Overview

overview

6

Static

static

1

2026-10-08...lc.exe

windows10-2004-x64

6

2026-10-08...lc.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    122s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/10/2026, 12:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-08_6cf20c53ff0020382ee0d6725a0202ec_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
  • Size 4.3MB
  • Sample261009-pk4zzaet9q
  • SHA256 cba89984df440d658c6c0fc308247f15d8338948c9f3c2980b0532fd0ff3cc26
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspyware

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 12 IoCs

    System information is often read in order to detect sandboxing environments.

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 3 IoCs
    persistence
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 14 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 60 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs
  • System policy modification 1 TTPs 1 IoCs
    defense_evasion
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-08_6cf20c53ff0020382ee0d6725a0202ec_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-08_6cf20c53ff0020382ee0d6725a0202ec_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe
      "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" /update /updateSource:ODSU
      2⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1460
      • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe
        C:\Users\Admin\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe /update /updateSource:ODSU /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode /installWebView2 /SetPerProcessSystemDPIForceOffKey /EnableNucleusAutoStartFix /RegisterOneDriveLauncherAutoStartTask /EnableOneDriveLauncherRampDownloads /EnableDeltaBuildToTelemetryFeatureSet /ArgPerformNucleusLocalAccessRepair /PerformEdgeNucleusRepair /PerformChromeNucleusRepair /NucleusLNARepairVersion:1 /AddOD4PhotosShortcu /DisableRedirectionForShortCuts
        3⤵
        • Adds Run key to start application
        • Checks system information in the registry
        • Executes dropped EXE
        • Modifies system executable filetype association
        • Reads the TCP/IP host and domain name from the registry
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:1440
        • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\FileSyncConfig.exe
          "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\FileSyncConfig.exe"
          4⤵
          • Drops desktop.ini file(s)
          • Executes dropped EXE
          • Loads dropped DLL
          • Modifies registry class
          PID:4884
        • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDrive.Sync.Service.exe
          /silentConfig
          4⤵
          • Checks system information in the registry
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          PID:4312
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:5128
    • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
      C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
      1⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:1360
      • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDrive.Sync.Service.exe
        "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDrive.Sync.Service.exe" /silentConfig
        2⤵
        • Enumerates connected drives
        • Checks system information in the registry
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious behavior: EnumeratesProcesses
        • System policy modification
        PID:3440
    • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDriveLauncher.exe
      C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDriveLauncher.exe
      1⤵
      • Checks system information in the registry
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      PID:5956

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          Square44x44Logo.altform-unplated_targetsize-256.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\Assets\Square44x44Logo.altform-unplated_targetsize-256.png
          • Size 38KB
          • SHA256 f21d962c5327933d43c887e1d0531a116fb71cf0075126d9fd5eaa58447a055c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Resources.resw
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\Copilot\Strings\HY-AM\Resources.resw
          • Size 221B
          • SHA256 1f762fa2d859cab49e93ca9ce8ef24edc4409ac75de77dc8781cb06ae4ee7f3f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          FileSyncConfig.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\FileSyncConfig.exe
          • Size 879KB
          • SHA256 3c7d34f87f140115d4fe29584b14cbee5e72c3263dcd8263a8b2d8a7c6267f45
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FileSyncEvents.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\FileSyncEvents.dll
          • Size 134KB
          • SHA256 15161c2582e487a4cdf982acb41a1d0bbdef65d46b289f5cff998897a09afb30
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FileSyncFS.DLL
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\FileSyncFS.DLL
          • Size 1.1MB
          • SHA256 7702d99c5efc743283202163494555b0e8f7fdb3ea5b0bbdbbb0ee89c4ddae99
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FileSyncHost.DLL
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\FileSyncHost.DLL
          • Size 531KB
          • SHA256 28e22849a428695ff0788527bc22d800e39ebdb2ce329eae104bb0ade5e3fe2e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FileSyncSqlite3.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\FileSyncSqlite3.dll
          • Size 753KB
          • SHA256 397d6d61c1cfbcf0867dbcb5670975267b0fe3d4d35a28f1b954016733be7206
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FileSyncTelemetryExtensions.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\FileSyncTelemetryExtensions.dll
          • Size 1.0MB
          • SHA256 9424c4f5b67e46f7bb504c5ebd8a65b33aaf819aefdf884dd7ac28b1181ea804
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LogUploader.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogUploader.dll
          • Size 1.2MB
          • SHA256 37fdb54280b38812de48a125f67596564e59f2ecc036fc76c2ba63d1b104d6c0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LoggingPlatform.DLL
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LoggingPlatform.DLL
          • Size 709KB
          • SHA256 a584012d309c3570c6d78a74b6aca9a0a4e83ca87f9f999a7da556c7407c3b2b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-black_scale-100.png
          • Size 965B
          • SHA256 3910d0976a41bc9802e6c1460c441f0ce5bf6520b47e2e7f1237eea0342553cf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-black_scale-125.png
          • Size 1KB
          • SHA256 7876f97812c78b2a6a6857b748cfcb083654b0df7a9968d28a337f553c9bb740
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-black_scale-150.png
          • Size 1KB
          • SHA256 49bac30adc5e19520c9aef662bf6ab7f825d17de893f49f935f52bb58231d912
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-black_scale-200.png
          • Size 1KB
          • SHA256 06c80abf5996c0f80d90db0335ec7d77e756fbbea33e97b399e58eda97be5f77
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-black_scale-400.png
          • Size 4KB
          • SHA256 0048c2fbe78c434315a40c489a6233de3eaac4877d3ab3b87f233de97ef45760
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-white_scale-100.png
          • Size 898B
          • SHA256 d66500db2be2a08e1fbe3c25bfb3f8f92af7c1222ae01d983ff01f28e161a173
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-white_scale-125.png
          • Size 1KB
          • SHA256 684f98e53e6508ade14997324ed729b2dbd54fc95ff0d0cf242a0af2ff87b296
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-white_scale-150.png
          • Size 1KB
          • SHA256 f1758274ecb3b62b6324055d6ebfe894fb022af30d646c26ff75245ffe07e97a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-white_scale-200.png
          • Size 1KB
          • SHA256 969e3c485b450ad929616ae0f64408afb25098a8e32993d92e84a6558d3ad8a3
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.contrast-white_scale-400.png
          • Size 4KB
          • SHA256 2167f453dec79f0f053913908fb0eb74b54342f9f298dffeee339712bae851e4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveMedTile.scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.scale-100.png
          • Size 5KB
          • SHA256 ee57225deb5b003c11d84f099a3cfe378ada230aaa89c6d7fc6334a21ce7dc06
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveMedTile.scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.scale-125.png
          • Size 8KB
          • SHA256 b3ce4ca2c3598012a7815108f0480bfb3b71b834995993a4160752a2577a3b6d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveMedTile.scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.scale-150.png
          • Size 10KB
          • SHA256 a285df7d2be2aad1ff4053c3a95ff0016e23051c48bb17bad83c9fb59d8f41d0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveMedTile.scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.scale-200.png
          • Size 14KB
          • SHA256 c655edecb76d1f95fc64c2742869e54d80f9102a0e0fb8f5824912b7a1f1d6af
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveMedTile.scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveMedTile.scale-400.png
          • Size 48KB
          • SHA256 e472291a236bfad76c209b5785c329dbc094fbd70194c21cffd20fe32ab59a12
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png
          • Size 563B
          • SHA256 5b9b49b6af48eb7551c3dd2a62a6a49ae6740b2b49010bb5b006cf85b4e54f44
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png
          • Size 874B
          • SHA256 37a6ca2212efeb34d8905ea08c81bd6f4cf884e4d009c245927618dd61e50537
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png
          • Size 962B
          • SHA256 c191a3138fdc51ccc4eaf8979f44fc4cff3ab96593e21371845cd7967971efbc
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png
          • Size 1KB
          • SHA256 ee2b6b8103ac0dd5ad593e6b5106df0e8e5f1459682cfc6349d803c5802c2dd7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png
          • Size 2KB
          • SHA256 82d5e6a7643d34d618c7fd2cd38c63a360230a72211619c2ca8d70514b6eff6b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.scale-100.png
          • Size 1KB
          • SHA256 1c1975f56416589fd0aa9add4c44a87c5dfd71ca365630e40e9f64bde6f0e49c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.scale-125.png
          • Size 5KB
          • SHA256 46a6e452b5bf41b9ae867aec03f38bc5970b6c8a3128387b0b4c75cc203db9f9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveSmallTile.scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.scale-150.png
          • Size 6KB
          • SHA256 4e80205d7bff5c25be88be6f21ea5e32a2edbf115cdf4f26751f2a24a3d5c3d2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveSmallTile.scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.scale-200.png
          • Size 9KB
          • SHA256 19d6b52f75aca670c722499bf04a6de7eb9eb6cccdc78f489a73d72417fcf478
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveSmallTile.scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\OneDriveSmallTile.scale-400.png
          • Size 22KB
          • SHA256 ce53878af8d98b9e2e94374841d4be37c6942e6bccde660d05b86d051ef5f078
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosSquare150x150Logo.scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare150x150Logo.scale-100.png
          • Size 21KB
          • SHA256 7b31060527478a8e3ee7910d83fdda8ca59ab4376fe068fd8b0009489551debe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosSquare150x150Logo.scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare150x150Logo.scale-125.png
          • Size 33KB
          • SHA256 6bff72c20aa952b48b297f0086e87f79879ef065923954ae034e82685f013982
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosSquare150x150Logo.scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare150x150Logo.scale-150.png
          • Size 46KB
          • SHA256 997e35af34bbb97f0a55cd8f9d0f8a1a11016f9f145e54b4b4c5b98201620f93
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosSquare150x150Logo.scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare150x150Logo.scale-200.png
          • Size 73KB
          • SHA256 303d1b92d5e84db12c62c59bafdaeb511817f9a96052e0ab4440749ca31e5107
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosSquare44x44Logo.altform-lightunplated_targetsize-16.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.altform-lightunplated_targetsize-16.png
          • Size 768B
          • SHA256 4fe026cd0890165668f2c0597992dd0b79e996496bc125a7beb4c4680d0d3227
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          PhotosSquare44x44Logo.altform-lightunplated_targetsize-24.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.altform-lightunplated_targetsize-24.png
          • Size 1KB
          • SHA256 33ee6f7430e34325f95f9b24679d602c31821587b1310b43e47aa1d6a4334f30
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          PhotosSquare44x44Logo.altform-lightunplated_targetsize-32.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.altform-lightunplated_targetsize-32.png
          • Size 1KB
          • SHA256 9b047e84ca4555b15c9676a39279877367ef130fb2a91e4d255f7624392e3273
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          PhotosSquare44x44Logo.altform-lightunplated_targetsize-48.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.altform-lightunplated_targetsize-48.png
          • Size 3KB
          • SHA256 3f8517132701d52a31520148564d5150ff77ac83943d0ff5a746599f01d5e0b1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          PhotosSquare44x44Logo.scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.scale-100.png
          • Size 2KB
          • SHA256 6b137a3b7ea0be5358c0428acf8081d3cfe613b72951d21e42c9e404a6cfd66e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          PhotosSquare44x44Logo.scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.scale-125.png
          • Size 4KB
          • SHA256 34ebc8f9b3b1477dc09aa418e98cc9c6edaee0002fa1603af4db3b3f58f75776
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosSquare44x44Logo.scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.scale-150.png
          • Size 5KB
          • SHA256 ed32c01317c12d117d84c9394f22e4036ad65b38d62127f075a6b25d1d5adc25
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosSquare44x44Logo.scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.scale-200.png
          • Size 8KB
          • SHA256 c6c927733060f9a181d4c725d70dfd422c48e6137ee07e58e87dbc56542dfaea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosSquare44x44Logo.scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosSquare44x44Logo.scale-400.png
          • Size 29KB
          • SHA256 a10d09f50fe80ba4ae6f9e8bce85b960d1c6b657a74c7dba8d767c70838bdd95
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PhotosStoreLogo.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\PhotosStoreLogo.png
          • Size 58KB
          • SHA256 73f63a98f6721664516f8dd8043e8cb31a1345335f124ddfefaaa9fb83b2980a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Resources.pri
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\LogoImages\Resources.pri
          • Size 18.1MB
          • SHA256 e666f311a75efea5ed9a8ecfd59f43c30ce3acaeb976dc2679b0c5f53ada2967
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft.SharePoint.Calc.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\Microsoft.SharePoint.Calc.dll
          • Size 913KB
          • SHA256 6c442724bb926dd3c640ebe71193fcd3431fa6eb5a94785df0f570ebf4f9e280
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ODResult.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\ODResult.dll
          • Size 50KB
          • SHA256 8e421b61ddaebeeb02ea5e4ea2cfe45670e298dc4b6afbd11703c2a7f35b8646
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDrive.App.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDrive.App.exe
          • Size 1.0MB
          • SHA256 599f09bf30410a6ed6a3169744eea9659a1bd2b27e95c1bfd624ed2f5e184d22
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDrive.Sync.Service.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDrive.Sync.Service.dll
          • Size 48.8MB
          • SHA256 50708fbba7b4ff5c06661b4cba48affa72f83a25d76cd6ade288a97ad3cea931
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDrive.Sync.Service.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDrive.Sync.Service.exe
          • Size 944KB
          • SHA256 30e3f7aada1736e4d5b8e6a4a1b13628b6975fea6fc80c06924d0a08d71183ac
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDrive.VisualElementsManifest.xml
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDrive.VisualElementsManifest.xml
          • Size 344B
          • SHA256 d21077ad0c29a4c939b8c25f1186e2b542d054bb787b1d3210e9cab48ec3080c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDrive.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDrive.exe
          • Size 4.5MB
          • SHA256 12af128465c744b7b782607647a93d9fada46d61ffe4035b40bb64996c1fb798
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveLauncher.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDriveLauncher.exe
          • Size 847KB
          • SHA256 101aefd7c0575bd18cfc78f2944f8ba2afe7f1a302e4090895585488a53306c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveStandaloneUpdater.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDriveStandaloneUpdater.exe
          • Size 4.2MB
          • SHA256 a1d442d41a1e2af5fa8f51ff274e41a7e0b665a07a87268371f3ada231161c4b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveTelemetryStable.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\OneDriveTelemetryStable.dll
          • Size 2.4MB
          • SHA256 27623667568bd4b828e72411adb3568a0b0ff47002f476f93d961f3c4537bb55
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Telemetry.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\Telemetry.dll
          • Size 1.1MB
          • SHA256 8abef49f7b8064f92b4a9f72d1ace4cb5f2a9744c44f0e250056d845ba01679b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UpdateRingSettings.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\UpdateRingSettings.dll
          • Size 775KB
          • SHA256 308e2736cbd70a682159e108c20fefd3287b5af0edd0c9d542f79fddc6659eb7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140_1.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\VCRUNTIME140_1.dll
          • Size 36KB
          • SHA256 c89507ae76de027c75cccc61aad927cdfb102d38e717a62894b349784fab72b5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nso-ZA.json
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\WebAssets\static\strings\nso-ZA.json
          • Size 68KB
          • SHA256 c297fec8c318d64d28fef95163d4663938516ab3666acad3f2dcaf5e76fd5562
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msvcp140.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\msvcp140.dll
          • Size 530KB
          • SHA256 eaaf3063c345f87ada01b29862c8a507f700cce499bcce36211b4f863e3dd64f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msvcp140_atomic_wait.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\msvcp140_atomic_wait.dll
          • Size 37KB
          • SHA256 7f71fc8b897cbbc4c195b39119e2ae9196c091c2e07ac4cd02c2ac24edabca2f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          localizable.json
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\nso-ZA\localizable.json
          • Size 4B
          • SHA256 e3566b3a06430868d71e9287dfd6c6c520a3da027aabea01951d407ee131dc2f
          • MD5 SHA1 SHA512
          Submit Download

          od4-localizable.json
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\nso-ZA\od4-localizable.json
          • Size 179KB
          • SHA256 ad8093883c02f6cc218bef464ae500cc44490212511884336964c8d67fca7365
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vcruntime140.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.173.0906.0008\vcruntime140.dll
          • Size 110KB
          • SHA256 a755969aa2347b4c6a46bda7867b82b3cce8f2d5832860bafc05c3624a414353
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft.ListSync.Thumbnails.db
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\ListSync\Common\settings\Microsoft.ListSync.Thumbnails.db
          • Size 832KB
          • SHA256 536ffda0df7777427e82176b7f3d6b0fb4b99056993a5d884a0210f5e24287b5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft.ListSync.Thumbnails.db-wal
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\ListSync\Common\settings\Microsoft.ListSync.Thumbnails.db-wal
          • Size 64KB
          • SHA256 399bc766491050a459138dca10eb9b12d1257902f78bf2fc3da31b1acfb6acc4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft.LocalContent.db
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\ListSync\Common\settings\Microsoft.LocalContent.db
          • Size 368KB
          • SHA256 1d994e8dd397e2fe3f112e5456e79e3ab7b3a00981e59b87cfadd0fa575e40a9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft.LocalContent.db-wal
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\ListSync\Common\settings\Microsoft.LocalContent.db-wal
          • Size 36KB
          • SHA256 d625e2e07a5bff8de37d7d1736e885bf3a1751dea5394b753127a260ed0a5c47
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Microsoft.ListSync.Settings.db
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\ListSync\UnAuthenticated\settings\Microsoft.ListSync.Settings.db
          • Size 16KB
          • SHA256 fa13ea501592cf20ba29883f4a7a9c9bf51c394835a48e76cb2e3323ce08881d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PreSignInSettingsConfig.json
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\PreSignInSettingsConfig.json
          • Size 103KB
          • SHA256 35f8d4b630c64d576dfcb357bfc12d548036b7a1aa7990e8926ae5a0d3698c25
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Update.xml
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\Update.xml
          • Size 899B
          • SHA256 af304f35f3e4cfe50351323484b4c0e3c5c4166e275c83434fab0f16e975e595
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          telemetry-dll-ramp-value.txt
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\logs\Common\telemetry-dll-ramp-value.txt
          • Size 12B
          • SHA256 9dc5a9e2a0093ab9a71a2103a2a3f73b89598356944046c69dd36166cb12e774
          • MD5 SHA1 SHA512
          Submit Download

          OD4UpdateRingSettingsCompactCache.txt.tmp
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\OD4UpdateRingSettingsCompactCache.txt.tmp
          • Size 10KB
          • SHA256 59024323ad4d30b3fb04b80d564f630bb849b20346c13c2727a55b3eb29e8d54
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          desktop.ini
          • Path C:\Users\Admin\OneDrive\desktop.ini
          • Size 96B
          • SHA256 f625a1050e8ba6df4de974c2acc572e1e637a3429bf2ee1449c552999a6c7268
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/3440-3772-0x000001C842E10000-0x000001C845EF6000-memory.dmp
          Download

          memory/4312-3614-0x000002A35ED60000-0x000002A361E46000-memory.dmp
          Download