Overview

overview

8

Static

static

3

2026-08-01...r_.exe

windows10-2004-x64

8

2026-08-01...r_.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/08/2026, 01:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
  • Size 38.2MB
  • Sample260802-bdpptaar91
  • SHA256 844a737f758e96cb0947b508cfee3bf3e0bc202f312f75cc26c6f964bf306f30
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies Control Panel 4 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2508
  • C:\Users\Admin\AppData\Local\Temp\2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-01_33f50277a592a105a393756d1fa26e1c_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4316

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 38.9MB
        • SHA256 71c02b4fc5dee117deabaf12acd364621255e51911d5ad811aff50a5c4bd2b50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_pwa_launcher.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\chrome_pwa_launcher.exe
        • Size 37.5MB
        • SHA256 659092bb56fb1139d2bd664b65b5d17eb2678be007a617fe78fa47ae48f17be2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevated_tracing_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevated_tracing_service.exe
        • Size 33.7MB
        • SHA256 4022358449aabf9b334bb0ba545d22ceaeb4aa87f406578a24ba142440266a0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        • Size 34.5MB
        • SHA256 b5078ee7e800151be83a801a4bb0e4b352b86441d4d4968ef9e71d3b2c822fea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 32.9MB
        • SHA256 ae38aa9c8c89ed759ca4c05bfd4ea48525f9562b74081f9ed1b66baa2e296695
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 32.8MB
        • SHA256 74ab244f170912e885331b5c4d03efc92bea241a2d5f8adfa93e2c5f34426998
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 33.5MB
        • SHA256 ac2582d336fc438313cb690a9536f5e13fa1be34a6fb4f21b9a97ec425cab5d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 33.4MB
        • SHA256 f474980fdec538634663bb65ba3267ff7418ca2eac64fb1c41b405b8b8f7a392
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fontconfig.properties.src
        • Path C:\Program Files\Java\jdk-1.8\jre\lib\fontconfig.properties.src
        • Size 29.6MB
        • SHA256 5c4506068378a0180ca553eba8a3c6fa258a367bf3919f3f2724df5b39f40859
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jre-1.8\bin\unpack200.exe
        • Size 26.7MB
        • SHA256 309ccfdc89fe9d8132b6637451d9bb1a3a20b78eed0a0301a20412a70da217e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fontconfig.properties.src
        • Path C:\Program Files\Java\jre-1.8\lib\fontconfig.properties.src
        • Size 24.9MB
        • SHA256 fb714855a8115bc233566acaf02e65a5430531a7b366ef55fa66879faa96da5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVDllSurrogate32.exe
        • Path C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate32.exe
        • Size 24.9MB
        • SHA256 cd3581e6828f782fe2e237c22a7c54fc0946d2799e16e3e631de8cca530880fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVDllSurrogate64.exe
        • Path C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe
        • Size 24.3MB
        • SHA256 5d3b19495b325a85bfaa6f6249d76f7fdc0e4bfe0db1b84a478986f243c8dc07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppVLP.exe
        • Path C:\Program Files\Microsoft Office\root\Client\AppVLP.exe
        • Size 27.7MB
        • SHA256 a9944eca753daddef3af1f6298806bc240b985e104a432185c27991e5380ba3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Integrator.exe
        • Path C:\Program Files\Microsoft Office\root\Integration\Integrator.exe
        • Size 24.0MB
        • SHA256 2e59583c6798977ba3adff122b15977fdfbd1772bcfe5a1f0e67cbf6ee97e27f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Mashup.Container.Loader.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe
        • Size 23.1MB
        • SHA256 a147c870cca29a85fb7b2c7c9d054216786be0f64668f35af309817f5fe08123
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Mashup.Container.NetFX40.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX40.exe
        • Size 23.0MB
        • SHA256 9d6c1442299272870a8e9b2d408912b9805bf224bfebd08343d1906f4b47df01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Mashup.Container.NetFX45.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe
        • Size 23.1MB
        • SHA256 61b7f90b2c481299a74a3afe1709944e01e888b0780ced93d9037dfd37c101c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Mashup.Container.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.exe
        • Size 22.2MB
        • SHA256 17b635d4fe0c1d6e07244b0329fbb619715a0faba284d205fe420092e69923de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IEContentService.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe
        • Size 23.2MB
        • SHA256 bfe5c50d8aa9f83cd8e5ef7f5edc774fa62a2dceecc1ebb18632712e9b888982
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PerfBoost.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\PerfBoost.exe
        • Size 20.8MB
        • SHA256 c5a5bdf2aebd82591b19c0485d33a49c27bd93d54d30f525fe0987ee8ccebace
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SDXHelper.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
        • Size 19.0MB
        • SHA256 a18326c96832970f0f9312179515f73c303dcba759f59edfb066a909477fc6f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SDXHelperBgt.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\SDXHelperBgt.exe
        • Size 20.1MB
        • SHA256 75ea0cc48b6dc30d84463ec181df1d33aaf6cfd57d6890e0a56bc733870d9e2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Wordconv.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\Wordconv.exe
        • Size 19.6MB
        • SHA256 3d2e12826e599d8c70de46f36fd2fffe24b36f7866da95bc04a00d658ce51ac8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        misc.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\misc.exe
        • Size 21.4MB
        • SHA256 7b6d32f7a4e07da5c675716023bc6a7bde044a5c40ab21ecd65544a98b766fd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msoadfsb.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe
        • Size 20.8MB
        • SHA256 d3409aa750f81a3da1a554d7125b7f89b18f2b0bfbcde74af85e2f5976d8b9e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msoasb.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\msoasb.exe
        • Size 20.0MB
        • SHA256 c6f2fa073f365f8a333d0817e4f53a7c75141bc83fb62e8b56de88b7f3a9814b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msoev.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\msoev.exe
        • Size 21.3MB
        • SHA256 6f5b69574d2f5b261e73e0fee06ae67b336c90a4ca7269f5d687559258d0b781
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msoia.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\msoia.exe
        • Size 20.6MB
        • SHA256 a23210479f3097972453ebb1b92648e307d902d13466545b054c0f7017cfe39c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msotd.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\msotd.exe
        • Size 19.8MB
        • SHA256 ab17d942433c5050fd71b8ae94e4cc7d81a0b347bf9265601e2105ad5cc87cc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        officeappguardwin32.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\officeappguardwin32.exe
        • Size 20.7MB
        • SHA256 3f8ffbd6764024768d256321e3e9ef75c81aa780db25041a9525e97b6f4c2732
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        protocolhandler.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\protocolhandler.exe
        • Size 19.6MB
        • SHA256 ee2f02e7c0411d5f9616296ae6186cc972cd3b9c30d5189ae3ae96ce69040813
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OLicenseHeartbeat.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe
        • Size 19.2MB
        • SHA256 88e15898bae4d918f607d98db8a00005721aa97a160837cf30d9f0abbd3e05e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SmartTagInstall.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\SmartTagInstall.exe
        • Size 19.1MB
        • SHA256 cc0ec9694d1f9a14b24e95ef4015f569039eeac323a05cc8ccf462651df5a358
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        eqnedt32.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\eqnedt32.exe
        • Size 19.4MB
        • SHA256 e870522638078884c5f700d88094336662c955c8cab1f84b710bb491118bb987
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SQLDumper.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe
        • Size 18.6MB
        • SHA256 9847b628b35ab267efb222f10606df27c10836dde3523b414ea3a4f19194557d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SQLDumper.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe
        • Size 18.7MB
        • SHA256 31e4e4e7509263e2dcf96804eb25710ffcafb6a591f28a0f4e21ff85ac66a96d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppSharingHookController.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\AppSharingHookController.exe
        • Size 19.3MB
        • SHA256 6004d5fe92f767fe7ce5d0d08584b682017e578088eb79246554e4c3247f26f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Common.DBConnection.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.DBConnection.exe
        • Size 18.7MB
        • SHA256 dea192158554968b9bc3d3d35f0952453a981833490bd65deb6472e23c34f076
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Common.DBConnection64.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.DBConnection64.exe
        • Size 18.1MB
        • SHA256 729265827c28a923d70659f94bf6fedb0c4cd65c6fe84e3efe55e0f58ad2186f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Common.ShowHelp.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.ShowHelp.exe
        • Size 17.2MB
        • SHA256 66573d5c600f069544690155a8b0b96deb9113f5fe9807cad34ad31211a3c674
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        accicons.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\accicons.exe
        • Size 17.9MB
        • SHA256 6339898fb4865410b257596f1c8ab235a43f1e35ff16ef56ed594e26cfd5795c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dbcicons.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe
        • Size 19.5MB
        • SHA256 45f89bd970abbc40be50225612e8298a765a714981f71ce6aed72ec9ba462e33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        grv_icons.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\grv_icons.exe
        • Size 17.1MB
        • SHA256 eadacc34b0b5b670b4ec38fc10262e3087a541ec707c66de144fd5ef8adbefa1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lyncicon.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\lyncicon.exe
        • Size 17.4MB
        • SHA256 d85d21c6f62e868579a093917e7d5f69820a2766786672636757df428c012b54
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msouc.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\msouc.exe
        • Size 17.1MB
        • SHA256 9bc69132a6741444a2becc12b11252a64c8700c3f3baf9a9de4bf1bef991e864
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ohub32.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\ohub32.exe
        • Size 17.2MB
        • SHA256 41973476a451ec154dfefa64758f41b582d47ae6dd57d198cad0abda1afd1308
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osmadminicon.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmadminicon.exe
        • Size 16.3MB
        • SHA256 902d7f84be4728a0d53f5e1bc15ce3b3d53b2568a813adac04ee886dd4ec21dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osmclienticon.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe
        • Size 18.2MB
        • SHA256 bd1978fb515062a295a96722815117db7ab1c8de5c9154cd31a0870e3f01b304
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        outicon.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\outicon.exe
        • Size 16.6MB
        • SHA256 88d9add291a71f8ed27bfa9c5d6682ee45957707f7375d256220941f9f947542
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pj11icon.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\pj11icon.exe
        • Size 16.2MB
        • SHA256 66296a52be23322f2edb72bf65fab75606190cb7f46d5517d1b24409bf8b9a38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pptico.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\pptico.exe
        • Size 16.0MB
        • SHA256 85662dbd3ca27ced55c921719f4169ce1ae9ac4214e428a37455736f96ec7e93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sscicons.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\sscicons.exe
        • Size 16.2MB
        • SHA256 b14986ed9f4505797d33c9fdcbd54c2fc7d7fb5eb07af30957cb6921fc70b6c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wordicon.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\wordicon.exe
        • Size 18.4MB
        • SHA256 3748fdd42d290718789de45d969b50aeb3505b27d0d800dd632cd55c17e72297
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xlicons.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\xlicons.exe
        • Size 15.8MB
        • SHA256 a2ee517c3cf5a17fd4f78d9226c1b26f9e093bb5c10a37e1ffd197282801c3cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        misc.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0409-1000-0000000FF1CE}\misc.exe
        • Size 18.5MB
        • SHA256 73f7342e29c68513ad56f574b6a6f2591c9d963f947bd8a4135146a4437166f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        misc.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-040C-1000-0000000FF1CE}\misc.exe
        • Size 16.9MB
        • SHA256 d62e7a6db634045094e66e6468017312edb0d671c84680f405034bcff69b5c0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 38.2MB
        • SHA256 844a737f758e96cb0947b508cfee3bf3e0bc202f312f75cc26c6f964bf306f30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download