Overview

overview

7

Static

static

3

LiveCaptio...me.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    120s
  • max time network
    114s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-de
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/09/2026, 16:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    LiveCaptionsTranslator-win-x64-withruntime.exe
  • Size 71.8MB
  • Sample260925-vcn7fa1epc
  • SHA256 62a5c9ac04fa48ec89a28168bb5835745dd332497ca1ef6184498e6565b4cb31
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LiveCaptionsTranslator-win-x64-withruntime.exe
    "C:\Users\Admin\AppData\Local\Temp\LiveCaptionsTranslator-win-x64-withruntime.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5104
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:5060
    • C:\Users\Admin\AppData\Local\Temp\LiveCaptionsTranslator-win-x64-withruntime.exe
      "C:\Users\Admin\AppData\Local\Temp\LiveCaptionsTranslator-win-x64-withruntime.exe"
      1⤵
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1664
    • C:\Users\Admin\AppData\Local\Temp\LiveCaptionsTranslator-win-x64-withruntime.exe
      "C:\Users\Admin\AppData\Local\Temp\LiveCaptionsTranslator-win-x64-withruntime.exe"
      1⤵
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2752

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          DirectWriteForwarder.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\DirectWriteForwarder.dll
          • Size 490KB
          • SHA256 00103da5f977c634db3761a17f897ae4e5f76b1511db947d49626eef9a48b672
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LiveCaptionsTranslator.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\LiveCaptionsTranslator.dll
          • Size 266KB
          • SHA256 0dd184df13d28202dd1a4758c77e6dfb8d61c433eedae8e93663f276a86284cc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft.Win32.Primitives.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\Microsoft.Win32.Primitives.dll
          • Size 15KB
          • SHA256 633d05a5b8362b4831321d575fdb21a5e4c06d10682b60fa9343950d54496d27
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft.Win32.Registry.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\Microsoft.Win32.Registry.dll
          • Size 118KB
          • SHA256 d154b6a674b3d56c6a7d12addf15c310d754eeac3126a40a35e501ca823d167f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PresentationCore.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\PresentationCore.dll
          • Size 8.1MB
          • SHA256 2f8bffdb7b0019df711e4f13eee102075823c6c2c325841a9068ed15b18d9042
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PresentationFramework.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\PresentationFramework.dll
          • Size 15.4MB
          • SHA256 da96c525aae7379b1c3ab567a12f556aecab756a5bd4b548cf90e3db3b985f19
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PresentationNative_cor3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\PresentationNative_cor3.dll
          • Size 1.2MB
          • SHA256 75fc0d383ea009ea9453a4589fa8d88d149abcac371bb5eb983d6ece8f1243eb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Collections.Immutable.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Collections.Immutable.dll
          • Size 818KB
          • SHA256 b8fb86d6c7e020a3b74b96e91c8964e3e67d039612b48887b8a7192888458b04
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Collections.NonGeneric.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Collections.NonGeneric.dll
          • Size 102KB
          • SHA256 d86d173a169633a52a3814ae99dc985ab41ec922c8e10d713e675c62a2888f2e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Collections.Specialized.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Collections.Specialized.dll
          • Size 102KB
          • SHA256 b8417b1e463e49ad0ab4024ee5b2b204a37f737aaacda4ab001701b08c2204c0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Collections.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Collections.dll
          • Size 254KB
          • SHA256 ebbd44a284dc848732f126ecf235bfe0b11b708250140ed74645500f08db3756
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.ComponentModel.Primitives.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.ComponentModel.Primitives.dll
          • Size 78KB
          • SHA256 8975f93099ae6b4f67277d3da41b189d706fb151705ff55a12453b33e34b6760
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Configuration.ConfigurationManager.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Configuration.ConfigurationManager.dll
          • Size 1.0MB
          • SHA256 3d61dc12421ba2338599e67668475caa5ef29e2bbd2575f4a5e44557a9f2d29c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Diagnostics.Debug.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Diagnostics.Debug.dll
          • Size 15KB
          • SHA256 da092f2a630befd96abc9037a49453b6a95776fd36dd117c0d08ac20c763c1cc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Diagnostics.Process.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Diagnostics.Process.dll
          • Size 330KB
          • SHA256 bb9bc38a6e5ad771b2647f077dc79169839cb16d18d759fb787f9c25db1e7b64
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Diagnostics.StackTrace.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Diagnostics.StackTrace.dll
          • Size 46KB
          • SHA256 f76eec9be7b113374a437b33d69d6875ef461f2f67799f4db190b145367c0513
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.IO.Packaging.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.IO.Packaging.dll
          • Size 286KB
          • SHA256 9076516c483546c3fbee6e3f8819ec81c21a3aad3bd2d1d5d9722e912c62d9b5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Linq.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Linq.dll
          • Size 530KB
          • SHA256 dcb04b4a036e50e7ce055d8ce5eb9a0302d2e7c5698fc89190ca6e9f78f65a6e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Memory.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Memory.dll
          • Size 154KB
          • SHA256 aefbeed3c73bd2d2219bb43b17d6684c31e0a7a6cc977bc12bb58ecc10305089
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Net.WebClient.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Net.WebClient.dll
          • Size 166KB
          • SHA256 1cc54f1d96b5d08a6f0d02c64da6d05522ac5ab1666f71a38ae23b3ffb9834a1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.ObjectModel.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.ObjectModel.dll
          • Size 78KB
          • SHA256 ada7cc5633da6ac70f8257d7fcbe73a825c14a5f07de837fd59f9e08bca4718b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Private.CoreLib.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Private.CoreLib.dll
          • Size 12.6MB
          • SHA256 f0f155a48d45462ab814111b91159aa3ab3dba1312522d4ed344a63e48152100
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Private.Uri.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Private.Uri.dll
          • Size 254KB
          • SHA256 6aaecf177911dbe56d49bf8554feb76e5cb79c19e5dbe977e6b3c845473040c3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Private.Xml.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Private.Xml.dll
          • Size 7.6MB
          • SHA256 40010f68fb45b319fd79bf1b745607dd4ed1e1cd7727c49b7608c5e11bcc1140
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Reflection.Metadata.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Reflection.Metadata.dll
          • Size 1.1MB
          • SHA256 d7c1bf2ae8cc1a78ffe4bcae888c348b80fcfcc728b833735716bc154a0d9f28
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Runtime.CompilerServices.VisualC.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Runtime.CompilerServices.VisualC.dll
          • Size 30KB
          • SHA256 dfd36a29af778f8f5b20d5a90a59d3b5ed0708a680c6b24379b862037e3c733c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Runtime.Extensions.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Runtime.Extensions.dll
          • Size 17KB
          • SHA256 f0e483e9c8f8fead535e09590b373c44f5bc863e5005161f194b489e675a4cac
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Runtime.InteropServices.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Runtime.InteropServices.dll
          • Size 94KB
          • SHA256 7ca4f481f828ef16d58edd67c72a124e388cbf74a0d2bc9d6d6d4851b4c6a0a5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Runtime.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Runtime.dll
          • Size 42KB
          • SHA256 494c89acafa429f017422e62ecb1feaaa662224dde51373703534410075d2aeb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Threading.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Threading.dll
          • Size 82KB
          • SHA256 0fcba972adfecce7e5400d2b7bc69e781b0191015f033df168b11157b0172e67
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.Xaml.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\System.Xaml.dll
          • Size 1.4MB
          • SHA256 6ae88f5acd615c8c66473f0274b67e9989a7650a36e959b1dff2e1a6d0afd07e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UIAutomationClient.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\UIAutomationClient.dll
          • Size 406KB
          • SHA256 820c76467d8103e921bfd3a063864231df1cdb2a49dc39034364db13a7f2b584
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WindowsBase.dll
          • Path C:\Users\Admin\AppData\Local\Temp\.net\LiveCaptionsTranslator-win-x64-withruntime\3HZn_Q8wey9-\WindowsBase.dll
          • Size 2.2MB
          • SHA256 54819c13392f9cad6cbacd3c9690d37f05cb5223ba921a44e25cd83588875398
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download