fe4e2de98a58a3d67785c9ae2343ba34f3207a2a77fe21c88c1a5488acc02d22

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
300s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 01:50

Target
SLaunch.exe
Size 245KB
Sample260731-b9dmestybw
SHA256 fe4e2de98a58a3d67785c9ae2343ba34f3207a2a77fe21c88c1a5488acc02d22
MD5 a05992c20a823307544a9840a8ffed4d
SHA1 e85cda936c5ce601da7d57e547751be93aaf5ad4
SHA512 338ed0c985f36f72fe2411f66d4e75465b7743373d9e292bef33f89f753584e379ba957af1c62ddca95d385255f44f274f069fe7a2e2b6f7b23303361097abee
SSDEEP 3072:bNwrkXnZkTZfGK3uhMhXktRo8LeReUZqCZKl1Q:BJ8ZgyiLTEmQ
TLSH
T18A349F13A6EC3CEAD03A8730B77747C0DB2EEC655391D58E42D006A68A7E5937E267D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open	SLaunch.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\SLaunch.exe\" %1"	SLaunch.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell\open\command	SLaunch.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player	SLaunch.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\roblox-player\shell	SLaunch.exe

C:\Users\Admin\AppData\Local\Temp\SLaunch.exe
"C:\Users\Admin\AppData\Local\Temp\SLaunch.exe"
1⤵
- Modifies registry class
PID:4632