Overview

overview

7

Static

static

3

2026-11-01...ar.exe

windows10-2004-x64

7

2026-11-01...ar.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    125s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 12:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-01_a5ebc35cb453b14a3bbf3d4233468b71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
  • Size 1.2MB
  • Sample261102-px85fswt7j
  • SHA256 5a07b0721b87b186d49018b8cbd3d8ea4f3913fa407c05b574ed31c58153c1f1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-01_a5ebc35cb453b14a3bbf3d4233468b71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-01_a5ebc35cb453b14a3bbf3d4233468b71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe"
    1⤵
    • Drops file in Program Files directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Users\Admin\AppData\Local\Temp\2026-11-01_a5ebc35cb453b14a3bbf3d4233468b71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
      C:\Users\Admin\AppData\Local\Temp/2026-11-01_a5ebc35cb453b14a3bbf3d4233468b71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:2956
      • C:\Program Files\Java\jre-1.8\bin\javaws.exe
        C:\Users\Admin\AppData\Local\Temp/2026-11-01_a5ebc35cb453b14a3bbf3d4233468b71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        PID:832

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ADelRCP.exe
        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe
        • Size 855KB
        • SHA256 fe8540604fe87a8c05dfc0e5065bf518718b01be9448790f51a1f8631d265a99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wow_helper.exe
        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe
        • Size 827KB
        • SHA256 08633cadef9d521d0a577808b41c9f8d1d2ad98e3498842746fd057d4b7722ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AdobeARMHelper.exe.ico
        • Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe.ico
        • Size 3KB
        • SHA256 2f33dacaebb8bdf6d2d88550cce349c09b51dfeb4f499796f32bd30e14aab86c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        jaureg.exe
        • Path C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
        • Size 1.2MB
        • SHA256 b26909e55cabcb62db5da25bd47c17cc04d2ef9b166a365a0731560b19c60939
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msinfo32.exe.ico
        • Path C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.ico
        • Size 3KB
        • SHA256 5d7967695bef88a64140c541a09f22b45abe542c2df462d800e72e1d8e121d28
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DisabledGoogleUpdate.exe.ico
        • Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.ico
        • Size 3KB
        • SHA256 2e039a7ce5af3783a3d522d27112bfe7a1dac319ed5061de3bef89790d5ad63e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ie_to_edge_stub.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\BHO\ie_to_edge_stub.exe
        • Size 1.2MB
        • SHA256 12f70d5b7d014d2477e1f09e56436b967f4fd4aef686b4c0e6c0cfc5f980689d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedgewebview2.exe
        • Size 4.1MB
        • SHA256 765bafd29418a5b2af38f086ee66fbaf65cef8d25ccb818b71dc78c9a4ed72f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe.ico
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedgewebview2.exe.ico
        • Size 3KB
        • SHA256 61197ae03a1910353d202dffcc2271af59a9c26150652fbc6a84806cef420176
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pwahelper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\pwahelper.exe
        • Size 1.8MB
        • SHA256 47118b77cda85ccef26e5dc0ae004aaafc67cebf615c177acb1000c2229dee17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ie_to_edge_stub.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\BHO\ie_to_edge_stub.exe
        • Size 1.2MB
        • SHA256 ae1fd0b2912cc35ac44218b4ccb0fe3e445768ed81a5e5173bcc0688f7433936
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Installer\setup.exe
        • Size 7.7MB
        • SHA256 889e8bac99523466cda15baa8e532aec7ff55a85432e1674e1c02e724bf0c7ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        identity_helper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_helper.exe
        • Size 2.1MB
        • SHA256 237101fe16d12484b81528e0f69a56df946c9a000e7ee256347e7405dc9d99e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\notification_helper.exe
        • Size 2.3MB
        • SHA256 58d15afa90ca19dd0efb7f737cece3dff58cd60907a74887faef50d9627d5279
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Installer\setup.exe
        • Size 7.5MB
        • SHA256 486544efee0486aaa6b1974979d9594cb325dae4809b027a98d56063a48742b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cookie_exporter.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\cookie_exporter.exe
        • Size 836KB
        • SHA256 c114c19675b576d71459cbf8ad61cab3a88261d8a8ddfc9b8f7a5a7ef70ecdb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge_proxy.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedge_proxy.exe
        • Size 1.9MB
        • SHA256 2fe7ca2072f8c71c76a9922ddfea49410ef6d8d606a7346672ae493625f02c47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe
        • Size 4.6MB
        • SHA256 25b534d090b2d3db118c850c73815b0557db293830f1efe3195911b9cf62e947
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge.exe.ico
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe.ico
        • Size 3KB
        • SHA256 4785d266a2c476e0948100ea80f927d16389f7718b540daf0488457ba01958b0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        msedge_pwa_launcher.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_pwa_launcher.exe
        • Size 2.5MB
        • SHA256 2316b4d8c149bc3433b26c8ccb76cc1a5d920979e6702d47bf8c78f8211fa71c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedgewebview2.exe
        • Size 4.1MB
        • SHA256 338bbb23197acaa7b9c4c3ef3b8fc3fec7e19cd40c29ad86eefb95164ba9b8ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pwahelper.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\pwahelper.exe
        • Size 2.1MB
        • SHA256 163ad62a337b9105001e358dfc468a2cfcf81ae77abc4cfde29b5723d24df4db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wab.exe.ico
        • Path C:\Program Files (x86)\Windows Mail\wab.exe.ico
        • Size 3KB
        • SHA256 ce19242fbf3efc4fe158fba6ad17e913a57a5fe53166f47dc8e5faa5a9f90a03
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        wabmig.exe.ico
        • Path C:\Program Files (x86)\Windows Mail\wabmig.exe.ico
        • Size 3KB
        • SHA256 88c0094fb49858d277e6e56c8c1023bf93356b7d3fc8e037b355d21aa1c7bd34
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ImagingDevices.exe.ico
        • Path C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe.ico
        • Size 3KB
        • SHA256 c76b2392ae75384d2097bd890c529cc5636350476c9a001ee1a055430c8f1c86
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        7z.exe.exe
        • Path C:\Program Files\7-Zip\7z.exe.exe
        • Size 716KB
        • SHA256 fae77bebc7b381071aa472e6661c3f478c289c2c9d79b3e518236b8793227c3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        7zG.exe.ico
        • Path C:\Program Files\7-Zip\7zG.exe.ico
        • Size 3KB
        • SHA256 8cad493433ec34a34ca6f4fd49655aaf7cbb4337752743804db83ea6c050d1fe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OfficeC2RClient.exe.ico
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.ico
        • Size 3KB
        • SHA256 19306f3f899e8bae15a744924f1ebf2ce88624f5dd297e3993645fe8453adaa9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        appvcleaner.exe.ico
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe.ico
        • Size 3KB
        • SHA256 463b6e99198762de39ea3c9156504527673355f452c17063d0fcc34caa3cfded
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        setup.exe.ico
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe.ico
        • Size 3KB
        • SHA256 3d275500cf3ebda5e878d81dcbbaa53528397ccbe631aae8fae60de1ffefccf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ielowutil.exe.ico
        • Path C:\Program Files\Internet Explorer\ielowutil.exe.ico
        • Size 3KB
        • SHA256 dd8074940b2a1e8d0ad513e7c6e2a0d0b11a857893f11dc77387800ca272e970
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        javaw.exe.ico
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe.ico
        • Size 3KB
        • SHA256 6c3d33a5119708abbf19b802f0908183037cd57a6394e45b7b234a76ef4b46c5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CNFNOT32.EXE
        • Path C:\Program Files\Microsoft Office\root\Office16\CNFNOT32.EXE
        • Size 962KB
        • SHA256 06edd5978be8b5d7902a95f94a065332607e76a4ebd03b731e2f12bd24184747
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IEContentService.exe
        • Path C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe
        • Size 1.1MB
        • SHA256 ad2f07d01829a48df127475e8f51c8c53124fdf77753e8e8fdf17f64ef6d02d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NAMECONTROLSERVER.EXE
        • Path C:\Program Files\Microsoft Office\root\Office16\NAMECONTROLSERVER.EXE
        • Size 862KB
        • SHA256 cc81dfe7d57df3d414c347474d16a4a8ddac058bb67617ac3bb8bbcafbbeb883
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PPTICO.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\PPTICO.EXE.ico
        • Size 3KB
        • SHA256 3b07d1aaa1c9c27082d7811d694aae3d422d5d965a91b2d4b8ecda3a79f760a2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        WORDICON.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\WORDICON.EXE.ico
        • Size 3KB
        • SHA256 5bd706a18e0cf54197df7f1d5239f3e058652bfde372afcab230ee9b95ba14a5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        excelcnv.exe.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.ico
        • Size 3KB
        • SHA256 6454633b8c6a69aad48c3fc556c5e81cb5362db0c449b3f543bddfa41eba8d6b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FLTLDR.EXE
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\FLTLDR.EXE
        • Size 1.2MB
        • SHA256 0e9f21ade2f4fc72360af73cc940d6e3a911ea53cdd8658328675ed567d37f27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSOICONS.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOICONS.EXE.ico
        • Size 3KB
        • SHA256 df2cca9b322f9432b3f3aa7b91a12dd5f22fd50e589e3107e066d99bdb071176
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MSOXMLED.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE.ico
        • Size 3KB
        • SHA256 063c8f44d23e1ebbe390ea320eee672c449f47333120b7abbd4a78094c613113
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DATABASECOMPARE.EXE
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\DATABASECOMPARE.EXE
        • Size 910KB
        • SHA256 bae749a87fb31719c908685fe20804f87d9f9cef49d25deeafd48c43fd7d87a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dbcicons.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe.ico
        • Size 3KB
        • SHA256 b2a350ffac5074add67fe974467351777915de5a319be7879ba15d1f6915a092
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        joticon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\joticon.exe.ico
        • Size 3KB
        • SHA256 f4c419b2d60ebe6dc173b36b108855b1f4db9c28fda291f4d93ac38e6dd24389
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        osmclienticon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe.ico
        • Size 3KB
        • SHA256 b76444a386ad024bd78ee152f0f6ad2d5dd3b9ed478147014e5d804e7a9e6508
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        outicon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\outicon.exe.ico
        • Size 3KB
        • SHA256 98d0a0fe25fa36309c0bbe62f04a561a1e02d51a4dc2c8331b9b3c2e47387f5f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        helper.exe.ico
        • Path C:\Program Files\Mozilla Firefox\uninstall\helper.exe.ico
        • Size 3KB
        • SHA256 44ae793c391e8578709e181e83cb820caaa10c08844440885d969a6c839b8a2b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        updater.exe
        • Path C:\Program Files\Mozilla Firefox\updater.exe
        • Size 1.1MB
        • SHA256 43a10b906237e8ce3126277709ee7f95db0768fd11ec5adb12f514d2f4cd5221
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vlc-cache-gen.exe.ico
        • Path C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe.ico
        • Size 3KB
        • SHA256 3b17b29b6c4e39fc36571f8e0795eae6559637529602ae7a37d5f8f6254d0500
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MpCopyAccelerator.exe.ico
        • Path C:\Program Files\Windows Defender\MpCopyAccelerator.exe.ico
        • Size 3KB
        • SHA256 02221d573edefa486ba8fe5aee3c8a10c8c7e3188914c0f22df06bb1338db790
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MpDlpCmd.exe.ico
        • Path C:\Program Files\Windows Defender\MpDlpCmd.exe.ico
        • Size 3KB
        • SHA256 9e3f1f8e5166514df44b02a1e0bf7474708dafba161e263cff087af62ba89ae5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        wmpconfig.exe.ico
        • Path C:\Program Files\Windows Media Player\wmpconfig.exe.ico
        • Size 3KB
        • SHA256 a32208cf5c16d7223999e6ecf1c185bc88d519483ff56ad5ca5f2cc00e677307
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        integrator.exe
        • Path C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
        • Size 7.3MB
        • SHA256 26abc5ee3a38c17432ef122f10242fc80b40d5147f3b7d6fb0049e3ca967828a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcredist_x86.exe
        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
        • Size 1.1MB
        • SHA256 3f791814ea65ede7225741a090a0ccd51b299661152660dc9e85ada87fa5beba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcredist_x86.exe.ico
        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.ico
        • Size 3KB
        • SHA256 6ed1664d7718a68084ea1a4abb1d9621a6ae8da8e19db35cfca13aaa4c05eb33
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        VC_redist.x86.exe
        • Path C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe
        • Size 1.3MB
        • SHA256 1162de2becbcacea298b2ad50924b3df78799c11b30476ed875f836d0d860678
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VC_redist.x64.exe
        • Path C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        • Size 1.3MB
        • SHA256 274344b368a3dc65a0ee925d21c5c4591f5c069c6349ec35c6f72e2de2b67c00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcredist_x64.exe
        • Path C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
        • Size 1.1MB
        • SHA256 d92ef524097ad9b26cc3415cbcd19c7da40349e83882905ed429d834a3948170
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        windowsdesktop-runtime-7.0.16-win-x64.exe
        • Path C:\ProgramData\Package Cache\{ef5af41f-d68c-48f7-bfb0-5055718601fc}\windowsdesktop-runtime-7.0.16-win-x64.exe
        • Size 1.3MB
        • SHA256 da4d11fec88ec15877173d859a1659b19c525b5e4bc42091234d0a92c7b4ae98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneDrive.exe.ico
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe.ico
        • Size 3KB
        • SHA256 3a2d7fd9799178af58fbd08a2fffc56398cbf289c7ddd5c5f0fb2e241395261e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 902d92a1307b71d97881eaaac293b4a3adb054b05b8f0f3b71bce77ad6e72077
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e82f70dd6709ac7f81972551dd69691702c09262ebaa0fe4d5fb17f23b042457
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 40701c84d2f4e73342dd95e2f49d9ade88a16228719c0f4259c7f58e3dc02d58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 88313254661e28419605898c052b60a42ac5a2385ec419eb562a12228648d6d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 81aae037086b0255e1375c25d016dfe55119a1a77e1b17c32abb2c3a6f4a52f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d74f9b496e9d19860000f20bcf4f4057d29d8b1e77f07c21ca41b10cf9e45368
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2b3e07eb7f9e35b36fa8224bd16830923f1659d22c2ea8779b1375e26135c691
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2ebce66ac4033f21e6e66d7c867ec9efbe75175740e97b730edd5c281a4691a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9afdb290ff493e577892191e1fc14dd517530954229edd5006d32ec110f0e1c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 94ed747e77f7ae8edc01eaf26b48895cdd64c25033655ac7e1c7133962c742ba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2b24dfa85d24a5eb892f6f7cdaee0a69d685b5578b49612ee018501b091e814c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e59c8fe949b28ff1673e52c22c896b1ce851eccaea04f6b980cc10f2ffc8e3e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 06b4db46a7fb379e7c847795101c8ef986e677a27358a958bc99c1bb82255cda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b0ec7b88232b4fa114ebdc214663d81f5c6d246e617ca066dce89c7cf81d4c5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2a7a724227c2f31ea535ea5d4ab1184dc39b8d0dfca14c00aa01cec9b91a3d92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 0e91883c9e3f47adedc0ff6ae68e1483878903e3a8b6f47f4a67c7edf571e67d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d59c9808388106d95de14606582d3000879d42ad1342757fdcfdf7f562d0f131
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9cd9d87f4c0a245b81cf97c5ccf887478109e4bb859bc677d0c00f19cbced541
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c0d25b2eac7da2f8dd55cf4ef86ef442764f2f36a9d8f1ee9138edfca714989c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 81bb7642970476d23df3a537303fd02a08adb49488272e8bdca69381d22f1292
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 1cbdf0fc77e0af867d3b8c290478b7b8ab4c78107d4d055cedb5ee7d7544fb53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8f1788578ef672a4698cfe9c3dae96a4eafae1c15d5bbf270feea5a09a282f74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b94bb383e40c55cad15e81514579031c6507a188e0451c755480e14b468b882c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 286e7d9a08f1c71dd94f9ff8395cbf096a6a4d3934869e934961e5a23424a9ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 f30598805fc71c35934074f8c06b27afc41846820580a5749ba9427deda93c19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 ea6fea582b19e5c70b1a7eeed7243c030c2b1cbe7573c360d356491d8d9e5557
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 037ae8e03c7426f0cba4da30f6f77d37fb12f99ee0ae23f455c157e5482fb97f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d521e09ecad993e1a1cddb0e01e3849868b19c10bfd9215be117bfd58653f785
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9e2a3804226abc97b52f8b6fbba15939f15e4d27202098c2d81910f990abb91d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e86a0a71198b78cb51169ea0d3eaf23684c95ff5f65c5f2aaba6d90d8fb3b634
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 21bab98777dfcfe5efa3ec1ad0848cd5d183d3a05519cb71951284ab5dbea12b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 fb522692ea710dfa5f88cfa69ffe91577520604b06991945afc39a42ec4ec9a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 bd6ae604afb7be8b19fa794d145b2da358fbebfaf8d1bda9a3e817c9cbb5e143
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e8ca99e154ba115233ff9f85552eab6cfbb0081414672a4e2c5cfa27c2dfc45a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 aec5489d2f30d97902b2a0379c9d574f1eb9a45310877127aa1107dde8ec30a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7974eb1c2a8b3aa8dc515e90389aa5a978bf391a1f797bb55c510576da5c3562
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d7c5dfb5df177a9dc2a43daa239e7bc9fa3317d658aba8652e164318375fae24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 dc4bd455af0ab6518a6a3595441d602436242dc8240e3d2a04048412f8158260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 7fc2a99b0614ebc4f2ec61445d43d7b44ddb0ce60e050ac7ae7450038f622d10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c92431a1a1f9c1b7c346ccfa0a2994ae4e49b941d87038cdfdffb426cd35548a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e6efaef3f8d07e3a29a63d05cb891ddd5b82befe00afd665360032f3253b88c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c8c122f8b83bfcd4c8dc8fcd4d8cc0a218657736448334ad4d68c5d9a8a2799e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2026-11-01_a5ebc35cb453b14a3bbf3d4233468b71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
        • Path C:\Users\Admin\AppData\Local\Temp\2026-11-01_a5ebc35cb453b14a3bbf3d4233468b71_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
        • Size 472KB
        • SHA256 d5ac3096ab0c328214ecd592bf43dccbaecb3816dd08061f04a144af2e613951
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2292-1020-0x0000000000400000-0x00000000004D5000-memory.dmp
        Download

        memory/2292-0-0x0000000000400000-0x00000000004D5000-memory.dmp
        Download