WEAO-LIVE-WindowsPlayer-version-145f189a6a974303.zip
- SHA256 c9f81f2e156f3a35115cfc03711dccd9e32d5c5f916b02508356b762f6b9d3c8
Overview
overview
9Static
static
7WEAO-LIVE-...le.dll
windows10-2004-x64
1WEAO-LIVE-...le.dll
windows11-ltsc_2024-x64
1WEAO-LIVE-...er.exe
windows10-2004-x64
1WEAO-LIVE-...er.exe
windows11-ltsc_2024-x64
1WEAO-LIVE-...ta.dll
windows10-2004-x64
9WEAO-LIVE-...ta.dll
windows11-ltsc_2024-x64
9WEAO-LIVE-...ta.exe
windows10-2004-x64
9WEAO-LIVE-...ta.exe
windows11-ltsc_2024-x64
9WEAO-LIVE-...er.dll
windows10-2004-x64
1WEAO-LIVE-...up.exe
windows10-2004-x64
6WEAO-LIVE-...up.exe
windows11-ltsc_2024-x64
6WEAO-LIVE-...ds.vbs
windows10-2004-x64
5WEAO-LIVE-...ds.vbs
windows11-ltsc_2024-x64
5WEAO-LIVE-...ler.js
windows10-2004-x64
3WEAO-LIVE-...ler.js
windows11-ltsc_2024-x64
3WEAO-LIVE-...ols.js
windows10-2004-x64
3WEAO-LIVE-...ols.js
windows11-ltsc_2024-x64
3WEAO-LIVE-...ct.exe
windows10-2004-x64
1WEAO-LIVE-...ct.exe
windows11-ltsc_2024-x64
8Behavioral task
behavioral1
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/Module.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/Module.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxCrashHandler.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxCrashHandler.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2Loader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2RuntimeInstaller/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/WebView2RuntimeInstaller/MicrosoftEdgeWebview2Setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/avatar/scripts/humanoidAnimateR15Moods.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/avatar/scripts/humanoidAnimateR15Moods.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.tools.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/content/configs/PerformanceConfigs/rofiler.tools.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/inject.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/inject.exe
Resource
win11ltsc2024-20260710-en
| resource | yara_rule |
|---|---|
| static1/unpack001/WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.dll | themida |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/Module.dll |
| unpack001/WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.dll |
| unpack001/WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxPlayerBeta.exe |
| unpack001/WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/inject.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/WEAO-LIVE-WindowsPlayer-version-145f189a6a974303/RobloxCrashHandler.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=253, version=35721,
count=4, id=259, version=35721,
count=8, id=260, version=35721,
count=28, id=261, version=35721,
count=6, id=257, version=35721,
count=12, id=260, version=35726,
count=531, id=1, productName=Unmarked objects,
count=31, id=257, version=33145,
count=125, id=260, version=33519,
count=90, id=265, version=36252,
count=1, id=255, version=36252,
count=1, id=258, version=36252,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=17, id=259, version=29395,
count=199, id=261, version=29395,
count=18, id=260, version=30034,
count=10, id=259, version=30034,
count=97, id=261, version=30034,
count=2, id=253, version=28518,
count=36, id=260, version=29395,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=262, version=29395,
count=1197, id=260, version=30154,
count=5, id=259, version=30154,
count=33, id=257, version=29395,
count=456, id=1, productName=Unmarked objects,
count=536, id=261, version=30154,
count=40, productName=Unmarked objects (old),
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=260, version=30034,
count=16, id=259, version=30034,
count=8, id=253, version=28518,
count=214, id=261, version=29395,
count=37, id=259, version=29395,
count=1, id=262, version=29395,
count=108, id=260, version=29395,
count=36, id=257, version=29395,
count=36, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=32595,
count=118, id=261, version=30034,
count=145, id=261, version=30154,
count=1006, id=1, productName=Unmarked objects,
count=5, id=259, version=30154,
count=1, id=260, productName=VS2019 v16.9.4 build 29914, version=29914,
count=904, id=260, version=30154,
count=82, productName=Unmarked objects (old),
count=1, id=255, version=30154,
count=8035, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Mar 2, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Aug 6, 2026
CN=EdgeBuild,O=EdgeBuild,L=Redmond,ST=Washington,C=US
Mar 3, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=11, id=259, version=27412,
count=147, id=261, version=27412,
count=17, id=260, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=20, id=259, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=13, id=265, version=31104,
count=52, id=261, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=19, id=260, version=27412,
count=1, id=262, version=27412,
count=13, id=257, version=27412,
count=169, id=1, productName=Unmarked objects,
count=1, id=255, version=31104,
count=86, id=151,
count=1, id=258, version=31104,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=10, id=260, version=35403,
count=32, id=261, version=35403,
count=6, id=257, version=35403,
count=7, id=257, version=33145,
count=205, id=1, productName=Unmarked objects,
count=5, id=265, version=35728,
count=1, id=255, version=35728,
count=1, id=258, version=35728,