Overview

overview

3

Static

static

3

Roblox external.exe

windows10-2004-x64

1

Roblox external.exe

windows11-ltsc_2024-x64

1

Analysis

  • user interaction
    yes
  • max time kernel
    35s
  • max time network
    39s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/08/2026, 16:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Roblox external.exe
  • Size 1.0MB
  • Sample260809-tfn56stygs
  • SHA256 6302a416073db442368578ebc03ba423ca79bd92d19adfbde38a6ac783fa8765
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Roblox external.exe
    "C:\Users\Admin\AppData\Local\Temp\Roblox external.exe"
    1⤵
      PID:3132

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          BackupReceive.mp2
          • Path C:\Users\Admin\Desktop\BackupReceive.mp2
          • Size 1.0MB
          • SHA256 d172fc59089f7025949c6a7726285899e6c008a631996540d6beb2166cb55e73
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BackupRevoke.wmv
          • Path C:\Users\Admin\Desktop\BackupRevoke.wmv
          • Size 714KB
          • SHA256 7d9380a94c512cb8f3c19517c67b5bbf8cf35291aebaae42fec810aecc9e82c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          BlockConvert.MOD
          • Path C:\Users\Admin\Desktop\BlockConvert.MOD
          • Size 400KB
          • SHA256 379b360cb693bc2c6e63a5edb4d656e48fafc5ad254a6dd0d848c44991ea1eb6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertToHide.xml
          • Path C:\Users\Admin\Desktop\ConvertToHide.xml
          • Size 922KB
          • SHA256 46473620df4f1fb8a00ad74b57ee872b29969f268cdec2a9737b711baa123643
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DisconnectApprove.ocx
          • Path C:\Users\Admin\Desktop\DisconnectApprove.ocx
          • Size 818KB
          • SHA256 650c72c8b140ff60107582ebae096c12d3e0f817301f6f87fd3a137184c93b57
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DisconnectOpen.jfif
          • Path C:\Users\Admin\Desktop\DisconnectOpen.jfif
          • Size 748KB
          • SHA256 f22de2eb674fc820c76834f28b8ad5d15f41e73271a371c7c6a90a7ceacdfe24
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ExpandMount.mpe
          • Path C:\Users\Admin\Desktop\ExpandMount.mpe
          • Size 1.4MB
          • SHA256 23554b5adbb146bfd471d74e7c96621009b3c63279dc3e0a094e48c7e9dab825
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FormatStop.M2T
          • Path C:\Users\Admin\Desktop\FormatStop.M2T
          • Size 539KB
          • SHA256 0af019434d118b6576b4544c53181bc96408e40a70503d41d3e92884214c0bed
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LimitReset.dot
          • Path C:\Users\Admin\Desktop\LimitReset.dot
          • Size 992KB
          • SHA256 0f25abd84917fe8f7329a70dd341738e7cbcb9b365ee1926652d8f8cfb78fb63
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MeasureSkip.easmx
          • Path C:\Users\Admin\Desktop\MeasureSkip.easmx
          • Size 957KB
          • SHA256 eb83cc73ca837f44b53cd34b89c9a68e0c54ba180f0553c06949b6f307efd533
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MeasureTrace.mhtml
          • Path C:\Users\Admin\Desktop\MeasureTrace.mhtml
          • Size 435KB
          • SHA256 bfb3c12bc5b75202233af9093fb4d793e1cc0405dba9d52a1176a9a74c50a9be
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft Edge.lnk
          • Path C:\Users\Admin\Desktop\Microsoft Edge.lnk
          • Size 2KB
          • SHA256 03c855016f5c79590f1062672997a08eec6a71b72710b8cc27d5b9e8d6b875ac
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          MoveComplete.xlsx
          • Path C:\Users\Admin\Desktop\MoveComplete.xlsx
          • Size 10KB
          • SHA256 9671a227c7a6dccb90755817ff8a805b3906bc3b4b494641dfca4be55f76238f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          NewRevoke.m3u
          • Path C:\Users\Admin\Desktop\NewRevoke.m3u
          • Size 574KB
          • SHA256 8ef4e0081828bfb743c5ac3dcfc62dc97d5b12540caa93148fb92e47d7adce8c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          NewStep.asf
          • Path C:\Users\Admin\Desktop\NewStep.asf
          • Size 679KB
          • SHA256 d607ded8beb3ac63cecbfba09fd558af1b24e71a9bc7470d42f5936ce34267c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PingCheckpoint.cfg
          • Path C:\Users\Admin\Desktop\PingCheckpoint.cfg
          • Size 505KB
          • SHA256 6fbc9ebd552020d0dca0dd4693db774f4f49d75b2651468656d50d1a2e9f86b4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RedoMove.odt
          • Path C:\Users\Admin\Desktop\RedoMove.odt
          • Size 888KB
          • SHA256 e0f333c786e1fd30805c73611f47d00300c60d6173eff93f91c7c7a16c08ddc8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RepairRequest.xml
          • Path C:\Users\Admin\Desktop\RepairRequest.xml
          • Size 365KB
          • SHA256 1723ca826864d25cd5a130299bfb5209d908105fd64e129284ef6fa8ec9721e1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResolveReset.mpe
          • Path C:\Users\Admin\Desktop\ResolveReset.mpe
          • Size 783KB
          • SHA256 03c5055c7ba14b5794c2c6010cb55069f33030998841cbe3a4152d17c477c7fc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SendUnlock.vdx
          • Path C:\Users\Admin\Desktop\SendUnlock.vdx
          • Size 609KB
          • SHA256 8a0f92fa3e580f5b4e008e39cf5f2c489f35143594acf77f01da9f81323debed
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SyncConnect.xlsx
          • Path C:\Users\Admin\Desktop\SyncConnect.xlsx
          • Size 16KB
          • SHA256 9df105e0c109af389c422468300c480af925531850812ae83fb74c83ff34ce83
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnblockConvertFrom.mov
          • Path C:\Users\Admin\Desktop\UnblockConvertFrom.mov
          • Size 644KB
          • SHA256 02722841ae67bf4511d522cbecca605781bbf80092577d292a51757e1b3b1a30
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnpublishUnprotect.wvx
          • Path C:\Users\Admin\Desktop\UnpublishUnprotect.wvx
          • Size 470KB
          • SHA256 13e2a0b9a243b82cf5d8c32a37984be0cabb42220b17011e1ba4c3b929db082c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UseMerge.rtf
          • Path C:\Users\Admin\Desktop\UseMerge.rtf
          • Size 853KB
          • SHA256 94195f85ff9a2d42981e125c752784d78a5a197bd8bc6d31e3dfe7d8c0014e7a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Acrobat Reader DC.lnk
          • Path C:\Users\Public\Desktop\Acrobat Reader DC.lnk
          • Size 2KB
          • SHA256 0da02e94429367ccade7e6840d2e7722d13c806c293e1441efd13554eff62c01
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Firefox.lnk
          • Path C:\Users\Public\Desktop\Firefox.lnk
          • Size 1KB
          • SHA256 70387db43cfb79e7543e13e91a76fcffb1a91c7a807a9df0e6fd094b900eb1c6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Google Chrome.lnk
          • Path C:\Users\Public\Desktop\Google Chrome.lnk
          • Size 2KB
          • SHA256 7ab17b4e9c414ede7b2ad1628d10c0ecb515ae875fcb7b399a8b888254508578
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          VLC media player.lnk
          • Path C:\Users\Public\Desktop\VLC media player.lnk
          • Size 923B
          • SHA256 bef677b7f15f25636153cedf5b2a87a909cfeac284c493801f20eb60ee182f9c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/3132-0-0x00007FF626BD0000-0x00007FF626D43000-memory.dmp
          Download