Rc7 Remake.zip
- SHA256 73436e46b4ff73837131d5042969307f3239e79dae5e55056d7ea67c55e00dac
Overview
overview
5Static
static
5old script...ion.js
windows10-2004-x64
3old script...ion.js
windows11-ltsc_2024-x64
3old script...pt.bat
windows10-2004-x64
3old script...pt.bat
windows11-ltsc_2024-x64
3old scripts/Astral.js
windows10-2004-x64
3old scripts/Astral.js
windows11-ltsc_2024-x64
3old script...s).bat
windows10-2004-x64
3old script...s).bat
windows11-ltsc_2024-x64
3old script...che.js
windows10-2004-x64
3old script...che.js
windows11-ltsc_2024-x64
3old script...ne.bat
windows10-2004-x64
3old script...ne.bat
windows11-ltsc_2024-x64
3old scripts/Bars.vbs
windows10-2004-x64
5old scripts/Bars.vbs
windows11-ltsc_2024-x64
5old script...in.bat
windows10-2004-x64
3old script...in.bat
windows11-ltsc_2024-x64
3old script...oi.bat
windows10-2004-x64
3old script...oi.bat
windows11-ltsc_2024-x64
3old scripts/Beast.js
windows10-2004-x64
3old scripts/Beast.js
windows11-ltsc_2024-x64
3old script...gs.bat
windows10-2004-x64
3old script...gs.bat
windows11-ltsc_2024-x64
3old script...gs.bat
windows10-2004-x64
3old script...gs.bat
windows11-ltsc_2024-x64
3old script...ING.js
windows10-2004-x64
3old script...ING.js
windows11-ltsc_2024-x64
3old scripts/Blood.bat
windows10-2004-x64
3old scripts/Blood.bat
windows11-ltsc_2024-x64
3old script...ff.bat
windows10-2004-x64
3old script...ff.bat
windows11-ltsc_2024-x64
3old script...om.bat
windows10-2004-x64
3old script...om.bat
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
old scripts/Armored Getobjects Sellion.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
old scripts/Armored Getobjects Sellion.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
old scripts/Assassin Script.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
old scripts/Assassin Script.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
old scripts/Astral.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
old scripts/Astral.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
old scripts/Attack on Titan (Swords).bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
old scripts/Attack on Titan (Swords).bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
old scripts/Avalanche.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
old scripts/Avalanche.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
old scripts/Barrel_War_Machine.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
old scripts/Barrel_War_Machine.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
old scripts/Bars.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
old scripts/Bars.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
old scripts/Basic's admin.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
old scripts/Basic's admin.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
old scripts/Be Dat Boi.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
old scripts/Be Dat Boi.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
old scripts/Beast.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
old scripts/Beast.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
old scripts/Bird Wings.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
old scripts/Bird Wings.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
old scripts/BirdWings.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
old scripts/BirdWings.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
old scripts/Blackjack NIGHTWING.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
old scripts/Blackjack NIGHTWING.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
old scripts/Blood.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
old scripts/Blood.bat
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
old scripts/Blue Lua STaff.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
old scripts/Blue Lua STaff.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
old scripts/Book of Wisdom.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
old scripts/Book of Wisdom.bat
Resource
win11ltsc2024-20260709-en
| resource | yara_rule |
|---|---|
| static1/unpack001/AntiSkidDLL.dll | upx |
| static1/unpack001/bin/AntiSkidDLL.dll | upx |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/bin/RobloxPlayerLauncher.exe |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/AntiSkidDLL.dll |
| unpack001/RC7.exe |
| unpack001/bin/AntiSkidDLL.dll |
| unpack001/bin/Multiple_ROBLOX.exe |
| unpack001/bin/libcurl.dll |
| unpack001/bin/xxhash.dll |
| unpack001/bin/zlib1.dll |
| unpack001/bin/zstd.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/bin/Xeno.dll |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Nov 30, 2021
SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=19, id=259, version=27412,
count=197, id=261, version=27412,
count=40, id=260, version=26706,
count=28, id=259, version=26706,
count=126, id=261, version=26706,
count=27, id=260, version=27412,
count=1, id=262, version=27412,
count=39, id=257, version=27412,
count=427, id=1, productName=Unmarked objects,
count=8, id=260, version=27045,
count=2, id=259, version=27045,
count=133, id=261, version=27045,
count=60, id=261, version=27040,
count=1, id=255, version=27040,
count=1, id=258, version=27040,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 22, 2026
CN=Rizve A
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=6, id=259, version=35403,
count=8, id=260, version=35403,
count=39, id=261, version=35403,
count=12, id=257, version=33145,
count=5, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=257, version=35215,
count=5, id=257, version=35217,
count=584, id=1, productName=Unmarked objects,
count=121, id=264, version=35723,
count=1, id=256, version=35723,
count=1, id=255, version=35723,
count=1, id=151,
count=1, id=258, version=35723,
Oct 1, 2025
SERIALNUMBER=05901601,CN=FireDaemon Technologies Limited,O=FireDaemon Technologies Limited,ST=Suffolk,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=05901601,CN=FireDaemon Technologies Limited,O=FireDaemon Technologies Limited,ST=Suffolk,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=10, id=259, version=35207,
count=14, id=260, version=35207,
count=31, id=261, version=35207,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=195, id=1, productName=Unmarked objects,
count=11, id=257, version=33140,
count=42, productName=Unmarked objects (old),
count=978, id=260, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=6, id=253, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=14, id=257, version=33145,
count=3, id=257, version=35215,
count=194, id=1, productName=Unmarked objects,
count=180, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
Oct 1, 2025
SERIALNUMBER=05901601,CN=FireDaemon Technologies Limited,O=FireDaemon Technologies Limited,ST=Suffolk,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=05901601,CN=FireDaemon Technologies Limited,O=FireDaemon Technologies Limited,ST=Suffolk,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=32, id=261, version=35207,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=33140,
count=3, id=257, version=35217,
count=655, id=1, productName=Unmarked objects,
count=107, id=260, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33808,
count=3, id=259, version=33808,
count=8, id=260, version=33808,
count=12, id=261, version=33808,
count=2, id=257, version=30795,
count=37, id=1, productName=Unmarked objects,
count=1, id=260, version=34120,
count=1, id=256, version=34120,
count=1, id=255, version=34120,
count=1, id=258, version=34120,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35207,
count=4, id=253, version=35207,
count=3, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=2, id=257, version=33145,
count=50, id=1, productName=Unmarked objects,
count=15, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33808,
count=4, id=259, version=33808,
count=8, id=260, version=33808,
count=13, id=261, version=33808,
count=3, id=257, version=30795,
count=58, id=1, productName=Unmarked objects,
count=36, id=260, version=34120,
count=1, id=256, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,