RobloxPlayerNotifier-v2.0.0.zip
- SHA256 bfdaaadf99ce8fca225415493c4aa959266c6781f17f43d01b414f16697ea4b8
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NLog.dll
Resource
win11-20260513-de
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
RobloxPlayerNotifierApp.exe
Resource
win11-20260513-de
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
RobloxPlayerNotifierApp.exe
Resource
win11-20260513-de
windows11-21h2-x64
3 signatures
900 seconds
General
- Target RobloxPlayerNotifier-v2.0.0.zip
- Size 2.2MB
- Sample260802-vx2chatwhw
- SHA256 bfdaaadf99ce8fca225415493c4aa959266c6781f17f43d01b414f16697ea4b8
- MD5 0d40928267ca342a3229b3eb6491023d
- SHA1 3691444f6ea61980ca47520ee519e23d44a95df3
- SHA512 7b171090fb6b250c6515933952c4a9276d53715ced328112b4122a62885e3b9ccd210660232b3cc77b4ce24d4d9d406b4d396870354cf44b0567f21cc5460913
- SSDEEP 49152:YGdiOtiiUtCQokcrDiIyJeOSxC+Lm67dKSWH/QVXLRFdyguGv:BsgaokcrWhmLm67dXWfQVXLRFdzv
- TLSH T117B53337E858EBA2E49B23B4C275CE8E1E9F00CD09381C11597669ED4A76CC2D92BF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/NLog.dll unpack001/RobloxPlayerNotifierApp.dll unpack001/RobloxPlayerNotifierApp.exe
File Explorer
-
RobloxPlayerNotifier-v2.0.0.zip.zip 2.2MB
-
NLog.config.xml 1KB
-
NLog.dll.dll 931KB
-
RobloxNotifier.ico361KB
-
RobloxPlayerNotifierApp.deps.json1007B
-
RobloxPlayerNotifierApp.dll.exe 763KB
-
RobloxPlayerNotifierApp.dll.config.xml 261B
-
RobloxPlayerNotifierApp.exe.exe 510KB
-
RobloxPlayerNotifierApp.pdb26KB
-
RobloxPlayerNotifierApp.runtimeconfig.json429B
-
Sounds/EasyPeasyLemonSqueezy.wav1.6MB
NLog.config
- SHA256 04a3e6cc60772afbb90c3c53c6f05e4a416ea2ed6ba6df80545a3212acbc292b
- MD5 68f6c38388205d830eed73d6c72bfc46
- SHA1 dda59872fef408232a25e837263a9acc9beaa578
- SHA512 95ec46e8725974feacc73113c88117c7d603abd4ac249f3c13e5d59a7c862f2cbe9e536404940e2b33867b721e5293907e56ed80064e3cdf465e80ed3efde272
- TLSH T1E0311152D209CC5582B2B165B979052DE582A3D3C09269D7F0CCA23A3F7200392AF34F
- MD5 SHA1 SHA512 TLSH
NLog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c4b04c6c2839ac011944698eea4983d0aad722bb82c6015cc7f1a5038c7f45f1
- MD5 46dfaeb37171c59d52fff9900e3673fd
- SHA1 2bfa9aaa6327125d969495ec38463fa6d54efcf8
- SHA512 56ff28a987a7ae02b54da796ea5f5c47a5a1f0af5a8cb6d5fd772bd7cefd6a4daa626b85e45d08d994b8404834a5e602f924b52979255e5d4d319e8a8a854ed5
- SSDEEP 12288:AhZHFZBfd1hf13NqMLscbk8fWQOhfB5lHexNLC7mvK1ORAxnzz9z:AhZHFZBfd1hf13NqobLC55lkPIOKzzh
- TLSH T180155B1337FD9A2BE09E2737A430062947B1E895E7BAF75F5914A26D2E633107D003A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
943638
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/NLog/obj/Release/netstandard2.0/NLog.pdb
mscoree
_CorDllMain
Name
.text
Size
914KB
Virtual Size
913KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
RobloxNotifier.ico
- SHA256 d1a417251c633bb624861b977f34fdea615281e22f76cefdfd49de4f5f9f320d
- MD5 b95a94792896af581dfd7145d3e4bdc1
- SHA1 ec5831f5617c9da43b7326dc47d64c82484fe8b5
- SHA512 7a6a00612005d7b5faa11051a8accd4a188503cc1042cf8cee9f2831363f9a0d4c90a540f342a86faedfcde303de82a72b7b32173674f4077be2f433e038b83d
- SSDEEP 1536:ThhzwBV2TrImX8hmdVgDESzCuXybHdYDeKHCdOnECmnGa42yyeu2r777vrnjO3jO:Tf0BVUIrmf2FzCH8CQninGpbHrnjOz
- TLSH T12374F9D71B8B68AED0CA33FA314752D4AA628C4ACC2645916737BD93B177603CDD138E
- MD5 SHA1 SHA512 SSDEEP TLSH
RobloxPlayerNotifierApp.deps.json
- SHA256 950ff5a4606bd6dcee39819315474ee648f77faac875745ad32c5340ad3d01f3
- MD5 68c38762a8a0cccf47e5a27384e028f4
- SHA1 47c3a022706bacd9f3da7a43e8e1719ba5a66a2b
- SHA512 d085813247f2cd20bb4a1e7304d9043eb67992d08c3f928294dd019c6f65d5e7aee483d4db61923140a3d10257eec9572c78dadc8ac6c708424513a7230ec275
- TLSH T1E1114828D9AC0DAB00B1777A64328342F632A37B00092C0FB8FDA46D4F73A2B5051F69
- MD5 SHA1 SHA512 TLSH
RobloxPlayerNotifierApp.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 e96028c19aa1cbcfa6462a93f3b9884219e86fee7a678bd4d7fcb1612052b6fe
- MD5 fa768f9f980d0abe1a678b390fcee3f9
- SHA1 125a69f5df9d81637694e2da43a7347ce4807a43
- SHA512 23f7b7e34917335d407b995a83e5a7efd961cf33bb54bafab5927e0ffd127b5e3d08de541ebf463b01e66370a81bc01aad69c13d9d4ae0fad94f5c43e42a7ba0
- SSDEEP 6144:Ijxr6IROI60Y8xinG5n8mI/018xinG5n:u6IE40v
- TLSH T198F43CD31B9B68AED0CA33FA314352D4AA628C4ADC2645916737BD93B177603CDD138E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
416186
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\Github\RobloxPlayerNotifier\RobloxPlayerNotifierApp\RobloxPlayerNotifierApp\obj\Release\net8.0-windows\RobloxPlayerNotifierApp.pdb
mscoree
_CorExeMain
Name
.text
Size
398KB
Virtual Size
398KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
363KB
Virtual Size
363KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
RobloxPlayerNotifierApp.dll.config
- SHA256 62b2f9164fc1419cca9ca9e22f21151932ab1f137ee8da5b335fe99005530685
- MD5 b612010babe77bf864a1f04672cbb8bc
- SHA1 9d76f2dc587ae2bba30f88196114340a04440649
- SHA512 0c19ebdd94ed655fa0941e71a287713c96d9783989a032823e1467536d4f5c41ff155317fc827a992e85354de5103a0525cdc2f96431b0f418ecf297e62a078a
- TLSH T1D3D02B128B464C439FF1081BEB900E24BE3860D330860544F07272720D2E4C44313747
- MD5 SHA1 SHA512 TLSH
RobloxPlayerNotifierApp.exe
- IMPHASH bb3ac2c21e02c68abcad237dc3fa6d00
- SHA256 6c66db4d75311f5e743dc451656cfeb645d71869ce586797ed2df7185cb70fd6
- MD5 2073a0965974802eef789fd405a69de4
- SHA1 3d56dfe3bd16071ce0af0b165739f64c402bbb37
- SHA512 6cae75841c50799b4592db53088568120c996b50d27ade76e34a59c3a59fb4d5bedd536c9aa1ab2973d2b5a87d54af588b396e7cd360a5c57b5bca456ef015c8
- SSDEEP 3072:BqvmgiYSoIk8uIHzlqRwa/YB26mlIgaXf0BVUIrmf2FzCH8CQninGpbHrnjOzM:B64k83TlEvGCIgayOI60Y8xinG5n
- TLSH T1D8B43BC35B8B68AED0D673F9754255C0AA62AC46CE2246C61333BD93B573643CDE138E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_errno
_initialize_onexit_table
abort
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___wargv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fputwc
__p__commode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
toupper
strcmp
strlen
_wcsdup
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
363KB
Virtual Size
363KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=204, id=1, productName=Unmarked objects,
count=10, id=265, version=35220,
count=1, id=258, version=35220,
RobloxPlayerNotifierApp.pdb
- SHA256 34e9ef50ba2315ee445a72a54093e8884eed73df1dd1cca5ae6591aad63f2fb9
- MD5 2ea3ba98e40cca133deb7e1dd59b8c43
- SHA1 2de762becbcd9e79446ece81718981d78f49e368
- SHA512 0aa1ed55a854487240d3f5ba10c71af925f363d1595807487fd516b72f26b7afa3d9673676efe098363de3d51218c97bd9ac131c8cea8e9eea4aa243fd44cedf
- SSDEEP 768:/uZUMNosjRTC7+MmZ+jRsI2hlhB6fJ50ohQkkd2:oH47+gWIohB6fJ508wM
- TLSH T1B9C21877A798DE21CA5516B69432C08C363083203384DF3BF2D97A45EDBF6D943B61A5
- MD5 SHA1 SHA512 SSDEEP TLSH
RobloxPlayerNotifierApp.runtimeconfig.json
- SHA256 73b37384bb001e78db2014d328750eb2990393712fd63cd00c0f41965b3dbe96
- MD5 1043e1e5e960609d014e56f638202c24
- SHA1 aaa1583e8c9809a39a52c73efff1e5e439cfd3df
- SHA512 5fe61affcddd7b6235270cc3f0e7fa7f2e890852de6f5c7759234870d244ee1b32f95dfd7efb5e2f410d12557593491c53a5323b68966918f92a545c1f10d66e
- TLSH T1BEE02A3ACA206DB714F02BBEC02AC187FA3023AB00040D16BAFC180C2F361A22001F88
- MD5 SHA1 SHA512 TLSH
Sounds/EasyPeasyLemonSqueezy.wav
- SHA256 662f4815799af1aab1e5ddf15b9f89a0ccc5517e5d23e2f0f857b8051a1055be
- MD5 dcd30c5f816bcb1d0f47dcb4b152ba64
- SHA1 c44ef7175c4e518a37a480806870a53855c130b3
- SHA512 e9b8c017728f72c4003080efc1a5c0e671173f44bdccdfe8ac3472169240bfbef40519fc619e3cbb3e3ce8893b3c271fdcfdabd75699220acfcf870141b4fd8a
- SSDEEP 49152:QnmVT0pm91BQKMEjKahLKe8dMIzDfm6Q5:QnG4mOKMENhup2IH9Q5
- TLSH T1FF85F12AC163F680259D4986F882CF59532073D34C275EBD241DD39BA4E6BD338A4E9F
- MD5 SHA1 SHA512 SSDEEP TLSH