Overview

overview

7

Static

static

3

TPManager-beta8.exe

windows10-2004-x64

7

TPManager-beta8.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    36s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/06/2026, 05:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    TPManager-beta8.exe
  • Size 93.4MB
  • Sample260623-fps9laat4q
  • SHA256 164f0e51ffdbe37ba000d07915bbdd3b3aac8b1f2019145b54f14c346861bfb2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 58 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TPManager-beta8.exe
    "C:\Users\Admin\AppData\Local\Temp\TPManager-beta8.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5536
    • C:\Users\Admin\AppData\Local\Temp\TPManager-beta8.exe
      "C:\Users\Admin\AppData\Local\Temp\TPManager-beta8.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:5788

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\VCRUNTIME140.dll
        • Size 94KB
        • SHA256 e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _asyncio.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\_asyncio.pyd
        • Size 63KB
        • SHA256 3ad5f4bd4361df0c077122a91d180dcf9b68b0249fc6b39edda5dd4ece6f23f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\_bz2.pyd
        • Size 84KB
        • SHA256 9483c4853ca1da3c5b2310dbdd3b835a44df6066620278aa96b2e665c4b4e86b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\_ctypes.pyd
        • Size 123KB
        • SHA256 1548506345d220d68e9089b9a68b42a9d796141eb6236e600283951cb206eaa1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\_lzma.pyd
        • Size 159KB
        • SHA256 4797aaf192eb56b32ca4febd1fad5be9e01a24e42bf6af2d04fcdf74c8d36fa5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _overlapped.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\_overlapped.pyd
        • Size 45KB
        • SHA256 fd9e9467e1353f9dc02143481085f2440f25286d0a4630aa8b1d8919cbb50b8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\_queue.pyd
        • Size 28KB
        • SHA256 b0bd6330c525b4c64d036d29a3733582928e089d99909500e8564ae139459c5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\_socket.pyd
        • Size 78KB
        • SHA256 241db349093604ab25405402ba8c4212016657c7e6a10edd3110abeb1cc2e1ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\_ssl.pyd
        • Size 151KB
        • SHA256 31c95af04a76d3badbdd3970d9b4c6b9a72278e69d0d850a4710f1d9a01618d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\base_library.zip
        • Size 764KB
        • SHA256 7ae17d6eb5d9609dc8fc67088ab915097b4de375e286998166f931da5394d466
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _clock.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\_clock.cp39-win_amd64.pyd
        • Size 213KB
        • SHA256 a3deebd583a216056d457f0eb0939b7b0de09ec24b9f6d1dfc7b5296ef5acb29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _event.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\_event.cp39-win_amd64.pyd
        • Size 195KB
        • SHA256 b5ea4a8497d26e1b90d8a077a89c8de57621b9bfddd6942190264cf291fe2d1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        buffer.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\graphics\buffer.cp39-win_amd64.pyd
        • Size 34KB
        • SHA256 382510a097f5dc82f81e5b8d2499e6ee38367fad1acf7444aed11e00d013ee54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cgl.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\graphics\cgl.cp39-win_amd64.pyd
        • Size 95KB
        • SHA256 e3c5433d52aaea83f1cb499fb2a18d486d4238a6397c47387248244e0069c781
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        instructions.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\graphics\instructions.cp39-win_amd64.pyd
        • Size 167KB
        • SHA256 c310979932bd2a555400c56c476eb29b8ae4edd438c6f9ace1d13e80cbedb1d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vbo.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\graphics\vbo.cp39-win_amd64.pyd
        • Size 81KB
        • SHA256 695c9ba195835f6b6de73ca9ab87973fc7c64ec2f94303c333a820b90ecf74d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vertex.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\graphics\vertex.cp39-win_amd64.pyd
        • Size 40KB
        • SHA256 39dab39e442f7aa0758afe4d3e16c92e07491e0090a797405da9e184e2512d3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        properties.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\properties.cp39-win_amd64.pyd
        • Size 396KB
        • SHA256 83de4448d8c26c380f51ebe67b91085c4d5820680a7c4d28a8c9c6d46d29d611
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        weakproxy.cp39-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy\weakproxy.cp39-win_amd64.pyd
        • Size 95KB
        • SHA256 c5e1aef71197295190b7e90bf125f85a7586bce45e0c7e27bb94a3356bd1b6db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kivy-icon-128.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-128.png
        • Size 3KB
        • SHA256 b11d23e098104f77089e859cc97a7fb52341e05ad6871e8be9994e188cb2f556
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        kivy-icon-16.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-16.png
        • Size 392B
        • SHA256 52ef10fc7d1adeea6a21d82d9ab168a354c01f0a2e5efe3eff61b378ca7ad730
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        kivy-icon-24.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-24.png
        • Size 538B
        • SHA256 d52b8f3a73bfec3f5c345f010a9fc25d9f74900d7cd4b54912cf82bd08fadffd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        kivy-icon-256.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-256.png
        • Size 7KB
        • SHA256 3ca68b695733667aa883ba920f70e1a20ecaa6f0feaffff4e2d82c96c8745f5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kivy-icon-32.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-32.png
        • Size 724B
        • SHA256 e11fced4e1379284c209b9f9fa39c4920ed921cae168db5c4beb9de4ad34282d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        kivy-icon-48.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-48.png
        • Size 1KB
        • SHA256 d525539096d8f3502d8e1175fb1b07b73360ecc2f87b733ba8822c308f9a3cb6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        kivy-icon-512.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-512.png
        • Size 16KB
        • SHA256 bf9f2bb9715acea81e4e46c0d6be5d7f25712f0d885ba9942960fb325bf54a86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kivy-icon-64.ico
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-64.ico
        • Size 33KB
        • SHA256 94cb8d6a02becd4330818ded867461bcf1bc6be2952b547e0f11310061edf708
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kivy-icon-64.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\kivy_install\data\logo\kivy-icon-64.png
        • Size 1KB
        • SHA256 10e913fc768b1be6a3bb72532ee739c92a561ec6683e9d16a453a0b27794118f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 664c3e52f914e351bb8a66ce2465ee0d40acab1d2a6b3167ae6acf6f1d1724d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\libssl-1_1.dll
        • Size 678KB
        • SHA256 b7c0e42c1a60a2a062b899c8d4ebd0c50ef956177ba21785ce07c517c143aeaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\pyexpat.pyd
        • Size 199KB
        • SHA256 ab0814b19fd6b10d2729a907cf449f8a858a42b3f1288fb1c93b62950059295d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python39.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\python39.dll
        • Size 4.3MB
        • SHA256 e456ef44b261f895a01efb52d26c7a0c7d7d465b647a7b5592708ebf693f12a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pythoncom39.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\pythoncom39.dll
        • Size 543KB
        • SHA256 4077005b6ae8272d82892d183cbc972780e3aa80f848c447626761a6c244d3a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pywintypes39.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\pywintypes39.dll
        • Size 139KB
        • SHA256 0cc26e2acaa1933647f885b47ac6da6625be7a4cd93fae220fb172906ff22091
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\select.pyd
        • Size 28KB
        • SHA256 5361da714a61f99136737630d50fa4e975d76f5de75e181af73c5a23a2b49012
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32api.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI55362\win32api.pyd
        • Size 131KB
        • SHA256 9157829433f0bd8a12b1a1cf2fb90301e20ecf43802eb0ac85525ebcc53d0e30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download