Behavioral Analysis

powershell.exe "powershell.exe" Get-ItemPropertyValue -Path HKCU:SOFTWARE\Roblox\RobloxStudioBrowser\roblox.com -Name .ROBLOSECURITY

powershell.exe "powershell.exe" Get-ItemPropertyValue -Path HKLN:SOFTWARE\Roblox\RobloxStudioBrowser\roblox.com -Name .ROBLOSECURITY

WMIC.exe "wmic.exe" os get Caption

WMIC.exe "wmic.exe" computersystem get totalphysicalmemory

WMIC.exe "wmic.exe" csproduct get uuid

powershell.exe "powershell.exe" Get-ItemPropertyValue -Path 'HKLM:System\CurrentControlSet\Control\Session Manager\Environment' -Name PROCESSOR_IDENTIFIER

WMIC.exe "wmic" path win32_VideoController get name