Overview

overview

7

Static

static

1

RobloxPlay...er.exe

windows7-x64

7

RobloxPlay...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    RobloxPlayerLauncher.exe
  • Size 5.7MB
  • Sample240511-lsfqkaec78
  • SHA256 834bd41f708d1393a528da769b015538b45b279b4af4969e1df54c0c426add3a
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • RobloxPlayerLauncher.exe
    .exe 5.7MB

RobloxPlayerLauncher.exe

  • IMPHASH 7bd559eda3b89962f17e387edb550919
  • SHA256 834bd41f708d1393a528da769b015538b45b279b4af4969e1df54c0c426add3a
  • MD5 SHA1 SHA512 SSDEEP
windows:5windowsx86arch:x86
Digest
7e:d2:46:e8:85:78:6e:ac:a1:1d:e9:59:6a:7e:1d:8c:5a:77:06:05:10:9b:08:ae:9b:5c:0f:21:2e:1c:75:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Digest
93:a9:b1:93:89:a3:5a:8e:7d:ad:65:fc:0b:20:38:f3:10:c3:2b:a1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
1
Major OS version
5
Entry point
3398306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\buildAgent\work\ci_deploy_nbsninja_boot-x86_git\build.ninja\common\vs2019\x86\release\Installer\BootstrapperClient\BootstrapperClient.pdb