Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/04/2026, 07:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
roblox-dumper.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
roblox-dumper.exe
Resource
win11-20260130-en
0 signatures
150 seconds
General
- Target roblox-dumper.exe
- Size 1.8MB
- Sample260424-hsprpaas8z
- SHA256 929e2b401a0c7c79c47a4b3ecd88cddcb7149d6def6a432b13bfdb8496751b34
- MD5 9b401be74ff22971802836405504621c
- SHA1 a90f891fa4638d3d1ed40e7fb90097a909751d29
- SHA512 8c3caea8cea57070880552a84bbf2eb6d970cef09853d5ad33a41ce8cda811e3fd69712de309cc5bc200a23fac3b300754598e86aa8a2848d9fbdf7c628cc30f
- SSDEEP 24576:4Lj8FyvVeGv6ZJ75RO/pgO6JiA63qjdx6C3CgdutYsgh0lhSMXliYu4NK:68JZm86CS4utDD
- TLSH T1BF957C73EA5050FDE47AD1B88E964A0BE732B44643719ADB1790566A2F07BE41F3BF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\roblox-dumper.exe"C:\Users\Admin\AppData\Local\Temp\roblox-dumper.exe"1⤵PID:5796
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5980