Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/10/2026, 10:20

General

  • Target
    SpiffyVault-0.2.2-windows-setup.exe
  • Size 25.8MB
  • Sample261003-mdc7kawend
  • SHA256 653f16af0a90cbc4083ca72900ab6df994ebd839bbcf3a3df773bd6e552f55cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 16 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SpiffyVault-0.2.2-windows-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\SpiffyVault-0.2.2-windows-setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4960
    • C:\Users\Admin\AppData\Local\Temp\is-AQM6HISXKQ.tmp\SpiffyVault-0.2.2-windows-setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-AQM6HISXKQ.tmp\SpiffyVault-0.2.2-windows-setup.tmp" /SL5="$40182,25798055,970752,C:\Users\Admin\AppData\Local\Temp\SpiffyVault-0.2.2-windows-setup.exe"
      2⤵
      • Executes dropped EXE
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2772
      • C:\Program Files\SpiffyVault\spiffyvault.exe
        "C:\Program Files\SpiffyVault\spiffyvault.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of SetWindowsHookEx
        PID:1852

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Program Files\SpiffyVault\VCRUNTIME140.dll
        • Size 174KB
        • SHA256 d1f4225df2cd877dbf130d5668a021dce3f94118455ff5ec952061c30afc9ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app_links_plugin.dll

        • Path C:\Program Files\SpiffyVault\app_links_plugin.dll
        • Size 144KB
        • SHA256 f3ff78c1d1168bd34711bb8287fb6ae7159f5f9f5cdf440f5a37acfaf9c45c90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.so

        • Path C:\Program Files\SpiffyVault\data\app.so
        • Size 18.2MB
        • SHA256 1efb0b4413921b08e268e71154f3006880b781b17d64fe5913193f07a1e8271d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FontManifest.json

        • Path C:\Program Files\SpiffyVault\data\flutter_assets\FontManifest.json
        • Size 1KB
        • SHA256 77fd4305079341b22d39194a8d2ef7ff497cffbb22c85a416cecff20cfe2235c
        • MD5 SHA1 SHA512 TLSH

        NativeAssetsManifest.json

        • Path C:\Program Files\SpiffyVault\data\flutter_assets\NativeAssetsManifest.json
        • Size 131B
        • SHA256 4ac70f7d67abb2ffc105d2cabfdee68c9aa138d132107e5be4949c539f7ce379
        • MD5 SHA1 SHA512 TLSH

        is-9REDS4F14U.tmp

        • Path C:\Program Files\SpiffyVault\data\flutter_assets\assets\themes\is-9REDS4F14U.tmp
        • Size 1.8MB
        • SHA256 c13431e7d325c4c28daa4c9494222cb55b1f026ea91c052d2fa9af04153bf7b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MaterialIcons-Regular.otf

        • Path C:\Program Files\SpiffyVault\data\flutter_assets\fonts\MaterialIcons-Regular.otf
        • Size 1.6MB
        • SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
        • MD5 SHA1 SHA512 SSDEEP TLSH

        english.txt

        • Path C:\Program Files\SpiffyVault\data\flutter_assets\packages\dartsv\src\bip39\wordlists\english.txt
        • Size 14KB
        • SHA256 3b2c7274b03d3a09fafd59ae80dbaf84ba0811ee331d422bd91cab143c1aaca7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Program Files\SpiffyVault\data\icudtl.dat
        • Size 842KB
        • SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        desktop_window_plugin.dll

        • Path C:\Program Files\SpiffyVault\desktop_window_plugin.dll
        • Size 85KB
        • SHA256 44f638424e45743b47a941923b9de9c0af574e41a5342ca35ce204001cdae27d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        file_selector_windows_plugin.dll

        • Path C:\Program Files\SpiffyVault\file_selector_windows_plugin.dll
        • Size 108KB
        • SHA256 9a5dd1fc9959d7695c9e20c5af8630d2d9f47b44956d1ef1fbc26128651d70bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage_windows_plugin.dll

        • Path C:\Program Files\SpiffyVault\flutter_secure_storage_windows_plugin.dll
        • Size 155KB
        • SHA256 8b74591bd551769ba0254efde554fc97e573ad6b330ec1244e0f76008a6c51fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_windows.dll

        • Path C:\Program Files\SpiffyVault\flutter_windows.dll
        • Size 19.8MB
        • SHA256 92e7aa320afe026e90780e4049dc6f6a480696400a269c179b1cca0ef751d175
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gal_plugin.dll

        • Path C:\Program Files\SpiffyVault\gal_plugin.dll
        • Size 176KB
        • SHA256 22b153ad87513f82ff06fca6c35f98df44e07efb5b6fc486196fe5f2d61f4ee8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        isar.dll

        • Path C:\Program Files\SpiffyVault\isar.dll
        • Size 1.1MB
        • SHA256 5e67863f188c5f9681a37f84f2eb942eaf702509d3f994c0344d5049ebc9e48f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        isar_flutter_libs_plugin.dll

        • Path C:\Program Files\SpiffyVault\isar_flutter_libs_plugin.dll
        • Size 84KB
        • SHA256 52e69a5511ad07ec7a07806b54bfdc22f357a09ffc4b9b904ad288fcac5f23e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Program Files\SpiffyVault\msvcp140.dll
        • Size 628KB
        • SHA256 7c26614e1d733892c2deac7e245ce115504b1d80592dd0a01b08e3e5a55f89ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        share_plus_plugin.dll

        • Path C:\Program Files\SpiffyVault\share_plus_plugin.dll
        • Size 135KB
        • SHA256 a4eafafb79de96d092cab25fbf41c8c1bc60de3c2bef1156eee8e1b50c055ead
        • MD5 SHA1 SHA512 SSDEEP TLSH

        spiffyvault.exe

        • Path C:\Program Files\SpiffyVault\spiffyvault.exe
        • Size 187KB
        • SHA256 175219add00f7df6c0adc938c6f71bcd2b05bd6e4d2be91feeebbfcd9c03551a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        url_launcher_windows_plugin.dll

        • Path C:\Program Files\SpiffyVault\url_launcher_windows_plugin.dll
        • Size 96KB
        • SHA256 8344ab2d9d89c17b58f094cfa50bb458e6f2b41ef6c4f114477493b79aa8794b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Program Files\SpiffyVault\vcruntime140_1.dll
        • Size 48KB
        • SHA256 a7146c08f89fe5b04541ab507cdb59ff7b44534d4ba3c668a426c6450a03434e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SpiffyVault-0.2.2-windows-setup.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-AQM6HISXKQ.tmp\SpiffyVault-0.2.2-windows-setup.tmp
        • Size 4.3MB
        • SHA256 d888915b238bb349b32870b9ab6de5b4ccf83a7c7d09b6dd71b25f303fcf7502
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 486B
        • SHA256 4288af00fb8c55b9923752446bbed6b70eef54c3b2d160354418c008b054f678
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 630B
        • SHA256 d7ce965a093537094c51a3b46791162d84b829fc384a25fe94dde3d00534fb38
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 726B
        • SHA256 df49d5a2fa878dcb9f39c7283e1e4ea537d7bfe735a059ac6685d4232c0e8d54
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 1KB
        • SHA256 f712f593b6396a5e1796ea9d986ce952c12bc8e26651c8d23d093e3b4e2a761d
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 1KB
        • SHA256 e69e5db70206662aec1589bb97eef30f06972b9fa036f1587a3514748ade427b
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 1KB
        • SHA256 42dd592156b501cd0c379e97dcc90005b2e1f623f2fc1ff53b6161b253f8edba
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 1KB
        • SHA256 5a94b9949cd55544b7d8c872d7b91c8ed4222a01a6ed55ab4598a2c214cca49b
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 2KB
        • SHA256 7b697ce9c5dab199246ab7299059ea8b10322954b0708eff3ce1e4ef207e0e06
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 2KB
        • SHA256 0ae7b6afa0217d612ecaf9e23ca9f044af42b543aca39f5ad6e59743e62b2a28
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 2KB
        • SHA256 bbc41ebdd1a9ef0c6e8ab420baf937c8eb267d9a752c44039465c0d7b348fdbc
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 2KB
        • SHA256 2eeff80d061b76ae0a7c1c44ac8c3d9c3b69808aa073dfa43df509842d3528d4
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 2KB
        • SHA256 025992c2d272457acc8031e25fb079e17975674e52d2318192682e8b7566f80c
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 2KB
        • SHA256 dc6eaf8703ba7dde7a092d8d721a855c69c1da2636f40147c6d3faea1f839857
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 3KB
        • SHA256 75c62d67a33b390116921b48795dd6d6f2afcb81e7589c71fe1394c232a9cae6
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 3KB
        • SHA256 87690a53c0856eea53db148b2b4f68a91cb529b89b2f6e07c6e57fda1da11fa5
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 3KB
        • SHA256 b2374c68a3957627c6e6bf15e9065c36d6aba339175e7692c363299b64868c47
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 3KB
        • SHA256 540862a487b90f611ee51e6b690b50a48fe626fa09684d8b29fff2af79a89254
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 3KB
        • SHA256 a01f967fdfc396dcdf5dd1d1ecf99f3797dca67f1e60305c9bec732bd44a716b
        • MD5 SHA1 SHA512 TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 4KB
        • SHA256 8d387fd3bd81f3239d90c8b678d7b2dd2b564cb4b7accf24a5b58defcb513a12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 4KB
        • SHA256 b7dec9e30fd3c56e4a831802b05e31014d70bd91fa462559134ca1b92a88c443
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 4KB
        • SHA256 bc141ce079d6298dac45fd5fafb85d5ba14d7906adb2f4b86ef85adb61915d0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 4KB
        • SHA256 2308fc322b1d8f33352ac65c42004db92612ef944ae6f734a7e330577f6022bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 4KB
        • SHA256 c8222a65e2e542a08a21e7d2f54b592c31c946049c8e2b62764194a4a36cc91b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 4KB
        • SHA256 9e23ba65f158b0bd184b177822094736da70da36dad97e18d2427b457466a2f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 5KB
        • SHA256 dbeffd69f65b81ee3d4b94084e96ac473df248f63443e8e8d2bddc7a48c7bb42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 5KB
        • SHA256 2c397055e832ed76c7d63301974eede07e6a26417a5441c39c1ca969e7f11f90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 5KB
        • SHA256 7eb7a7593fecee253d1dfc72e28a04a5dd29acd15fc16277a8fabb8e088025d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 5KB
        • SHA256 2df8e6bfa94674b306a78729e0ba4acac234aabddbcbad62feaee0aa8e485307
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 5KB
        • SHA256 7d264c9b45d2aabe45726331087514271acdfe138cd8ae5697e284ac32d57ad4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 6KB
        • SHA256 69e82381d706b7668a47ca9cec6310e7be9637509200c9c19b2cfeb2e511b2bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 6KB
        • SHA256 4b2520bd4f3d56f0d63fb26136f83d1ae7956dbc032c5374960f8b2f686d1445
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 6KB
        • SHA256 93e6231b1194b21e6d504ec16c0bc1fa9ae9577325872dea44823a35d17482d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 6KB
        • SHA256 a2aae11e70ec35f0133efe598a2f04e8f65dea3b2ffb636d69756415376e4838
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 6KB
        • SHA256 928d5c4048589a47403be1bb29035a0e97159aa9357ed1c5d1b311a6b0601b2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 6KB
        • SHA256 6c207ee8a87fa04a29cc8168dee7246e17b74fe2ebbb2b9e30bc6a0bbd6c764e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 6KB
        • SHA256 7dc93c54ce71a368494bd1db0637b0eaf745060437596f5540fcfeaf25646df5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 7KB
        • SHA256 c7b727f7d64ea852de04c6140e45c2822b2d8b8f479fe23b02df8d7f2637d8a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 7KB
        • SHA256 3b251bace30a822cd1381873bb8effea3cb3d9223721b5db085a6051bc8ce924
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 7KB
        • SHA256 45e53c2118d1b1e6426be7127ea57bddd790bc128945aef99723df38a9ebe8ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 7KB
        • SHA256 528cd8470266e2fa22483c428a541d47ca687191b80d620e48e91577bdabbd48
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 7KB
        • SHA256 152ae1d6fce8e05c1ab502ad8b0513417a56b05c26e20ca64ebfa67ee5d5eb35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 7KB
        • SHA256 4a9f5d31a1bb9a35acaa0f8c82cc281e3b9ba0d03df9a3330477fc4ed96052d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 8KB
        • SHA256 ea822c87616805454a8e557a88f71c09a53f5b98912d2d8fc696033fb1f99028
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 8KB
        • SHA256 790603a5cbe5e83779bc07509b8ee4605fadf0b4de469b54ad16b5e9faf4fa55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 8KB
        • SHA256 d616baaba8bc22c59969de1fa4a8b72bfac805d1b814065d6eb78d23f93ca84d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 8KB
        • SHA256 6922a173752e028bd3f41b9eb3869c0888f518f741dff310079cedaa04cfc00e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 8KB
        • SHA256 7ac15e60071f918e0887dbd7603e072d0ed8e544e49f5963ea4d9f7533b7de8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 8KB
        • SHA256 4d58c830556436bd4b356fc240357e16230b033fec0d9483cc6b47031e3be153
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 9KB
        • SHA256 286faa5171622c42c80510b5e465555075b94676aa5719b37eceab7acd4a5427
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flutter_secure_storage.dat

        • Path C:\Users\Admin\AppData\Roaming\Werkswinkel Pte Ltd\SpiffyVault\flutter_secure_storage.dat
        • Size 9KB
        • SHA256 231fdba2efcf946a024465d328c019748ac369c2c019d8c1c0193c0979513f7e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1852-223-0x000001B640030000-0x000001B640031000-memory.dmp

        memory/1852-225-0x000001B642B90000-0x000001B643DC5000-memory.dmp

        memory/1852-226-0x000001B642B90000-0x000001B643DC5000-memory.dmp

        memory/1852-227-0x000001B640040000-0x000001B640041000-memory.dmp

        memory/1852-224-0x000001B642B90000-0x000001B643DC5000-memory.dmp

        memory/2772-12-0x00000000008D0000-0x0000000000D26000-memory.dmp

        memory/2772-234-0x00000000008D0000-0x0000000000D26000-memory.dmp

        memory/2772-10-0x00000000019D0000-0x00000000019D1000-memory.dmp

        memory/2772-190-0x00000000008D0000-0x0000000000D26000-memory.dmp

        memory/2772-233-0x00000000008D0000-0x0000000000D26000-memory.dmp

        memory/2772-9-0x00000000008D0000-0x0000000000D26000-memory.dmp

        memory/2772-6-0x00000000019D0000-0x00000000019D1000-memory.dmp

        memory/4960-235-0x0000000000990000-0x0000000000A8B000-memory.dmp

        memory/4960-0-0x0000000000990000-0x0000000000A8B000-memory.dmp

        memory/4960-8-0x0000000000990000-0x0000000000A8B000-memory.dmp