f94efdddd4433244736eaad92c688a2205a0a827a79c4a46f554c35fb25d08e1

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 18:07

Target
roblox-dumper.exe
Size 1.4MB
Sample260728-wqc7rssala
SHA256 f94efdddd4433244736eaad92c688a2205a0a827a79c4a46f554c35fb25d08e1
MD5 32ff62f652112a992d7bea6399e05d09
SHA1 ff6d285bbed966c305adac2a2dd0abe25479f4ed
SHA512 b3dcea6d188799f75e2ca6630e54d05d0439a9f150896588f20dbb19d29f4eae63ee1d0e3b2772d845c7841cb53b94b16011e410b35e868376acd8e7b9c9557f
SSDEEP 24576:dMIgF5wKF83SqEGLxx49D8uiuaQ0rOV5jlGqHfJh0lhSMXl54YXnT0B:VK63pP4ZlGao6
TLSH
T18A656D76666440FCD17BC2FCCA564D02E771B84603B1AAEF03E056A61F1BAE55E3E702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4864	roblox-dumper.exe
4864	roblox-dumper.exe

C:\Users\Admin\AppData\Local\Temp\roblox-dumper.exe
"C:\Users\Admin\AppData\Local\Temp\roblox-dumper.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4864