Overview
overview
9Static
static
7WEAO-LIVE-...le.dll
windows10-2004-x64
1WEAO-LIVE-...le.dll
windows11-ltsc_2024-x64
1WEAO-LIVE-...er.exe
windows10-2004-x64
1WEAO-LIVE-...er.exe
windows11-ltsc_2024-x64
1WEAO-LIVE-...ta.dll
windows10-2004-x64
9WEAO-LIVE-...ta.dll
windows11-ltsc_2024-x64
9WEAO-LIVE-...ta.exe
windows10-2004-x64
9WEAO-LIVE-...ta.exe
windows11-ltsc_2024-x64
9WEAO-LIVE-...er.dll
windows10-2004-x64
1WEAO-LIVE-...up.exe
windows10-2004-x64
6WEAO-LIVE-...up.exe
windows11-ltsc_2024-x64
6WEAO-LIVE-...ds.vbs
windows10-2004-x64
5WEAO-LIVE-...ds.vbs
windows11-ltsc_2024-x64
5WEAO-LIVE-...ler.js
windows10-2004-x64
3WEAO-LIVE-...ler.js
windows11-ltsc_2024-x64
3WEAO-LIVE-...ols.js
windows10-2004-x64
3WEAO-LIVE-...ols.js
windows11-ltsc_2024-x64
3WEAO-LIVE-...ct.exe
windows10-2004-x64
1WEAO-LIVE-...ct.exe
windows11-ltsc_2024-x64
8Analysis
- max time kernel
900s - max time network
466s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/08/2026, 10:44
Behavioral task
behavioral1
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/Module.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/Module.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxCrashHandler.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxCrashHandler.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2Loader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2RuntimeInstaller/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2RuntimeInstaller/MicrosoftEdgeWebview2Setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/avatar/scripts/humanoidAnimateR15Moods.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/avatar/scripts/humanoidAnimateR15Moods.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.tools.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.tools.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/inject.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/inject.exe
Resource
win11ltsc2024-20260710-en
General
- Target WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxCrashHandler.exe
- Size 12.6MB
- Sample260807-mtardack7x
- SHA256 c218deaeef57f460f4e18958d2561227c3bac61362ef7a4d15ada3ee16a11797
- MD5 08e0ea65683cbdc966a3d053eecf5550
- SHA1 3bcdc0bec196e2b2815bb953cc83921eaa9a38bd
- SHA512 58c78e06ef95e05b79c3ef48f05a4c6e72956026f0d177b0695cf019e2ec04258dfd8f9dd760d35e19170e416e5989fb1b8e92d09209d05099d2c5b57e755f62
- SSDEEP 196608:UM4NhYpQ5d0c06qtMY3smZUQZlC1xPIJe5mn6w:UY6dp0CY3sJQZlC1xP6Fn6
- TLSH T1BAD68D5AA2BC00E9D4BBD17CC6469617E7B1741603709BDF1AA086FA1F63BE41E3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\WEAO-LIVE-WindowsPlayer-version-145f189a6a974303\RobloxCrashHandler.exe"C:\Users\Admin\AppData\Local\Temp\WEAO-LIVE-WindowsPlayer-version-145f189a6a974303\RobloxCrashHandler.exe"1⤵PID:3744
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5772
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4712