Overview

overview

7

Static

static

3

2026-11-02...ar.exe

windows10-2004-x64

7

2026-11-02...ar.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    125s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 20:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-02_e35a0ca4d60c6c7b09952dd25f7d411e_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
  • Size 1.2MB
  • Sample261102-yzkdjsgc45
  • SHA256 bcbafb082d90bfffbf09b76b01532848c810d5e0e10d7cc2088eeb5890497012
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-02_e35a0ca4d60c6c7b09952dd25f7d411e_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-02_e35a0ca4d60c6c7b09952dd25f7d411e_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe"
    1⤵
    • Drops file in Program Files directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2620
    • C:\Users\Admin\AppData\Local\Temp\2026-11-02_e35a0ca4d60c6c7b09952dd25f7d411e_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
      C:\Users\Admin\AppData\Local\Temp/2026-11-02_e35a0ca4d60c6c7b09952dd25f7d411e_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:5552
      • C:\Program Files\Java\jre-1.8\bin\javaws.exe
        C:\Users\Admin\AppData\Local\Temp/2026-11-02_e35a0ca4d60c6c7b09952dd25f7d411e_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        PID:2064

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AcroTextExtractor.exe
        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroTextExtractor.exe
        • Size 770KB
        • SHA256 e95e6bc0f1bfb8a40b35683d8cd44642ac3eee67057ce0aa039b4ea26db2c2d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AdobeARMHelper.exe.ico
        • Path C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe.ico
        • Size 3KB
        • SHA256 2f33dacaebb8bdf6d2d88550cce349c09b51dfeb4f499796f32bd30e14aab86c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        msinfo32.exe.ico
        • Path C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.ico
        • Size 3KB
        • SHA256 5d7967695bef88a64140c541a09f22b45abe542c2df462d800e72e1d8e121d28
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DisabledGoogleUpdate.exe
        • Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe
        • Size 6.4MB
        • SHA256 3f08c5aba5c1042c73b83eb3004c24f21b309094a6a8635e598295b97cc102f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisabledGoogleUpdate.exe.ico
        • Path C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe.ico
        • Size 3KB
        • SHA256 2e039a7ce5af3783a3d522d27112bfe7a1dac319ed5061de3bef89790d5ad63e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ie_to_edge_stub.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\BHO\ie_to_edge_stub.exe
        • Size 1.2MB
        • SHA256 1d94ca3fe57a33ee5300f8152b983989bc0bd8f3052e3cb810e794c58da1b051
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe.ico
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedgewebview2.exe.ico
        • Size 3KB
        • SHA256 61197ae03a1910353d202dffcc2271af59a9c26150652fbc6a84806cef420176
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        setup.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Installer\setup.exe
        • Size 7.7MB
        • SHA256 fb3db0743f3c45e0485f8d5ce7d972e7683856e31dcdf0391907cd90566c5417
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedgewebview2.exe
        • Size 4.1MB
        • SHA256 ff322a3d031145c96008dbe5e98528cb7d500b883eda118302fa573c0e72d300
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\notification_helper.exe
        • Size 2.3MB
        • SHA256 0c793c7e95216c266e62bfad8cddd3589bf156489c6a2f22fef1311c23c747b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateComRegisterShell64.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.185.27\MicrosoftEdgeUpdateComRegisterShell64.exe
        • Size 940KB
        • SHA256 62e757dc1366062965ed59602decac5f2f6742abd417c6d85a600bac6b3d7c30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateComRegisterShell64.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdateComRegisterShell64.exe
        • Size 939KB
        • SHA256 5fe45a90d887bc089d5108711d2eaf70bdb4a544674f5c68341cbb5055671d70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MicrosoftEdgeUpdateSetup.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdateSetup.exe
        • Size 2.3MB
        • SHA256 575f90f56c3da065879617c2211e519abb08ed145c14baa31df0a91387de8fc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_click_helper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\notification_click_helper.exe
        • Size 2.1MB
        • SHA256 9df2970936a2d21522cb5841502bc3ae1ab49dde3bb7b36f277724a747167d52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        notification_helper.exe
        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\notification_helper.exe
        • Size 2.1MB
        • SHA256 05fb50cd294f51d3458ea093a98739dedfb642b962dbd2ced214bd164e28c93f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        identity_helper.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        • Size 2.1MB
        • SHA256 46a8cf4d482dce18ae26d5d8c7633e5894cb365c2697653f7d66007c58cd7603
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge.exe.ico
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge.exe.ico
        • Size 3KB
        • SHA256 4785d266a2c476e0948100ea80f927d16389f7718b540daf0488457ba01958b0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        msedge_proxy.exe
        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_proxy.exe
        • Size 2.1MB
        • SHA256 b219f862a7b778396c4a06babdd206a1a4738c8300521a39b3a44fe1a76a0325
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
        • Size 824KB
        • SHA256 536352067cf9a412751f59e77ea6012c521510b03c02c7c499226368fbbca656
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wab.exe.ico
        • Path C:\Program Files (x86)\Windows Mail\wab.exe.ico
        • Size 3KB
        • SHA256 ce19242fbf3efc4fe158fba6ad17e913a57a5fe53166f47dc8e5faa5a9f90a03
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        wabmig.exe.ico
        • Path C:\Program Files (x86)\Windows Mail\wabmig.exe.ico
        • Size 3KB
        • SHA256 88c0094fb49858d277e6e56c8c1023bf93356b7d3fc8e037b355d21aa1c7bd34
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ImagingDevices.exe.ico
        • Path C:\Program Files (x86)\Windows Photo Viewer\ImagingDevices.exe.ico
        • Size 3KB
        • SHA256 c76b2392ae75384d2097bd890c529cc5636350476c9a001ee1a055430c8f1c86
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        7z.exe.ico
        • Path C:\Program Files\7-Zip\7z.exe.ico
        • Size 3KB
        • SHA256 463b6e99198762de39ea3c9156504527673355f452c17063d0fcc34caa3cfded
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        7zG.exe.ico
        • Path C:\Program Files\7-Zip\7zG.exe.ico
        • Size 3KB
        • SHA256 8cad493433ec34a34ca6f4fd49655aaf7cbb4337752743804db83ea6c050d1fe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CloseBackup.exe.exe
        • Path C:\Program Files\CloseBackup.exe.exe
        • Size 720KB
        • SHA256 569be54dc5281d179738dc2b193abd60e8c26e3142abff75474925794a491701
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OfficeC2RClient.exe.ico
        • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe.ico
        • Size 3KB
        • SHA256 19306f3f899e8bae15a744924f1ebf2ce88624f5dd297e3993645fe8453adaa9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        setup.exe.ico
        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe.ico
        • Size 3KB
        • SHA256 3d275500cf3ebda5e878d81dcbbaa53528397ccbe631aae8fae60de1ffefccf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ielowutil.exe.ico
        • Path C:\Program Files\Internet Explorer\ielowutil.exe.ico
        • Size 3KB
        • SHA256 dd8074940b2a1e8d0ad513e7c6e2a0d0b11a857893f11dc77387800ca272e970
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        javaw.exe.ico
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe.ico
        • Size 3KB
        • SHA256 6c3d33a5119708abbf19b802f0908183037cd57a6394e45b7b234a76ef4b46c5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CLVIEW.EXE
        • Path C:\Program Files\Microsoft Office\root\Office16\CLVIEW.EXE
        • Size 1.2MB
        • SHA256 04826c5e829b2a1214734f08ce0a678afaf87284692d76eba6de20d93773fac8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GRAPH.EXE
        • Path C:\Program Files\Microsoft Office\root\Office16\GRAPH.EXE
        • Size 6.1MB
        • SHA256 e2b2c9a2807703966f28dcb2981017f310b08d8b40dabad7d272aeb1ade8c669
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PPTICO.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\PPTICO.EXE.ico
        • Size 3KB
        • SHA256 3b07d1aaa1c9c27082d7811d694aae3d422d5d965a91b2d4b8ecda3a79f760a2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        WORDICON.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\WORDICON.EXE.ico
        • Size 3KB
        • SHA256 5bd706a18e0cf54197df7f1d5239f3e058652bfde372afcab230ee9b95ba14a5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        excelcnv.exe.ico
        • Path C:\Program Files\Microsoft Office\root\Office16\excelcnv.exe.ico
        • Size 3KB
        • SHA256 6454633b8c6a69aad48c3fc556c5e81cb5362db0c449b3f543bddfa41eba8d6b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DWTRIG20.EXE
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\DW\DWTRIG20.EXE
        • Size 1.0MB
        • SHA256 52f5dec400ec8f60c1ffe1e35430502a331d969c400e2e4f174e479886cf2744
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSOICONS.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOICONS.EXE.ico
        • Size 3KB
        • SHA256 df2cca9b322f9432b3f3aa7b91a12dd5f22fd50e589e3107e066d99bdb071176
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MSOXMLED.EXE.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE.ico
        • Size 3KB
        • SHA256 063c8f44d23e1ebbe390ea320eee672c449f47333120b7abbd4a78094c613113
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Common.ShowHelp.exe
        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Common.ShowHelp.exe
        • Size 762KB
        • SHA256 11858f656e151903dea23153af3d4bd6f355167593bcf4932350ffe0d18c244e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dbcicons.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\dbcicons.exe.ico
        • Size 3KB
        • SHA256 b2a350ffac5074add67fe974467351777915de5a319be7879ba15d1f6915a092
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        joticon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\joticon.exe.ico
        • Size 3KB
        • SHA256 f4c419b2d60ebe6dc173b36b108855b1f4db9c28fda291f4d93ac38e6dd24389
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        osmclienticon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\osmclienticon.exe.ico
        • Size 3KB
        • SHA256 b76444a386ad024bd78ee152f0f6ad2d5dd3b9ed478147014e5d804e7a9e6508
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        outicon.exe.ico
        • Path C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\outicon.exe.ico
        • Size 3KB
        • SHA256 98d0a0fe25fa36309c0bbe62f04a561a1e02d51a4dc2c8331b9b3c2e47387f5f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firefox.exe
        • Path C:\Program Files\Mozilla Firefox\firefox.exe
        • Size 1.4MB
        • SHA256 6da844bafefef6e206a73c549a6fded775de5f72ffe217ae11b596304033c724
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        private_browsing.exe
        • Path C:\Program Files\Mozilla Firefox\private_browsing.exe
        • Size 788KB
        • SHA256 e37cbc5ec6245f64be1cb5ed3982a79cfacaa5e924618996279f7b220e2a258b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        helper.exe.ico
        • Path C:\Program Files\Mozilla Firefox\uninstall\helper.exe.ico
        • Size 3KB
        • SHA256 44ae793c391e8578709e181e83cb820caaa10c08844440885d969a6c839b8a2b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vlc-cache-gen.exe.ico
        • Path C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe.ico
        • Size 3KB
        • SHA256 3b17b29b6c4e39fc36571f8e0795eae6559637529602ae7a37d5f8f6254d0500
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MpCopyAccelerator.exe.ico
        • Path C:\Program Files\Windows Defender\MpCopyAccelerator.exe.ico
        • Size 3KB
        • SHA256 02221d573edefa486ba8fe5aee3c8a10c8c7e3188914c0f22df06bb1338db790
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MpDlpCmd.exe.ico
        • Path C:\Program Files\Windows Defender\MpDlpCmd.exe.ico
        • Size 3KB
        • SHA256 9e3f1f8e5166514df44b02a1e0bf7474708dafba161e263cff087af62ba89ae5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        wmpconfig.exe.ico
        • Path C:\Program Files\Windows Media Player\wmpconfig.exe.ico
        • Size 3KB
        • SHA256 a32208cf5c16d7223999e6ecf1c185bc88d519483ff56ad5ca5f2cc00e677307
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        setup.exe
        • Path C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\setup.exe
        • Size 1.2MB
        • SHA256 637c0514f2ba3e422d9e469fdb7bd0cba2a1a077874ef4533a87aad1d8a36238
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcredist_x86.exe.ico
        • Path C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.ico
        • Size 3KB
        • SHA256 6ed1664d7718a68084ea1a4abb1d9621a6ae8da8e19db35cfca13aaa4c05eb33
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vcredist_x86.exe
        • Path C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\vcredist_x86.exe
        • Size 1.2MB
        • SHA256 a260b547c4c260d4c57352defaf12cb4d10b649875c65c9ed6054afa2129da25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vcredist_x64.exe
        • Path C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
        • Size 1.1MB
        • SHA256 50095eedaee39501b03ed64e1c2fce05f7a7404b32ec5b9f4176a7034e63fbad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        windowsdesktop-runtime-6.0.27-win-x64.exe
        • Path C:\ProgramData\Package Cache\{d87ae0f4-64a6-4b94-859a-530b9c313c27}\windowsdesktop-runtime-6.0.27-win-x64.exe
        • Size 1.3MB
        • SHA256 e05424573712ebf45626cdc4a7ef4d1c140e00ebc2e5e9c568851a06ceea8109
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        windowsdesktop-runtime-7.0.16-win-x64.exe
        • Path C:\ProgramData\Package Cache\{ef5af41f-d68c-48f7-bfb0-5055718601fc}\windowsdesktop-runtime-7.0.16-win-x64.exe
        • Size 1.3MB
        • SHA256 1c85d76ef90e3832f523bf78cddebf7d95e521255cf065c547ac25529084de9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneDrive.exe
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
        • Size 2.3MB
        • SHA256 783f8f21d899745ccf706100da75b9256ffed0b36e7bc16190e222d4f753f992
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneDrive.exe.ico
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe.ico
        • Size 3KB
        • SHA256 3a2d7fd9799178af58fbd08a2fffc56398cbf289c7ddd5c5f0fb2e241395261e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 5578a483a6066bb8dba626a08a927de2017adacecfcd792953753a68a4650bd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b759bdbbae6286d093ecac269b365e579f6acaa1bba12c5cac40596421c5597f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 fd3743f50e3a195eaf94463eefaab0162177a4d279f12296a7d2d82c042af8d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b6a74ded7fe9f8072cf5743aefa5f9946ae54ba56402729c2db0010c35686dc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e5dbc4fbb9eadc9e8588a4336f841d9a1ae1a0bdafd5d970d9ad323799075390
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 e04d22ab58d37b6d589eeb44d58f6f764288e98e928b0d2dd9f4b398dc28f328
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 0044a22ff259980c9d4c43e267440d0d4dd0083e4fd27a59fc62fb0c76567bb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 c34468358f95d90b40f18c8f6c820eb54bada35887bdf3961eba936dd3889bd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9e65ed21edefbed72f28f087d361f6cb503aa12f4ed6d4ba0d333aef3a9245bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9eda178aa01415f4c5bf201e97be58e1a1b3a9a9b0c975b197fc734d47c0b03a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 ac7a016ddef9552ece5f53c6a9c9af895b52c7112182d5d13fcf825d2c8a96f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 9664d2f6bcc522070cb417366bd801b6d24c85f01ac09ccb31bc5d5c1487128a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 625abef839942fce35ee3827452fefba44635d2934112d290610bd881349dc29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 04436370e780b45abf3ef085a0fe7ab143ac44cfb1578878c433d98ef20407ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 d850f27167b69c0a884ac7bc80c2d75bc91282c801916054e8fafb9d4d88e148
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 8ca7949e87efc1b65f882e583932f87abc244eb16dc09505786cd03e5a70f346
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2a1e3a8ca5d200a199deece6ab953877344da2fd35af5a1bbec6b7621b7fabe1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 b2827b8c8bdb25e754e2f5a4cd9dcec9b377b6d7086eb45230c21c0432dd1545
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 6e8b633187cc7a738a97541662be6df1d4da0d383813970e09b69da0f3fde42e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 cf94d88742b934e23421fcf703b936c7446e0dc539e549c9a2d2f114e5d99832
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 87933341e6209c0770de9b11f4701bc2f062528a158a287a96be9bf54ca78025
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 031cce0261b868da64565eaa320597cd7992bb48bbc54f098b805be33de8b932
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 2a3734787af9df925be9d49852b7e13a41e8055eea6116c722f59ec36ca4dc44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 ecb8fe532080736ad060dc7a579be062f76873492f2ed0ec5244c939d26e95df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 4e6233f1e52f6d79c4726cfb0e9563a2d4751381347f6ea9553e792235766f0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 17a59e0e4499de634c1ae688884e8977a8294ea122d68127c5a4fbb439ed4cef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_idx.db
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
        • Size 56KB
        • SHA256 de75e3e31b4a77c567e09a5de515ed24bee06adbd5e810794a669987b9e480be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        2026-11-02_e35a0ca4d60c6c7b09952dd25f7d411e_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
        • Path C:\Users\Admin\AppData\Local\Temp\2026-11-02_e35a0ca4d60c6c7b09952dd25f7d411e_cobalt-strike_elex_hijackloader_icedid_njrat_vidar.exe.exe
        • Size 472KB
        • SHA256 dbd6f94c3c64d17832b901b072bd2e45cefe9b126ef92a1a45a17139c7482b17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        HideOut.exe
        • Path C:\Users\Admin\AppData\Roaming\RedoOptimize\HideOut.exe
        • Size 1.6MB
        • SHA256 1acea6acc30d5589395c1e1295fb9ab982b9030a843a993f0869fc644d4ad049
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2620-1043-0x0000000000400000-0x00000000004D6000-memory.dmp
        Download

        memory/2620-0-0x0000000000400000-0x00000000004D6000-memory.dmp
        Download