Overview

overview

7

Static

static

3

Viper.exe

windows10-2004-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    299s
  • max time network
    206s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/08/2026, 02:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Viper.exe
  • Size 288.5MB
  • Sample260809-c4xnsaydrf
  • SHA256 f2704143b5250c835bee348a32d9d1bb5a0b15135f71c26ce4cdbbcdbdc6c9fd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
  • Modifies registry class 26 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Viper.exe
    "C:\Users\Admin\AppData\Local\Temp\Viper.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    PID:3740
  • C:\Users\Admin\AppData\Local\Viper\Viper.exe
    "C:\Users\Admin\AppData\Local\Viper\Viper.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:4132
  • C:\Users\Admin\AppData\Local\Viper\Viper.exe
    "C:\Users\Admin\AppData\Local\Viper\Viper.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:4608

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        a50f6563c50ca4d5dcb255ee5cfab097
        • Path C:\Users\Admin\AppData\Local\Roblox\rbx-storage\a5\a50f6563c50ca4d5dcb255ee5cfab097
        • Size 1KB
        • SHA256 5e710f0e8ff474aa78b2b472e371cb869268c3e033626dc6bca0d33bae704eeb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        D3DCompiler_47_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectWriteForwarder.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\DirectWriteForwarder.dll
        • Size 470KB
        • SHA256 d8a4c634ea7ddba0d58a2dc28f6a246d90c806274d798d1500b64a657ba2bc8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Win32.Registry.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\Microsoft.Win32.Registry.dll
        • Size 114KB
        • SHA256 f9957093a5206b0c2d863703e4c23e0c38c8f9317f0feec32c52138ed25704d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationCore.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\PresentationCore.dll
        • Size 7.9MB
        • SHA256 17a4a645b39ea3034957ce0622178b0aa00d977c32f358800f48a6bf04f080aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework-SystemXml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\PresentationFramework-SystemXml.dll
        • Size 34KB
        • SHA256 96f40c9ccc0be595bd5ccc510512e01a3391f351ab4356a216c5c6f41bb4759b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.Aero2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\PresentationFramework.Aero2.dll
        • Size 434KB
        • SHA256 824ec37b822919499fd40a04d277c231abe0db5e5af92d27216b00033af93815
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\PresentationFramework.dll
        • Size 15.1MB
        • SHA256 d676df80a91dd93ccfd8b45c5044872e34e326b352a97cc8ab718d2c7412daec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationNative_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 ac85222567293f695d972ef2edabd999372701d27b6d55f2d5721fa48b215f13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Collections.Concurrent.dll
        • Size 290KB
        • SHA256 bb7f6b4cd731ea6228c912c8dde615da5405ae7ea8b1537d6c2ba6f63f3db90e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Immutable.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Collections.Immutable.dll
        • Size 858KB
        • SHA256 96fce00abcc592eeed599c72fcd524c444bb76e88c051b39c49fb3f0b7304ef7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.NonGeneric.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Collections.NonGeneric.dll
        • Size 102KB
        • SHA256 73366c7058762b467732f9932a2d83f2ecfc3f1f755dc91e51d747bbc5cf163d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Specialized.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Collections.Specialized.dll
        • Size 102KB
        • SHA256 1574f7db145d363905accdbd535feac581910a741f2d90978dccba1b79b0b11f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Collections.dll
        • Size 290KB
        • SHA256 607bbdb52a275eae0311449c8423e0f7175d9d8c42e6a6e4c9d987e68740f2e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.ComponentModel.Primitives.dll
        • Size 78KB
        • SHA256 a8dc1d2813df0556a187c4860c6909d851b1a938498f9f50d2d8ce2709b73797
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.TypeConverter.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.ComponentModel.TypeConverter.dll
        • Size 750KB
        • SHA256 18a9508bae22acd1ca80c657be13f7532cc3950352082ae9dc5d7da37eeaf7bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.ComponentModel.dll
        • Size 30KB
        • SHA256 8cabff4863dd55c6110ead70b38145ea5588e9674cc538e10d6aaf5494ef931a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Configuration.ConfigurationManager.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Configuration.ConfigurationManager.dll
        • Size 1022KB
        • SHA256 8427ff4e771dc448ea77718d6b6a532c437103cd09748f54902fba55f38198af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Console.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Console.dll
        • Size 166KB
        • SHA256 ccd66d99b980bd58de311528b071b9bcf64b348e286b28bbdb0e717c6a5565c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.DiagnosticSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Diagnostics.DiagnosticSource.dll
        • Size 490KB
        • SHA256 b599497c6f52bdf497e3e5557e45263d33fa9b06226b6c0b70c98a0675cf40f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Process.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Diagnostics.Process.dll
        • Size 322KB
        • SHA256 934782a25d2368e27807e28b549175bcf8dbc61c3598b5eba3a53143ee76124a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.TraceSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Diagnostics.TraceSource.dll
        • Size 138KB
        • SHA256 cbb7546f36b7d7f936128c8f35df2d0492541097fe2f98dddc540007e5350ddc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.Common.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Drawing.Common.dll
        • Size 902KB
        • SHA256 d267ffd9ffcf0593bca2bfef82e54f19fcfadcbe2ba8ed5a626e5cb4a1d1d8b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Drawing.Primitives.dll
        • Size 130KB
        • SHA256 e74fb730c60f4d9ba0dcce6584e048eddd66f3530604738dacf9cb1ba958bdf1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.IO.Packaging.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.IO.Packaging.dll
        • Size 314KB
        • SHA256 deb6d930de291267317a79e99e2a8cf16707959e9f7d7c99d26139f98877eb49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.IO.Pipelines.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.IO.Pipelines.dll
        • Size 186KB
        • SHA256 e8be292ccfdd68ddf4c061235ee6890c66384592df4a29d65215ac5bc33c0d1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Linq.dll
        • Size 682KB
        • SHA256 35d3db8aae98b0b8f94e9f3d94dc823e29a729c41c50b007c7383603d6b422b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Memory.dll
        • Size 158KB
        • SHA256 2edc8f3bbc0e60ee613a0d9d456846bfb2635118772b3d9d51c3cc116d5c5aa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Http.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Net.Http.dll
        • Size 1.7MB
        • SHA256 49883dba5c99ffad5e43230be4ee38566429d4e307f711058a8141c8b0904076
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.NameResolution.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Net.NameResolution.dll
        • Size 122KB
        • SHA256 0cf3e26e78305cd8642b09d7f6ecc879904f53cd500645fc618441a1043b8476
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Net.Primitives.dll
        • Size 206KB
        • SHA256 603da5e0255f11d466647b4b73d746e87559d4b6e9890007b170e660012972a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Requests.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Net.Requests.dll
        • Size 366KB
        • SHA256 46aafa741962c12843e96a68eaaf20af2b12dacd574870fb830dc9b187da15ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Security.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Net.Security.dll
        • Size 650KB
        • SHA256 de258a29818a70f18049b1d33d6bc7f28158d3c1836678b17516ac47a60abcb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Sockets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Net.Sockets.dll
        • Size 518KB
        • SHA256 e8c79b6599f33e00ea57d7eeb05a6ac8a8378adae042f290a88a21c282936a78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebClient.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Net.WebClient.dll
        • Size 162KB
        • SHA256 837d47cc0046eee0b74b009f41c1ed934dea2da2eba8a5f04c43b621e364fd09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebHeaderCollection.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Net.WebHeaderCollection.dll
        • Size 62KB
        • SHA256 8aa72c4c376f039dd48efb25053ce9b78944b0c10bdbd7fbcb177e013799ba79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ObjectModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.ObjectModel.dll
        • Size 78KB
        • SHA256 705c9b2ecb2d4a5ede420492483645bb71b53697faefe5e7165e1adbf76e3583
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Private.CoreLib.dll
        • Size 15.3MB
        • SHA256 a4d81ebc7474e4a1fccfd8d7e56abbd12d396421c4447bfce25c3526f5479c2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Uri.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Private.Uri.dll
        • Size 250KB
        • SHA256 e2f1fa1acba6fd328fcd213d031ef4993c69d510753254b8bb6bf4d484fd8452
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Windows.Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Private.Windows.Core.dll
        • Size 1.8MB
        • SHA256 3de05ae5d67563033ddd08b070dc0a3ca9b22e6d9065aca80e0db720407dc5d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Windows.GdiPlus.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Private.Windows.GdiPlus.dll
        • Size 418KB
        • SHA256 2e1b8fc553a0a0de1453fd70a65eddd37ac2d4bdf6a660eacac579f25b243e8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Xml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Private.Xml.dll
        • Size 7.4MB
        • SHA256 b1c078417751112edd7d83f0eb82947e8c849e79b44a143da6e6544734e293ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.CompilerServices.VisualC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Runtime.CompilerServices.VisualC.dll
        • Size 30KB
        • SHA256 670ad7dab228b4a878768ddb532b346f8bcdeaa0d987a7540b8227e358303e93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Runtime.InteropServices.dll
        • Size 110KB
        • SHA256 90070cc5124148898fa246690b1cbcd101c620bcb11f4d53b2cd6228260a6242
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.Serialization.Formatters.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Runtime.Serialization.Formatters.dll
        • Size 122KB
        • SHA256 8f5ba5e81df658d62f74a8eb2cf53e08cf673bfc606ed5205430e2499a3f742f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Claims.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Security.Claims.dll
        • Size 98KB
        • SHA256 36285c72fc83bad58e4be8d4e76fe9a17224690a01e5fdf1d2d96b97f142e39b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Cryptography.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Security.Cryptography.dll
        • Size 2.4MB
        • SHA256 b7f8e7ace9c723ea66b8787278d863880a65ea6d19d7385dd9662372c511e6b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Principal.Windows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Security.Principal.Windows.dll
        • Size 174KB
        • SHA256 6f74f292955eae9f4d7b68cbb6d8bb54756abfa9c0a75325c3d890ccdf580d28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.Encodings.Web.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Text.Encodings.Web.dll
        • Size 122KB
        • SHA256 802d60772245fb8d0bf9e357f86fd64fabbd6de88d3f2a0f372372cd3fa5eb35
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.Json.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Text.Json.dll
        • Size 1.8MB
        • SHA256 618c5e2bcd047d8bd24979c4fb0c8053a8feef4e7eaaa896a821ce0c1e9faa29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.RegularExpressions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Text.RegularExpressions.dll
        • Size 1010KB
        • SHA256 1b0f95cc9c5b7ccac24a7c037ccb107efabf6eee2c7ea211dd08fbfadf24cbda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Threading.dll
        • Size 82KB
        • SHA256 b41305e5388ab57cd8fe4ef0aebb87eb52b673e5949594782f2384f568ad2671
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Controls.Ribbon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Windows.Controls.Ribbon.dll
        • Size 1.4MB
        • SHA256 705b9b87a041839eb06cd18aff166e4a2331dec1df8a3bbf9fe9bcba999f58ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Extensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Windows.Extensions.dll
        • Size 118KB
        • SHA256 1d14ac03cb612efe246183105cd25818486f234576a003d696602d2547bd75a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Forms.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Windows.Forms.Primitives.dll
        • Size 3.5MB
        • SHA256 70a0bb27b0260017b8ca21f34548fb157b6554fc1a08f76ccea45038cd76c92a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Forms.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Windows.Forms.dll
        • Size 13.1MB
        • SHA256 c8115eafe12b2014e599281f256fba349f58e5e412f2057927e26a74e3b303f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Xaml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\System.Xaml.dll
        • Size 1.3MB
        • SHA256 8b3053812324e8fa7557d7b0acfab455f3a4c4af50c8d7047a6efdf1ed3c92ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationProvider.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\UIAutomationProvider.dll
        • Size 62KB
        • SHA256 722de0589d1d51fe8c9da080c8594760daf78fd84b1f1d2e0b313fb70d87389e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationTypes.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\UIAutomationTypes.dll
        • Size 290KB
        • SHA256 a98f2e3f5068fb993bccfa3fb7b9a041699fc6b6571003593430b04ade5ba080
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Viper.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\Viper.dll
        • Size 8.1MB
        • SHA256 9e64b6ba5b77accd56cab305f9d340919c50ffa5f3d4670cfb45e1902338523c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WindowsBase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\WindowsBase.dll
        • Size 2.1MB
        • SHA256 6137f1600d3598ceb9f72b57b514924c2b2e2fd5ecd95497d1d6b8d9c95486a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WindowsFormsIntegration.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\WindowsFormsIntegration.dll
        • Size 210KB
        • SHA256 dd9aea47747f8f9efc0641c48cabaf5d7777f17507e6ecf03dcc334b26219969
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wpfgfx_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\Viper\_lXaIfgG_9rB\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 ba56cf777a370395c385ecba19129efbc6673d5ef5f18c23f8d90d23b140a6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppSettings.json
        • Path C:\Users\Admin\AppData\Local\Viper\AppSettings.json
        • Size 3KB
        • SHA256 11072417506dfcaaa0822913d82321ce006bb7a15ae90f1b5984a0e4c51aee0f
        • MD5 SHA1 SHA512 TLSH
        Submit Download