General

  • Target
    RobloxPlayerLauncher.exe
  • Size 4.7MB
  • Sample240224-xcfamsca31
  • SHA256 ed8ba6067230192e4f3a2a988adb331d4294951aa54e310fb92386b4cba6b506
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • RobloxPlayerLauncher.exe
    .exe 4.7MB

RobloxPlayerLauncher.exe

  • IMPHASH a18d3da9c7da7b242df59d3beaa4d06d
  • SHA256 ed8ba6067230192e4f3a2a988adb331d4294951aa54e310fb92386b4cba6b506
  • MD5 SHA1 SHA512 SSDEEP
Digest
16:a2:19:f0:cb:49:aa:cf:70:b1:2e:de:1a:d5:18:01:6c:1a:6a:33:2c:07:73:9c:9e:c1:9d:10:30:f9:6a:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Digest
d1:64:63:7e:9b:bc:29:ad:7d:26:0d:5b:09:be:09:35:db:47:a0:31
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
1
Major OS version
5
Entry point
3171762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\buildAgent\work\ci_deploy_nbsninja_boot-x86_git\build.ninja\common\vs2019\x86\release\Installer\BootstrapperClient\BootstrapperClient.pdb