Extracted

• • Target

    TradingView Premium Desktop.exe

  • Size

    782.1MB

  • MD5

    a44c11ff27b4350c9e4d368cd6ae4583

  • SHA1

    9f5de149596e55a9b3560f3e162ce29d18c87f30

  • SHA256

    311c992c91b94c32e6bdb543da6944a2c3c4ee45305416f2d5d9c4a96eb05099

  • SHA512

    4cf4e9fbb39f24a1eabcbfe3e07cbfff568a62b27cb7587dd6bb466270b2c4d5673fb6ecaeb277bdf5d639e361bd33e396c1bab1c97e569e1d9c7180cc193f28

  • SSDEEP

    98304:NCVtEz6jrCmBJ9jQeXGuzTdodTqVcfK6mkzfV9F2QNL4AXAtVo7:Ncw1y3zZoJK6mEdD2DAQE7

  Score

  10^/10

  vidardd3c663b33910bd77937a09a739dc3d6credential_accessdiscoveryspywarestealer

  • Detect Vidar Stealer

    stealer

  • Vidar

    Vidar is an infostealer based on Arkei stealer.

    stealervidar

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2