Netskope Threat Labs

SharpDPAPI

ATP Sandbox Adv. HeuristicsAV

SharpDPAPI is a tool for extracting credentials from Windows DPAPI.

First seen
June 2022
Last seen
September 2026
Alert Name
ByteCode-MSIL.Trojan.SharpDPAPI
Generic.SharpDPAPI.1.0151FAB2
Generic.SharpDPAPI.1.0645DCD0
Generic.SharpDPAPI.1.12F8A270
Generic.SharpDPAPI.1.1599362D
Generic.SharpDPAPI.1.2BC1DEEF
Generic.SharpDPAPI.1.3ADA1DBE
Generic.SharpDPAPI.1.3BAFB57D
Generic.SharpDPAPI.1.3DEC915E
Generic.SharpDPAPI.1.43D88268