Overview

overview

7

Static

static

3

Spotify.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    92s
  • max time network
    85s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/11/2026, 14:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Spotify.exe
  • Size 108.3MB
  • Sample261102-rcwpqsfc75
  • SHA256 ed54938ac8cb188bfc2c1a8c89a851a73ae7aaa8f57852f61c51249fbdd4935c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscovery

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 25 IoCs
  • Writes a Windows system DLL name to a user directory 2 TTPs 3 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Discovers running processes 1 TTPs 1 IoCs

    Running process information can be used to identify security tools or plan follow-on actions.

    discovery
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs
    defense_evasion
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Network Connections Discovery 1 TTPs 3 IoCs

    Attempt to get a listing of network connections.

    discovery
  • Gathers network information 2 TTPs 3 IoCs

    Uses commandline utility to view network configuration.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Spotify.exe
    "C:\Users\Admin\AppData\Local\Temp\Spotify.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5132
    • C:\Windows\system32\conhost.exe
      "C:\Windows\system32\conhost.exe" "C:\Users\Admin\AppData\Local\Temp\Spotify.exe" --classic-console
      2⤵
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5168
      • C:\Users\Admin\AppData\Local\Temp\Spotify.exe
        C:\Users\Admin\AppData\Local\Temp\Spotify.exe --classic-console
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4336
        • C:\Users\Admin\AppData\Local\DripLiteCpp\DripLite.engine.exe
          "C:\Users\Admin\AppData\Local\DripLiteCpp\DripLite.engine.exe" --launcher-panel
          4⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:1224
          • C:\Users\Admin\AppData\Local\DripLiteCpp\DripLite.engine.exe
            "C:\Users\Admin\AppData\Local\DripLiteCpp\DripLite.engine.exe" --launcher-panel
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes a Windows system DLL name to a user directory
            • Reads the TCP/IP host and domain name from the registry
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:2856
            • C:\Windows\SYSTEM32\tasklist.exe
              tasklist /FI "IMAGENAME eq Drip.exe" /FO CSV /NH
              6⤵
              • Discovers running processes
              • Suspicious use of AdjustPrivilegeToken
              PID:3932
            • C:\Windows\SYSTEM32\netstat.exe
              netstat -ano -p tcp
              6⤵
              • System Network Connections Discovery
              • Gathers network information
              • Suspicious use of AdjustPrivilegeToken
              PID:5800
            • C:\Windows\SYSTEM32\netstat.exe
              netstat -ano -p tcp
              6⤵
              • System Network Connections Discovery
              • Gathers network information
              • Suspicious use of AdjustPrivilegeToken
              PID:4768
            • C:\Windows\SYSTEM32\netstat.exe
              netstat -ano -p tcp
              6⤵
              • System Network Connections Discovery
              • Gathers network information
              • Suspicious use of AdjustPrivilegeToken
              PID:4620
            • C:\Users\Admin\AppData\Local\DripLiteCpp\Data\Drip.exe
              "C:\Users\Admin\AppData\Local\DripLiteCpp\Data\Drip.exe"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious use of NtSetInformationThreadHideFromDebugger
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:2340
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
    1⤵
      PID:1784

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          mock_replay_nice.js
          • Path C:\Users\Admin\AppData\Local\DripLiteCpp\Data\mock_replay_nice.js
          • Size 3KB
          • SHA256 416bd497fe876dcdbea1471458e6f0add09ae9ff93b14e23422b99d455d07fdb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          config_0x21.bin
          • Path C:\Users\Admin\AppData\Local\DripLiteCpp\Data\session_nice\config_0x21.bin
          • Size 657B
          • SHA256 128df0b462d29315320c7956dfc17c4159616df88c613f089d28b48e3a5574e2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          config_0x30.bin
          • Path C:\Users\Admin\AppData\Local\DripLiteCpp\Data\session_nice\config_0x30.bin
          • Size 1KB
          • SHA256 2e6d3f585867ef7fe24fa2f04909b02a773ea20a16ed4fa96b0ce7af8b4bd2d8
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          packed_dll.bin
          • Path C:\Users\Admin\AppData\Local\DripLiteCpp\Data\session_nice\packed_dll.bin
          • Size 26.5MB
          • SHA256 d162cd682238b1c1aeb87bd71fcb309b38a92f69a7a2059942a3885abf5b1ea7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Drip.exe
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\Drip.exe
          • Size 30.5MB
          • SHA256 eb0bf26765676d2c6f7b2b5853d706785c42b6a7674f1c84135e67071f215cd0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\VCRUNTIME140.dll
          • Size 117KB
          • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\_bz2.pyd
          • Size 84KB
          • SHA256 1bf985b54f529a3cbb3e52532791cc4d4c64009142d37b54eb3521adec203d5c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\_ctypes.pyd
          • Size 131KB
          • SHA256 96b07339d52c74f2a1dd043df5eb931e4072eed90a3a8715ffec751d818e4117
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\_lzma.pyd
          • Size 155KB
          • SHA256 51815b6474d4216c6a2aeaffdae5d2ff4acb7a0236254f2cfe43247022f3d781
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-console-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-console-l1-1-0.dll
          • Size 22KB
          • SHA256 bcd87e2b039cebf8045023611ccd2272ebcae4f81f686dc7d289289d600f0ed0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-datetime-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-datetime-l1-1-0.dll
          • Size 22KB
          • SHA256 856c6b13b29376c8b99faede4d652b829df963020d9129f117939dfea9f3d8fc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-debug-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-debug-l1-1-0.dll
          • Size 22KB
          • SHA256 be42004523f35da5cb2fed1a7d25f5b7221314894f3f34e9678c220bbb9e3bc2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-errorhandling-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 22KB
          • SHA256 d36b34cad567f962b5ff8ca27d67fc9bd6c40eef0e7bc2be6fae2c4e7333dc07
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-fibers-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-fibers-l1-1-0.dll
          • Size 22KB
          • SHA256 a0c4c198b854aefd5eb8a4dd098992933f32073cc654f3309e7b458c78230a83
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-file-l1-1-0.dll
          • Size 26KB
          • SHA256 d9b85ab140988dc4b67c8af6099c18998bf7f65c82caf0ff0868d927201dc2f3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-file-l1-2-0.dll
          • Size 22KB
          • SHA256 d984ca3c1da8349125edb4c02926b8ad8a0576c1ba29098a4dc4119d473f9ee9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l2-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-file-l2-1-0.dll
          • Size 22KB
          • SHA256 a276616f42a235007fcae4361b786a071619ab5a40d2b20aeaeaf36421526dd7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-handle-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-handle-l1-1-0.dll
          • Size 22KB
          • SHA256 6464f569344d07303f48faae4603ad1b683385a3b4b43fea1fbb7fa9d6a322d0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-heap-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-heap-l1-1-0.dll
          • Size 22KB
          • SHA256 280ee7fde0de5364d91a4b3a90dfd98eab88ea903b7e550103533bc08cbd968d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-interlocked-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 22KB
          • SHA256 fe8fe4fd93b8b05d056f684c4b0eef2321713e202a440a7eb08f69be098fb036
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-libraryloader-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 22KB
          • SHA256 9de9d8573fd4901591ae2f91f41c7dbd6fd1505c37ee6bd1f86698586a66e24e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-localization-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-localization-l1-2-0.dll
          • Size 22KB
          • SHA256 42cd0246b1cce2df9046febb125a7ec12514afb753e88aeb297e599a81def50f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-memory-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-memory-l1-1-0.dll
          • Size 22KB
          • SHA256 6e069b59d3beadccdcdfe7f76c3b84478df2e16e8ac987906bfe52acb115cf83
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-namedpipe-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 22KB
          • SHA256 09b00f5df6b5b2e928e342db1073d36b40c143a7f23e8ab282906849200eb4f4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processenvironment-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 22KB
          • SHA256 d43e261b8e53986d984f7d8b8f70fb35abeb20fc3e4a0363a38c0cf62112a0cc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processthreads-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 22KB
          • SHA256 8d8eb7744eb6063d73c1cc5bd2c8c4977ed407811a43ba4b134ec3fcca341c45
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processthreads-l1-1-1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 22KB
          • SHA256 bf199f2aaef7224aff722314c4f18ea097fdb4cdc5f1f7647385ef1e5a0e4ec3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-profile-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-profile-l1-1-0.dll
          • Size 22KB
          • SHA256 31727ede79a7e4d0fbea63e135d7e3cba58c87c022649e778882f3824ac97c20
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-rtlsupport-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 22KB
          • SHA256 ec81a95aade9e70901c7d4933c3882e875aeb1788e358b394610c434db352976
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-string-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-string-l1-1-0.dll
          • Size 22KB
          • SHA256 ea726c1418006660bf1820d9ca16e015cddc220447bf64bf0f2fde7d5da9a1f8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-synch-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-synch-l1-1-0.dll
          • Size 22KB
          • SHA256 cbd1722300af072b0484f8120df6fad49b1ad2ba758a9f36fb5668875f223990
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-synch-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-synch-l1-2-0.dll
          • Size 22KB
          • SHA256 1081b36b09061df5470488d22eec7eb897d918343a1fdb332d331dff45b1c406
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-sysinfo-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 22KB
          • SHA256 d858e53c0b2712589affb4ab13a9ec5f53b27dfc576a35188e0ae751aec154f2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-timezone-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-timezone-l1-1-0.dll
          • Size 22KB
          • SHA256 ff8b688a6eb243271e80a441bafbe755f7c4653243380d3a1788d303ef000caa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-util-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-core-util-l1-1-0.dll
          • Size 22KB
          • SHA256 d22b1b0a70fdd2e7b3ddbbeebc8df8d218833c9c69e0dccde132d06303135440
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-conio-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-conio-l1-1-0.dll
          • Size 22KB
          • SHA256 c2c927ece8725c4d5c2b078a3b1bd629f06da8b90e6034661bc404005d84704b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-convert-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-convert-l1-1-0.dll
          • Size 26KB
          • SHA256 ecc57bc5b10438d7cf01d9a998f3794e7bedbdd3029c1aca86b55d636daa686b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-environment-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-environment-l1-1-0.dll
          • Size 22KB
          • SHA256 9abd3272aa6fd6f884859a8a123c71baf9e849f231fa6cb7fb84d26a9636cf62
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-filesystem-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 22KB
          • SHA256 aed931f9ca191452a9168ea3bd7b921225e15d722eb9c586d6b3e33d65216183
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-heap-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-heap-l1-1-0.dll
          • Size 22KB
          • SHA256 dfbd9ae0a1940aa552130d4d1379d1913bff90f693c07f86db0f63ae576c354a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-locale-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-locale-l1-1-0.dll
          • Size 22KB
          • SHA256 acda65c61155ba420e1cf36437d3000388c4e6eaacc903274c03f476a3c3f99c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-math-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-math-l1-1-0.dll
          • Size 30KB
          • SHA256 c9ab02f8e34ea2bd9f91a40dbf679c9ba7d86f0785c46ad2a3637e95d759a8cc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-process-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-process-l1-1-0.dll
          • Size 22KB
          • SHA256 4bb0a5de69d7a6eda8d1e08e0b7af9b5e18ac9bff10e1e02e691cde8da36d71a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-runtime-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 26KB
          • SHA256 b00871f9e3f5d9f50bb2d9cfdd8990abffa35fa898b32decc0b469ac53f72a0c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-stdio-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 26KB
          • SHA256 3f8c47f6c4a99394a328505e9f8631fe45029d7168552f3028375adf71868c0e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-string-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-string-l1-1-0.dll
          • Size 26KB
          • SHA256 22cd3ab63679fdf67e467d5f8e3d3c842d309876450fe0a39e935e4927cd4907
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-time-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-time-l1-1-0.dll
          • Size 22KB
          • SHA256 723a0b0c18111d7f588ac9182438dbe0336dd45db22bf1c05002624ced8df07c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-utility-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\api-ms-win-crt-utility-l1-1-0.dll
          • Size 22KB
          • SHA256 07296d403e31637c3f42f8ded4246e17ed0d75604340937ef1df05d5f87a2309
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\base_library.zip
          • Size 1.3MB
          • SHA256 491cb10f2209c8d5af90881ec1061eeba4024111cad5141fb8ba4f75be88b32b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          catalog_mapped.json
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\catalog_mapped.json
          • Size 356KB
          • SHA256 ffcfc1e56b5c7d2158c83cebeeef4d98ffd19146b88339467a9913ef6f293658
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          drip_lite_mapped.html
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\drip_lite_mapped.html
          • Size 4.7MB
          • SHA256 98d06bfdb3d8d2c3ee4d51362da11c628bc6d91e04d6ad3c334e2f80a4445ea2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          identity.json
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\identity.json
          • Size 5KB
          • SHA256 969f94b1b27f91672946f7114a56f8469f9c0b4403163a001180e2a793e06d8a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libffi-8.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\libffi-8.dll
          • Size 38KB
          • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python3.DLL
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\python3.DLL
          • Size 70KB
          • SHA256 cbc4876275178244905ee45a9ee6ec9fa4bfb9aad6209a03b756d38a186f80d1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python313.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\python313.dll
          • Size 5.8MB
          • SHA256 6964e590037c41d631fd1215f05af154f7fa68105993c6f573a20689b473f1ac
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ucrtbase.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI000004c82\ucrtbase.dll
          • Size 1.1MB
          • SHA256 6dea28951eb6c593dafb26dc69e499ae283a939f46e3a00690dbcca954ce10ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/2340-292-0x0000000140000000-0x0000000142E8E000-memory.dmp
          Download

          memory/2340-291-0x00007FFB00E20000-0x00007FFB00E22000-memory.dmp
          Download

          memory/2340-290-0x00007FFB00E10000-0x00007FFB00E12000-memory.dmp
          Download

          memory/2340-287-0x0000000000180000-0x0000000000182000-memory.dmp
          Download