9cf01a29e67db9123c5cd2be61b8
SSDEEP 6144:Q7ojGvahXMjAtl3sRTt/ooor+iErBnhcV:QcltyACPnhq
TLSH
T1E2440787FBFB460BE7865DF48ED1C3A96671BC43FF70650A7852AAA1C8DB24144039D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SourceSansPro-Semibold.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\SourceSansPro-Semibold.ttf
Size 261KB
SHA256 3ba5c382a7ee6a8831bdf90192addceabe6db4278a679e67fe7e9c0226b729cf
MD5 83476a890be79f84e97b792c9c40d743
SHA1 9e10e37c75e13f896382fb5ff0475edc454f4589
SHA512 fcf87cfefa1e700d47d59b05f9d427811a2104e0cf03ceecb7b0b52164540551725ca042dbfbfb65225c0792cef5ed5af76c6eb7af67fab4ef6cadd939a2c682
SSDEEP 6144:LptH9GTD/sNctyXZK9R0t/oo0/5fi+RpohcV:FtdGTttyXZK9LVpohq
TLSH
T1F0441A47FBFB860FE7862DF4CED1C3A96671BC47BF70A00A7851A6A1C99B25109139C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TwemojiMozilla.ttf

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\TwemojiMozilla.ttf
Size 1.3MB
SHA256 860b69e096e5805015cf5b5d64e4ece06c5b987dc05da1f97835c79d9cc79b10
MD5 84f66d1842d3187d6803242430d4f9f3
SHA1 4bf59e07298f03d90bbcd6257c9810c2c4d7b72e
SHA512 5524850540279ae84139e973dfb2e5e64f50a20e146ee16a735c2d43e36cae2f36bd96e8ed807362bf47f8b237c866e215f6b33ede35df1b1914714ec746fc3b
SSDEEP 24576:oUxU2vjzy6D6ZUrj+ti8C0eT/0TTXvBkrIvRKsUgWFg:+SHrEJsTvIAgWFg
TLSH
T1A5556C3FAB04C6EAF4961AF5C8B40E26B0D18D8517021287FB4DF8BF9C9D3989C57652
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Arimo.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\families\Arimo.json
Size 965B
SHA256 93ba9eb9d330aecdf71369695696abafc3d25175ce4b37bfc19c164232bc2ef3
MD5 f91f223dc91cd6f7b6e7a1fc60b581b6
SHA1 5a6d020d0ffb5b662b7d5ba5c82454ca1f7cf4d1
SHA512 76396b70f667ebe76da24f96043f02843dd22917b64df1c791bf191c61284e22bc8f76fa269b0d35de70b02a7cb750ac474fb64cbd71d94c87de3f34806f1cb5
TLSH
T12711065F968CB1D70E84088A613D65C4412C023BDA98C8E6FDBD8D3EB1D9972A136EF4
MD5 SHA1 SHA512 TLSH

Submit Download

BuilderSans.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\families\BuilderSans.json
Size 885B
SHA256 875a02d39749399fc7120268a8d0ff68c3610998febddab52e0baab20dce2916
MD5 72ba6456c723100d3c9735f4654f0d48
SHA1 2069a9daaafe3a4d1ed86364bf10dda27edf107d
SHA512 04622582a1fb397b0787a7b484e208abf62daa792d851bad0cbd6aa665d44f120255dfa6209a65cfee91e91e5c2761a7f861782b884c423e8d5094cd2b0240be
TLSH
T13311C89B9A8CA2C25BC4098F413C29D1122D027793C8C8D7F9395D3DB2E88356077EB4
MD5 SHA1 SHA512 TLSH

Submit Download

SourceSansPro.json

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\fonts\families\SourceSansPro.json
Size 1KB
SHA256 c09f02584dcfb24cc9eba138638789f7b44460c3e71455e29140439813336402
MD5 c1bc6a36c492967c5457a783280e55ea
SHA1 b0147fb9166d78ec8da07058191c508275299971
SHA512 59b3c72e37f7df31491df237349e76c3bed6c0c14ed8589a0259b98242d3c1e502c672f85425a5bb4af2410ada12a34fe818ae5abcee5ae2b8be0edd02eb02e2
TLSH
T148310B6FD54C61C74E90088E213C29C0516C13379AD8C8DEFE784C3AB1E88756177EB8
MD5 SHA1 SHA512 TLSH

Submit Download

moon.jpg

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\sky\moon.jpg
Size 7KB
SHA256 eb0ca1b1693fc7751882c1effb5905f413dfb89d3e5af31053baaf425774f121
MD5 10ece876a6e237350af036debdddebab
SHA1 7c1b65d966b095ab0543600a467a1368cd2aaa28
SHA512 541e219c2731c71c9bedd7aa242121fa3e396cfa3f9e1db8b23181f6b27af361c0cea397061eec77f27b5edf39110d829011eccfcd44124c7fd043b7afb2f005
SSDEEP 192:/HvbDZXeS85KOZfokkHl+ajx10aY4nConcBFz:/DDbzWfokkFxYZFz
TLSH
T148E17D5A7BB15D25F3C62A3C0A67DBD6F3124D08BEB71EEE2558724934F1382C489724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sun.jpg

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\sky\sun.jpg
Size 6KB
SHA256 48dcaa485aef95aac03ae3cd94dcd02912389bce9b796c2544c67866d6457a9b
MD5 3acab22ca5aa5c85ca0f31d6fa553dc3
SHA1 6c8936364420af59f49fe5858e4a891a4bc980f7
SHA512 11593d16e87d25658b6df8a7de18cb075ecbc06feff4099da6f121b15a0890554d320f2d912230f8f512ee74d9b83d571ea90b163b0b6379ecd5863ae027b7f3
SSDEEP 96:ltN26MT0D5MdtbZPAVwzVBUEU4RsZ1ylRWgjrzMn6T1e:OYNMtKw/Ul4Xlun6Be
TLSH
T1D9D18EB6FF56C353CD72D67815FB2B94B3E2722AF360230A2034573A41501C0AE4E245
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ArrowCursor.png

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\content\textures\ArrowCursor.png
Size 191B
SHA256 39cac3be1bb0aafec1535f2b93b2da9a6f0d1daea34fac44b15f62a1d9be9483
MD5 2aed92d5373ccd4c1774ea7ffa432a2d
SHA1 bed893090b757351207eacc7a24fa0dc3c72a6ed
SHA512 9e1db75ce7f60d9d034d68ebd62e2838db158e659b16baa1d7d0003af20ae760f2b5cfbf9d6ac20d87e11e567d50bed94da3aed7eefaedbbc8abff1eb27a79f7
TLSH
T187C022CD624028B34AA81E2B822480002E03062C6A0304C3706088A86832814D284A81
MD5 SHA1 SHA512 TLSH

Submit Download

shaders_d3d11.pack

Path C:\Users\Admin\AppData\Local\Saiko\Roblox\shaders\shaders_d3d11.pack
Size 22.2MB
SHA256 538589e7bb4f6602b04ac716ba0434e01f522e6a44fdd096db92c5288a647e16
MD5 76f8742c637e9ca9cdff30fdca2d4db1
SHA1 f72020781589dc514aed85a88eba2647b6a25afe
SHA512 6d092a29adf47d4b07305470d15ca351176757f58b36d23aaafdb5069f8878e09efe541c4bec9e3daa26748bfb431427b139531f236b7a4327b6ac4cd0fbe58e
SSDEEP 24576:mXLGKVSPlEaBMre2Z7hzGm2xhoND6yUT0wbsEND:m/
TLSH
T16437890B6790AA76CAAD537BCCD72B307335A4601DE30BC30B9C62156CA63596D731FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

executor.d.luau

Path C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\executor.d.luau
Size 4KB
SHA256 6eeee1d862b5d4eb5f15c421cffc50cb854e3eac6378ab1e4ebe4f1425533db0
MD5 8d1ac5ae81cca9f7a735f3331a28bd9a
SHA1 9f2c215aba22e5e4e6c808e4d142c4c9206e1467
SHA512 5f1da6042846d149949debb328e536e65bc0e46d80bf5127e38d98bdb252c7ad3c533b9094b12c4868d5ae149cd2bce421b1b0ab9fecaa496b12c4a994967936
SSDEEP 96:9NyJxsEHioYSeIBIn2DDEeh69XBx5G5JC+:LSJQS9JuXBxAzC+
TLSH
T1DCB18988F758317AECAE6223F46F144DBC362780316134F0DAF9DA9619A50BE4673C8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globalTypes.d.luau

Path C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\globalTypes.d.luau
Size 831KB
SHA256 ae1be58cd7cd565c21018aace8d10b46942cc0ae81df943f0529a86e5c1b9604
MD5 ec51a4277ba63941d6b0afe437ed3f22
SHA1 7a741dd6d24c93d2935e0c6bdac8fbb5862f5255
SHA512 0919e259d345e6bd678cd75b1cf389afe8299f36c282fbe67faf556b8f663693aa29fae93aba161c93e1193725c9abb827c6755ceea16bf881ccc33f152be4bc
SSDEEP 6144:zwk1ZUqKkVqx2CZEzBXlyvGbttxQc3zVvDeO/RGyaTFY/OSRlXAOAPplFm3TU2AZ:/xQc3zVvDeMDR7X8f
TLSH
T16805550DB604A130594F53F66E9F8884ECB5D2C5612C90F494FCBB461B7F83E26A6ADC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luau-lsp.exe

Path C:\Users\Admin\AppData\Local\Saiko\luau-lsp\1.70.1\luau-lsp.exe
Size 17.0MB
SHA256 3c834f9402c82681ef2b8cc171c769f239eb094028bb31469296e1f0f4c489a6
MD5 8f890ca7382ce4517422a73ec3c432b0
SHA1 0a69749e532f7bc7a08a09c711b8d87149b22876
SHA512 692a35d1494649f96851ec333a0265805e46cc6f8f2688371a88ba3b4b8d899ea403dfd3bd2e4ee94a9d1c4eb7fe4a7b2d5a61c5092354a220e6edfc6f0f2552
SSDEEP 393216:dWfmgggFgl6ggDg/gpQiMRgFEggUggg3dgfgi1UBgggggUuMwFgggg6NggggggeD:YDggFgl6ggDg/gpQrRgFEggUggg3dgfF
TLSH
T1FA075B2A21AC10DCF17BD0BD8BDB9E47D6B2340903319ADF05D15A9E1E1BDED4A7E620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en.json

Path C:\Users\Admin\AppData\Local\Saiko\translations\en.json
Size 60KB
SHA256 e739bd6fec825229a02ca0fc08ebadcacadc42950f92cb3596f23aa4b8fae162
MD5 6a00c92552201439e417433f359558f5
SHA1 1e6f49e4cd760e93013f742452f3d179db4a54ad
SHA512 98034c15ca977a3693083bd2e9be2ad9d798bbe2eb3a4708dbd17fe97922b8474738e27b580f7664043b74079e7a32fde41288e0094dd77191364d8b34055d2d
SSDEEP 1536:3pIGGDR7PnfmNoDQIDBt65PZz9w4Qm65U:3pIGGDFncIDBt65PDw4Qm65U
TLSH
T17E53732BAB40023B15E081813A5F53A77B214D3B1713391CAB9BA11D335E53F66BB5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.txt

Path C:\Users\Admin\AppData\Local\Saiko\workspace\fil.txt
Size 7B
SHA256 9fcbea643b55e5817657b268dcb136cfa3221abaa177b31ece21b0477e3ff55b
MD5 cf0b148eea5212fc93e049c958976ddf
SHA1 00519aab84ac48238f356877eae86e642287f993
SHA512 003e952f4328d26cb631ad901859ec0519fb1d16051f65b83fa90aa9d5d11c4a60dfd596942c9baf70e7071a7b7d885dd0f99f1cdc8a83e69fe2c2f384bd1e7d
MD5 SHA1 SHA512

Submit Download

lea.mp3

Path C:\Users\Admin\AppData\Local\Saiko\workspace\lea.mp3
Size 258KB
SHA256 00f934a86541ae4bd1d8b926172355fc2d55a62c7c71342b1d66b89a3dad05b2
MD5 42be3bb1b4d4e2f033f2019b8e9ca4cb
SHA1 eb32aba4a42cb1cc5d059d91dd5292dc7884c2b6
SHA512 cec327cc97702ed8a0d3dd83d3dc3b8be049dbe1cb8ad9387b2887ac6e132c07229edd0a694984fbbcdd1c5074898664c898e9317e7e8d9574c71497dfe5013a
SSDEEP 6144:vyBT/6QOobnONvVN7MU0nwXFzTEecj/s7kXMpoTb:qBT/6QOobONvVN4nw13EecA78M0b
TLSH
T1594412AA4531BA5CF40C6236B88B51A2DA460D6DB765ECC999C47321733737CFB0DA0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

file1.txt

Path C:\Users\Admin\AppData\Local\Saiko\workspace\listmeow\file1.txt
Size 9B
SHA256 cd56d06409d269dbc1ace470081f1d32ed50906679b2bacfd4044348770493c4
MD5 81d6a1501eaff685ab50c7ff7d29d396
SHA1 ab8366d7206c431e6e15a625a04d0fbe5510984d
SHA512 5774b4c70a01825b7b87b7ced50b48403e755bf380cdea7c7ca4c199afcbb905f17f5a1aaa87f281eb9dce115bb7dd3ecd2294a3138568aff79df606a78a725f
MD5 SHA1 SHA512

Submit Download

file2.txt

Path C:\Users\Admin\AppData\Local\Saiko\workspace\listmeow\file2.txt
Size 9B
SHA256 1b8707533d362a48d03c920654cb5ac752445f17ca8255fe50e615e344edcd55
MD5 96870b4c66a4a32bfc53a76c802bd30a
SHA1 0db0e5fa1ecf3e7659504f2e4048434cd9f20d2d
SHA512 5c69f2b481b6c49d5449347a06db04d34fdcfa2bb4fcc40e8c16e7aaffde955d7618a6a0addeeea6b6f2ac9d70d0b29150d84ee89ab476cc42faa80a25936bb7
MD5 SHA1 SHA512

Submit Download

meow1.txt

Path C:\Users\Admin\AppData\Local\Saiko\workspace\meow1.txt
Size 7B
SHA256 8a1763067d3c2d7273437088faaa9c18e42b782d5af258a42ccdc9b404c7bc59
MD5 f0f3f5df767b05cddca35fb93da9165e
SHA1 c9c10609249b1b3cc3a5bd546c9f2ceaf60f58c2
SHA512 48658154bfed21533a0b84b591527d5eb31fc3d632c8a4614ed533fc8e96160d815ae906a43eb63401b4f35992ded07a5b7bbb8749ffe9d009d61c084acb99ba
MD5 SHA1 SHA512

Submit Download

meow1.txt

Path C:\Users\Admin\AppData\Local\Saiko\workspace\meow\meow1.txt
Size 7B
SHA256 28f937f791c74fe652c5aed2adb98b7a001362ccc3b1ed5398afb18fb4f4d797
MD5 92a437868111c4557b40ead873d60488
SHA1 e9acabd2ecf44f213367eb82eddaab7635e58bc9
SHA512 07ec0f20192261bb0a4b5b1c4b0600e997b17bb89d37a759b550a3193db29a9fa57f6ed53b8e8528960e7f68426bf4ab4e1eed664f97140c880f63c18500da70
MD5 SHA1 SHA512

Submit Download

meow3.txt

Path C:\Users\Admin\AppData\Local\Saiko\workspace\meow\meow3.txt
Size 10B
SHA256 e44fdfdaaf4fd02bdb0989eb235860c77ca0cfcbe60fb8c10675153dde4da5fd
MD5 59c9fc955bb80f5715b04d47788d24f2
SHA1 30dc9ef2a8d563dced9a243ecd0cc449c2ea0144
SHA512 6a5578b3ad5c68a0a7764f9278a10942f6e0a42bfc011f9f1bad8e73163394d3b5d7072dfa51bb0d094427e7d6fe934a846967132eb2bf19f312f4a5205d046e
MD5 SHA1 SHA512

Submit Download

meow4.txt

Path C:\Users\Admin\AppData\Local\Saiko\workspace\meow\meow4.txt
Size 27B
SHA256 a367344a7fe9e44b630e31fb7e12df50da168218ee1798aee5fcf124ba1f0d2c
MD5 6ee66372942fa64d8bd29eb79bb113f6
SHA1 954dfba3a4a620b2b7dbac582944d53b0e550c3b
SHA512 9427286a06939df90e97985804c182eb416d8ed93c96beea7498869279ce0df177d7d81ce9c589b54349586e0fe4138b9ab0520f3859f8f2f797dec7e6a2c30e
MD5 SHA1 SHA512

Submit Download

meowappend.txt

Path C:\Users\Admin\AppData\Local\Saiko\workspace\meowappend.txt
Size 20B
SHA256 7ab34d593353be181e4a7e9117e1c25c1caa7e7f63ca30e1b02ac01206c4db9a
MD5 c5cbbf8216283b05c9e6c1d6ab3435f8
SHA1 6e688271c6c0f1249c333e16b4644d8486720040
SHA512 68dee0c710273ce7915f4513d623bf8f29562ba778bc13fcacdd003ed24a3b9e8dcc762946e760d07da64b01f5fbdc906f712836e33825cc64b07cdb26fd4886
MD5 SHA1 SHA512

Submit Download

tombstone.dat

Path C:\Users\Admin\AppData\Local\Temp\Roblox\cache\tombstone.dat
Size 38B
SHA256 a20a65974e40621dc9688b4c7f433f300f75da34a8b0adf77d4acd023c2df3e0
MD5 46aa97ef89b6783ef25b60305c972e14
SHA1 fc4f772015384599da27adbfdc8091e900090467
SHA512 5911f9686d10b502327ecf2a0353d65e8734fe48628cb739fd70cd25f1282765f18e6514b4344ba1e3b513c2cd3b8e9615803ff024cee0a6647bce6316cc3b9c
MD5 SHA1 SHA512

Submit Download

tombstone.dat

Path C:\Users\Admin\AppData\Local\Temp\Roblox\cache\tombstone.dat
Size 13B
SHA256 04940283f055d26fc39d6b27fdcdd98b1412f1f473b3abe3c6457e8a08e1ecd1
MD5 f33450a593a761168d59ba5fbca6be5d
SHA1 41808725918228c44848df91a84b8cd9e9ca883e
SHA512 200c734fb5cbbc244639e0314ffc692c254a22939755e78d0aa26764e87ed259a066a8e361e50a922b7fca57231ec2ccae01658840e92e9ac12d7a6cb9a7ed44
MD5 SHA1 SHA512

Submit Download

8913724486d5e3c463c493b25346ca31

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\8913724486d5e3c463c493b25346ca31
Size 64B
SHA256 f5fba861235343e8089f7a23242eeab46c774d72160e939341b1c2a71f74cdc9
MD5 134ada33a497aa01f05f3557be385029
SHA1 6e4ffed70e73617540377f94e9d31ba4c6bb02c1
SHA512 36a6e4dd360b55c1946c82e4cb51e69be371943a150834adaf3e911a3527b23cb54e87a97ef650255cfa0d5e22815e115e6c478e887c7443d37d2a2d3bc433c2
TLSH
T150A002441845E552D9E3FB70A9841948532C4F7E9F87551120C6C335AE4600A4308A51
MD5 SHA1 SHA512 TLSH

Submit Download

RBXA4CFC951C94F44D9AA4C079F24FC0A1B

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXA4CFC951C94F44D9AA4C079F24FC0A1B
Size 14KB
SHA256 72f4acb58bce33494c51933a34695430c6e8a0abdb63f3cd878bc796306cbcfc
MD5 ef001b56cd752fdb0ed96213ede943e2
SHA1 c80057e90087c93e4fb3eac279c2060fe027a123
SHA512 c421dbe98e4c416f66035d33432fbb10b3f29fb9f9d7bcde5e7a9522915662b368c6512e5ec56d7f0e428ff85a7d4199699070217af034778d7f013bcc8119ef
SSDEEP 192:+tulRrn+UQcJVzs5M3jmVZIBeFCnCLt9EhO93GAYlkxdqCU0HwcMMzG9EZ23p1J/:z3zb3jmV5ce2lXGzeZ1JFCJCOEKor5
TLSH
T1A962D097D2A212982473C473798AE64D3244F98F55F7285AB38047690BBB783CB1A92C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a01875a7454a5f71664a5feb82fbbe80

Path C:\Users\Admin\AppData\Local\Temp\Roblox\http\a01875a7454a5f71664a5feb82fbbe80
Size 14KB
SHA256 c1248c9423031168170896546e9a4436414dbaeef16976fa8e0800e3760cd7c0
MD5 1b408c0441f49ee32d738d88510a131e
SHA1 73e59f1198377d9ffbaddd981a99984c95f7895d
SHA512 b9da94f2b52a2d826e436c4b74222057a93e1f9cd5f708191563dff34c5b434bd12e86bada4fd78238920a2ac72e69f84216ad3748a1ba95031145437a47e419
SSDEEP 384:1iZzb3Nk/9vnAuaD7vp3ZxuaA/WJd4kXxaz6ZvTHvz67GWnWCBI4k:1oDNG9uPh6ah4kLZvT+7f/BA
TLSH
T1F052CF077B77D5C52A2346BDC859A380508FA83F8376789AD2F8578586EE3F683052C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79057ddae0ef5369aba472ee1f4c62c8

Path C:\Users\Admin\AppData\Local\Temp\Roblox\raknet\79057ddae0ef5369aba472ee1f4c62c8
Size 64B
SHA256 15da189d7a046cd6ca07366dae2a49a41072adc9eb0c7d104761f3b7066345b0
MD5 8a6f15af4959eddcf829be476ef1e3df
SHA1 ed1072c2ee3c0fbc4ea524b536c2c3fa5b67443e
SHA512 70cdb7bdc9ac4d3d8e1e5c3bca29c7b16f85e88e99f2d7fbdf7aacc7201b8efae4004fc048c54ef215f6e58286b8135388e66c3f4b30d086b71ddafc4c7ba3d4
TLSH
T134A0025C0095F186DDE3E670AE84094A45188F299F870D15108AC67269430074248203
MD5 SHA1 SHA512 TLSH

Submit Download

RBXA55065AD4E7544FBA5A0F5108820BA73

Path C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXA55065AD4E7544FBA5A0F5108820BA73
Size 2.3MB
SHA256 0b397ebe79af01f747d96b584800f54a5492e96c2f55420b64b27b7e7c718cbf
MD5 8871507b5c786f2660a237d42b1dd474
SHA1 24f7ab3df27e1cac31c41d13eb1f618f74550c9e
SHA512 e462776ee6dca652c762473a18988caecd85bf07f805928aadf33ba01ebf85a2f7e06caf61371ac196767e528de0a90451744de8cd5cf36ef3badb3b5acb746a
SSDEEP 49152:2rena11OvWMa/OG5xCBwzRk9wEe68osu3c5+tD:Mya11O+Z/VuwzWw1oD3c5S
TLSH
T19BB533BE58F96C9EC4C92D709079287691AD0D7D8A2C4F83DDB1FD88D2675C0EA3124B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

saiko_module.log

Path C:\Users\Admin\AppData\Local\Temp\saiko_module.log
Size 13KB
SHA256 45a66f82c180a88670a363ba2f65a0d20e4b9422c75f77bc2caf808471f5d3ad
MD5 84759b84f1f80cd4908ffa80d8ab9962
SHA1 43b008423fcc9e61da4d025cdbe3af41a6464c7e
SHA512 57f710f963cfb22930d3547485779b3043e90adb68c2a66768547f8f9b65981600e52e1480468f5d1d32cc28c3690b320f05804786305440fd3cc98b90434ad7
SSDEEP 384:JIWBX9WV1oTNIuNMqmIMNh0IgFIwKItNIlLymFGiaOUN3eNhlp4NI0RNI98+hj0s:Z9WDMiE1GYC
TLSH
T1CE52EF8089C5A351D1BC94C26401B7AC055CFE4BB5E998B30D7B8F2BEE8C3D675A7E84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1066481a-f53a-45b5-a21e-9c8508d38d41.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\1066481a-f53a-45b5-a21e-9c8508d38d41.tmp
Size 18KB
SHA256 f68202a8ec2fedccced176edfb734c7308d749e06842ba8c35264710d2f4f0d5
MD5 454104b0c3edb858277459d268e17d1e
SHA1 7edf9d163704f7c29d306736b7de9f112310d6a4
SHA512 107b468bd489c2e9518be470da3da8731cb903c56a67bbbb79a1ed1a8456e788eb76bdaa2d30a429a19c6631fce3e1cf2aaeff111e7c78474676f291f35af471
SSDEEP 384:zS+OBqImmJvGBLx3NaFMJF6Ngp4ESowLvpiSNg6rR:jcvGtlN7MLvpiQ1
TLSH
T14C82AD75AC619A272CFBC589B68A678BC7B52293C1D42FD4CCEC5F0E025B18C2357C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1385738a-f8ab-4c70-9562-6e18c128a78c.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\1385738a-f8ab-4c70-9562-6e18c128a78c.tmp
Size 3KB
SHA256 c7e743bf5e394b1019ef54846ea6914a2227841d2c2661620fd14414655f7e59
MD5 cfbe92c03113dc6a7bca0e24bc81e114
SHA1 c82089eb52fec1d4a7efa6201031e577d6c5c3e1
SHA512 6e301b295e32049888acae481ce0fae97e888672f52f7bd7137a192c6f072aee9ec5bc2ba8faa8471441b2a617e654885dc5c0840b89195a7696a584df7089cf
TLSH
T1AA719632A864AA3B4EE3D944B8852B1AF7651127E1913F98D9EC0F0C01DB6C82352C27
MD5 SHA1 SHA512 TLSH

Submit Download

38cb36d0-9b12-4cdb-9af2-609a8841dffa.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\38cb36d0-9b12-4cdb-9af2-609a8841dffa.tmp
Size 2KB
SHA256 896a219fb5e559667637e9e75efe01f0823674906146dca7904c1464f5d9ef2c
MD5 6e4498d026ea2e9b7c0801fe789dc195
SHA1 ac751afac269e17eb71b81b4058d684feab34cbc
SHA512 a9b3f42ff1e0bcd54486845a04419f442c39367edcfd905d7b6a3d502b0f036f677629fa4e2bb19a4a89234b384f13faf26dbb9e662ae7990886d0cf23fde5a7
TLSH
T13D51A772B8147B3B4FE78954B84A3B27DA3961A1E6612F50E6DD0B0C01DB58C2316C37
MD5 SHA1 SHA512 TLSH

Submit Download

3eb6bb4d-e6b2-433f-ad0f-81dd7e895aaf.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\3eb6bb4d-e6b2-433f-ad0f-81dd7e895aaf.tmp
Size 16KB
SHA256 803b30f11b95ec25646359c7987309b46eccb3b9aa728311deb5196e4d08c442
MD5 535bae870dd46dea4a036c6aa6d1317d
SHA1 cba3d13ef42e31aac57f9daddccb6a5e509ccd86
SHA512 a98a84b29838118657d8381eb2a6b19e21a397cbe61c9016e634d05edb151bdbd28fc03f5d206b6884affbda5b82165855e5716961fdbf14c5058f06be853e71
SSDEEP 384:zu+OBqImmJvGBLx3NaFMJF0FNbAjESZiSNg6rR:vcvGtlN0nsiQ1
TLSH
T1B872AE7528A52A372CEBC409B9CD274BDB756293C0E17FE5DDEC5F0E022B18423A2D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f140baa-6a65-4ccd-85fb-803a8a6531dd.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\3f140baa-6a65-4ccd-85fb-803a8a6531dd.tmp
Size 18KB
SHA256 56058b8af3e50ff12ce5f0d5f0e5e75b319e86fa2f2a86d4e7de9f630a2ffdc1
MD5 f083f05ff8bd926185667f69f2827239
SHA1 e4ab68dcae116d126c5b92b04340fc7d20c93034
SHA512 174015e2ef979803053b6366544e61315972f057507c94602d36b77404160dc60d1dc2e8550b52c951487041845c8968f760806589b49d1162933cb96e76bbc1
SSDEEP 384:zy+OBqImmJvGBLx3NaFMJF/NgpFESowLvpiSNg6rR:jcvGtlN3MLvpiQ1
TLSH
T19982AD75A8619A272CFAC589B68A678BD7B02293C1D42ED4CCEC5F0E025B18D2357C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47d259ed-21bb-4a9a-a18c-4dd1ddc18968.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\47d259ed-21bb-4a9a-a18c-4dd1ddc18968.tmp
Size 17KB
SHA256 897dc9e30b2c55f6768de05c86af9350ef66deed910c2dfd3c0640ede29be680
MD5 d99421cddd96035bbeadaa9523b6db47
SHA1 5552564510490b4eb4b64b0c68864ba387aedc19
SHA512 fe71b73d6f30fa9b3846cb88292c3dc72b762426887ef2ea6fd09f6a24e2252f1bb237655d678e986bcc9bf163e0362c45cdcd2259bd019361a04df9e871f6d2
SSDEEP 384:zf+OBqImmJvGBLx3NaFMJFFNgpdESowqvpiSNg6rR:qcvGtlNVMqvpiQ1
TLSH
T16082AE75AC619A272CF7C589B68A778BC7B12293C1D46ED4CCEC5F0E025B18D2357C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88b15978-f3e4-463a-9797-6b39d49e9448.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\88b15978-f3e4-463a-9797-6b39d49e9448.tmp
Size 17KB
SHA256 3743e2481a36fade04f7f3e74c212117d5ffbb7d6fe56cb7ad6a65d457422477
MD5 a7d0c1c9b3f59b0288460eab120b7aa1
SHA1 7369a1cf04c718d6877f3cd18b4c282679183d5b
SHA512 7d5afb7ce545a31dccec9b4bd0981b4fd0c74818144fe2f1012ff51d5afdd0a6f06374b4fbd16a48284b096cd25a558c9799ff1882d5294f5896a0029891cb1c
SSDEEP 384:zj+OBqImmJvGBLx3NaFMJFxNgpdESowqvpiSNg6rR:GcvGtlNZMqvpiQ1
TLSH
T14E82AD75A8619A272CF7C589B68A678BC7B12293C1D86ED4CCEC5F0E025B18C2357C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\CertificateRevocation\6498.2026.10.20\manifest.json
Size 118B
SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
MD5 acb0c12cc7e5345764763e37bcebbec8
SHA1 4147b2615955c51a6054c807c2397e4d7d10ee03
SHA512 6777da8af66a77c28049eaf1b49ba7cdfaa08a8f381c27dad4af0e980e8d5a7ea0df0c3f1fd0cbc0cbe93a83a07d130ae24dc4057471de830fac60036b1c2f3a
TLSH
T10EB09222DC80D832697693A84E2246D0F238234B2568AA493630048C0B2E2F182A2721
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 ddbf44cb277673721023adf0209b9f77cc3c0e4387687a0b0e6d5f966732680b
MD5 4a8c717674a708242566830cab455140
SHA1 186d7ad1242c75a2f63b6deb9992018e5074bd49
SHA512 9fb097d95c340bd1c92a7837789d92f42b95258aa260cac5e9b75ace15c9b37510bea9c526c8fe43ce83522f7c7a682488aa802b8dd493eba7563099d7172c29
TLSH
T12FD0121733518334C01022332003A6080801D20B40458041942DD52E2E045F04913881
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 314117687b660e41b2e482cec4ffd110d88f7c0f321cc2cacdfffd46303e3650
MD5 6014830c1bdd21bbaf6c96455cf43f70
SHA1 35c03776cdc0bbd1926b30ae3d89f456b22f1d5b
SHA512 a43c6ce26882e7cdef05f24832f8f061f14ecd1a1d43c8c923a41f6ee5445ed65ab63a8f64e57e81f234117744c5e827238c9ca5cc834975228fb10e6f92dec9
TLSH
T1AED004155350D310D00153313011C70045055500005141414015501D1C407F0C013544
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

83f6caea-03e7-4756-a415-23bf619411df.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\83f6caea-03e7-4756-a415-23bf619411df.tmp
Size 6KB
SHA256 ea4e746a3beaceaee67a972448ae3a8384f0a7b5eb91194d31dec710caa86960
MD5 6a2df9cbff49b1e59a180faba29283e8
SHA1 2b01e0df29dcae42024d328a6b415705a5497de7
SHA512 e4775d0c630171a263b0339a62079f76e0070e03f6305eccfa17d78a3c6c85543db7e41cdb14b489e7873fdd8545bcaee9bf9b29dcbaaf75da0eaedeb004605b
SSDEEP 96:stf05ZaeNtkb9CffxZ8i0vhE1ktWm/7qx+WVHMSm+uecJMUjMdQjE+gVyjMOB:stf0uQfJZ8paUj/S+WiTMUodZ3yjMC
TLSH
T1B0D1DB025E6879774DCBF6197E35BF56E2FA102261C50E58EBFC861C04E66CC230B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 f3500e22f02659bd3e7b3f115b7ea1b1425216ac64cb89b6701ca9d58efec232
MD5 7df2712f08032fcc3465c2a3823bd80f
SHA1 040cad28eb876fff05c0fb23db0a142ffc4c8648
SHA512 63738e03394a75ae0dad59c3694fa0b071accd08853022f6ca7d8ca53c2f5675b2327da3c9e6114b1723a52c7adbad18f3fe9daf77adbaf34545c7a6d2761277
TLSH
T12EC048A078866008C3B4A3718AE10CC03EB0FDB841831F5620A828F44C0D3488CC344C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Code Cache\wasm\index-dir\temp-index
Size 48B
SHA256 0bf85a5f8f1cc77b88170cf69152908e949321eefd1f8ccab9dcee59acdb8a79
MD5 ee36e7441d21b317b6a365c998ae7403
SHA1 e9515afb5e6977773e9fd5ec74b84a1fe748850e
SHA512 56e4b0b9635c0a825b5fa892f12d89a7567b2156ad5e8435c247602a6a1f845393c441a0893aeccf6a89bf30ace025ee421c6925a256e6122a6129c372786b41
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\DawnWebGPUCache\index
Size 256KB
SHA256 bd76657f6a8574f77cae1dd4585d5fb16018dde43cb9b1b084d73430b72b368a
MD5 3b508c501b8a33b19e91c47f82964fa6
SHA1 6dfb08046b193fc6aa75a3b296918737acf0d674
SHA512 7e90e872fb66f100a1c5e511cd51a225f9aed42fa19b481d5cb3376fb8b7be79314d28cc65f4193a10955b1c8d85850edfaab232f5503379bcdcb3e8e9eb985e
SSDEEP 3:LstlNllkll/lRHV+l:LsX3lEtVg
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

004d7e8d-4506-4e51-aa0a-9091619c6aed.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\004d7e8d-4506-4e51-aa0a-9091619c6aed.tmp
Size 356B
SHA256 b12c99f6e57d6b23a7ae112336f2a7bb183bfdd31b8b577dd7f71b3eb7b35e67
MD5 b8dc97e86114b2936236cf91592774f6
SHA1 5b5b7d9783b2cddd2dd0e91d5768d41168d06f57
SHA512 23c1223c0a9e2ff41d6d4b1a33fcfbdac192f062da0e4b68aedbd8b270bb1fc4a1c05d67487b0cc9a2d27ac8e1134f36dfea6b4120264a55e54fb73302da520f
TLSH
T15CE0C063013BA437D0BE053A0D4838045DF5F43801162CF4C5A383BC60C04E78283526
MD5 SHA1 SHA512 TLSH

Submit Download

667c9fb8-c6f0-4059-8ee4-9caef54e47ca.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\667c9fb8-c6f0-4059-8ee4-9caef54e47ca.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

77f102bf-c1da-42e9-89d7-90271bea3f23.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\77f102bf-c1da-42e9-89d7-90271bea3f23.tmp
Size 237B
SHA256 dc987299f091e2dab4ebf7fccbb72c21ad426895f04088020ec231282a2ea3fa
MD5 f4801ec1fd5e78c3c964ee02ad19302e
SHA1 332f11913ab10f351ad2248d8f5b98fd638acf2f
SHA512 630e890cfc85e685581bb98b2d5239e14085190b57babfde48ccf3951e3a9f1aa6653cfc9290092f04ed7d7739f80b6ae377cd42c5947fecdf6074a0c56c7694
TLSH
T118D095A5427098FE0740439015247803C97D0003531C4E76D9A477744653079D014807
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Network\TransportSecurity
Size 188B
SHA256 66941431730b187140b87742285006402088f3abe27e0e111668162474efdb10
MD5 0c6607fb73403af9c2c4161dd7a9a1a6
SHA1 0ae63dfd41c14d03e07693772ec5d89743b464a1
SHA512 2746e3d87855f224e79e8c9869fbb0c57fb6f16f27d9b9614424ecb291655eb85effde93c08de049e4d3348b64fe26badb2c66d7c6f03a297d3c5c93feefea53
TLSH
T1E7C0C06344BDE0B6307E05752884BD80AF36F134004158E8CD43073DD0401F68103023
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Preferences
Size 6KB
SHA256 279911a4049af9aaa454e7e14dac42cd041339b874458936fcf0f6fb7cf324f6
MD5 d19255552d587e4e583d404140e6641a
SHA1 c5e8ff6ef22a73e105bde0f4de2b08e7fa836a35
SHA512 48567a238dafac7663f86f282dda189e5a5137bd7db6a535d4860c63e1b9559d22e772b2c6d39030047c2201aefa23e0c9a7fec69653960c1457c742e7235ff5
SSDEEP 96:stf05qeNtkb9yffxZ8i0vhE1ktWm/7qx+WVHMSm+uecJDx1idQjE+gVYjMEB:stf0UgfJZ8paUj/S+WiTDxwdZ3YjM8
TLSH
T149D1BA025F68797B4DCBE2197E35BB16D2FA106171D40E98EBFD865C08D66CC230B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c16a1283-4f7f-42ac-9e5e-3fa0eda8620a.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Default\c16a1283-4f7f-42ac-9e5e-3fa0eda8620a.tmp
Size 6KB
SHA256 0db15bdc876113aeb7fc7d21dec4ed709be2f89e3e1f0d5f6621debdc713a750
MD5 26473d25344d79a1884699ad2feac87b
SHA1 9c9f824cd0add0c58c2dd3b8e9d7ed5a8a1c77b3
SHA512 fc70bf7b7566e528d2ca7b67abda496c251c60d5c8c2f2c34f470034e5ad1edb61c0c4bc32de3a126af440331c8cfc2814123ae6cbc9513b288afaa469ab7f4c
SSDEEP 96:stf05qeNtkb9CffxZ8i0vhE1ktWm/7qx+WVHMSm+uecJDx1idQjE+gVHjMOB:stf0UQfJZ8paUj/S+WiTDxwdZ3HjMC
TLSH
T1C9D1DA025E28797B4DCBF2197A35BF16E2FA106261C50E58EBFC861C04E66CD230B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Local State
Size 1KB
SHA256 54ad03107ba01264962d899742e75c7712e0d63fd43072093bb317e0a77117e9
MD5 f47ddac6a2e5d74abd0f22c231485e21
SHA1 9acbc76887271e3b855c6764cadf7815186b8dc8
SHA512 03fb6e03ce074c8f299095b5ab470fdc6ca55dcc89c0739dfa9a4d9ed9a272e7a9ae1b17c2bb75d835298ee3a8836c17597458ed880772c0c07f41fcc395eb95
TLSH
T15931A7B2F4903F395E969955B186666FDE352066E1204E08B2ED4B0802E7ACC663EC37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\Local State
Size 1KB
SHA256 f52ee15764fb4d7b4634a6e894a0a2f3944e27ab1f0649915ff5a7bb0a9f2a36
MD5 955e89a2c198471c16ae6a0f18bcc7b6
SHA1 6e36314cdcf92cd37f0da02efb3eaab4e8b7423c
SHA512 d77d938d3c5f8047113959220d28b48b715e23a92fda56c25296b672df0953122305f6f0515b4ead86c7677252aadfe9bddfd0d97dea46b6e43906132ea9142f
TLSH
T1B1216572E4943B395E958865B142A64F9E3420A6E1204E08F2DD470902D79CC567FC77
MD5 SHA1 SHA512 TLSH

Submit Download

a630c6b1-f56f-4ef3-8b73-a3f93f8a8f39.tmp

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\a630c6b1-f56f-4ef3-8b73-a3f93f8a8f39.tmp
Size 17KB
SHA256 061c4e1a3ca753e7058d224a70a0072065f1f6bc111fadc4f3001f898a3530c4
MD5 932cc62d1bc3194d9c7abac3a7e5522d
SHA1 344a884e367b0c2d29f1767aff4d8ed5ccc42d06
SHA512 62cdcedf5156974b6e2b7eba07f26d0a9a663ec166c1917f465388f1a24bb8c8ef0c4e19ae08685eabc5dacf390de9ed379ea8b373a5495a9dd46a06bba7cf59
SSDEEP 384:zA+OBqImmJvGBLx3NaFMJFqNbpkESowqApiSNg6rR:FcvGtlNuMqApiQ1
TLSH
T1EF82AD75A8619A272CFBC585B68A778BDBB02283C1D46ED4CCEC5F0E025B5CD2353C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-as.hyb

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\EBWebView\hyphen-data\120.0.6050.0\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

WebView2Loader-83f8f5bafedf77a3.dll

Path C:\Users\Admin\AppData\Local\io.saiko.workspace\WebView2Loader-83f8f5bafedf77a3.dll
Size 156KB
SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
MD5 b7f10b8066ee96c628e09c439b8d0b9b
SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
TLSH
T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\Videos\Captures\desktop.ini
Size 190B
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
TLSH
T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1414705469\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\_metadata\verified_contents.json
Size 7KB
SHA256 65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b
MD5 117d173e82b282deca740475e35c8ecd
SHA1 912b12b993507ebd9af6bdc937559b4d4b58a0d8
SHA512 e455c0bb68e9056c6242058fcba954bc1d5ea4a864e99be008b2745c51209b477bd7bdba57006be4a02a09bda49c0cdc17e8f870c81c7771864640950f5f9a93
SSDEEP 96:RhZIpt7VgtFD3F8CMXuuzaRFJrb7ghNglFjPu3ljl7arVSQi6E/swokYglZ:Ryt7VgtFD3FaeTrgCtP0dyCDsoYgn
TLSH
T121E185F21E79744D5CC52736077EA95B9AB4A298C2513EB646D00C99B0F7F0A80BB4CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-af.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-af.hyb
Size 70KB
SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
MD5 ffa9db945f0f0c15b8bba75a6e064880
SHA1 49217a9d5bb7a868464403b4e3c82e80df53456c
SHA512 cc67b2dfbbb009dd3fdb999fe86410425455613c12dac755a3cded435cd25ca4363782d70f3b7bb7c0fdd63e2eb649ae6a4053d929f463b646b43d7dbfda79c0
SSDEEP 1536:dH4Yzf/r1T2bhKC+wQ/MJ4tpBMfWDMxFaye3yrGZ3vGV9YODhX3yKfhGt:dxLr1qFKpNpufWIqye3KgGVnDxe
TLSH
T1D56329C3C62BDF90CC6419F4594D0AA811D816C6E7C039BE9B6C54797A27CB82BC13EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-be.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-be.hyb
Size 5KB
SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
MD5 087de134f3b23a9944afd711a9667a0b
SHA1 1b67d0a65ef91295207d66e62b682803aa74ef00
SHA512 42c0b51e0e28109a7058d3fc03fa7bef8b25c9b3c8bb74933574fad06c061fd1636b53eeeacf652e438d4df08002db449681be9e6e6821ec23d32a8be1778998
SSDEEP 96:mmfvnESaDPq1iYM7N8gyurprJr/P5FwBlh/RT95vtEUnbpwROaQPP/KV2L+HCdYV:XfYPq1iYyNk5p50OwQPP/KV2L+HCinCO
TLSH
T129C120C2DED52F91F8E428307076356E94C0ECD80B81DF27EEA5682DDE9EA045648AD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-bg.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-bg.hyb
Size 3KB
SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
MD5 e8a4f8f5238f9a0ff6968ad8dba2755f
SHA1 abf002ff28b3aa2a59948225e5e600096348caa7
SHA512 b54811e1be6e63bf19e408ac4ae9da86e1473e4e8f1e9d517d907e025be20fa6979517339ec6defd0ec30613ed42a97d88111d39297214afa7606597cba5ea86
TLSH
T1AF61E86A840D1C89DC3258BF71F7FB890D00A6BB162DD05617462E61EB33D48AE04B77
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-cs.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-cs.hyb
Size 62KB
SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
MD5 e8b1509f86508e807d61216614b3dd58
SHA1 b2334509e9d1589ad2e8b80c187018eadb15872b
SHA512 fb340fef9d0dba342fd85b8b18c0090391aed717fe92a8da7c5d939dc9c0aa5235d4423b590e52b0decddd4f4ad8bd4652361161c193617601ff490dd1be97fe
SSDEEP 1536:sonSvAX9Cf306OFe4Q/irU+bvWDdF3EeFWPA:rSvEchf41oKv4dBEbY
TLSH
T1D6533A43FC650FA9DC7D50FAACE40EA955153ACA1F51682EFC281095BC22D293FE0B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-cu.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-cu.hyb
Size 51KB
SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
MD5 b4e5921b1df85ba9f2ebe6ce578915f6
SHA1 b5f2e813667aae32e65cab9c9a0dd291421ada0b
SHA512 41696a9e25ca004acdc8def265766392ce3568747560ff73cd08ac9fa4a99e4c4654fb84dc602845b3e444a8312fb099c72932471f7e830874cd7cfa184b63b7
SSDEEP 1536:a5OMYzUXoeoZA7SmEUbxucj5DTKZ2oVXEyb:a5JYzUXoeCA7SmEU9ucjBKZxJEyb
TLSH
T17533E8D77029CF7DC0DD35F6AE993EDCA358689B3E462A7A521B91D32DE2D4230001E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-cy.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-cy.hyb
Size 35KB
SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
MD5 b0f32ed7b4b8a068a962d820627b7229
SHA1 76734e58bd33c4d1450228bf05e53cfe169a02e6
SHA512 8f20253985c217401627e0c7d31aa1bf213fa220bb498869e11e1e532c3c82dbc2abe6ffa27c69243913243af1aeb35806175511d77d730c914b1cadd71aa7a0
SSDEEP 768:s022NAK9/8ei2v0BJlYZqNCII2vfP+DzEKd8mPBFDpvH5aWg6:c25X/MBPjNCIISkTPB3RN
TLSH
T1A1F2F81B75D0CF23C017863EC1AC5612932F9B19A744CA9B668E49BBB14B534BFA734C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-da.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-da.hyb
Size 6KB
SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
MD5 d0e160dca547eda390d6cc7c4a1f7ac6
SHA1 7eb71819675e82b1bb92428e07fa6b05cd1854d8
SHA512 9be5f673962c6049ed1c796a81aa7be72a1c7715fc2d4610cf6565541c7bb145d068b94b5fdadd30bdb5f5287ccc2055ec1dc9e11e4c5b8965d59ef73ab145c4
SSDEEP 96:op8RuPmWKvTES4MDmKQS3mAdi1flBiLwHR08fiCkUNGrvYe4KiGn1BUBkQH:op8ImWKEGS87diLBiLUfoUNGrln1BUBL
TLSH
T1C4E1B30AED968743C41AD9B9CF07C98B84B9E089B791713AF38C8641308A33C67E735D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-1901.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-de-1901.hyb
Size 118KB
SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
MD5 dd9d0a81d897f88f76c1f6d69fb7483e
SHA1 520bf6111f902196591ea358fa8ab4ae89ee0acc
SHA512 8c0a339d353cac1c66542bcfb7d41e7241a59a1886fe8a189aa155aafdf3bd23274f956d3d8a49be5b23cceafb516648a0e0b44f67e6f5ca60e216fb3f362ccc
SSDEEP 1536:4S0havr6N41g38Gnzvueua0+Az+u3tnQrI9LKyQh9HzSWwwwKYf+wBuLxfrHmu:5cae4TyzvqaQzjQMuSWwwU+RpT
TLSH
T132C3D5AFC20E4E45B2B6FA0CC108767EC15C7E6ADFE045A7909F1424A4374A8AE547DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-1996.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-de-1996.hyb
Size 117KB
SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
MD5 e7a9906b316d478b55bf8ebcbbb1d1c5
SHA1 5688453de9afb7405960980dc93adf9296aa2f4a
SHA512 36e6beaba33a16203f996d6e8fd987347028d590a4b4bcd4d2a129876c486e03b9ba13f279f301e91aec1e0f8e91bf109a27f2b464f15a3e1a2b56d03473b69c
SSDEEP 3072:+GQAdd4u8VlGiVdYQvi792ovhcxX9iEaAGGceTUjnnfxXElEg:7Q+UfN3RiEaZGceTUjnJXih
TLSH
T164C3E89BC11A3A44BA70BD5CC5C8326ED1547FB69EC0D1AE598E15A024738EC3B887DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-de-ch-1901.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-de-ch-1901.hyb
Size 117KB
SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
MD5 c6773229845710633d3a4d6dd9800fc5
SHA1 1d4c2e5f3ddf5627164edb471e8a8177993449f4
SHA512 ea69926520429cd934d52d84a7fcad6bc9bb654085d8d1de813e73f191ebd7b310e2e68b4bb43fecbd88cfd15ead7fe295405c01b7fdc225914b0477c08d4e01
SSDEEP 3072:iDCOweCoHgtKmiQaf6ZCM1BKstDcqZnSmEBQBkXmhHB71:CCZeLHgtlG6dzhcqZnSmjkXmJ
TLSH
T19FC3E5F3C5038E49A9B2A80CD588335E65147B7E9DC849B780AD5830A5B70BCFE8479F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-el.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-el.hyb
Size 4KB
SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
MD5 746a59e9f9dda15c0f17c1b72921c85f
SHA1 eb7f671af76eac40787d9227d41453b5117889bf
SHA512 8894b754377285e2f3071fa5bcd714f249f3dc85bf3690641c6576b070113c1e72caa61e7e2c97d35a7f79b08c2969bc4a2fe46bc4bffc4ed58069387dfa7834
SSDEEP 96:mMgP7nbvtENatA/JKab1QaRAwdRsCaRANaM2ahrvmG7VnaxEaP3/SJADfY:Wjpk+O5b1zRAcRshRA0KhrvZ7QJPvSJd
TLSH
T13391CC84FF865ED5C52C203325AA06261B1CDC9195E2977BBB70CC34BD5987CFC5A08E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-en-gb.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-en-gb.hyb
Size 45KB
SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
MD5 fa3dcb77293a058277cb148a0ff491fa
SHA1 3335315b13cd82075da2adbebe32759c01833e8d
SHA512 c83a8c4eb29c3171fefe983c3e342b6af1bc1add7288c75c5a782dc14f12d2af83043c2b43c9ab3e5db61c91de6d7cb473746517debcff7ac2c0f05bb8b0971c
SSDEEP 768:8CPGXSlQXvRVYVL0xpPuB5YBBaEiQD6m8eft0Sr+uh0d3TPwHh8fJVVoxUb:8bXQMZQ0xwB5Y7aEiQD6mPf2S6uoTPwg
TLSH
T1DC237BEFF8039C8F4623A667C55627152E9C6B9D2F53CFAB448D03F1322252CB0B595A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-en-us.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-en-us.hyb
Size 58KB
SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
MD5 b2693233d14890c81d322bec948549e7
SHA1 7ea8e42e319305010d3e6568fb4983171583dd06
SHA512 1bcb5a9c3db408fba6a6d02162a294c5c7264d4b202eb332da8d02c0c662cb070cf1534d5aa0754788d35abc88273f3337ca5f302ada95bcad077eaa52804915
SSDEEP 1536:h5tXyt+U07SAFarfxlLXSwk1cI3P05j23Kqo74TKAqs:JCtYuPrfxZE1c0o26aT9qs
TLSH
T13F43282BE574CE6A8D53177CC6A6225A08DFD789CFE4CACF452C81777056128AB3630B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-es.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-es.hyb
Size 14KB
SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
MD5 f6bd0377237fca3c4b7c6a6cb244298b
SHA1 b8df975889cfb06fc97db3d63a7820b7cf621f40
SHA512 0a36860580e295122f5e49091127386edc762eedba80a2d7ad958ab33307aabcd420173e08ae797a19664bc830800d92c548f3e434bf19bfd7791e50e0c45c2a
SSDEEP 192:j6aP1LZOFTlMa6Xb05w4rsv6SHyg8jNIcG3VTCkde7QpCKBz1iBOJGPJ3IDIHmz:hP9er5wKGhSfhIc4yyC+z1iM0PtIDIHQ
TLSH
T1B462084AF5455FE5C5A721B085530F9E0241E6980B90C36B98BC1D7ABD2AD3C7EC33AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-et.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-et.hyb
Size 20KB
SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
MD5 2ae42ab807286f6ec0ff1876d9536b0b
SHA1 cf3bbe7348eaf2cb3d93c5cc10964bb8d1ba07c1
SHA512 13c193571a7374bb169f6f0f06a9af7f8251cfcbf60825a85396c907d40f7837c8efd0a7bc8b6c4deed2bfca7b8508f132932d7860c2c9a4fb568d8ba2acaea9
SSDEEP 384:1HSUqMAZs9xsrscHJvMC0rWxMabdxhDPWSZuVyVm44/DasJVwLf3:1YanasivMaMaZxFPWSZ+EaZVwT3
TLSH
T1CEA2F99BB6818B61E23F0AF18AF93FAEC04541562F10578DF404D7B2B12A794AD93F5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-eu.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-eu.hyb
Size 665B
SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
MD5 e90ea97070cfcfa795fbd807ac300d34
SHA1 8c83b4cd54d394aeff31b14a219f2a3562132908
SHA512 210dd857f7799f1a926c7aa73f26912ad60723e099acf1566bc39efd445a1b194be4dc557d5da6874e7d75a37115aead9389b8009eec1422764e6648fe4cf8f1
TLSH
T1E8014F4AE4C04EAFC8D34EFF4017C6AD9681465BE4918B2E271CC8D5330556F679DB84
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-fr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-fr.hyb
Size 7KB
SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
MD5 092e0a95d6dada26ca56d2ed558749a3
SHA1 40bd8296e5e852fe725c7119083a8d5614037cf9
SHA512 c04ba62f4a0336e9b25bd2f6a8c3cb82c8b6127c1c04fc173abc9bf03767a9ffe18c9241b301d6f71f79f3377bc990f25f099d7660880c097a9cf4bb1e4bd48f
SSDEEP 192:Yq67m0o5PsoVQ5rT1+Eqy2G0Xy7i6uccc/J66POIY2:YHmkeQ/1v2Gay7Bupcx3vh
TLSH
T129F1B7C77A020EF5E86A3874D1D802950470AE242E602F56F3687C3DB5578652EE37EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ga.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ga.hyb
Size 34KB
SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
MD5 768032a419e0ae3bd870d591e2173715
SHA1 58fd709a1dc40176fb72189c20567ac1950b9db7
SHA512 4a4ca1f735b82f625002b0292f623179f2a6ce736f633cbfd6868e3db0709eb06eb462bd9da3ffa8365c3c38fdacba735ad32266cb3ec33d3e583ed073d0e3aa
SSDEEP 768:eZAG7bymjpz7qBZWBHn7xbeGhs0fCJRc3uQz3sfLsCPI2th4k/:iAGfJjpn2UbxbHhJaLc3pcfLFP/4S
TLSH
T1C3F24CC7FD09DF3FC6DF2436C078260643AE8B15AB45EB8B48466172B9471272E7692C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-gl.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-gl.hyb
Size 9KB
SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
MD5 1b08fb098d29c30488b8fc3f19dcf8b9
SHA1 df6e03da66a7a5ae4927334808c8c20752733667
SHA512 de1de90bd44d8977a4a69d6c64bc90f421f5e099396d06fc2466de6ee62a59f5a59ac1ba0ea96e69dfcf744f12165a8a9e9fda73afe5d38704a7b3b0488a369b
SSDEEP 192:ivHsKFShtcb9Gn03kfkyrU3N3k65tk5kX9yI:GSh+xGn0UfkLNF5tikXt
TLSH
T11812084AFF44CF03E82256BB8511E47A404195017736EBA9664AA2F42F0BBB85DDB7CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-gu.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-gu.hyb
Size 655B
SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
MD5 f6dc4e0fb974869d3d9457c582a38690
SHA1 e6708afa342639eb96cb97d1f541a421b2626d00
SHA512 a778236fa8c5f28e747214d0ba0417aca1c9a95e4c013fbc21e6defe39d0421a2b27ccb27e6f248404a9f6b5cd1014574d0478078f36af2a0181872ac8173d72
TLSH
T193F0752A72011F4FC5213AFC1D6D05781034C01043AD0323C22534B24164B7DB4088C9
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-hr.hyb
Size 2KB
SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
MD5 1864e47e724bb7f9c052a2840eee21d9
SHA1 9749136107913d6570c0c46ae2b52e66d8284c38
SHA512 2d6e76aed93652510f5864dde1e1923c67e7413e895abfa8fc7e8c9177e228e4d153afb7099b86697d1662ca3124ff2173f4aab2c978d52583a8e2dbc70c0842
TLSH
T10351A1EADF108571CBFB09B12D9E249D0274C6D92347374770B6B061A6A0FA26D604FC
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hu.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-hu.hyb
Size 309KB
SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
MD5 37b1f197e8dfbafdac4597edcf673e63
SHA1 e672c6870417c71acdcda6c16a7185d7a868eb68
SHA512 69ee820439633b348bf8efdd3c498a30270753e53ff78d022bd1b295c6c95e0501955009f610a12fc55c786a563b0af40d2b69a7584b47662b943acbac2d3634
SSDEEP 6144:wxOMr0dBjIg2U0RT7c25PkvQoc6yzRcOmpTeIrDh2ky5khBh13kwTbqgT3Gfhh4D:wvkufNkzFtuWlAh36
TLSH
T18E641A9D9633A637CBF4258ADE7909DFC0543B43E943325F308960E89916E252DD23FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-hy.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-hy.hyb
Size 605B
SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
MD5 70ea4451c3a26fd7197a3d2188be4152
SHA1 e0c1390d94876bf2a3cbdecaabb0e335bd86355d
SHA512 ac957947c51ea23a9b7ca482db08f0ca3332b8048025a96acb01a4486c1a87c3f3d08898e94cc8e0b20721c56ce708fb37e1bd81bee1fedba60a7f370d5ddaa4
TLSH
T112F0728CCB54CFD7C8AA05F8067858AC89C24AAE2180143233200CC8968B9008AA322C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-it.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-it.hyb
Size 2KB
SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
MD5 a4d5ec24d4c5ee745cdcdc019018074f
SHA1 15dcd0305508afe357eee16a543f4ce547ed500c
SHA512 e9022473816f2ecf4b5b06bd6b28d75ec64fdff974a991aa522eb105e3aa8d23dda0a45e11040af4db32e1f2e8cfffc058bf29fea1403af5a724831c730719fe
TLSH
T1D851EFAB9FC87E37D11BE038D0AE063AB331C49597B30127E6858B3B25D53354EA2083
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-ka.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ka.hyb
Size 9KB
SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
MD5 aa6c771083158380b2631f01e3f64f20
SHA1 1b41cd8e7585dcde57fc0b40502328845e524457
SHA512 f8cd93862ca2f76d769721bbf858955fc007bcf2e1892ae3e50846e28c6027208869f580479d3888610820ad5348a21a8709984aed844669fcaaa3f14199addc
SSDEEP 192:BykbapajL7tio65gkERH0b4/HXQDPPCOqyKrQhuqDr5fpMEgKh:BBNjSgk4H0kHX0XrKrQXrv/g4
TLSH
T1402232C3398617C3E0FB6831E17B3A498600EA827F52572BB3144339F652F661F82769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-kn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-kn.hyb
Size 711B
SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
MD5 d986ac2e7c75cf3ef929a7a269ae0d5a
SHA1 de8bf2ee2b8a77102337c45e5fec924c6c02355b
SHA512 5475c82fd5074334bc5f0f89edab62e94bc5865da0432c6f830b50db3045afda12bb698659951f6d0f76c55a43e1add8d47ad7fd03597bbe92d8178ad4783c71
TLSH
T10D0120F4B9493AABC4B4AC762A2282B841B8D5AA122D243FB05177869F18B0C664109F
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-la.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-la.hyb
Size 1KB
SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
MD5 9aaa47272099a013a4389bc314b7d2ed
SHA1 20b5bf65fa2023e67ea0687f643b52eab3fc68e9
SHA512 318b17b2e2b16ec73f231455d633c69fd44b32868c215053b3ccca54472e775d4589cbb4daad2fe37a40f79b6cde497f654654be009d485a84327e0f560fc843
TLSH
T10B31A60FB9859AA7F92E73701D250C48027EC2150F6B7B8753E4DAF7A546B026E3D64C
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-lt.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-lt.hyb
Size 7KB
SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
MD5 970c2671eac4fff6d840dc122e43b7c6
SHA1 d849f8b0950dea8c45e60296f6c8a7ae2e0f3f95
SHA512 c6b799aaaa714650ca39f8728bef6989e7e801508366caf1b384f021ee443bf21b3f59d28c2d9123a1f59b4abd3a27522cba830e431940e6ef9dccb5a319d581
SSDEEP 192:EzpJxnGZRt2XF1iG2TPY89i3k4OikTky2mKx:E5ORsmLjH4OikTk2Kx
TLSH
T13AF1514FFC188E52D82178B8E619156E249E538A1ED4632B72BC5479F023E786FF438D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-lv.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-lv.hyb
Size 37KB
SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
MD5 05dfdb7f1ee5744573ccd62ae565b2c7
SHA1 754991bdb092e363b8d884246f4ca780cc9ab2f3
SHA512 11675bc30f19161666f0d7b5ae001cd2682989465dd3f4973c455ba50eb1250e56fd1782d9589af2f8b3d6843a611d75d38e4ccc03a529a7b42cf403c482f2e8
SSDEEP 768:91xhOugI3cO0VLN2o2zmetRffK359CG02:9FtM9c/D4x02
TLSH
T13A031119D7719FDBF59438B92C0701C4A06CFA84BB42AB172285622776215FE3EB325F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ml.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ml.hyb
Size 776B
SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
MD5 84a0a36ea2c5b3209a3cd40d1043230f
SHA1 a98436b640a8cfb9cffa26e89fee768dce6f0747
SHA512 845ab7b075d3ec490c477af3b1f6d28cdc83289d206d079730f69ffd32a0fadb04eb3c9539e4dee6dac080489aea9f3365a20810b4bbb229c2aea3558bcfa1f5
TLSH
T1DE010260BD850B0BC4778E761253DA7642A0C9BC937A291B1398F00A294DF25526658B
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mn-cyrl.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-mn-cyrl.hyb
Size 5KB
SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
MD5 07cda8332b62726883b29290ca35fc89
SHA1 2e3e1a7e4484225d8e25a59695e86eea9f516ec6
SHA512 a55a5a7ad3e6b084bb15d360a732f344eeb59e0ecdb8a431dc9379653d3cd828131daf18dd91b6b45001aaeecbaa87e1afd6eab4a795373dca1c4e68c7e0cc85
SSDEEP 96:l/PxIafuSv0YHQYYrJ8XFY+qT4uPnjHcMymaH0:lnu7SorJ0FaT4Onjc1pU
TLSH
T1F1B165CD6ED14FF2DB787471942D16A67280FB8835E0126BD279902CD716C387D9328E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-mul-ethi.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-mul-ethi.hyb
Size 3KB
SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
MD5 b42317960e5da868a8120cb79a440abf
SHA1 5bc583fe2bcf8d9ef971c66a5f57821aad1458cc
SHA512 c26c686f7a1ae785a6d5b5856670cf9b7bc48e4a388d2e2922b21fd6c0124357acfeb73b370ab617c5ed4b033d945fb3c7cc235a661baaa7fb976dd6edec66c0
TLSH
T1AF711AB4DE80190FCFA5BCB446FF0EDD9AFC905A96290A53B1DC640BCAC5C7066C0698
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nl.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-nl.hyb
Size 75KB
SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
MD5 d3bb05944de3d0d7186e7e9383805e2c
SHA1 1b1ea734d900f8d766e7226fee09ee14fe606a7b
SHA512 5fd9c6e5e4f060d1b37b7e80f162ab10c1efb24258a5bb26c89469004191ec5517e4cf4c1c7724c838c62b5358d3c95d515c1ee4a5b001c42c3325ce1d11a928
SSDEEP 1536:2jJm3BkOrDrNWS+9cyF85YT0Bl3aGmsRlSq7wb/lFFQ6B:29m3DXgpeFl3ssRJ7m/lFlB
TLSH
T16F737D69F60B1F41B878A465C69CC76D86443BC628E00B5F9A9F16B8706786D3FC036F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-or.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-or.hyb
Size 647B
SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
MD5 7e265a294303f69aa66c243f5f474463
SHA1 4d382ab4bed3dbe481710f0c651ca87b2394661d
SHA512 d347d422249945c9a664be3c48e1ec07becaf03bd3525869f06c9aa328b4fe2884ac963cb97949d97e5ab41617b0fc6f2a2171f06007bf94cce88d55a15da922
TLSH
T1C7F00E9DF601C74BC0311EB00DB407B92339C729F29B075B926BF121CE8879E988A0C8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-pa.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-pa.hyb
Size 607B
SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
MD5 0f27e5bccc1cd9ddf3eac020da27da57
SHA1 bd3c83300aad3e79287c1e806e864f7644240911
SHA512 141da09a4a1a3b9e581751a1b2c70cbe981e1a915ea538a8015c7614d11be059cd3a03b4f2420f963e5657a4417b3cc5c3a22e0028132a21363219e27751ccfb
TLSH
T151F0542D92232CDFF33500F8116A53D402E0C93D8BCF2213E0545A1791FA06A500DAC3
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-pt.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-pt.hyb
Size 1KB
SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
MD5 564ff32ded64c6bfc693f2758a53d68e
SHA1 3965f963d36bee1598683e72c857a3bff196b295
SHA512 e9e574ba07703295aa8b7fd4603ef079816ea44394bd62750e08e523b9a7b408fd979552d90d04f825242ccada7ad66003fba76c9c8469541b5c6d2fb85c41e8
TLSH
T1A12149C8FB639B77DD6E1F77508AB60C03D4C2F247C90B1F819C56AF6EA128A0D62551
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-ru.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ru.hyb
Size 19KB
SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
MD5 4d132ab42e0c8abd3ba93d8b34bdbeb3
SHA1 f3ce82f2dbdead517d5faa4490e1975ef8fafa6e
SHA512 eb8e27ab070db7407f1ede29751aab4a88f4182e878e956cc51d0ed9ef2c9afdec208f2f4700551374c5a7f69c176ed7d6cb771ac17c3eae77323a5709a85fcc
SSDEEP 384:hRsmaIUzHCX1GgFJwKSw4foB7zM1xnXg3JIcDn4VOzfr7K8lxf4:hR8IUzIRQw4foPM1xn6lDn1TFA
TLSH
T15792A48FEE2E7FB5C4671A73C65E22E4400B27200791EA5E8074047AF1EA46E1F9473B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sk.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-sk.hyb
Size 62KB
SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
MD5 cea295e8b4b99f95738727905a9184e2
SHA1 31db6c826fd7830bc76f0ac1b9d21c2ef67f8b1f
SHA512 b20f651c74a070a4d26b58bd8462e553077b7333a2c854f7974a7e67bc442c3a6feba52c3a537fd9f1579d5de0126bbe1da4be99aabee79b7987b2edfdd8ed67
SSDEEP 1536:tIAzVJ7EgiDEY0ZcznEDEo5JWJ4pgY5AW/N+:dhJRiDEfMaEw24auAv
TLSH
T1F2532A46DC298FA9DC3D50FA98E40CA929105ACB5F416C3FBC7C0199BE22D192FE175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sl.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-sl.hyb
Size 6KB
SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
MD5 a21358dd4506643486f72f7d80d60a5b
SHA1 fb7ee02adc970f4d71c84d18777a59508fa1a46c
SHA512 7dc9e18050b3df4288aacaaffdb17668f0b5d8b5e103305070d2ef83dab2f5dbe3b071b05ca69340d86a53d47d4cf8197ecc1bdd086a320bf81f9df8c0d3ccb8
SSDEEP 96:LbHqR1cAky2TFP+HQ1QpHPZtCjUtKapFxx8mLJO/5n0PatE08YyM9eW3svUaf5lk:P21cPFPAHPGjpEr85/NVtEjoeW88af5m
TLSH
T162D1D746B6ED8B27E51998BFC347646E817BC10AEB46D242734CC31594C136C9363389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-sq.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-sq.hyb
Size 1KB
SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
MD5 a22d0f39cd83f3a8e251f95c5b12dd31
SHA1 24915151b31525a0a9ea0ef7faf8ddb8b3faf11e
SHA512 ad319fc85aa612bedad8289a20fcf42d4336c4b3ed704ce74c6c0ed68e3e18d62c18549f8a5efe5bd481d8def514f2c6b083803485e04bd5919bc600501c0e00
TLSH
T149416ECA57D48F2BE42B1A3109137228922CCF2553A4C34FD0B8915FAF823E9EC00320
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-sv.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-sv.hyb
Size 70KB
SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
MD5 892598dc59ce71e68ed337ed9ff3abc1
SHA1 c89af0d28b8b769150981539ec2318e34df29cce
SHA512 eb13a68ff5cdd0edd73ce4c109984b3e58763812c31755bd55c0a324048873f610e36d1c41b3f642a64f7fe0945ee872a02fde744d5821aab03a2288851d984d
SSDEEP 1536:KC2kHtGIlaNlgMMjmhkFQ0+9FRGv8L38CNf7k2k1rJ:KCDcIlt5mhweMEX42k1l
TLSH
T1BF634A93F60B0F529C7834E5DE591BFE936E6AC61A80452A7A8C6134B13BC6873D035F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-ta.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-ta.hyb
Size 554B
SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
MD5 ab2f6f9696fc7d699356244725e7c778
SHA1 2026841da77dd77715b521ec73bf819d1d098b60
SHA512 88a4c2117102bdb60d482448c36dd79a8da1130a4636513c8ed56eb282da6c638d27eabc9799eab8bc1a7234a0aa6690c55408500608387912fe283f13bcc328
TLSH
T1FCF02BA0FA00480BF4B80034B0994248C388C9202A0F0F0F0194BA6F7B9B2B45E020CA
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-te.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-te.hyb
Size 703B
SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
MD5 bf9df63b3c97de3bff99e24ee4bc5f2e
SHA1 774659cf1d58bcfc69900315281e99e038cd2a97
SHA512 52f40a2c38cc62aa6b0e081c90b9dfcd6d3ed03a4a90e596e11ac85bfda96eaa74d465cd7168b803c0d59a53df878b0ea1ca657c5caf3de49c8758cbd527bee2
TLSH
T1AF01E1F8B5008E8FC57F48B0106A569D07B4C11E626E151E8675B856C5CCE1AAD0E88B
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-tk.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-tk.hyb
Size 2KB
SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
MD5 ed60185b6f455b6f8ed27eaeb73334a9
SHA1 11e53bda5e2a0acd000692ad8af45611b57277ad
SHA512 3ef211a330efe9e34468c9c460dfcda1b8da80d113317a177205c76ffcb916ff25ffcb4485703fd01ee248d356a67e5bb18df8e5ea40b2aab3999121083b7e30
TLSH
T19751FD838A2E2D4DEF60C5B600F57AAE52FB667031D461944C20BAFADD31EC20DC35E6
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-uk.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-uk.hyb
Size 18KB
SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
MD5 0ec028755f0cd9ebba41fb7273de8baf
SHA1 a8a784454269a2769710fb3725730f06cdd7b242
SHA512 024c611ebabb0a84b5a887d808e24884ccbb4550f222e651728451cddb9a941d7d9a39786ddfe4a57d049dc82780c6bcf376d3e98547ecc4808fc7ed32ed47a9
SSDEEP 384:+uuckg5iXANOMyv3qTtbfRhn8da+dzk29L5zA:1FviXA4MuofRhn81zk291A
TLSH
T1DE92D76677260FDFE9E75A7B84D800C9A9DEEA9003A5C126D1106736B00EF6C6FC1369
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-und-ethi.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\hyph-und-ethi.hyb
Size 3KB
SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
MD5 4aa9b2c0c9ccde5140d01dc6502242bb
SHA1 d1759e8a62a42a72529adf9bc73820bf32f2a37b
SHA512 1b456301d814810e857e8a0c426e703a802febb5c3dfd8d0e5c58aeefc6c2d6f55c95830024c243d2bfbb8322ef72e9ff959cdc7f92ae51bebe8b053d9cda1e5
TLSH
T1EB710AB4DE80190FCFA5BCB446FF4EDC5AFC9018A6250A57B2DC640BCEC5C706AC02A8
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1440794273\manifest.fingerprint
Size 66B
SHA256 1703e4e777b285aba435e71256890a5fe92d24cb01e0eefd03baddca228eee2f
MD5 1d09a9a5e62b846125cd7b929cccbe44
SHA1 5271237c4d13f7735689a5acc52e48c491669aa3
SHA512 cd2a2acc126ac6a7dcc81088047c894a427a44c5caa96003c1f3521beac3b46c117f0794e564838de14a18a3f65cb7988ba86b404e690ec77a57518247c03fbb
TLSH
T175A02288B00088830A00E2CAC202C88EA080020032002E2C3F200C8BB8C8220AC82CC0
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1786257785\crl-set
Size 13KB
SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
MD5 5111ab39b220749a299b5bb7cd25c730
SHA1 970c9013ee629ded1b5d2a058cd147950c3544ab
SHA512 37caae776f5d9365367e12a6ca13e07761f09b3cf6d1f9ea9523af89e6f2579afdd148d3942822358a49ac597a544c30bdf070aee051d69d8a0adab6f6af708a
SSDEEP 384:oeYPnEDMU2kk0yu7uCnglcJUoCzL4pv2W9cBTgE:ojPEoMk67R1UoCwV2W0cE
TLSH
T16152AF4FDDC4A62AF03911AE982262A412794A8552554B731B6C3A64BCFB28D4E38C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping660_1786257785\manifest.fingerprint
Size 66B
SHA256 7ad6d17bd7b1bf49425f7efe322f4a9065446eca71d3ea1ebe0a838efcb08e95
MD5 fa32cf839f99432676ca9acccd8a0550
SHA1 9a869d2475f9840495188509e12ce9ca5a9e7189
SHA512 b1e901d92adecc46f96f52ac38954688f0a2514710041109785656ffe694766448cdbafcda397e9edb196763997d952537ebfefb4e5d128954576024f8856c04
TLSH
T1C5A00216AEA0E812F29486DEC4254B6A14372BF9AE76008979E8E4819C87260815B8D5
MD5 SHA1 SHA512 TLSH

Submit Download

memory/716-4173-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/716-4981-0x00007FFF0BAB0000-0x00007FFF0D0C3000-memory.dmp

Download

memory/716-9692-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/716-10086-0x00007FFF0BAB0000-0x00007FFF0D0C3000-memory.dmp

Download

memory/716-5325-0x000001E35A710000-0x000001E35A777000-memory.dmp

Download

memory/716-5332-0x00007FFF0BAB0000-0x00007FFF0D0C3000-memory.dmp

Download

memory/716-33799-0x000001E35A710000-0x000001E35A777000-memory.dmp

Download

memory/716-16148-0x000001E35A710000-0x000001E35A777000-memory.dmp

Download

memory/1764-3925-0x000001EC7A140000-0x000001EC7A1EE000-memory.dmp

Download

memory/2192-3935-0x000002C157060000-0x000002C15710E000-memory.dmp

Download

memory/2192-4234-0x000002C157060000-0x000002C15710E000-memory.dmp

Download

memory/2380-5653-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/2380-5603-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/2380-5652-0x000001D8138E0000-0x000001D813947000-memory.dmp

Download

memory/3176-517-0x000002D635C10000-0x000002D635CBE000-memory.dmp

Download

memory/3176-161-0x00007FFF2FAF0000-0x00007FFF2FAF1000-memory.dmp

Download

memory/3628-3518-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3517-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3525-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3523-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3522-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3528-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3527-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3516-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3526-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3628-3524-0x000001EFCDC20000-0x000001EFCDC21000-memory.dmp

Download

memory/3948-4078-0x000001F20E080000-0x000001F20E12E000-memory.dmp

Download

memory/4564-3552-0x0000018DE6880000-0x0000018DE705A000-memory.dmp

Download

memory/4564-3551-0x0000018DE6880000-0x0000018DE705A000-memory.dmp

Download

memory/4716-4850-0x00007FFF0BAB0000-0x00007FFF0D0C3000-memory.dmp

Download

memory/4716-4863-0x00007FFF0BAB0000-0x00007FFF0D0C3000-memory.dmp

Download

memory/4716-5333-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/4716-3290-0x0000029EDEFB0000-0x0000029EDEFB1000-memory.dmp

Download

memory/4716-3566-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/4716-3260-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/4716-5334-0x00007FFF0BAB0000-0x00007FFF0D0C3000-memory.dmp

Download

memory/4716-3261-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/4716-3343-0x0000029F245D0000-0x0000029F24637000-memory.dmp

Download

memory/4716-3265-0x00007FFF0E4D0000-0x00007FFF0EDD4000-memory.dmp

Download

memory/5300-5016-0x000001E427540000-0x000001E4275EE000-memory.dmp

Download

memory/5664-5194-0x000002685A410000-0x000002685A4BE000-memory.dmp

Download

memory/5684-9207-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-3234-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-3384-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-4435-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-3217-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-2392-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-8296-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-9053-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-3263-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-414-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-5326-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-6351-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5684-5611-0x00007FF680E50000-0x00007FF681AAF000-memory.dmp

Download

memory/5864-516-0x0000029549750000-0x00000295497FE000-memory.dmp

Download

memory/5864-31-0x00007FFF2FAF0000-0x00007FFF2FAF1000-memory.dmp

Download

memory/5864-3557-0x0000029549750000-0x00000295497FE000-memory.dmp

Download

memory/6060-5371-0x000001BD48540000-0x000001BD48D1A000-memory.dmp

Download