ba3c2dc89b5a49569deb29a40a7cb6b29e9f840eb5ea5888558a6f6445d2899f

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/05/2026, 10:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
Size 1.7MB
Sample260523-l4deksas8s
SHA256 ba3c2dc89b5a49569deb29a40a7cb6b29e9f840eb5ea5888558a6f6445d2899f
MD5 4b7a0dffdfd17f77140434642687e407
SHA1 3093ae566d5fdb163858739f9c81c6cc7cb73c46
SHA512 a823e0bb30d30126e9d8da40ed4fdbc5dd901624fe8d9748551273aad6afb6e3c97a3976de01f6bd81b26bc5755d3e1f41f7b3359794822038a334eba7a1373f
SSDEEP 24576:j+CZyPd7ZsYw1AiXJo0svAr3jk/kacZp3AVO1Fd9oW8G5kStE:j+ZPFnLX+a8Zp3AA1FMW8Ac
TLSH
T1AB85BE1AF25051E9C179C830CA9EA676DA71B8520F34A5DF2F94B20D2E775E42F3E360
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4936	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\View3D.ResourceResolver.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\SoundRec.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\RCX210A.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\RCX49F1.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Microsoft.WebMediaExtensions.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Time.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\javac.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\fmui\fmui.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdateComRegisterShell64.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdateSetup.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Internet Explorer\ielowutil.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jre-1.8\bin\java.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0C0A-1000-0000000FF1CE}\RCX4EB6.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Windows Media Player\wmpnscfg.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\SoundRec.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\javaw.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\javaws.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\Office16\CLVIEW.EXE.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\MixedRealityPortal.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\RCX2287.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\RCX28E9.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\elevation_service.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Internet Explorer\ExtExport.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Internet Explorer\iexplore.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\tnameserv.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\RCX7760.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\Integrator.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.147.37\MicrosoftEdgeUpdateSetup.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Windows Mail\wab.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\RCX88B8.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\RCXE88.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0409-1000-0000000FF1CE}\misc.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Mozilla Firefox\private_browsing.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\RCX4914.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\HxTsr.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jre-1.8\bin\policytool.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\RCX43F0.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeApp.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\dotnet\dotnet.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\ScreenSketch.exe.ico	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\jmap.exe.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\RCX1F3D.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\RCX2208.tmp	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3780	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
3780	2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe"
1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3780
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
  C:\Users\Admin\AppData\Local\Temp/2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
  2⤵
  - Executes dropped EXE
  PID:4936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

arh.exe

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe
Size 860KB
SHA256 1a6fad86090a94d15020263bbbb85a79c867af5bbcf52e06d350b130aa94cc83
MD5 068b4d5e81cff25920e12f1514a95959
SHA1 c5f7910d584d10cceb998caaf99818e9d4f8121b
SHA512 0dbdc7d9be8c269a346d989e1eea03e6595124f7acd54fc915bcb9f2327ffef36c7e6d2332e4db95b71f19cfdcd77dd30f730d4ab19d41941a0e71092ff2f5e0
SSDEEP 12288:UfuM3Jz9uMtfHJ0QvHNwbIXnVUcxNaG2Uim5v3qKpw5ixNKhWMlDYmIjE72:u7wQVUaIUi8v3K3b72
TLSH
T13E159D6FF375C862D05A063248BB47A75F329813A8810D0FEE5CA59D2EA37CA8771375
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisabledGoogleUpdate.exe

Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe
Size 6.4MB
SHA256 eb419d5686b2c1e20db177de5f0fb9aaead9b7cbde5c1c82f11de0b99fa69057
MD5 2988d18229ce4a2e327dd3a3aef6b63e
SHA1 c010ab408b34643a13852544828b6b3a74360cfe
SHA512 e6bc9e4d9b20ebb60744ad8d9289ea2926748dc4e27c1e5b35d92e6a47dda6784a670886358f44220acf84a6000b434b6458d3870896c7e6066d905baaec3aa6
SSDEEP 196608:VOkQMyog1P9fIlOuz6IgF+I3m2MXP6HG8Qzb:VhQMyognqO86IgF+qbM/6HG8QH
TLSH
T149668D23B5D08035E5F732356D3C973A5A327BA29F3145CB86A06C986FB47D2243936B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ieinstal.exe.ico

Path C:\Program Files (x86)\Internet Explorer\ieinstal.exe.ico
Size 3KB
SHA256 dd8074940b2a1e8d0ad513e7c6e2a0d0b11a857893f11dc77387800ca272e970
MD5 f48ab39db9ca4956776a50b86a8e8c81
SHA1 c8f6dc9e0c0ffaa61075e9d02ffe0a1a319dd842
SHA512 c122c826c7146e86238bb8098c91abfb8270f72e4cbb8af9d5664eb98a181376f8e5cbdfea31050c9df1d895225d6c70a06810c91d40f24b1798936682c7897c
TLSH
T1B2619526B216ABA5C11A41308C8F1A2E1632AE4184A6A0010B753983D27E63BE33687F
MD5 SHA1 SHA512 TLSH

Submit Download

msedge.exe.ico

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedge.exe.ico
Size 3KB
SHA256 4785d266a2c476e0948100ea80f927d16389f7718b540daf0488457ba01958b0
MD5 cc055af6d5fab0514052a985d406293d
SHA1 6c856938f56c75841cd93bbe467d624e2bda6e07
SHA512 4f3387c19d12e5154841d97b552c8c47e107a4bc6ac376fe7a60493d4013572be61886d7ee8e40acc62653c97b3a761097f8dd3d97d72d361c38775ec512eb63
TLSH
T10F61C864933541DACB8DDAFF541843A1AE22C875D73FC4868271E9A33DA92FCA800C2D
MD5 SHA1 SHA512 TLSH

Submit Download

msedge_pwa_launcher.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedge_pwa_launcher.exe
Size 2.2MB
SHA256 0b5965fd4988b1a16a586c32e01362ed502d569a245bc4176fc1c652c2a20343
MD5 1cbe85369a9a851d2814d73cbb393689
SHA1 d2883b8c10b7d9d2e1cc960969f9f57939025d5a
SHA512 ad7952547d2c5b1da107afcf77f61d4eb126bf5f2784b0b9c17d52b55705f3008fe39a4cb2461407d691b9df123d6fe8bdc95ffe20286210fc49809caf9db53d
SSDEEP 24576:uaO3rPt1N0T1Fjc1PLxQOUJtUp90v1XFf3ng7d9+1UXJwhXCTi2Qlkkkkkkkl0Tv:Z2r3N0T1FY/QOitU/03nmdXa5o5QPQ+
TLSH
T17EB5AD07FA85C1E5D1EDC5B8CA764F75A6627C615F205DDF0280BA242EB2FC84B3A790
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notification_helper.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\notification_helper.exe
Size 2.0MB
SHA256 0638c09717ad0798cc5b26f1915864fd702425d07e1884117669debc44013ce5
MD5 d8373ab77cc09f0d26a8e65d1514f954
SHA1 53dc9fee9124680a8e0933bef9c2e7fa015b8718
SHA512 81f72b6528737ebdb1837e92fc8ed324775af89b46ef9dfa319efd4e8692c07df2f6946276e648dddaa1cf22c88d64fd6caf162d4f1ccb0128fdb28dcdcd3861
SSDEEP 24576:BVVyMlmcaGcY7sdiLmorgc3y0w9jfGX7yxgCJd1fbgqf1ChKRADe1qRAi:BFl4csUru0WjiMgCv1jn1ChuADSi
TLSH
T1A3A5AD83B2E946E8D0ADE03086435125EFE63C194B3066DF2B5972191EBBFD45F3A724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ie_to_edge_stub.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\BHO\ie_to_edge_stub.exe
Size 1.3MB
SHA256 c0cc71ef21fa567035706e87a9a38c8ee74dd19a6738abf5da3555b558340d79
MD5 fe5ef339a7278da562a6830661a775ed
SHA1 ae4c7ff8ccd7ed39101edf0eadb7f7fedc408e68
SHA512 69d4816491041fd54bd642dc3002c073884fb4198d102ee536775e2481f677dec2b34460627f0c0b040783e09e04b4d833aa566bd4a152d3c8ea7232dcddbdd7
SSDEEP 12288:xbAiN1cxxT7MKjbA2e3GqRbjOoc+fHmw5iLDPS86nHrUA9HVlK8SQBJ9t4f15rL:x8CmxT5e3G+3x57OO86n9kAJ9tA3L
TLSH
T16855AF59F29EAA97E02987B0CB139EA0D57A38B14FB0438B36D0511D2E72DD54D2933F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_proxy.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_proxy.exe
Size 2.2MB
SHA256 9217b1a393c244fb00832ee8ce964c66175c701c077fa9db94298e5c02a988ce
MD5 2155a105d9d4d1028bdda32d29293210
SHA1 6d1e6eaa2913f5ba77de903420c4b4c88f1f5109
SHA512 2bccc24a952dcb016db2cfcd7e84097cc85f980f32cf8b29c4e5a5ccc52242806d172f2478207b9e1002d7cd2d543c57dec2de49d87ba30a4f72155d19378d5e
SSDEEP 49152:MkkAhZ0p3dNWIU8/fehjvHHKTdfxINPEt99G2Bo7EukU1a:bkAoptq8XyjvnORmE
TLSH
T18FB5AE03F6DA40EAC4A8C174C71B8D62D5B27C554FA062DF0A90B7191F37BE85BBA721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_pwa_launcher.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_pwa_launcher.exe
Size 2.6MB
SHA256 17b4ea1c2b8bf189e7ac06bb21e1f61fef345cc8920dbe5c328e8e5edde9c63c
MD5 8b0bcabbf05c0df59171ed7d12aff1ce
SHA1 211c93e8e5f5bf15fd1e157106ef723f01a12d36
SHA512 273d225c31a8c838301e0dddf398fc6887011518591917533999137f6f7fb2022efad85695b7e4d808d26ce61e85096f20df1c7ce25b00334845b26dfd140dee
SSDEEP 49152:HvWK2EAq/bfChYVd6rxcwwwwb9Owww9LJotwwmDwwwV+wMwwDwQwevZGu6qG13Od:XzbfChYVd6rxcwwwwb9Owww9LJotwwmt
TLSH
T191C59E07F7CA40E5D05CD174CA36C72596B27C6D5F2266DF0298BA193E73AE02B393A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pwahelper.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\pwahelper.exe
Size 2.1MB
SHA256 c044c7650556f61d8c081430015b952551f026de0e27201a4bf62fb219b529c6
MD5 a841ed555a75eb37f1f595581de402b9
SHA1 579aef32042199be38968be2c7712e6510204002
SHA512 c7829870556f4d27ebbe710efca0f4bf77afa2efa3343e66bfb665482bbf29b5b52dd063c2268bde02d6537c666b2dab3517cb0d99d485ae185c20c99f911596
SSDEEP 24576:efMiDQ3iWctfUwzzTZGY26UEU3RyRPW+uSmS86IU8Gc7QGsVa4i6h27d3WlN:efnEHcoY2fF8FhmS86IUJWQn+6h27d6
TLSH
T112A5AE03B79900D9D0BEC174C6568525D772BC1A4B24B6DF0B50BB6A3E37AE45B3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MicrosoftEdgeUpdate.exe.ico

Path C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\MicrosoftEdgeUpdate.exe.ico
Size 3KB
SHA256 2e039a7ce5af3783a3d522d27112bfe7a1dac319ed5061de3bef89790d5ad63e
MD5 6dd3d92bc5e7a45a2001a77bcc1c1fc0
SHA1 e942bc4b46d6fc683babd5d21da30f195aecadbb
SHA512 c8d9b2166f432da32f91d8de3162c74590c5753757c6a00bf9835c7c096c29bbf9ece24eb8688e2b87f137129fdaa9be3770a4eee1b99258e39247a3de64f6c2
TLSH
T189616E7C0F7CDC6FEE9230B9624A0A4132B0CDE15670A6D756127806813DAE2D9F4F9E
MD5 SHA1 SHA512 TLSH

Submit Download

MicrosoftEdgeUpdateOnDemand.exe

Path C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdateOnDemand.exe
Size 874KB
SHA256 4f4a415a2ea23a70fc3443b0dd957ed8c70b9743275d12f401c952cede30fbb8
MD5 d9d5e8a4686a2d25d3ae1acb7a1fb163
SHA1 03057cf301dca29efdb848f58ff94634d520f38f
SHA512 8eacf837a607cb4e625252dea6a64239d66f092d118d936993ce8eac8950735e5898eb2bd44d196d4eabf3fdfa5f369b46f606ce0467c047692d326b91bffde4
SSDEEP 24576:ZZAI2xFkAxqdS4rg+3/eJ+8h73M0mnbBPzBAU:ZZAIcFkAxTc/eJF80mbBPVAU
TLSH
T1C415AE1671C8C82DC5A82532AAF98561CEFAF85F6FD7F95B2304770C2D2866C5C61A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.exe

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_helper.exe
Size 1.8MB
SHA256 0aeb3d070d8f0b10a8f7d9c9d52d77c9eb4fb634ea1be9604a965b48fc2f29ac
MD5 18e054f27b5ab881cb05bfede7dc5c6f
SHA1 32ccbdb0a9f173d83db7be591e988d6849d0dc15
SHA512 418ff1930e9f0d18ca33aeb016f587c8fd16a47bfb47be0210c6b2082aaf0c6514726ba221cd8427b7837a989386894aeb22f6da08f5742767c91ed959bcf9f9
SSDEEP 49152:7N/mDp8Ym7FXYYzno7fvTqJdbPrCx9pG7:J/m6bZXA7fv0dbWG
TLSH
T12F95AE4AB2C9C0D9C069C9748B5E82B1DAA27C561B2496DF0791B60D1E3FAF45F3E730
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.exe.ico

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Installer\setup.exe.ico
Size 3KB
SHA256 3d275500cf3ebda5e878d81dcbbaa53528397ccbe631aae8fae60de1ffefccf7
MD5 70f7eb6f0e42805134583ac203c2dfd9
SHA1 fc513300d133a9b8a45da81a72a10b937e909190
SHA512 bf3126bfc018c3890afc1a105db52b9b332ed24228cf1a8e1df715287ad51161ff3fa94c88ef2cbcdda9a10bdc992691b9171fa07cfb2e8b71c35d12605a1179
TLSH
T1A46144423D3ED9E5C80005348C5F0FB80A315F92B810A30287BBBD6ED9B8754E61E35E
MD5 SHA1 SHA512 TLSH

Submit Download

identity_helper.exe

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
Size 2.2MB
SHA256 bbbd80559a4573c7c699889f09a8c7d13f7a4fde92a1196694f58e3fb99a996e
MD5 af099e2841cd6b1c98a71d244edb9be7
SHA1 c4d1acd758f73c84715a055ce7de6ec7dd30eb63
SHA512 c9cbe0c79604d5ee0705f8af9d6c50a26a1e56b3904058b24eda8e136f700a82f2b55a9607f10580af4653f32eaffb97edc5743764ba09de1c485ec807468b3e
SSDEEP 49152:/OwwI4/mQDaD1DvwZ2XuTjPb33g9gZLfCdW9HTlXrk9dBB:/HwXTOFI4Ds9Ol
TLSH
T1DDA59D07B2CD80E9C09DD2B4C7568631D6A2BC95CB24A6EF1690F6462E77AD47B3D330
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedgewebview2.exe

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedgewebview2.exe
Size 4.1MB
SHA256 b33c64a2a3831e8012309969f20fd3d9a28fe8dd813251fb31cc93959c9e7f7a
MD5 81c02eeeea1946915479372d796b9060
SHA1 a611a2926136ca801a39d5ecb22974de426b51ed
SHA512 64dd9ceec0d884bc4a5ea98284e2132c5fc71c81169a6223b70c4baa232a174a4c6a1903fef2b368b6fa128015a4993b14b19407eb656e5fded55bd5950104ee
SSDEEP 49152:wJx8wbz74Uy7R+Z3RuZgk07G0auOj85q7aGScYbb6YErz7z4AkOuaRoBISCaQZCD:2p8Qo/Yhy8OnZy
TLSH
T1CB166A07A2D940D5E059C078CF4A8232EB627C8947F562EF3250B6DA2A77BD47B3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pwahelper.exe

Path C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe
Size 2.1MB
SHA256 5a8f9eff902b901b0f37b0c147c34cb37243c12c49d855981754b2eac1a94660
MD5 6cd47b39436b3f3938e2896aa9b04c60
SHA1 022a606af4aa5d3eb9e1e06dc608b7b126a71211
SHA512 0a19250b9f190047a43ba4151e6dee7e5131b11749f45d4d6dd00849c9c0d8deebeb81d3039f99035983d3db99d13318c3960233dd265187739fa5bd3dbd1e38
SSDEEP 49152:qc0GIC8cB4k6Y2fF8FhmS86IUJWQn+6h27d6:qcVILtbOjjsts
TLSH
T1D2A5AE13B7B940E5D019C074C7568936EDA27F740B24A6DF0B50768A2EBBFD46B3A720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Uninstall.exe.ico

Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe.ico
Size 3KB
SHA256 44ae793c391e8578709e181e83cb820caaa10c08844440885d969a6c839b8a2b
MD5 0becb6bcbe9400e6d9441ceef104e743
SHA1 2f4e955a4c3c11236501b5c7ea36a392a0891ed8
SHA512 f7fcfe5f5274d2a27f233e5e67361988b8176497a9711767dac1bf0079a4b6cf5a1dd62750775b25c269169be6a1e3d1faa62207ddcc3d71dbd4e4c928b3017f
TLSH
T10461C6A9BF4080C1E21183F01C831B94A5052E6395EC9B3BB822BC878D7C8EA4038E3D
MD5 SHA1 SHA512 TLSH

Submit Download

7z.exe.exe

Path C:\Program Files\7-Zip\7z.exe.exe
Size 772KB
SHA256 b74b8fac4dd766df91e1d53607f5327ded10f26ce2d02ac356b66e3773dd6fdc
MD5 6101f4ebf3e6c993a7fb4bb461954858
SHA1 337aa5c1b5d3d7fa0c1e417dcc31921cade7af5f
SHA512 2cfaf5f05700ef79cd453baaa41a8fb04871a2dcd7ad9eabaeb57e5d184af0c4dd274c2abab8611e6fffa213d58f4ca96da659781e7413bfa293398b7c5e52f5
SSDEEP 12288:3KG+CZ4FAAd5FZssR4yFV4sO1rk0GoXMw5ihbFE:j+CZyPd7ZsYw1AiXJo
TLSH
T1BBF49E6EE421E673C7BE0C30C8DDFEA996B59B700C35250A7F19390E6A27548245BBF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppVShNotify.exe.ico

Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.ico
Size 3KB
SHA256 2a5c5c2bc95c18eded222f0a38752717c1a6ad20e31bcda6472bbba77ed22fe4
MD5 de1dbafd46ca8d953c93a1c89766a8c2
SHA1 41ec8c2a24317bba7a64f4b60341307033edcda0
SHA512 06a89f154036252f396a9f2ac515c5e03e8dd54eb7ba6c3bd0159f693d85846c4ba1b29c0fdc83f14d8c9128f18db3ee27c73111891dc66f81d4fd14361e6ce2
TLSH
T1D861565C04E3ACB1D6E548B83235B2C460D88A364424C867A89D7AD7CE7D8D473DEB0D
MD5 SHA1 SHA512 TLSH

Submit Download

OfficeClickToRun.exe.ico

Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe.ico
Size 3KB
SHA256 19306f3f899e8bae15a744924f1ebf2ce88624f5dd297e3993645fe8453adaa9
MD5 eeb23b93433af30f3061c261b8368401
SHA1 87e274077a0eff8831e33ed45b2f740b2d8545ea
SHA512 108348395c1833031a0abbcd7ea57194733e606fc79cfb6181d821e2e750b53c636977d802c0fce70d64157767d61b7df0cd30fa80535f0586417250eccc9e3c
TLSH
T15961C9FFE23099C8C1467E30408F06C03EBE0E4EBCD01E330A9030A82A39252B83EE01
MD5 SHA1 SHA512 TLSH

Submit Download

javaws.exe.ico

Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe.ico
Size 3KB
SHA256 6c3d33a5119708abbf19b802f0908183037cd57a6394e45b7b234a76ef4b46c5
MD5 13fb0b721f1a5288bba88efe12d3c4c2
SHA1 08899424be48b76e1189abac3b067cd19398282d
SHA512 0fac8e02873e36841d4a6aaea8d4e7d2c034fad2a0fd18d9a0c8973126dd0d969bd108eaae19fae2f5bb3988bc77fd70405b80a76b68e398a880dbb496b9b3a3
TLSH
T17D61B974F1C12D6ADA1A1EB662BE3412E1B27F8207015A1C091FBB5C17FB32034D9EB9
MD5 SHA1 SHA512 TLSH

Submit Download

XLICONS.EXE.ico

Path C:\Program Files\Microsoft Office\root\Office16\XLICONS.EXE.ico
Size 3KB
SHA256 6454633b8c6a69aad48c3fc556c5e81cb5362db0c449b3f543bddfa41eba8d6b
MD5 fdb893a42e2519f60a9a943e687de76a
SHA1 9540510a3415d3bd50ec0416ec72af6809e8711e
SHA512 6c783bf16856305121dccb03fc749c66edaa063f730f274312bf29531b3abfd43c860196442f2e566800a383237c84a04a1bfea6fbb2be94004ada693b733c7c
TLSH
T1F861F7C443D872C3C8ECF234352AA51B5F95BA211410BE1D0EAC67C8BAA9E33FD5401B
MD5 SHA1 SHA512 TLSH

Submit Download

dbcicons.exe

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe
Size 855KB
SHA256 4e3cfa1f16eb5b3adb6ea9d9d27463d69d2b85cb7ff1d6369dfb26a9281d2fd9
MD5 1225f8687d0d74f4c232d3d6b34b8d14
SHA1 c3ba8af93468b234d3705b8b7cd7f5cf0334dd84
SHA512 3d7f59598d41ecf0bea42df79d6ae639c57b4b59595821abf69addc8cdf074f3e2e5cb3571278d505a4ac90f2af5ba85615db764a96a73316cab66009ccb81be
SSDEEP 12288:KKS3VRQLU15Jqs5rsYL6So1gFdOH+r+agw5i8OJzbbF:KlRQLU1LnPo1g/Oer+IbOtXF
TLSH
T1D6158D4DA1954769EE9658308C440EB0A97E1ED3DFC809FE953EBB9C6FB050F6929330
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

misc.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\misc.exe.ico
Size 3KB
SHA256 df2cca9b322f9432b3f3aa7b91a12dd5f22fd50e589e3107e066d99bdb071176
MD5 1e135e5bf5dbc0a82efa354c532e9c26
SHA1 b49dc6821a4e21d4c9f4385fb7658035a867dc82
SHA512 5e62520decd7db2d44477ee6e11da45bbb356138bf9482ba873b2cbaa69a44249b0515ee61a3438d835a18bb9fb2e229eca6d5a5da262938ac62245f539d8700
TLSH
T170618442693E89F8C5550530C9AF8FB00F341C17801095428733BEEFAEF5B60F62B668
MD5 SHA1 SHA512 TLSH

Submit Download

ohub32.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\ohub32.exe.ico
Size 3KB
SHA256 063c8f44d23e1ebbe390ea320eee672c449f47333120b7abbd4a78094c613113
MD5 c8d18488a47a8054af9be67ebb94b6a2
SHA1 d231e824dd885833a1d6875741745994fc08ffa5
SHA512 1942ffe7db988342597c781a820b65b74dbf89862ea505285a1a96bafcfa48ac8f5b8f583aae0ccc0fe00bb3b80b897c61a87142f3b5f4274740fdf34256bf3e
TLSH
T127617E03F704D1A8C9883FF0F193022F32710D3614602F030B2DB888A9B10E8C426DBE
MD5 SHA1 SHA512 TLSH

Submit Download

pptico.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\pptico.exe.ico
Size 3KB
SHA256 3b07d1aaa1c9c27082d7811d694aae3d422d5d965a91b2d4b8ecda3a79f760a2
MD5 cdcde2807eee3a72d0b027bb11969739
SHA1 9b5bf494d53c68d3959d44c8e8cba399c55f2745
SHA512 aa91c211ec2ae00bc635958145b12ab7ae002e52f5ce7753e0790e96d9c61947a88b34b79e580772b53cc2492d5eb8bb69596d4de2106c1400ad64b4cceec645
TLSH
T1FA61AC5B72564B78C803D7719B228B5CF4AD7AE8E5324200C970F4762F24DB53B496BC
MD5 SHA1 SHA512 TLSH

Submit Download

sscicons.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\sscicons.exe.ico
Size 3KB
SHA256 b2a350ffac5074add67fe974467351777915de5a319be7879ba15d1f6915a092
MD5 f142fd1b4cf10595f4565171b56388cb
SHA1 d8cff8a45fb7b27e34c9fc21eb672ff0a1d4076c
SHA512 3d045c3ceef64b1402605c9a0eb19d65c67f79553de4e21cdf935a0054475699102c25dab9cf3c36c9f9da0b81f350c81dc148726d0fd2e0717f961593dcd3d9
TLSH
T1F861C671A4323D58E54D573C8349B7D0E6064D852DF122AF312379BE0A741ABAAFF1D2
MD5 SHA1 SHA512 TLSH

Submit Download

wordicon.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\wordicon.exe.ico
Size 3KB
SHA256 5bd706a18e0cf54197df7f1d5239f3e058652bfde372afcab230ee9b95ba14a5
MD5 bc5b17be640393be725d1c6bf384febb
SHA1 7acc0bcd224dce982aa2c109bd091b85179dcaa1
SHA512 ac17cf409d1652db87b91818d2a0f9a88136fef55389c2e7e3d2ec61b5d5012413ebf9dead6686fb0a16d5197a6af2c1fb6250a1dc46685c8350897ab6655eb4
TLSH
T18061E401D9E71E91FC23E2F6E60252F8327018780AD3112D79EC2ABAE5A4F0B30073C0
MD5 SHA1 SHA512 TLSH

Submit Download

vlc.exe.ico

Path C:\Program Files\VideoLAN\VLC\vlc.exe.ico
Size 3KB
SHA256 3b17b29b6c4e39fc36571f8e0795eae6559637529602ae7a37d5f8f6254d0500
MD5 0c328d41f4955cb0f6d408c63512c280
SHA1 3bf6219e411e79db50b8fb24557c692c5b82fcd0
SHA512 0185abba75dc735bdcc24a2d4003943c2a6a88e63eb806a058dbdc4ec4691ed03b7233e60d38e251ab6297f6eed1f446a9644b851d02fc14723551168436e762
TLSH
T18E6163703D321388C04B66BA86133A335E2A2FF61D43C6109B25728A2650FE1CA2D5B2
MD5 SHA1 SHA512 TLSH

Submit Download

wmplayer.exe.ico

Path C:\Program Files\Windows Media Player\wmplayer.exe.ico
Size 3KB
SHA256 a32208cf5c16d7223999e6ecf1c185bc88d519483ff56ad5ca5f2cc00e677307
MD5 44102aaaf107a6544eef73219f2c5f06
SHA1 c260d347155704cb817de08b8e72468897c446b6
SHA512 f575a3f5b83ccf08331c23419606414f487ad46c753ddd1b52cd15b89991e61f452f75b8162f88c29e0382c221ae4b9649560eda5138f82cc9a81b031f95ff3e
TLSH
T10A6167FD198B18C7E0054BF6C122AB421FC56CA15F071962EA80B54D3B316DF94D022D
MD5 SHA1 SHA512 TLSH

Submit Download

VC_redist.x86.exe.ico

Path C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe.ico
Size 3KB
SHA256 6ed1664d7718a68084ea1a4abb1d9621a6ae8da8e19db35cfca13aaa4c05eb33
MD5 5cc1166b9cd6f8310369f631daf2f737
SHA1 8d2e3162e9b8ca7d196be95fc3b6e5b09e41ff61
SHA512 647617515c2750dfd460994a818bb759b40f867990102efbf592eccee7ed5460e7b731c87ae79af42cd18ccc16d8061102123747aa87a50e059b1490ae6e5411
TLSH
T10761E3576E5C8048DF843D31F4B6EB3003A3ACC13D916676A211B725EEBA3D399187AC
MD5 SHA1 SHA512 TLSH

Submit Download

windowsdesktop-runtime-8.0.15-win-x64.exe

Path C:\ProgramData\Package Cache\{5625bb48-295c-4113-bc92-d6a69b19b04c}\windowsdesktop-runtime-8.0.15-win-x64.exe
Size 1.4MB
SHA256 0a5b7a69cf05533b1ddd310cec07c695a75267c03188e3bd9070d82d6046cdb6
MD5 5488c4d13d76f28d49f267b2592998c0
SHA1 47eecaf2e41e355401838763407e4ea11a591752
SHA512 559f269cbda5211981f8948e79bc8caeaac907ba79317977a00a0e55de89c041bd8f67303169e0a6d23c5d1edd5138074af5539bb507f0223b563d612b83ddc4
SSDEEP 24576:ee3aCIRy6fvZeRz0Nt5ISJMm39PZfePv3r7fm6t+jqp+3l+zCM0D:laCIRy6fx8z0gXgZ2HbbZt+jqpQ0CMO
TLSH
T16C65CF31A151F0A1F1B40C317C259D702B79AE14BBD6445EB2EFB92E7AFC0B256B7221
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VC_redist.x64.exe

Path C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
Size 1.4MB
SHA256 01f0adeb8740e9fd28ce67d363b108e952a397633d008d9593a66c4c98170c94
MD5 15b2ae31917b712129fd032e549603e5
SHA1 4a26259d51b3979865665ae683b5ae361928cf69
SHA512 b5a4e6607d1dfd60396d7de15f19101c84fea9badf4a0f367261d24545f70f36521385a8c0ba84a76ac7ddb13b93a0a018dae9e9f8ba6f742d849f2ec68e4cfe
SSDEEP 24576:RDQCkI3UXiEsEuHZSCxsYvAMysZgjS1hqgSC/izJfojymk4HM5yJ:hQCd3UfduHZSCRYRjvQotoy4F
TLSH
T11D65BF25BD118C37D1F304736A54C2342DF8C9109AD949DBABF8BD1D2AA049D6A7B23F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x64.exe

Path C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
Size 1.2MB
SHA256 320a1289bdc78f90ae2422ffe84b16b70851296c5d909d5b0ef89ad10c77aad8
MD5 bb6eecff665a6125ea620bf4d8d6d850
SHA1 d6c4e8888228a026d39cac462a63cf45bc57761f
SHA512 21b68122a36593b3e969ae64f735d5c00b21d1a177ef4112f9de5d621d0cca444ce9ee1993f7dd40dec2eda8370b19caa37dada651229883bc2c8ed79f854fa0
SSDEEP 24576:xkYkAQ0CIIfC7NPVLbXTMYenGJiKEbXWtfOkUy:7kSCIIYNPVLzAPnRWtGkf
TLSH
T1D945AF236790B437C07201BE905A8F70777B64879E2089E79657660F3AFC181B9F6376
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneDriveSetup.exe.ico

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe.ico
Size 3KB
SHA256 3a2d7fd9799178af58fbd08a2fffc56398cbf289c7ddd5c5f0fb2e241395261e
MD5 ea27d80794552048d73d1fdadac459d3
SHA1 f976de7f799d750ea73fdebefbe57ce9d81844d9
SHA512 f526d0d089d25625f6c24232334f0b1a18ec7682769d7c2ad6ffeef6a45231c8ce807e8276874e190ac7c9a9876432cc900c567042f6c046015f22aafd121753
TLSH
T15C614C71E91C517CF2D452334146120C440E4D1A19F51F401D333B18FD3D6A5552CEA3
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveStandaloneUpdater.exe

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Size 3.1MB
SHA256 5c812ce86ea1c4a630999a77d1d24978986cf97967d19020f02d4db5198883d8
MD5 34c5c9b38e29d609c769836426597576
SHA1 fc562bdcb6ceb4a16087e4973ac84ce05f14a381
SHA512 bfc5b3190b3e5862ae1ab1a449a650cb23019921b0bb22e31b0ec9dfde2b423df8031d5c91a3acad8496bf836f566dc2f4f66f765367bbd75494bd2e602bf985
SSDEEP 98304:B/xyExCCyiO+6tLwwnAjUt2jc8tzhYhMMFW8LMprG2:B/EExCCyz+69qptNAFWba2
TLSH
T1D2E5CF32FB80C072D06B12358FBF6B745638B9326B2295DB77C4675D1A704C26A3B663
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_idx.db

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
Size 56KB
SHA256 68cc877937c2919ee7808662762f2577dc3ae09e1486910b78f1e6b9dc742956
MD5 d281dff28956aebe84750396720ddacb
SHA1 e633a9672509d39d0299de355c2181e601d8523d
SHA512 bb42db69cea2df6098fc1b3db83a62e9bd77fd59047ce8495eb491dab3d91ef42075ddcb9793398e5c5236c30781eccf015ca7db923f5f63d1c02f0552a36f5e
SSDEEP 192:iCAnE8oDoTv/blWSdGyuZSULz5T8xTGiVaaYVPADD0sSvdI/ZEC5GJXBa:sEl6DlWSrAzl8ZzVNYKNeI/ZEaAX8
TLSH
T17443D596B844DA45D90E5D32AFEBD6EC73317D26CE5B460335C1BB3F8AB30C10A59285
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe

Path C:\Users\Admin\AppData\Local\Temp\2026-05-23_4b7a0dffdfd17f77140434642687e407_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
Size 1008KB
SHA256 68d9edb06dcda1aaf3ebc454730bbd6e14d02d86733ece0cfdcb835830446b32
MD5 f8595b492ef9f1b57e8c71bfa23f60f5
SHA1 f686db7a2e8b478f5f6bd20465332959f476ac5e
SHA512 0841da16d2fab0d2b1e765bb85a8ba2bda0f8be135ae2db36d4af0703e5b087c2ae180fbd494c547385ba8eb13d051872d8e7878a9e3816e41b79d690bde9f55
SSDEEP 12288:esvARXEs3bfvkIIka7gmSZp3LOVVO1wwlhd9PAW8B0cS5kSoY0whxel5+nnlB:esvAr3jk/kacZp3AVO1Fd9oW8G5kSt
TLSH
T161258D1BF69500ECD069C474CB668132DA72B8570B34AAEF06D1D2592E7BAF46F3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3780-0-0x0000000000400000-0x00000000004E3000-memory.dmp

Download

memory/3780-1213-0x0000000000400000-0x00000000004E3000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads