bca36ec094e04d7728302a95549faa587054345a2a5e0f289ac3b9c650d9f622

Analysis

max time kernel
149s
max time network
123s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/06/2026, 10:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
Size 7.4MB
Sample260606-mpr5vsdv3n
SHA256 bca36ec094e04d7728302a95549faa587054345a2a5e0f289ac3b9c650d9f622
MD5 343ed2f5fef05fe31c5a3f68a33dec6e
SHA1 fd27a370efdbb2dc9401586ff0382f3731820cab
SHA512 812dde9d435bbdfc651a387b46e2da95901d9816f3b1a723cb8dee0111c5096b75db33f39e115ce96083b7e33dd99326357090b46358984c011c9595e88f466e
SSDEEP 98304:JdvQ+zbnbTWpz1T5mFB1GWdhrrmqJjeb2:Ji+zzbqvT5wUWd5Sz
TLSH
T1447639596BB881EDE0ABD1788D778772F67278418E33661B0261CA1F2F33D589D19332
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
2340	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\AppInstaller.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.3102.0_x64__8wekyb3d8bbwe\Solitaire.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\RCXA67D.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\RCXA8A7.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\javaws.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\notification_helper.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\RCXAC8C.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jre-1.8\bin\klist.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\accicons.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Internet Explorer\ieinstal.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Internet Explorer\iediagcmd.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\RCXCB06.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Windows Media Player\wmpshare.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\schemagen.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jre-1.8\bin\jjs.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\RCXCE59.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Mozilla Firefox\RCXD4C3.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\RCXEFC0.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedgewebview2.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jre-1.8\bin\pack200.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\pptico.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Windows NT\Accessories\RCXDCB9.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\BHO\ie_to_edge_stub.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.143.57\MicrosoftEdgeUpdateComRegisterShell64.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\bin\ktab.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\SmartTagInstall.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0409-1000-0000000FF1CE}\RCXD1CD.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Windows Mail\wab.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\RCX8F3F.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Internet Explorer\ExtExport.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\PAD.Console.Host.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\RCX8646.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\pubs.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Internet Explorer\ielowutil.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\RCX1BB.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\jps.exe.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\Office16\SETLANG.EXE.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\wt.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\RCXFD1C.tmp	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Windows Media Player\wmprph.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Java\jdk-1.8\bin\serialver.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE.ico	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\Microsoft Office\root\Office16\SDXHelperBgt.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File opened for modification	C:\Program Files\Mozilla Firefox\firefox.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_1.0.22.0_x64__8wekyb3d8bbwe\Maps.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe.exe	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3640	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
3640	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
2340	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3640 wrote to memory of 2340	3640	2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe	80

C:\Users\Admin\AppData\Local\Temp\2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe"
1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3640
- C:\Users\Admin\AppData\Local\Temp\2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe.exe
  C:\Users\Admin\AppData\Local\Temp/2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe.exe
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:2340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

FullTrustNotifier.exe

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\FullTrustNotifier.exe
Size 1001KB
SHA256 3acd959dc85a1347f2d54847a530ff5b6a5f459bf99242a9938fd7cbbe35bea8
MD5 4bc7a4cffc712b8c8c5caa3c3e2497a8
SHA1 c94782a4eed701b4e2117543a6edd298abd3e81f
SHA512 efcdae4c5e7de2b83e6b6609f35a9616d8307e6858ad67634835efaa5067038dc88542a4c3ebf3845192b3aaca1e8ce46e7d971920ebb9d3bd4f6fc01409d196
SSDEEP 12288:BmhEM7EbRLOX3tFR9m0J3aWJjgwBcjCufUPOXlv8w5iwyzAaY+FUB2:wt7sQF9z3aWJjgwBcjCu8ON5ttD+qB2
TLSH
T17425BD11BB05CDE2C2980CB12DFAAABE54676C051BB14AE7530CA75FADB64C34C387B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

disabledupdater.exe

Path C:\Program Files (x86)\Google\GoogleUpdater\141.0.7340.0\disabledupdater.exe
Size 6.4MB
SHA256 d631df8663d9bd030cf4fd8200faccfd3793c39c682a621a76f042ad2620e002
MD5 e8c4fffe9b8e0290117328fc9b34b81f
SHA1 c96f1585050a2de98fb3fc19e260ae4fc71eea7e
SHA512 76fa875accfb3bafa4dc6b903bd7883a285f1595148745602adfbabd21ecb08df627b482e43b41d210558a37b9ac42ed0528be66a0d1797918263f9f7a5af6d5
SSDEEP 196608:q+Mog1P9fIlOuz6IgF+I3m2MXP6HG8Qzb:qrognqO86IgF+qbM/6HG8QH
TLSH
T16D668D23B4D18074E5F732757C2C673A59327BA29F3145CB8690AC947FB82D2283936B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookie_exporter.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\cookie_exporter.exe
Size 902KB
SHA256 ab57ee1aeeb9e523ca32f96847547072516bd60230e2bc2152333853c2668304
MD5 9b70f4472690cd2c8488ca835a1b4a09
SHA1 411ed4d62a070c29a577dde1d1e496795698f5bd
SHA512 81aec75c6cd6b423b4c35ea46319f0a40e667b1e994817de1cd904eec25dcc6fe6247783b9a521319d9e6f14fb8f119af64fe3de1dc32c3e0cec67e50369e694
SSDEEP 24576:GAmGl7MIHwpHCAu9XthBwJlyv+5Xy+TjE:GAZ7MIQpHnu9/KHyvcpw
TLSH
T11815BE8ABC22A0A6C425493114054BB6E6B65EE4D621832F35DC2BFD2D74ECC8DB5FF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notification_helper.exe

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\notification_helper.exe
Size 2.4MB
SHA256 31563ea8acbd718a8cb4063d86e2b3eb5fb37dd8ad43bf2503c77bc83b4749a3
MD5 74bf2bbefba04ecfd699bf2d1210f425
SHA1 0b58c00759df2f5d601b292f3973b362ba889188
SHA512 bd11d613299b39c3cd21b88cf779bc9278e65b9503ae5dc21eca751323fec0e637e9406b2c7ae38be5e798dfbc04ba59f8bb52a9c81b623d1a6cce5f4df5a939
SSDEEP 49152:Oj4I87dTVn4hoNiZVB6PeuT5lxeHX04mfHI:f9uhsi9ubH
TLSH
T1B3B58C07B6D841E6C46AD778C60691E1EAB1BC024F34AADF4750B3891E77EE4DB39720
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MicrosoftEdgeUpdate.exe.ico

Path C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\MicrosoftEdgeUpdate.exe.ico
Size 3KB
SHA256 2e039a7ce5af3783a3d522d27112bfe7a1dac319ed5061de3bef89790d5ad63e
MD5 6dd3d92bc5e7a45a2001a77bcc1c1fc0
SHA1 e942bc4b46d6fc683babd5d21da30f195aecadbb
SHA512 c8d9b2166f432da32f91d8de3162c74590c5753757c6a00bf9835c7c096c29bbf9ece24eb8688e2b87f137129fdaa9be3770a4eee1b99258e39247a3de64f6c2
TLSH
T189616E7C0F7CDC6FEE9230B9624A0A4132B0CDE15670A6D756127806813DAE2D9F4F9E
MD5 SHA1 SHA512 TLSH

Submit Download

setup.exe

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Installer\setup.exe
Size 7.4MB
SHA256 e62ccd461be6e5270b448471d01eb4fad703218842b65ae08cfc208cc1c45d9e
MD5 bd4fdd5388546efe40ac70d31a7f24a7
SHA1 8e482517d9e9d79b6e159ab818cabcb688accd4c
SHA512 49302038844463b974d77b0481a65df2da776581c2ba0986afb3541a246e9de6d475da68700c2f037aed466b338213cb4a146bce0eb2881d1586db6f815b57aa
SSDEEP 98304:zcMbyyxzl8YfTaJ1+WpyeB2L4HrZtbPIieK5M0uR7F5eE:zcMbyyj8YfTa/8L6IiFUpIE
TLSH
T13E766C56E2A600A9E06ECD70CF295531DA353C8E47B593EF129476E81A32FD87B38F11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_pwa_launcher.exe

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge_pwa_launcher.exe
Size 2.2MB
SHA256 49ef81097a61a80902d515d8ec97f3a3d639aaad2ab79ae68281c507403f9de4
MD5 730047068025ec98b5cb19c2467d4027
SHA1 9ef1e1921d8e28dcafc28e3039b4b96b7570c244
SHA512 68fc0ccb2907c198ee4e985df044823c31b96c462d985087b1e4a3f0186505940cfa28c6ec19b791d0dda972e477e4dc46402891b531d3b620933db6dd173273
SSDEEP 49152:UkvO5rCMXHYv1y96VBC8kQOitU/03nmdXa5o5QPQ+:UkvO5rTHSX/M/03mdX+PQ+
TLSH
T1DAB5AE87F78E80A5D15DC674CE3747309F62BC255F2496DF0288BA1C6EB6AD05E393A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.exe.ico

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Installer\setup.exe.ico
Size 3KB
SHA256 3d275500cf3ebda5e878d81dcbbaa53528397ccbe631aae8fae60de1ffefccf7
MD5 70f7eb6f0e42805134583ac203c2dfd9
SHA1 fc513300d133a9b8a45da81a72a10b937e909190
SHA512 bf3126bfc018c3890afc1a105db52b9b332ed24228cf1a8e1df715287ad51161ff3fa94c88ef2cbcdda9a10bdc992691b9171fa07cfb2e8b71c35d12605a1179
TLSH
T1A46144423D3ED9E5C80005348C5F0FB80A315F92B810A30287BBBD6ED9B8754E61E35E
MD5 SHA1 SHA512 TLSH

Submit Download

msedge_pwa_launcher.exe.ico

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_pwa_launcher.exe.ico
Size 3KB
SHA256 4785d266a2c476e0948100ea80f927d16389f7718b540daf0488457ba01958b0
MD5 cc055af6d5fab0514052a985d406293d
SHA1 6c856938f56c75841cd93bbe467d624e2bda6e07
SHA512 4f3387c19d12e5154841d97b552c8c47e107a4bc6ac376fe7a60493d4013572be61886d7ee8e40acc62653c97b3a761097f8dd3d97d72d361c38775ec512eb63
TLSH
T10F61C864933541DACB8DDAFF541843A1AE22C875D73FC4868271E9A33DA92FCA800C2D
MD5 SHA1 SHA512 TLSH

Submit Download

msedgewebview2.exe

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedgewebview2.exe
Size 4.1MB
SHA256 d8e9127a031da022de3033c5740f528a8e1e2e39af3670b5a65f8db8e158ba02
MD5 b2b4517bb2329baef3d0dd3b7048fc73
SHA1 dcf7fb531111e400c5b1980cee3ad86c21f74d52
SHA512 41e87168fb0aca1f9622c7ed84e7d2161d8bf611561019db9da39c7a2ad537f9d1abc97fb4fc76963416d5d1708bad57af39c4b2d3211bc086eb981c3e77676a
SSDEEP 49152:peRhzXlwGuZgk07G0auOj85q7aGScYbb6YErz7z4AkOuaRoBISCaQZCLlrrZ:YtwOo/Yhy8OnZy
TLSH
T144165903B29A00D4D069D074DF4A9626EB627C8D07F161EF3650B7D62A7BED07B39B24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Uninstall.exe.ico

Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe.ico
Size 3KB
SHA256 44ae793c391e8578709e181e83cb820caaa10c08844440885d969a6c839b8a2b
MD5 0becb6bcbe9400e6d9441ceef104e743
SHA1 2f4e955a4c3c11236501b5c7ea36a392a0891ed8
SHA512 f7fcfe5f5274d2a27f233e5e67361988b8176497a9711767dac1bf0079a4b6cf5a1dd62750775b25c269169be6a1e3d1faa62207ddcc3d71dbd4e4c928b3017f
TLSH
T10461C6A9BF4080C1E21183F01C831B94A5052E6395EC9B3BB822BC878D7C8EA4038E3D
MD5 SHA1 SHA512 TLSH

Submit Download

7z.exe.exe

Path C:\Program Files\7-Zip\7z.exe.exe
Size 784KB
SHA256 6d5a46c53a4157de3ec1fbbe8ed922425f11d038c64a4880bba94d2282fd7fe6
MD5 3c7b68f5337de31c5033a2b1dd08defa
SHA1 9f7d854405e2ee66b0cccab7040671a5880deb6c
SHA512 7462b2239236a917533beefa67c861ee1bd53ae5a12545ff82fcd75775919984e324e19258b721574acf9e55ff75e8ca5c5228f9f7842ca266e6ef8cc569174b
SSDEEP 12288:1xYe/yTgv7L3FLyRqGEK53jcMBKZvvmCpmQgzVg0w5ivy3GVw:1k0vlLeE43jKZvvmCpmQgzqRgy0
TLSH
T17B058C0EABEC893AC8697C7C08AAADB536245F95CC54322F94256BDC9CFC53428D7374
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppVShNotify.exe.ico

Path C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe.ico
Size 3KB
SHA256 463b6e99198762de39ea3c9156504527673355f452c17063d0fcc34caa3cfded
MD5 01f2c0d2e4df4e0ed544a4e4600d1457
SHA1 2bdf43857fcfeefcd37ee7a82d733ca4e4f1d871
SHA512 8238557d4075faf0d780ce775a6bc0121cf2da9b826cc49095fec9b35096809e5187f3027682db88d7358e21025c5d24d2ef784e9c2b0a8aa7021589ce68a8aa
TLSH
T13061D3A9E5052C3BFD5CDA7935B6DB60C2077ECA021680778809F58328F768B16ED974
MD5 SHA1 SHA512 TLSH

Submit Download

OfficeClickToRun.exe.ico

Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe.ico
Size 3KB
SHA256 19306f3f899e8bae15a744924f1ebf2ce88624f5dd297e3993645fe8453adaa9
MD5 eeb23b93433af30f3061c261b8368401
SHA1 87e274077a0eff8831e33ed45b2f740b2d8545ea
SHA512 108348395c1833031a0abbcd7ea57194733e606fc79cfb6181d821e2e750b53c636977d802c0fce70d64157767d61b7df0cd30fa80535f0586417250eccc9e3c
TLSH
T15961C9FFE23099C8C1467E30408F06C03EBE0E4EBCD01E330A9030A82A39252B83EE01
MD5 SHA1 SHA512 TLSH

Submit Download

iexplore.exe.ico

Path C:\Program Files\Internet Explorer\iexplore.exe.ico
Size 3KB
SHA256 dd8074940b2a1e8d0ad513e7c6e2a0d0b11a857893f11dc77387800ca272e970
MD5 f48ab39db9ca4956776a50b86a8e8c81
SHA1 c8f6dc9e0c0ffaa61075e9d02ffe0a1a319dd842
SHA512 c122c826c7146e86238bb8098c91abfb8270f72e4cbb8af9d5664eb98a181376f8e5cbdfea31050c9df1d895225d6c70a06810c91d40f24b1798936682c7897c
TLSH
T1B2619526B216ABA5C11A41308C8F1A2E1632AE4184A6A0010B753983D27E63BE33687F
MD5 SHA1 SHA512 TLSH

Submit Download

javaws.exe.ico

Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe.ico
Size 3KB
SHA256 6c3d33a5119708abbf19b802f0908183037cd57a6394e45b7b234a76ef4b46c5
MD5 13fb0b721f1a5288bba88efe12d3c4c2
SHA1 08899424be48b76e1189abac3b067cd19398282d
SHA512 0fac8e02873e36841d4a6aaea8d4e7d2c034fad2a0fd18d9a0c8973126dd0d969bd108eaae19fae2f5bb3988bc77fd70405b80a76b68e398a880dbb496b9b3a3
TLSH
T17D61B974F1C12D6ADA1A1EB662BE3412E1B27F8207015A1C091FBB5C17FB32034D9EB9
MD5 SHA1 SHA512 TLSH

Submit Download

XLICONS.EXE.ico

Path C:\Program Files\Microsoft Office\root\Office16\XLICONS.EXE.ico
Size 3KB
SHA256 6454633b8c6a69aad48c3fc556c5e81cb5362db0c449b3f543bddfa41eba8d6b
MD5 fdb893a42e2519f60a9a943e687de76a
SHA1 9540510a3415d3bd50ec0416ec72af6809e8711e
SHA512 6c783bf16856305121dccb03fc749c66edaa063f730f274312bf29531b3abfd43c860196442f2e566800a383237c84a04a1bfea6fbb2be94004ada693b733c7c
TLSH
T1F861F7C443D872C3C8ECF234352AA51B5F95BA211410BE1D0EAC67C8BAA9E33FD5401B
MD5 SHA1 SHA512 TLSH

Submit Download

grv_icons.exe

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\grv_icons.exe
Size 1.1MB
SHA256 9855b19ac9bd52d8e7c504ac2bc9e209c1b5f58be03ee062a35567af9115071a
MD5 3c6e964a71272fdf73f2f8b0b641f206
SHA1 9661e25c162ab50292abe5565eab91620a6e8b7e
SHA512 3393db5792bd21f79d6bcc2e3220c2f8e4d00187832f260a8639e6acce25d782215788239c7ed838393c946dcd669763c025862caadbb29614f560bcad3ec952
SSDEEP 24576:ts1XDDhP1o+5gO69/5dwoaiT1KeYt0FGcmpMRBGJh:eP1oNZRios4AcKK+
TLSH
T1D335294AB900A626D91D51343CCEF1B70EA96FD7450327567BDEBE7A253289027E2F30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

misc.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\misc.exe.ico
Size 3KB
SHA256 df2cca9b322f9432b3f3aa7b91a12dd5f22fd50e589e3107e066d99bdb071176
MD5 1e135e5bf5dbc0a82efa354c532e9c26
SHA1 b49dc6821a4e21d4c9f4385fb7658035a867dc82
SHA512 5e62520decd7db2d44477ee6e11da45bbb356138bf9482ba873b2cbaa69a44249b0515ee61a3438d835a18bb9fb2e229eca6d5a5da262938ac62245f539d8700
TLSH
T170618442693E89F8C5550530C9AF8FB00F341C17801095428733BEEFAEF5B60F62B668
MD5 SHA1 SHA512 TLSH

Submit Download

ohub32.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\ohub32.exe.ico
Size 3KB
SHA256 063c8f44d23e1ebbe390ea320eee672c449f47333120b7abbd4a78094c613113
MD5 c8d18488a47a8054af9be67ebb94b6a2
SHA1 d231e824dd885833a1d6875741745994fc08ffa5
SHA512 1942ffe7db988342597c781a820b65b74dbf89862ea505285a1a96bafcfa48ac8f5b8f583aae0ccc0fe00bb3b80b897c61a87142f3b5f4274740fdf34256bf3e
TLSH
T127617E03F704D1A8C9883FF0F193022F32710D3614602F030B2DB888A9B10E8C426DBE
MD5 SHA1 SHA512 TLSH

Submit Download

pptico.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\pptico.exe.ico
Size 3KB
SHA256 3b07d1aaa1c9c27082d7811d694aae3d422d5d965a91b2d4b8ecda3a79f760a2
MD5 cdcde2807eee3a72d0b027bb11969739
SHA1 9b5bf494d53c68d3959d44c8e8cba399c55f2745
SHA512 aa91c211ec2ae00bc635958145b12ab7ae002e52f5ce7753e0790e96d9c61947a88b34b79e580772b53cc2492d5eb8bb69596d4de2106c1400ad64b4cceec645
TLSH
T1FA61AC5B72564B78C803D7719B228B5CF4AD7AE8E5324200C970F4762F24DB53B496BC
MD5 SHA1 SHA512 TLSH

Submit Download

sscicons.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\sscicons.exe.ico
Size 3KB
SHA256 b2a350ffac5074add67fe974467351777915de5a319be7879ba15d1f6915a092
MD5 f142fd1b4cf10595f4565171b56388cb
SHA1 d8cff8a45fb7b27e34c9fc21eb672ff0a1d4076c
SHA512 3d045c3ceef64b1402605c9a0eb19d65c67f79553de4e21cdf935a0054475699102c25dab9cf3c36c9f9da0b81f350c81dc148726d0fd2e0717f961593dcd3d9
TLSH
T1F861C671A4323D58E54D573C8349B7D0E6064D852DF122AF312379BE0A741ABAAFF1D2
MD5 SHA1 SHA512 TLSH

Submit Download

wordicon.exe.ico

Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\wordicon.exe.ico
Size 3KB
SHA256 5bd706a18e0cf54197df7f1d5239f3e058652bfde372afcab230ee9b95ba14a5
MD5 bc5b17be640393be725d1c6bf384febb
SHA1 7acc0bcd224dce982aa2c109bd091b85179dcaa1
SHA512 ac17cf409d1652db87b91818d2a0f9a88136fef55389c2e7e3d2ec61b5d5012413ebf9dead6686fb0a16d5197a6af2c1fb6250a1dc46685c8350897ab6655eb4
TLSH
T18061E401D9E71E91FC23E2F6E60252F8327018780AD3112D79EC2ABAE5A4F0B30073C0
MD5 SHA1 SHA512 TLSH

Submit Download

vlc.exe.ico

Path C:\Program Files\VideoLAN\VLC\vlc.exe.ico
Size 3KB
SHA256 3b17b29b6c4e39fc36571f8e0795eae6559637529602ae7a37d5f8f6254d0500
MD5 0c328d41f4955cb0f6d408c63512c280
SHA1 3bf6219e411e79db50b8fb24557c692c5b82fcd0
SHA512 0185abba75dc735bdcc24a2d4003943c2a6a88e63eb806a058dbdc4ec4691ed03b7233e60d38e251ab6297f6eed1f446a9644b851d02fc14723551168436e762
TLSH
T18E6163703D321388C04B66BA86133A335E2A2FF61D43C6109B25728A2650FE1CA2D5B2
MD5 SHA1 SHA512 TLSH

Submit Download

wmplayer.exe.ico

Path C:\Program Files\Windows Media Player\wmplayer.exe.ico
Size 3KB
SHA256 a32208cf5c16d7223999e6ecf1c185bc88d519483ff56ad5ca5f2cc00e677307
MD5 44102aaaf107a6544eef73219f2c5f06
SHA1 c260d347155704cb817de08b8e72468897c446b6
SHA512 f575a3f5b83ccf08331c23419606414f487ad46c753ddd1b52cd15b89991e61f452f75b8162f88c29e0382c221ae4b9649560eda5138f82cc9a81b031f95ff3e
TLSH
T10A6167FD198B18C7E0054BF6C122AB421FC56CA15F071962EA80B54D3B316DF94D022D
MD5 SHA1 SHA512 TLSH

Submit Download

setup.exe

Path C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\setup.exe
Size 1.2MB
SHA256 507af1c6690b3c18faa18b3bb26b3c801c3eb9e5de3b58f29c30013aaada7420
MD5 8209d536119867ae3cb0347a2dade7fd
SHA1 16a2111655acc0d5d5166228a1bf53711e846e60
SHA512 5dc46d61b2d8c124292f684cd4471696f7ccd3a14685447a0b651f72f729337f7fd21fd9c2a1d590bf3e2925e2e20ada93e0e03f6c83824a1936b314382e6516
SSDEEP 12288:CfAv/Rrjyw6G6VWB0k2KfuRKBDLnVIpXbi6QKYT1fw5iPQTN85bM3npxYfj63hgy:CfNN5VWmdgDLnVgidK4ACQ13npi63iC
TLSH
T135458D0277E490F9F2F30B315D7252505ABABF229D35AD0F6384170D9AB06B0AA75B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcredist_x86.exe

Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
Size 1.2MB
SHA256 350ec4840c7aa02dbf03da966a252447226b1dc6dafdee55596c496e9ccc95b4
MD5 9cdd6c688fa16a6ed4332d58b33ebfc6
SHA1 27492bb176a713817e4b476a844630e637848968
SHA512 f404b561377d4342c7c47d4f63815cdae97b5d4bbb6100ba395fb7470d50c02ed129594de3e544cd8db24423c799960ceaacd58e5705993c5fcd65a53344ba85
SSDEEP 24576:KMhJmLb/B2k7obYnGfrqpgofrK3GSaiMYenGJiKEbXWtpOLl8:KMhSrB/7obYnGTADKOPnRWt4G
TLSH
T12545CF3678D0442FE52B08F290658EBF3C6978344EB051AB3760AADD3C6E44969F3779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VC_redist.x86.exe

Path C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
Size 1.4MB
SHA256 7b6976f07b672f0bc94f7451dfd59e8857819b475e04595b4f2c239415bd308d
MD5 04124ca1563bb5a7de33286b01c83e12
SHA1 1235eb45a37afedd0a4bf7181fbe1bf953a65114
SHA512 2543e2c50bda5535049da76628f37f65b9689dd1638e7b04c7238037552ab764bb133732fcd73d223287c6a16a915f2b87e07d0e84547f8634c2f66559d0dfc8
SSDEEP 24576:j5YUt9YnY7yei60WLSH3MysZgjS1hqgSC/izGfU2JGlbhlAZ4/:j5TTYMyr60uSXRjvQo0nGH1
TLSH
T10B65D03171526032E6FA01F3956995B06EFBD424EB60C41BA3D4ADCE39A44E123FF672
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VC_redist.x86.exe.ico

Path C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe.ico
Size 3KB
SHA256 6ed1664d7718a68084ea1a4abb1d9621a6ae8da8e19db35cfca13aaa4c05eb33
MD5 5cc1166b9cd6f8310369f631daf2f737
SHA1 8d2e3162e9b8ca7d196be95fc3b6e5b09e41ff61
SHA512 647617515c2750dfd460994a818bb759b40f867990102efbf592eccee7ed5460e7b731c87ae79af42cd18ccc16d8061102123747aa87a50e059b1490ae6e5411
TLSH
T10761E3576E5C8048DF843D31F4B6EB3003A3ACC13D916676A211B725EEBA3D399187AC
MD5 SHA1 SHA512 TLSH

Submit Download

VC_redist.x64.exe

Path C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
Size 1.4MB
SHA256 5427cfba70d521b64e9554a0a4ffb11d8205707f360e9309ca44f6339dc1369e
MD5 3f633c5498d158456c173ec3490e39bb
SHA1 8f09730153bc075db6fa43b422cbc2ed785256b5
SHA512 143db7c6dd8d73855b3a7105f67b56dea26ca5e62fcfcee3da6d18afeef2484bbab868dd48206794c77155ebb3604b6d037cd6f20557c69db413c34b7b658531
SSDEEP 24576:U6ujdFF99waCNIaBrMysZgjS1hqgSC/izJfojymk4HM5yJ:U6299TCPRjvQotoy4F
TLSH
T1AF65BF71A3718433E1B3057357189324EFB8D9147724496AA6ECAD1E2ABB0CD2B77336
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windowsdesktop-runtime-6.0.27-win-x64.exe

Path C:\ProgramData\Package Cache\{d87ae0f4-64a6-4b94-859a-530b9c313c27}\windowsdesktop-runtime-6.0.27-win-x64.exe
Size 1.4MB
SHA256 be89691d906161b6a5915294b864987c37be2d49909f2a2c4a3c1315a7ba8772
MD5 5926a32210b237a087213bbd6721c180
SHA1 96764d1149466f780628a5e49c5e1a110c63d6e4
SHA512 9fa677b69d1ccb04016877e034be2192e3756629ca15cb0b345868e69a545630c1da6bb28439176380d55216e005d606552ebe9511aa32d379fcadd9c61b5da9
SSDEEP 24576:FQsukTjy57oW1suU/HahHHSrJBVYj1mxJNSxdfCkw8Xm0cS1muYA28273ix8rn7Z:FSkf+7oW1P3IJEj1cJNSxdfCkw8Xm0cl
TLSH
T11A65BF21F8F84072E7F21772653881786D3BAA26571485BBD2F3A61C6CE4C41B9B7237
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneDriveSetup.exe.ico

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveSetup.exe.ico
Size 3KB
SHA256 3a2d7fd9799178af58fbd08a2fffc56398cbf289c7ddd5c5f0fb2e241395261e
MD5 ea27d80794552048d73d1fdadac459d3
SHA1 f976de7f799d750ea73fdebefbe57ce9d81844d9
SHA512 f526d0d089d25625f6c24232334f0b1a18ec7682769d7c2ad6ffeef6a45231c8ce807e8276874e190ac7c9a9876432cc900c567042f6c046015f22aafd121753
TLSH
T15C614C71E91C517CF2D452334146120C440E4D1A19F51F401D333B18FD3D6A5552CEA3
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_idx.db

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
Size 28KB
SHA256 ae35104b1ffecedd0d57a2989ed37409ae893aecd16da349f80ba81d8dc94e95
MD5 560b4525ebe932175f04ef45f0a493a1
SHA1 4f38e27b15b9d29aa52f484387d282bda411d377
SHA512 0647d21030960b968e4dd5ae115fa74dead7bd1974d2b3d55eba1b0a31e11022c6845515a14454bc09ccb7ad4a87ceae046f715121d05bea9a2c3e24b04aaf5c
SSDEEP 96:XpwUm+14t/72aM7bsB2H145fSPj+GUYejw7p6HCLFUHWkFyU4d7/d608:Xpq+eKjV4xYecBG2CyFd5608
TLSH
T104D28056B848EA15DE092D329FEBE4EEB2323E16CE4B060375D1B73F0AB70C10E18495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe.exe

Path C:\Users\Admin\AppData\Local\Temp\2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe.exe
Size 7.4MB
SHA256 19530e38751f1fd9020946e2e730e84931cc3b7186107193662fce9b3370b384
MD5 d5973582363c263d593f705e09bddcbc
SHA1 027b5f59c64c945c021f2990153fdcade5e9f47b
SHA512 9ac799c0a5c380e1bde2548938f884d3c2fd60b572a778fd39201b084fc4bf6389da9f1d28c5f75e2f75d48f1ca6ff6f37ff66e018b65e065f8cebb7b90fc450
SSDEEP 98304:NzbnbTWpz1T5mM5mFB1GWdhrrmqJjeb2:NzzbqvT5T5wUWd5Sz
TLSH
T13C7629595BB481ECE0ABD1788D778772F67278428A33661B0361CA1F2F33E589D19732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe.exe

Path C:\Users\Admin\AppData\Local\Temp\2026-06-06_343ed2f5fef05fe31c5a3f68a33dec6e_elex_glassworm_icedid_njrat_vidar.exe.exe
Size 6.6MB
SHA256 ee1327fbdd9633af51072a5ada25cd0fb1f01ebc0c2850fd47b130fc667fde5a
MD5 d8e48fb689062c97564f9c9c78d91ae6
SHA1 33e6685ae3e992f8f7a09b233ae3b30bdbfc93af
SHA512 f87af36e459a08e3306e955fe34c57d0a0c7c35d4276f4d1060f752e05da4865ad4e35ff236ebbd5c2d104ccc8fe534dc16cfb501098af4e9aaed3184dd96553
SSDEEP 49152:N9iUdXrgtcBbighUdL2Mld6S/nDPKNrkjN2zAuk9JA0tNprX9QQ9zOB17/xYtuHH:NzbnbTWpz1T5mFB1GWdhrrmqJjeb2
TLSH
T1C56618596AB481ECE0ABD1788D778772F67278419E33661B0361CA1F2F33E588D19732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3640-898-0x0000000000400000-0x00000000004E6000-memory.dmp

Download

memory/3640-0-0x0000000000400000-0x00000000004E6000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads