File name:

RobloxPlayerInstaller (1).exe

Full analysis: https://app.any.run/tasks/f59acd7d-2adf-46af-9c3d-d3e1ca88f915
Verdict: Malicious activity
Analysis date: January 30, 2025, 20:19:49
OS: Windows 10 Professional (build: 19045, 64 bit)
Tags:
arch-doc
arch-exec
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
MD5:

E16E648456A76CF6C12BE47B86B4401C

SHA1:

A033D9A48BF918DBBA65EF29576DFDCB5DB2194C

SHA256:

3032DDEC0E6152A0AA21929060E8FD6FC0A55C4D7D8C534FE6BE24775DBC39AE

SSDEEP:

98304:aQs0i0djmIPJjLNuQVTcFeuoUDmzcG4tqrQrdgoG8Gm98utk190nWKzY+KZ6IMwV:57D+PcP1Yg3

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Changes the autorun value in the registry

      • MicrosoftEdgeUpdate.exe (PID: 6632)

  • SUSPICIOUS

    • Changes default file association

      • RobloxPlayerInstaller (1).exe (PID: 6568)

    • Executable content was dropped or overwritten

      • RobloxPlayerInstaller (1).exe (PID: 6568)
      • MicrosoftEdgeUpdate.exe (PID: 6632)
      • MicrosoftEdgeWebview2Setup.exe (PID: 6952)

    • Reads security settings of Internet Explorer

      • ShellExperienceHost.exe (PID: 3688)
      • MicrosoftEdgeUpdate.exe (PID: 6632)

    • Process drops legitimate windows executable

      • RobloxPlayerInstaller (1).exe (PID: 6568)
      • MicrosoftEdgeWebview2Setup.exe (PID: 6952)
      • MicrosoftEdgeUpdate.exe (PID: 6632)

    • The process drops C-runtime libraries

      • RobloxPlayerInstaller (1).exe (PID: 6568)

    • Starts a Microsoft application from unusual location

      • MicrosoftEdgeUpdate.exe (PID: 6632)

    • Starts itself from another location

      • MicrosoftEdgeUpdate.exe (PID: 6632)

    • Creates/Modifies COM task schedule object

      • MicrosoftEdgeUpdateComRegisterShell64.exe (PID: 6304)
      • MicrosoftEdgeUpdate.exe (PID: 1556)

  • INFO

    • Checks supported languages

      • RobloxPlayerInstaller (1).exe (PID: 6568)
      • SearchApp.exe (PID: 5064)
      • ShellExperienceHost.exe (PID: 3688)
      • MicrosoftEdgeUpdate.exe (PID: 6632)
      • MicrosoftEdgeUpdate.exe (PID: 1556)
      • MicrosoftEdgeUpdateComRegisterShell64.exe (PID: 4704)
      • MicrosoftEdgeUpdateComRegisterShell64.exe (PID: 1580)
      • MicrosoftEdgeUpdate.exe (PID: 2600)
      • MicrosoftEdgeUpdate.exe (PID: 5268)

    • The sample compiled with english language support

      • RobloxPlayerInstaller (1).exe (PID: 6568)
      • MicrosoftEdgeUpdate.exe (PID: 6632)
      • MicrosoftEdgeWebview2Setup.exe (PID: 6952)

    • Process checks whether UAC notifications are on

      • RobloxPlayerInstaller (1).exe (PID: 6568)

    • Reads the computer name

      • RobloxPlayerInstaller (1).exe (PID: 6568)
      • ShellExperienceHost.exe (PID: 3688)
      • MicrosoftEdgeUpdate.exe (PID: 6632)
      • MicrosoftEdgeUpdateComRegisterShell64.exe (PID: 1580)
      • MicrosoftEdgeUpdate.exe (PID: 2600)
      • MicrosoftEdgeUpdateComRegisterShell64.exe (PID: 6304)
      • MicrosoftEdgeUpdate.exe (PID: 5268)

    • Reads the machine GUID from the registry

      • RobloxPlayerInstaller (1).exe (PID: 6568)
      • SearchApp.exe (PID: 5064)

    • Creates files or folders in the user directory

      • RobloxPlayerInstaller (1).exe (PID: 6568)

    • Reads the software policy settings

      • SearchApp.exe (PID: 5064)

    • Create files in a temporary directory

      • RobloxPlayerInstaller (1).exe (PID: 6568)
      • MicrosoftEdgeWebview2Setup.exe (PID: 6952)
      • MicrosoftEdgeUpdate.exe (PID: 6632)

    • Process checks computer location settings

      • SearchApp.exe (PID: 5064)
      • MicrosoftEdgeUpdate.exe (PID: 6632)

    • Manual execution by a user

      • notepad.exe (PID: 6556)

    • Checks proxy server information

      • MicrosoftEdgeUpdate.exe (PID: 6336)
      • MicrosoftEdgeUpdate.exe (PID: 5268)

    • Reads Environment values

      • MicrosoftEdgeUpdate.exe (PID: 6336)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2037:10:05 23:40:23+00:00
ImageFileCharacteristics: Executable, Large address aware, 32-bit
PEType: PE32
LinkerVersion: 14.29
CodeSize: 4752384
InitializedDataSize: 2886656
UninitializedDataSize: -
EntryPoint: 0x428755
OSVersion: 6
ImageVersion: -
SubsystemVersion: 6
Subsystem: Windows GUI
FileVersionNumber: 1.6.0.7079
ProductVersionNumber: 1.6.0.7079
FileFlagsMask: 0x0017
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Unicode
CompanyName: Roblox Corporation
FileDescription: Roblox
FileVersion: 1, 6, 0, 6560679
LegalCopyright: Copyright © 2020 Roblox Corporation. All rights reserved.
OriginalFileName: Roblox.exe
ProductName: Roblox Bootstrapper
ProductVersion: 1, 6, 0, 6560679
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
143
Monitored processes
13
Malicious processes
3
Suspicious processes
0

Behavior graph

Click at the process to see the details
start robloxplayerinstaller (1).exe shellexperiencehost.exe no specs notepad.exe no specs microsoftedgewebview2setup.exe microsoftedgeupdate.exe microsoftedgeupdate.exe no specs microsoftedgeupdatecomregistershell64.exe no specs microsoftedgeupdatecomregistershell64.exe no specs microsoftedgeupdatecomregistershell64.exe no specs microsoftedgeupdate.exe microsoftedgeupdate.exe no specs microsoftedgeupdate.exe searchapp.exe

Process information

PID
CMD
Path
Indicators
Parent process
1556"C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserverC:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe—MicrosoftEdgeUpdate.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge Update
Exit code:
0
Version:
1.3.171.39
Modules
Images
c:\users\admin\appdata\local\microsoft\edgeupdate\microsoftedgeupdate.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\ole32.dll
1580"C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe" /user C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe—MicrosoftEdgeUpdate.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge Update COM Registration Helper
Exit code:
0
Version:
1.3.171.39
Modules
Images
c:\users\admin\appdata\local\microsoft\edgeupdate\1.3.171.39\microsoftedgeupdatecomregistershell64.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
2600"C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=false" /installsource otherinstallcmd /sessionid "{E984FD08-5C90-43F0-B554-07D710E5A9A5}" /silentC:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe—MicrosoftEdgeUpdate.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge Update
Version:
1.3.171.39
Modules
Images
c:\users\admin\appdata\local\microsoft\edgeupdate\microsoftedgeupdate.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\ole32.dll
3688"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mcaC:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe—svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Shell Experience Host
Version:
10.0.19041.3758 (WinBuild.160101.0800)
Modules
Images
c:\windows\systemapps\shellexperiencehost_cw5n1h2txyewy\shellexperiencehost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\dxgi.dll
4704"C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe" /user C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe—MicrosoftEdgeUpdate.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge Update COM Registration Helper
Exit code:
0
Version:
1.3.171.39
Modules
Images
c:\users\admin\appdata\local\microsoft\edgeupdate\1.3.171.39\microsoftedgeupdatecomregistershell64.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
5064"C:\WINDOWS\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mcaC:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Search application
Version:
10.0.19041.3996 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\schannel.dll
c:\windows\system32\mskeyprotect.dll
c:\windows\system32\ntasn1.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\cryptnet.dll
c:\windows\systemapps\microsoft.windows.search_cw5n1h2txyewy\searchapp.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\ucrtbase.dll
5268"C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" -EmbeddingC:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge Update
Version:
1.3.171.39
Modules
Images
c:\users\admin\appdata\local\microsoft\edgeupdate\microsoftedgeupdate.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\ole32.dll
6304"C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe" /user C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe—MicrosoftEdgeUpdate.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge Update COM Registration Helper
Exit code:
0
Version:
1.3.171.39
Modules
Images
c:\users\admin\appdata\local\microsoft\edgeupdate\1.3.171.39\microsoftedgeupdatecomregistershell64.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
6336"C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMCIgc2Vzc2lvbmlkPSJ7RTk4NEZEMDgtNUM5MC00M0YwLUI1NTQtMDdENzEwRTVBOUE1fSIgdXNlcmlkPSJ7MTkwMDdFNkUtOUU2Ni00N0M3LTg1OEEtRkU0RjU5ODNBRDkxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntGNUE3OEE3Ri1DNzA5LTRCOTgtQTY0OC03REMyNTBDM0MxQzd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iNCIgcGh5c21lbW9yeT0iNCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQ1LjQwNDYiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREVMTCIgcHJvZHVjdF9uYW1lPSJERUxMIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS4zLjE3MS4zOSIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTMxNjQ5NTA5NDciIGluc3RhbGxfdGltZV9tcz0iMTMxMSIvPjwvYXBwPjwvcmVxdWVzdD4C:\Users\admin\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
MicrosoftEdgeUpdate.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Microsoft Edge Update
Exit code:
0
Version:
1.3.171.39
Modules
Images
c:\users\admin\appdata\local\microsoft\edgeupdate\microsoftedgeupdate.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\ole32.dll
6556"C:\WINDOWS\system32\notepad.exe" C:\Windows\System32\notepad.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Notepad
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\notepad.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\user32.dll
Total events
9 635
Read events
9 134
Write events
463
Delete events
38

Modification events

(PID) Process:(6568) RobloxPlayerInstaller (1).exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio
Operation:writeName:WarnOnOpen
Value:
0
(PID) Process:(6568) RobloxPlayerInstaller (1).exeKey:HKEY_CLASSES_ROOT\roblox-studio
Operation:writeName:URL Protocol
Value:
(PID) Process:(6568) RobloxPlayerInstaller (1).exeKey:HKEY_CLASSES_ROOT\roblox-studio\shell\open\command
Operation:writeName:version
Value:
version-35ab2f0d73f349ee
(PID) Process:(5064) SearchApp.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\bing.com
Operation:writeName:Total
Value:
50667
(PID) Process:(5064) SearchApp.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\SearchSettings
Operation:writeName:SafeSearchMode
Value:
1
(PID) Process:(5064) SearchApp.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CloudStore\Store\Cache\DefaultAccount\$de${c6a388c9-afd3-47e2-a46b-29cb43ad4323}$windows.data.unifiedtile.localstarttilepropertiesmap\Current
Operation:writeName:Data
Value:
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
(PID) Process:(5064) SearchApp.exeKey:HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\bing.com
Operation:writeName:Total
Value:
929
(PID) Process:(5064) SearchApp.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search
Operation:delete valueName:JumpListChangedAppIds
Value:
(PID) Process:(5064) SearchApp.exeKey:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\JumplistData
Operation:delete keyName:(default)
Value:
(PID) Process:(5064) SearchApp.exeKey:\REGISTRY\A\{ee080948-b2ea-145a-6870-f9164b908eb9}\LocalState\AppIndexer
Operation:writeName:InstalledWin32AppsRevision
Value:
7B00320030003600390046003800420043002D0033003600360036002D0034003700340043002D0038003100320036002D004100330035004400310034003600420045004500370032007D00000001A185595473DB01
Executable files
209
Suspicious files
86
Text files
22
Unknown types
1

Dropped files

PID
Process
Filename
Type
5064SearchApp.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133827420030034335.txt~RF137c48.TMP —
MD5:—
SHA256:—
5064SearchApp.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:A303963E07E29555947E651FA4F04097
SHA256:EA27B8BAABE8438A8AFC93E7493B475631BCD0CC266B9F6AAACAFEBBCE628660
6568RobloxPlayerInstaller (1).exeC:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox\Roblox Studio.lnkbinary
MD5:92AFC11BACE8F072954A30A7192DF7F4
SHA256:FA0498B63B89C229D03CBA9CB847F2FBC6F3F577E25F30843F514AE325B3B862
6568RobloxPlayerInstaller (1).exeC:\Users\admin\Desktop\Roblox Studio.lnkbinary
MD5:3564F554E5392EBFF8BE3E83B09B8D5B
SHA256:D6C84B10DC487EBC5112DB0394D18918D2898402EB8837156B381923115E20B2
5064SearchApp.exeC:\Users\admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10Dbinary
MD5:6EE51BDFEB6EBD6CB9F6FF291314248A
SHA256:1BDE5F3FBE226C0E74EF9D229127F46302488AA72D3B53D0E725B85F402784CC
6568RobloxPlayerInstaller (1).exeC:\Users\admin\AppData\Local\Roblox\Downloads\roblox-player\15bd216e6fae9ca480c21db01ce4ae3bcompressed
MD5:15BD216E6FAE9CA480C21DB01CE4AE3B
SHA256:DD788F4010754D48447E50C1522B5A1E8CCF4EA457C7D80FBA4F6F6B7F24633F
6568RobloxPlayerInstaller (1).exeC:\Users\admin\AppData\Local\Roblox\Downloads\roblox-player\46428fabd732dd2a6634cbd836eb7a7ccompressed
MD5:46428FABD732DD2A6634CBD836EB7A7C
SHA256:DE7CE5920699B097D0E1B8401E8B5AABB52955490656F2F1DD107596D523E740
6568RobloxPlayerInstaller (1).exeC:\Users\admin\AppData\Local\Roblox\Downloads\roblox-player\32622161783a33a229827a2a0261cc16compressed
MD5:32622161783A33A229827A2A0261CC16
SHA256:631125E9AB228CCC5CA7CC723EABC683BAFA245F2E63B9FB23A55073DF017C12
6568RobloxPlayerInstaller (1).exeC:\Users\admin\AppData\Local\Roblox\Downloads\roblox-player\671fb1a7b360b7f4281af5e52acc2c84compressed
MD5:671FB1A7B360B7F4281AF5E52ACC2C84
SHA256:B1A1E1E797E1C39277153B76DF1DAD2A8FE3EDD1419540C4FFFD3574A4485436
6568RobloxPlayerInstaller (1).exeC:\Users\admin\AppData\Local\Roblox\Downloads\roblox-player\41e3f5d679da9766fa6171e5bbd35d70compressed
MD5:41E3F5D679DA9766FA6171E5BBD35D70
SHA256:23A81E5B7FB77CBE5F773A9E6E986B69089B3823AC6CFD037E809A050022217C
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
9
TCP/UDP connections
42
DNS requests
25
Threats
1

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
1176
svchost.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D
unknown
—
—
whitelisted
5064
SearchApp.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D
unknown
—
—
whitelisted
5064
SearchApp.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D
unknown
—
—
whitelisted
5064
SearchApp.exe
GET
200
184.30.131.245:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA77flR%2B3w%2FxBpruV2lte6A%3D
unknown
—
—
whitelisted
—
—
GET
200
23.35.229.160:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl
unknown
—
—
whitelisted
7124
SIHClient.exe
GET
200
23.35.229.160:80
http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl
unknown
—
—
whitelisted
6464
backgroundTaskHost.exe
GET
200
2.17.190.73:80
http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAUZZSZEml49Gjh0j13P68w%3D
unknown
—
—
whitelisted
5748
svchost.exe
HEAD
200
84.201.210.39:80
http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2b118a31-ccbe-4d5f-ba42-373ac33361ab?P1=1738873246&P2=404&P3=2&P4=fyXeqsu0sFhS4dOzctDLc2uLD9IJPsknglKlEcBZLsAMiJhuOutZdrZGyFM%2f1RR7W7BZ71slzOc1mh4oUI3xyw%3d%3d
unknown
—
—
whitelisted
5748
svchost.exe
GET
—
84.201.210.39:80
http://msedge.f.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2b118a31-ccbe-4d5f-ba42-373ac33361ab?P1=1738873246&P2=404&P3=2&P4=fyXeqsu0sFhS4dOzctDLc2uLD9IJPsknglKlEcBZLsAMiJhuOutZdrZGyFM%2f1RR7W7BZ71slzOc1mh4oUI3xyw%3d%3d
unknown
—
—
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4712
MoUsoCoreWorker.exe
51.104.136.2:443
—
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
5064
SearchApp.exe
92.123.104.43:443
www.bing.com
Akamai International B.V.
DE
whitelisted
6568
RobloxPlayerInstaller (1).exe
128.116.21.3:443
ecsv2.roblox.com
ROBLOX-PRODUCTION
US
whitelisted
6568
RobloxPlayerInstaller (1).exe
52.222.236.113:443
clientsettingscdn.roblox.com
AMAZON-02
US
whitelisted
6568
RobloxPlayerInstaller (1).exe
23.48.23.144:443
setup.rbxcdn.com
Akamai International B.V.
DE
whitelisted
1076
svchost.exe
23.35.238.131:443
go.microsoft.com
AKAMAI-AS
DE
whitelisted
1176
svchost.exe
20.190.160.130:443
login.live.com
MICROSOFT-CORP-MSN-AS-BLOCK
NL
whitelisted
1176
svchost.exe
184.30.131.245:80
ocsp.digicert.com
AKAMAI-AS
US
whitelisted

DNS requests

Domain
IP
Reputation
www.bing.com
  • 92.123.104.43
  • 92.123.104.36
  • 92.123.104.40
  • 92.123.104.42
  • 92.123.104.44
  • 92.123.104.35
  • 92.123.104.38
  • 92.123.104.41
  • 92.123.104.34
whitelisted
ecsv2.roblox.com
  • 128.116.21.3
whitelisted
client-telemetry.roblox.com
  • 128.116.21.3
whitelisted
clientsettingscdn.roblox.com
  • 52.222.236.113
  • 52.222.236.6
  • 52.222.236.86
  • 52.222.236.43
whitelisted
setup.rbxcdn.com
  • 23.48.23.144
  • 23.48.23.153
whitelisted
go.microsoft.com
  • 23.35.238.131
whitelisted
login.live.com
  • 20.190.160.130
  • 20.190.160.67
  • 20.190.160.66
  • 20.190.160.131
  • 40.126.32.138
  • 20.190.160.20
  • 20.190.160.5
  • 20.190.160.132
whitelisted
ocsp.digicert.com
  • 184.30.131.245
  • 2.17.190.73
whitelisted
settings-win.data.microsoft.com
  • 20.73.194.208
whitelisted
fp.msedge.net
  • 204.79.197.222
whitelisted

Threats

PID
Process
Class
Message
5748
svchost.exe
Misc activity
ET INFO Packed Executable Download
Process
Message
RobloxPlayerInstaller (1).exe
WebView2: Failed to find an installed WebView2 runtime or non-stable Microsoft Edge installation.
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
RobloxPlayerInstaller (1).exe