Analysis

  • user interaction
    yes
  • max time kernel
    41s
  • max time network
    42s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/08/2026, 16:07

General

  • Target
    robloxhgile.exe
  • Size 20.4MB
  • Sample260828-tkx9msdf37
  • SHA256 0ded19e2070ea39edbf14968f61dcb5b4a8d83839c7caaf1e8a08b7e5d0115f7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 32 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\robloxhgile.exe
    "C:\Users\Admin\AppData\Local\Temp\robloxhgile.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1324
    • C:\Users\Admin\AppData\Local\Temp\robloxhgile.exe
      "C:\Users\Admin\AppData\Local\Temp\robloxhgile.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      PID:4884

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\VCRUNTIME140.dll
        • Size 174KB
        • SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 a7146c08f89fe5b04541ab507cdb59ff7b44534d4ba3c668a426c6450a03434e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\_bz2.pyd
        • Size 86KB
        • SHA256 b938073c85cf6b9fe80556d7899ed1901e5e60b7adea2832442376239fb36b36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\_ctypes.pyd
        • Size 139KB
        • SHA256 408cc4e7a22ffa418ca52f5e13fe9268a3c50a2bc9de02b0530b555ef591bc5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-console-l1-1-0.dll
        • Size 15KB
        • SHA256 18d552fd987cc10701cd102191ec7c5a0d05b08c7271e525abe9ec530eae5ed2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-datetime-l1-1-0.dll
        • Size 14KB
        • SHA256 8bcccc37d02e157cd0e80c11a893e27d7c7c60f2fb6bbea985748dbe217ea413
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-debug-l1-1-0.dll
        • Size 14KB
        • SHA256 c947b6e1372c387aa62e301cb7a3c68ffaa246b05ae91901b5f6fb087788abef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 14KB
        • SHA256 a84788c8f075a2fba309b5243c3c3277cf7914398fa63b5dd902ef6479af0f72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-file-l1-1-0.dll
        • Size 18KB
        • SHA256 7f2e6d9ba0c7c604ed0147a341e2a47f1b559a90ed876629625e05707a77fcca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-file-l1-2-0.dll
        • Size 14KB
        • SHA256 b4b81eb7e9e05eea270de38ab028d0e2a8da9d8be4d00b8ddb39eb23159df9ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-file-l2-1-0.dll
        • Size 14KB
        • SHA256 cf4fc456acdaee74652afa4b1c565ae971b96c0564d5bb5b3ec72eaaaa847929
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-handle-l1-1-0.dll
        • Size 14KB
        • SHA256 d454806c386c81da87795063774a5895d862e68e1e461e5a3d979c06551bc8eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-heap-l1-1-0.dll
        • Size 15KB
        • SHA256 c5b3cc3d2f60f2ff8ea8473a35b0c3adc77d4219f7c086c93f28409698d5660c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 14KB
        • SHA256 8aa013493160f5896ec0652c6bb36f9f154039cd29cc50498a8750b90aa5e4f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 15KB
        • SHA256 8d92713c9f137eb6d0101610a0ff11e6e4ba7e012e4981f23ee89673eb19d791
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-localization-l1-2-0.dll
        • Size 17KB
        • SHA256 54b3b9bd52ce85d228dab627d66ca6cffb93a48c78841ef9e06769ebb6d2bd10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-memory-l1-1-0.dll
        • Size 15KB
        • SHA256 a7041c4d42bfaa6311f7c4259efb72cb4f6a06c2ab7e4511df388ed9e37c5b96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 14KB
        • SHA256 aa481239d7ad246ed3293113c4fb52c1103a7cfbba81bc62e33e501406eb6a43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 15KB
        • SHA256 812a6c529e52f738104720ec9ad8e4e375947ed1740ac10b4a87da634e80c97e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 16KB
        • SHA256 5d51063d50a966ba6198642e5137bd0fc166660d1c167204747e93259c82c00c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 15KB
        • SHA256 a800b02e8477f8d097373a1d28d9abb7a10bdb3ca3dbf78ed17105a2e48172c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-profile-l1-1-0.dll
        • Size 14KB
        • SHA256 0c2521b7a5a30838a9b8955b14c50c77a0630d897e9dc121f6bee01969ff8fff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 15KB
        • SHA256 6ed3ebc86f902d4d2131b899aaab6a8f20275aab14105109c4953331442ff107
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-string-l1-1-0.dll
        • Size 14KB
        • SHA256 76421f806b29ccf7fbd7db4c8ad6f3c45f6c87f757915bba099d6885919e27d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-synch-l1-1-0.dll
        • Size 16KB
        • SHA256 406e81f86bf77bf4d561b14f2aae43245219515ab98ed4477bceb8099593db68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-synch-l1-2-0.dll
        • Size 15KB
        • SHA256 17f6a2c60878372936022fd16aedbbabf9044d9d116a117ae7cd402585b79b41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 15KB
        • SHA256 c27884e0038c14f389649068abc32799af50000e8ec188a248ef833ee74b95b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-timezone-l1-1-0.dll
        • Size 14KB
        • SHA256 5adf852c9b75825aaa75528e5f73444ba091642305f09cf7a5a1d34856f0780a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-core-util-l1-1-0.dll
        • Size 14KB
        • SHA256 08f66303ca691f99b4daf82254f81cf3401c5ff5ee051969a71044c1ec373afb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-conio-l1-1-0.dll
        • Size 15KB
        • SHA256 f833cf98726f8a85d69538ac1ed4cc681b69ccb97a2332ece9a484e4d66d7b00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-convert-l1-1-0.dll
        • Size 18KB
        • SHA256 65fa6103d2b383ac0f18b73fb5ce02e8bf2866863fb3810a30c9bff4ff99efac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-environment-l1-1-0.dll
        • Size 15KB
        • SHA256 6e6337afe7233d1cf42439cbfe4e47b0a3e3e97120711a2124d372b5f1741bdf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 16KB
        • SHA256 2f5cdbdb0d06b7900827642d76e6c94c64144e1b3a0e4df6f2bed42a4bc33b02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-heap-l1-1-0.dll
        • Size 15KB
        • SHA256 bc371a18b6ea74da828d09fbb1c6ccab253793f057b25773684eae9e282673c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-locale-l1-1-0.dll
        • Size 15KB
        • SHA256 c675ef5019a235eeb20eb0b333c21b07e48f02dfb4f505f6bcdd6ce05b710c0a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-math-l1-1-0.dll
        • Size 23KB
        • SHA256 34aceef9802b90eec077b42db5be4e7c21007634d1cda1381107e378f8e656be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-private-l1-1-0.dll
        • Size 66KB
        • SHA256 adb1368857bc51e882d2a1077926fbb604dde5ea22e6226e0dd83bea3fa16843
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-process-l1-1-0.dll
        • Size 15KB
        • SHA256 0cec6290c5d562e2d77adc7605befdc6b7316a4d99e761affb307c90a6f2bde2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 19KB
        • SHA256 473be9b1e6bed8d0b81d720b1bd49f330bed69187846e9921a9a1de657c4ff97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 20KB
        • SHA256 6afce566f5d4a14db01a97d3b8a6d5d70881ec99a74165f2c242120b45a90382
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-string-l1-1-0.dll
        • Size 20KB
        • SHA256 10c62234a39658ccbd342c802be2c5e7d94a3af77183af401cbb03c0bf2e8425
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-time-l1-1-0.dll
        • Size 17KB
        • SHA256 702d74d1087be5f9a800e682f3529b9bb89b93a9f209a3c6a8ecba2110954157
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\api-ms-win-crt-utility-l1-1-0.dll
        • Size 15KB
        • SHA256 eca370e59c2abcb229680b9bc053e9abf9d48f881658e5925eda78f68a00b4e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\base_library.zip
        • Size 1.3MB
        • SHA256 769cdeaf5a96eeb3393d6d598859071f0c8874ff029dcf2ae388ef4fbb7acfa6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\libcrypto-3.dll
        • Size 6.0MB
        • SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\libssl-3.dll
        • Size 1.3MB
        • SHA256 b17a87979862d19241edc4318f967e24c3ec356ed6c2368f561179fab2311001
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libtommath.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\libtommath.dll
        • Size 93KB
        • SHA256 bf18448a56de62e56adb5a50040c08648f0bcf556217de90eca283490ee8c0c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\pyexpat.pyd
        • Size 217KB
        • SHA256 e34347c4e11b2ecc57df2ce1627ba7f98fd076e9df59951e9034f5aa8e95a2fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\python3.dll
        • Size 72KB
        • SHA256 6c45910e7c82617ca6360820de861699cc99f9efee434df290aa4c6e38f39886
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python314.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\python314.dll
        • Size 6.5MB
        • SHA256 0f9857ffdfe010fe6b99328d58c2e3c7472ce75f336bf9c2ad9bd5bca3bce700
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\select.pyd
        • Size 32KB
        • SHA256 722328e7fad8048057fc966474ba73966d2ceebaa32e7344cce09640ab4dc9bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl90.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\tcl90.dll
        • Size 3.2MB
        • SHA256 ecf6c76a725d082a0f00c5940d39a5a71087d0e9d166eaa07d1d6b122a195020
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl9tk90.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\tcl9tk90.dll
        • Size 2.1MB
        • SHA256 6e81d58860701540042b8168af929c54437b3f4143bf1b8f6114e56c3b9a8df0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\ucrtbase.dll
        • Size 964KB
        • SHA256 2775b59264f6536a0da39e3dae8bfe22c492666d5f3313411c461715af057ece
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\unicodedata.pyd
        • Size 741KB
        • SHA256 280b09bd97b598d18c0ed9542dc18ed35fa57a16e84f8e65fd9c6e96516c28d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI0000052c2\zlib1.dll
        • Size 114KB
        • SHA256 6bc87ac126b343f794ff14254d2cb6fbfbeef5476c0272e7297c5b4e8acfc353
        • MD5 SHA1 SHA512 SSDEEP TLSH