Overview
overview
6Static
static
1vr bypass ...ass.js
windows10-2004-x64
3vr bypass ...ass.js
windows11-ltsc_2024-x64
3vr bypass ...idk.js
windows10-2004-x64
3vr bypass ...idk.js
windows11-ltsc_2024-x64
3vr bypass ...tuf.js
windows10-2004-x64
3vr bypass ...tuf.js
windows11-ltsc_2024-x64
3vr bypass ...ss.bat
windows10-2004-x64
3vr bypass ...ss.bat
windows11-ltsc_2024-x64
3vr bypass ...ols.ts
windows10-2004-x64
6vr bypass ...ols.ts
windows11-ltsc_2024-x64
1vr bypass ...er.bat
windows10-2004-x64
3vr bypass ...er.bat
windows11-ltsc_2024-x64
3Analysis
- user interaction
yes - max time kernel
12s - max time network
15s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 13:37
Static task
static1
Behavioral task
behavioral1
Sample
vr bypass fixed by fade01/SteamVRBypass.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
vr bypass fixed by fade01/SteamVRBypass.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
vr bypass fixed by fade01/frida-idk.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
vr bypass fixed by fade01/frida-idk.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
vr bypass fixed by fade01/getstuf.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
vr bypass fixed by fade01/getstuf.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
vr bypass fixed by fade01/steamvrbypass.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
vr bypass fixed by fade01/steamvrbypass.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
vr bypass fixed by fade01/symbols.ts
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
vr bypass fixed by fade01/symbols.ts
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
vr bypass fixed by fade01/tokengrabber.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
vr bypass fixed by fade01/tokengrabber.bat
Resource
win11ltsc2024-20260709-en
General
- Target vr bypass fixed by fade01/symbols.ts
- Size 20KB
- Sample260809-qwth2sfp41
- SHA256 e00df1346f8b05e6730204a007c249f18edb75a91fa12db74f7d7f2431fc9da3
- MD5 7165585955a97c347c4f25dc697e8345
- SHA1 fd1e82b2943bbb83ed2a5bc89b3e8588ee009728
- SHA512 e0988ef99212acbbd67f239449444204626bd022c774af4a1d2a237432a8939c47ab579dd119e6ebd9275c147ec81105100c3a581aff2d4480ca1755dce0f980
- SSDEEP 384:dG9WmTllTe0SUURdqwfj1fDICCOS2vJ03R1s1jukkYNGPB:88mvTeUX2vJ03R1s1KkkYQ5
- TLSH T1269261923264AFEBA92A1005EDDA87DF34B00C924B18E5B0F96CD5FE45B485C13F6BD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5220 vlc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5220 vlc.exe - Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe - Suspicious use of SendNotifyMessage 8 IoCs
pid Process 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe 5220 vlc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5220 vlc.exe
Processes
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\vr bypass fixed by fade01\symbols.ts"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5220