Overview

overview

7

Static

static

3

2026-10-01...ar.exe

windows10-2004-x64

7

2026-10-01...ar.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/10/2026, 10:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-01_7df6a7bd1dcfb90fc31b8333b04f88a2_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
  • Size 1.6MB
  • Sample261002-mremjs1scx
  • SHA256 12a30c9bb4580fc88823d19f86afd6e5a0189fd1471e0af67c24d1ed86111734
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-01_7df6a7bd1dcfb90fc31b8333b04f88a2_akira_cobalt-strike_elex_icedid_njrat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-01_7df6a7bd1dcfb90fc31b8333b04f88a2_akira_cobalt-strike_elex_icedid_njrat_vidar.exe"
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2636
    • C:\Users\Admin\AppData\Local\Temp\2026-10-01_7df6a7bd1dcfb90fc31b8333b04f88a2_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
      C:\Users\Admin\AppData\Local\Temp/2026-10-01_7df6a7bd1dcfb90fc31b8333b04f88a2_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
      2⤵
      • Executes dropped EXE
      PID:4652

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ADelRCP.exe
        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe
        • Size 851KB
        • SHA256 fc5d445fe8bdfd000ffb7f71b900be1267e906266d757311fe4b34a13751bba3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wow_helper.exe
        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe
        • Size 823KB
        • SHA256 b2e3aaba88166f0c7aa5fc6997f1bb33d6de89416c56b8f9f728afabe09b2b8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AdobeARMHelper.exe.ico
        • Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe.ico
        • Size 3KB
        • SHA256 2f33dacaebb8bdf6d2d88550cce349c09b51dfeb4f499796f32bd30e14aab86c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        jaureg.exe
        • Path C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
        • Size 1.2MB
        • SHA256 e2fc2a1e5740831d841a34d99e5c133a2e86b129c3e3f32e05b7408d2ed72254
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msinfo32.exe.ico
        • Path C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.ico
        • Size 3KB
        • SHA256 5d7967695bef88a64140c541a09f22b45abe542c2df462d800e72e1d8e121d28
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DisabledGoogleUpdate.exe.ico
        • Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.ico
        • Size 3KB
        • SHA256 2e039a7ce5af3783a3d522d27112bfe7a1dac319ed5061de3bef89790d5ad63e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ie_to_edge_stub.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\BHO\ie_to_edge_stub.exe
        • Size 1.2MB
        • SHA256 178591e4ee662bff52113cd0f96702f78fd6371442dde45ebf6ddb958beb1c64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedgewebview2.exe
        • Size 4.1MB
        • SHA256 1a8c12d105a9112f62c2817c3b7e35060326f153a5fdec222b1f25338e52fe42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe.ico
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedgewebview2.exe.ico
        • Size 3KB
        • SHA256 61197ae03a1910353d202dffcc2271af59a9c26150652fbc6a84806cef420176
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pwahelper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\pwahelper.exe
        • Size 1.8MB
        • SHA256 bcb27eca4ccf62ba197f596e71123df79ac202293c861ec34fb98025b28713e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ie_to_edge_stub.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\BHO\ie_to_edge_stub.exe
        • Size 1.2MB
        • SHA256 3331dc985051c59c941e749fccc0a313a85d8f44b0d17037d33e7784a16b327b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Installer\setup.exe
        • Size 7.7MB
        • SHA256 d5447db6074d733ce1e95aa039c24d1d73f8d51592c67ccb6e8bd14e1ccafd3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevation_service.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\elevation_service.exe
        • Size 2.9MB
        • SHA256 032f6bcaf3179e2ac58703b22e3c5cfc930f1696d2192a948db1930e7246538b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        identity_helper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_helper.exe
        • Size 2.1MB
        • SHA256 a19e35695e39ce575c5ce5f783802fc8c5464703df894b8f70e20695f80f5266
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\notification_helper.exe
        • Size 2.3MB
        • SHA256 af277e1efe2a1e8013973227627dc1e8ee42df437aee6c48f692d7d304af2135
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Installer\setup.exe
        • Size 7.5MB
        • SHA256 29c4eff5fc0e32d84eddf67f41f21072bb59c3a677fa132655cdd6531c0d4b41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cookie_exporter.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\cookie_exporter.exe
        • Size 832KB
        • SHA256 7d2a020e2f29bc5910885040294c8e507be849eafa9be54888fbcbba77341dc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge_proxy.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedge_proxy.exe
        • Size 1.9MB
        • SHA256 8e9ae608be29f64c113adec4729cf18822a5602f18f1cda3b0a67cac82ff47f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe
        • Size 4.6MB
        • SHA256 86c75f7bc568751148c64869488739e50e7bc9286504383b78e5f185fd958ba3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge.exe.ico
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe.ico
        • Size 3KB
        • SHA256 4785d266a2c476e0948100ea80f927d16389f7718b540daf0488457ba01958b0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        msedge_pwa_launcher.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_pwa_launcher.exe
        • Size 2.5MB
        • SHA256 cdfc4293ccb1e2af22d7940c64b3a9531ac36b166241be73e92bd424e68c67fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedgewebview2.exe
        • Size 4.1MB
        • SHA256 e06dc2e37b5f94261ffdfd14d144f39403448e4b236c60165ab5a1f6de43a95e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pwahelper.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\pwahelper.exe
        • Size 2.1MB
        • SHA256 734c5d440a1c133ed14e0abab3c438a8b9adec4a846f004340124cfa926fab8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wab.exe.ico
        • Path C:\Program Files (x86)\Windows Mail\wab.exe.ico
        • Size 3KB
        • SHA256 ce19242fbf3efc4fe158fba6ad17e913a57a5fe53166f47dc8e5faa5a9f90a03
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        wabmig.exe.ico
        • Path C:\Program Files (x86)\Windows Mail\wabmig.exe.ico
        • Size 3KB
        • SHA256 88c0094fb49858d277e6e56c8c1023bf93356b7d3fc8e037b355d21aa1c7bd34
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ImagingDevices.exe.ico
        • Path C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe.ico
        • Size 3KB
        • SHA256 c76b2392ae75384d2097bd890c529cc5636350476c9a001ee1a055430c8f1c86
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        7z.exe.exe
        • Path C:\Program Files\7-Zip\7z.exe.exe
        • Size 712KB
        • SHA256 3b80b1d404d9420e0336f06e0bfc1315d7d21577c4addfa4749a62a66397ac36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe.ico
        • Path C:\Program Files\7-Zip\7zG.exe.ico
        • Size 3KB
        • SHA256 8cad493433ec34a34ca6f4fd49655aaf7cbb4337752743804db83ea6c050d1fe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OfficeC2RClient.exe.ico
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.ico
        • Size 3KB
        • SHA256 19306f3f899e8bae15a744924f1ebf2ce88624f5dd297e3993645fe8453adaa9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        appvcleaner.exe.ico
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.ico
        • Size 3KB
        • SHA256 463b6e99198762de39ea3c9156504527673355f452c17063d0fcc34caa3cfded
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        setup.exe.ico
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe.ico
        • Size 3KB
        • SHA256 3d275500cf3ebda5e878d81dcbbaa53528397ccbe631aae8fae60de1ffefccf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ielowutil.exe.ico
        • Path C:\Program Files\Internet Explorer\ielowutil.exe.ico
        • Size 3KB
        • SHA256 dd8074940b2a1e8d0ad513e7c6e2a0d0b11a857893f11dc77387800ca272e970
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        javaw.exe.ico
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe.ico
        • Size 3KB
        • SHA256 6c3d33a5119708abbf19b802f0908183037cd57a6394e45b7b234a76ef4b46c5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CNFNOT32.EXE
        • Path C:\Program Files\Microsoft Office\root\Office16\CNFNOT32.EXE
        • Size 958KB
        • SHA256 02f209c7263263f5fff2b030dc03d621e1bfc545d1bbf4988fa9a739a2daa358
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IEContentService.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe
        • Size 1.1MB
        • SHA256 a1d83f64bafbf19e338e77281dac714e9b0acf522a597fcf7f6c16f3ddbdc3a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NAMECONTROLSERVER.EXE
        • Path C:\Program Files\Microsoft Office\root\Office16\NAMECONTROLSERVER.EXE
        • Size 858KB
        • SHA256 b40dd0334ce5d027995a2ac537f769695abe5f05c1f02ebddd55204d73e36951
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PPTICO.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\PPTICO.EXE.ico
        • Size 3KB
        • SHA256 3b07d1aaa1c9c27082d7811d694aae3d422d5d965a91b2d4b8ecda3a79f760a2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        WORDICON.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\WORDICON.EXE.ico
        • Size 3KB
        • SHA256 5bd706a18e0cf54197df7f1d5239f3e058652bfde372afcab230ee9b95ba14a5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        excelcnv.exe.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.ico
        • Size 3KB
        • SHA256 6454633b8c6a69aad48c3fc556c5e81cb5362db0c449b3f543bddfa41eba8d6b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FLTLDR.EXE
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\FLTLDR.EXE
        • Size 1.2MB
        • SHA256 053abbc6ed737e9ce456fdc3e114d943a5d22182f49c918cff9bc5c636986f23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSOICONS.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOICONS.EXE.ico
        • Size 3KB
        • SHA256 df2cca9b322f9432b3f3aa7b91a12dd5f22fd50e589e3107e066d99bdb071176
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MSOXMLED.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE.ico
        • Size 3KB
        • SHA256 063c8f44d23e1ebbe390ea320eee672c449f47333120b7abbd4a78094c613113
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DATABASECOMPARE.EXE
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\DATABASECOMPARE.EXE
        • Size 906KB
        • SHA256 6a8ec1359d3f9fce313113f0d5f5cc17c4ffe19515dd7f10126d9bbad9903304
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dbcicons.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe.ico
        • Size 3KB
        • SHA256 b2a350ffac5074add67fe974467351777915de5a319be7879ba15d1f6915a092
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        joticon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\joticon.exe.ico
        • Size 3KB
        • SHA256 f4c419b2d60ebe6dc173b36b108855b1f4db9c28fda291f4d93ac38e6dd24389
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        osmclienticon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe.ico
        • Size 3KB
        • SHA256 b76444a386ad024bd78ee152f0f6ad2d5dd3b9ed478147014e5d804e7a9e6508
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        outicon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\outicon.exe.ico
        • Size 3KB
        • SHA256 98d0a0fe25fa36309c0bbe62f04a561a1e02d51a4dc2c8331b9b3c2e47387f5f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        helper.exe.ico
        • Path C:\Program Files\Mozilla Firefox\uninstall\helper.exe.ico
        • Size 3KB
        • SHA256 44ae793c391e8578709e181e83cb820caaa10c08844440885d969a6c839b8a2b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        updater.exe
        • Path C:\Program Files\Mozilla Firefox\updater.exe
        • Size 1.1MB
        • SHA256 676a2b15533ad3e8efc5ce2875f189b44b90b9bf7d3d5bf91ce74e7abb054612
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vlc-cache-gen.exe.ico
        • Path C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe.ico
        • Size 3KB
        • SHA256 3b17b29b6c4e39fc36571f8e0795eae6559637529602ae7a37d5f8f6254d0500
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MpCopyAccelerator.exe.ico
        • Path C:\Program Files\Windows Defender\MpCopyAccelerator.exe.ico
        • Size 3KB
        • SHA256 02221d573edefa486ba8fe5aee3c8a10c8c7e3188914c0f22df06bb1338db790
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MpDlpCmd.exe.ico
        • Path C:\Program Files\Windows Defender\MpDlpCmd.exe.ico
        • Size 3KB
        • SHA256 9e3f1f8e5166514df44b02a1e0bf7474708dafba161e263cff087af62ba89ae5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        wmpconfig.exe.ico
        • Path C:\Program Files\Windows Media Player\wmpconfig.exe.ico
        • Size 3KB
        • SHA256 a32208cf5c16d7223999e6ecf1c185bc88d519483ff56ad5ca5f2cc00e677307
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        integrator.exe
        • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
        • Size 7.3MB
        • SHA256 84da675bfae2db2447738383a3c5b45d7711de3f6120e94e870227b05f80954f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcredist_x86.exe
        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
        • Size 1.1MB
        • SHA256 4650c0fc37c8d5bec859a2c02b80e130b8850029eb142633b2ec6fb3b403fbe5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcredist_x86.exe.ico
        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.ico
        • Size 3KB
        • SHA256 6ed1664d7718a68084ea1a4abb1d9621a6ae8da8e19db35cfca13aaa4c05eb33
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        VC_redist.x86.exe
        • Path C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
        • Size 1.3MB
        • SHA256 27629af1a1a053a85db1a7d8621ed17d4d8c8db6a4e3e8d567d5774aaeb27ba2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VC_redist.x64.exe
        • Path C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        • Size 1.3MB
        • SHA256 a00c5c00bacd2ba6bee1befe5cb20fc5a4b148cd74da19fe5677e029e73d20aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcredist_x64.exe
        • Path C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
        • Size 1.1MB
        • SHA256 8febde2bc26762ac427630d062048893da0ab41e2d09983f5d93eec4f10f482b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        windowsdesktop-runtime-7.0.16-win-x64.exe
        • Path C:\ProgramData\Package Cache\{ef5af41f-d68c-48f7-bfb0-5055718601fc}\windowsdesktop-runtime-7.0.16-win-x64.exe
        • Size 1.3MB
        • SHA256 7705740117384fcee3c001216b7e4739a2cc91996cd8d4be07860770b2bac61f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneDrive.exe.ico
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe.ico
        • Size 3KB
        • SHA256 3a2d7fd9799178af58fbd08a2fffc56398cbf289c7ddd5c5f0fb2e241395261e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 0ea71658f1896dac36cf70c6028eac7f9f16c7e48bf01f5ed50187dc174774ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6c6e0dc08f068d51d2a4e6b070ee923413a65f7b75abbbcd05d5d64d054e7cd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 51a0e5598865ce7c313f46ae527d193579f309fe35cef629edb9543c49960843
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8659b42e8068209510e4151a246e0fe0e68973d5cc7cbd93f41c2406b36bb83b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8bc9193dd2d6ea2f639167591bde71b2d06870b546e572ee5d1e6affed4683c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d2c1ef5afcdf467f15f2667dd41515e98b08ab9a9b8f10c1686875892f430c4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6ea541bc146387aeb71c5651bb9c93fe740df14f8f8b481c455fa459a6ab61e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 0c9c282ee9d29d9fa1d6eb8519ae9eae1d68ea9b09d321dd0365c6c9f5d35e4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 01a5756c26a471debd7d4cc1ac741726939fee36db21c22b21a178e2718e25c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b209d67ec06441f7d73a844a1189a86e2071cb05acc0d37bb978bddc98a6206a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7f07bbef1a4f4d64b4ee4020752ce944053702f86bc5db7a95d071645db097e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4f99cb9bc3e37d3b41969282c849256c6d7032095f75feb766178bb2e4c4fa8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 532be415340a751482afbade821745b15f49f836bfc19772e13c4d286d6b1d65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a882840afe20a9f119c7e53802b9ceb0af963d60594d90799e1c74191299650c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d96961155150abd5b2a198dd124351a821ef0d36672da7caf2a34f608a937050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 40d41b7ec63c0853fb319b14757ea9a38d567bf381187d89f9e6b47857879426
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a213c511a45935b96b6b0023cff3c7e693f3b988e7d67c3deb1176932cb729bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 39c962dcce8a27fe09f06f8d2af7d3a18178ab746541a0f558d87fa0b31f4d6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b8e578553b2e78c817c14752b095b0ae8923c3672a716424cdd7c14b9049112c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 fdebfc2375d829fa29cd674669c921612f39d61e4490a3499b455da30a12430a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9eedd3e4a28665c66590a4841482dc1131e7de7c522a15801b84f7d0526711c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 5f6a4e14de6e1a223c6c2ee99a1d9b82a4c8b7450fef570101087327491f00e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 be6bf6d1005741464adc2058e86dcfbdd5e645a9b28353660d41704d9efdd7ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 365f188b915e14d4b6ea267490f8ab72a924379958b838fd1803c72002f10c36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 f1cff77539af2619bd92aaf1dcfb995b9d694066487d591abdfe6aa9d2264103
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 dcd72c1aa6d4c67935778181207beaf1e22896278ca50aba795d55291bf684d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 49f80368bb5923ffd3b9320bd669d9b330498c65575e0db72aa6b1e8cfabdb55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 697104613e70ff7d05601eb7b9f4a757ccaf76be92059b670f41e2dc9c95c19b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 a8176c85be214c68bb5ff3dbf349231fff9924c9076f8d94e0cc668059931419
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2200d144ce63de7ae718497d040d72daeaa59f16f01a24310399c46f69df703d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2026-10-01_7df6a7bd1dcfb90fc31b8333b04f88a2_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
        • Path C:\Users\Admin\AppData\Local\Temp\2026-10-01_7df6a7bd1dcfb90fc31b8333b04f88a2_akira_cobalt-strike_elex_icedid_njrat_vidar.exe.exe
        • Size 980KB
        • SHA256 fc24b2f8d24e6fdb53896becc108fdee74bd5e91f40a539cc0334033d08de107
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2636-786-0x0000000000400000-0x00000000004D4000-memory.dmp
        Download

        memory/2636-0-0x0000000000400000-0x00000000004D4000-memory.dmp
        Download