Overview
overview
9Static
static
7WEAO-LIVE-...le.dll
windows10-2004-x64
1WEAO-LIVE-...le.dll
windows11-ltsc_2024-x64
1WEAO-LIVE-...er.exe
windows10-2004-x64
1WEAO-LIVE-...er.exe
windows11-ltsc_2024-x64
1WEAO-LIVE-...ta.dll
windows10-2004-x64
9WEAO-LIVE-...ta.dll
windows11-ltsc_2024-x64
9WEAO-LIVE-...ta.exe
windows10-2004-x64
9WEAO-LIVE-...ta.exe
windows11-ltsc_2024-x64
9WEAO-LIVE-...er.dll
windows10-2004-x64
1WEAO-LIVE-...up.exe
windows10-2004-x64
6WEAO-LIVE-...up.exe
windows11-ltsc_2024-x64
6WEAO-LIVE-...ds.vbs
windows10-2004-x64
5WEAO-LIVE-...ds.vbs
windows11-ltsc_2024-x64
5WEAO-LIVE-...ler.js
windows10-2004-x64
3WEAO-LIVE-...ler.js
windows11-ltsc_2024-x64
3WEAO-LIVE-...ols.js
windows10-2004-x64
3WEAO-LIVE-...ols.js
windows11-ltsc_2024-x64
3WEAO-LIVE-...ct.exe
windows10-2004-x64
1WEAO-LIVE-...ct.exe
windows11-ltsc_2024-x64
8Analysis
- max time kernel
898s - max time network
506s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/08/2026, 10:44
Behavioral task
behavioral1
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/Module.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/Module.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxCrashHandler.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxCrashHandler.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2Loader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2RuntimeInstaller/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2RuntimeInstaller/MicrosoftEdgeWebview2Setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/avatar/scripts/humanoidAnimateR15Moods.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/avatar/scripts/humanoidAnimateR15Moods.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.tools.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.tools.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/inject.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/inject.exe
Resource
win11ltsc2024-20260710-en
General
- Target WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/inject.exe
- Size 55KB
- Sample260807-mtardack7x
- SHA256 8072938a42757db90032185c4890b011123da399c2505a7667a596126ebe9a89
- MD5 6e41e128fd91931933f0e24045e32d51
- SHA1 22c0279ecec323e0833f1385541ddeba1b57e66c
- SHA512 610040a1237aa867276b81e7c6e6d2a1ac0ce3af2db0d264c0722e76508f984e73056d60fed2b48ed8ac32c38500d61816ec25f9f8b30b4f9adc76244690cfde
- SSDEEP 768:yXDwG2y1xWFnADrJW8X2zKGx/olP5aP3B0Gt7BHlRR5HPjYd3vEueE:yzwGPrJW86bx8PMPeGpZR5vTE
- TLSH T1E0434C53EB6804ECE07AD3BDD6A78B86EB72F406032157CF0750921A0F1B9D56D7EA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1620 inject.exe 1620 inject.exe 1620 inject.exe 1620 inject.exe 1620 inject.exe 1620 inject.exe