Overview

overview

3

Static

static

3

NLog.dll

windows11-21h2-x64

1

RobloxPlay...pp.exe

windows11-21h2-x64

1

RobloxPlay...pp.exe

windows11-21h2-x64

1

Analysis

  • user interaction
    yes
  • max time kernel
    30s
  • max time network
    31s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-de
  • resource tags

    arch:x64arch:x86image:win11-20260513-delocale:de-deos:windows11-21h2-x64systemwindows
  • submitted
    02/08/2026, 17:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    RobloxPlayerNotifierApp.exe
  • Size 510KB
  • Sample260802-vx2chatwhw
  • SHA256 6c66db4d75311f5e743dc451656cfeb645d71869ce586797ed2df7185cb70fd6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RobloxPlayerNotifierApp.exe
    "C:\Users\Admin\AppData\Local\Temp\RobloxPlayerNotifierApp.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:4916

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        i05t0n1j.newcfg
        • Path C:\Users\Admin\AppData\Local\Temp\i05t0n1j.newcfg
        • Size 223B
        • SHA256 a0fdf5f19e97135aed1cce7458c27a329fd16c23766cfd01ff6e6ec65c07a288
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        qbmzx4pa.newcfg
        • Path C:\Users\Admin\AppData\Local\Temp\qbmzx4pa.newcfg
        • Size 235B
        • SHA256 fb80017844461da41eafa3f520d0d4d2f61f5d32251a364ce799c9b779b96692
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        r2mxklx1.newcfg
        • Path C:\Users\Admin\AppData\Local\Temp\r2mxklx1.newcfg
        • Size 231B
        • SHA256 03d2e063588b0d05db8fc295f279c11da9e78fdf3644632505ab17e7143c20be
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tlhmugdk.newcfg
        • Path C:\Users\Admin\AppData\Local\Temp\tlhmugdk.newcfg
        • Size 246B
        • SHA256 2205575951daee844a674a5d02fd56c8c17da10306dc6d89e00cb127db3d655d
        • MD5 SHA1 SHA512 TLSH
        Submit Download