fe4e2de98a58a3d67785c9ae2343ba34f3207a2a77fe21c88c1a5488acc02d22

Analysis

user interaction
yes
max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/04/2026, 18:09

Target
Solara/SLaunch.exe
Size 245KB
Sample260418-wrpl7adv4x
SHA256 fe4e2de98a58a3d67785c9ae2343ba34f3207a2a77fe21c88c1a5488acc02d22
MD5 a05992c20a823307544a9840a8ffed4d
SHA1 e85cda936c5ce601da7d57e547751be93aaf5ad4
SHA512 338ed0c985f36f72fe2411f66d4e75465b7743373d9e292bef33f89f753584e379ba957af1c62ddca95d385255f44f274f069fe7a2e2b6f7b23303361097abee
SSDEEP 3072:bNwrkXnZkTZfGK3uhMhXktRo8LeReUZqCZKl1Q:BJ8ZgyiLTEmQ
TLSH
T18A349F13A6EC3CEAD03A8730B77747C0DB2EEC655391D58E42D006A68A7E5937E267D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command	SLaunch.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player	SLaunch.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell	SLaunch.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open	SLaunch.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\Solara\\SLaunch.exe\" %1"	SLaunch.exe

C:\Users\Admin\AppData\Local\Temp\Solara\SLaunch.exe
"C:\Users\Admin\AppData\Local\Temp\Solara\SLaunch.exe"
1⤵
- Modifies registry class
PID:4736