b724c38e9f2ed6e424dc88764b67ad90480fc70921bf894233369f8423527377

Login
Reports

Overview

overview

Static

static

VSeeFace/V..._1.dll

windows11-ltsc_2024-x64

VSeeFace/V...32.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V..._1.dll

windows11-ltsc_2024-x64

VSeeFace/V...40.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...te.dll

windows11-ltsc_2024-x64

VSeeFace/V...64.dll

windows11-ltsc_2024-x64

VSeeFace/V...at.dll

windows11-ltsc_2024-x64

VSeeFace/V...37.dll

windows11-ltsc_2024-x64

VSeeFace/V...un.bat

windows11-ltsc_2024-x64

VSeeFace/V...ct.dll

windows11-ltsc_2024-x64

VSeeFace/V...se.dll

windows11-ltsc_2024-x64

VSeeFace/V...ta.dll

windows11-ltsc_2024-x64

VSeeFace/V...40.dll

windows11-ltsc_2024-x64

VSeeFace/V...or.pdf

windows11-ltsc_2024-x64

VSeeFace/V...ll.bat

windows11-ltsc_2024-x64

VSeeFace/V...ll.bat

windows11-ltsc_2024-x64

Analysis

max time kernel
150s
max time network
110s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 23:08

Sharing

Copy URL Twitter E-mail

Static task

static1

6 signatures

pyinstaller

Behavioral task

behavioral1

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/libcrypto-1_1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware persistence spyware

Behavioral task

behavioral2

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/libminibmcapture32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral3

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/libminibmcapture64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/libopenblas.PYQHXLVVQ7VESDPUVUADXEVJOBGHJPAY.gfortran-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/libssl-1_1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/msvcp140.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/core/_multiarray_tests.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/core/_multiarray_umath.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/fft/_pocketfft_internal.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/linalg/_umath_linalg.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/linalg/lapack_lite.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/_bit_generator.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/_bounded_integers.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/_common.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/_generator.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/_mt19937.cp37-win_amd64.dll

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/_pcg64.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/_philox.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/_sfc64.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/numpy/random/mtrand.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/onnxruntime/capi/onnxruntime_pybind11_state.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/psutil/_psutil_windows.cp37-win_amd64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/pyexpat.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/python37.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/run.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/select.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/ucrtbase.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/unicodedata.dll

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Binary/vccorlib140.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/Licenses/NeuronAnimator.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/UnityCapture/Install.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

discovery persistence privilege_escalation

Behavioral task

behavioral32

Sample

VSeeFace/VSeeFace_Data/StreamingAssets/UnityCapture/UnInstall.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
VSeeFace/VSeeFace_Data/StreamingAssets/Binary/run.bat
Size 470B
Sample260709-243bpsaw5m
SHA256 b724c38e9f2ed6e424dc88764b67ad90480fc70921bf894233369f8423527377
MD5 58483cb1314f3f083e6c9dfc4dff8e28
SHA1 523d958529c60bec28dba12d902393bcfbd45004
SHA512 a5657882bc67c4b946a13899ee1c3e7914e43e4f04c92b342945bcfcb899c01bf7114b4cf12155f305d84cf9635c04e215ed5a2c8819d170da9a85c522964e01
TLSH
T168F0DC2D424620370BF100BDA418FA677B8D9E925B577CB0A40E0C1CA96E6E08A124CB
MD5 SHA1 SHA512 TLSH

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: 35	2296	facetracker.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4844 wrote to memory of 2296	4844	cmd.exe	86

Processes

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\VSeeFace\VSeeFace_Data\StreamingAssets\Binary\run.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4844
- C:\Users\Admin\AppData\Local\Temp\VSeeFace\VSeeFace_Data\StreamingAssets\Binary\facetracker.exe
  facetracker -l 1
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2296-0-0x000000006E540000-0x00000000701C8000-memory.dmp

Download

memory/2296-1-0x000001DBBD380000-0x000001DBC0EFB000-memory.dmp

Download