MB-35d09719b7c7db250495b84eda81e59862199019b3012d5ec3ea3d60144215b5
high
📛 Threat Title
Unknown: CrimsonMods.msi
Description
File type: msi. Size: 19836928 bytes. Tags: msi, signed. Reporter: AmadeyHunter. First seen: 2026-09-23 23:13:47.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
35d09719b7c7db250495b84eda81e59862199019b3012d5ec3ea3d60144215b5
IOC database
- Type
- hash_sha256
- Value
35d09719b7c7db250495b84eda81e59862199019b3012d5ec3ea3d60144215b5- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
eb70aa3cfab12c6e4e0ac4548892e6d34522745e
IOC database
- Type
- hash_sha1
- Value
eb70aa3cfab12c6e4e0ac4548892e6d34522745e- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
e63458f5ac83360f9ed6cbbe00957591
IOC database
- Type
- hash_md5
- Value
e63458f5ac83360f9ed6cbbe00957591- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: msi. Size: 19836928 bytes. Tags: msi, signed. Reporter: AmadeyHunter. First seen: 2026-09-23 23:13:47.
Remediations (10)
-
web:any.run
Online sandbox report for crimsonmods.cc, tagged as stealer, verdict: Malicious activity
-
web:crimsonmods.cc
Installation Tutorials Learn how to install and use our game mods with these step-by-step guides
-
web:feedly.com
CVE-2026-94044 is a path traversal vulnerability in the create_file function of the 03-lovepreetSingh MCP project. This flaw allows remote attackers to manipulate file path arguments, potentially accessing unauthorized files. The project lacks versioning, so specific affected versions are unknown . The vulnerability has a medium severity score of 6.9 and an exploit is publicly available. The ...
-
web:forum-en.msi.com
9-3-26 MSI MPG X870E Carbon Wifi Bios 7E49v1AA7 Description: - AGESA PI-1.3.0.1d updated. - uCode update for security issue mitigation . Please elaborate/clarify this description.
-
web:github.com
A comprehensive collection of Microsoft Intune remediation scripts and configurations designed for enterprise endpoint management, device compliance enforcement, and automated system fixes. This repository provides production-ready PowerShell scripts that integrate seamlessly with Intune's remediation framework.
-
web:learn.microsoft.com
Learn how to deal with unwanted mitigations in Windows Security, including a process to remove all mitigations and import a baseline configuration file instead.
-
web:learn.microsoft.com
Learn more about Remediations in Microsoft Intune, including what Remediations are and view any prerequisites and licensing requirements. Also, learn how to deploy built-in and custom remediation scripts, and learn how to monitor your scripts.
-
web:maltiverse.com
CrimsonMods.exe is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-05. IoC context and downloadable threat intel on Maltiverse.
-
web:panorays.com
Discover the difference between remediation and mitigation in risk management and how each strategy impacts security and resilience.
-
web:www.nexusmods.com
View CrimsonMods's Mods, Collections and Media If the issue persists, please contact our support team Check status page
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.