MB-a37192f8055bb5a3ae93f873c50f688fea2e01a8124732e7cb285498908fab35
high
📛 Threat Title
Unknown: WatchWithMe-1.4.20.0.exe
Description
File type: exe. Size: 154984621 bytes. Tags: exe, stealer. Reporter: nextpro. First seen: 2026-09-23 23:34:26.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_imphash
b34f154ec913d2d2c435cbd644e91687
IOC database
- Type
- hash_imphash
- Value
b34f154ec913d2d2c435cbd644e91687- First seen
- Last seen
- Attached to this threat
- Appears in
- 162 threats
- Description
- imphash of URLhaus payload 6b10f4383fd8de21…
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
a37192f8055bb5a3ae93f873c50f688fea2e01a8124732e7cb285498908fab35
IOC database
- Type
- hash_sha256
- Value
a37192f8055bb5a3ae93f873c50f688fea2e01a8124732e7cb285498908fab35- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
b75fe39979606f50cc37d2beec2600f8233e7d55
IOC database
- Type
- hash_sha1
- Value
b75fe39979606f50cc37d2beec2600f8233e7d55- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
1759ae5a79be4edb1a3a3e440cb3b4b8
IOC database
- Type
- hash_md5
- Value
1759ae5a79be4edb1a3a3e440cb3b4b8- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 154984621 bytes. Tags: exe, stealer. Reporter: nextpro. First seen: 2026-09-23 23:34:26.
Remediations (10)
-
web:github.com
A comprehensive collection of Microsoft Intune remediation scripts and configurations designed for enterprise endpoint management, device compliance enforcement, and automated system fixes. This repository provides production-ready PowerShell scripts that integrate seamlessly with Intune's remediation framework.
-
web:github.com
The script provides two main functionalities: detection and remediation of built-in apps. By default, the script runs in detection mode, but it can also be configured to perform remediation .
-
web:learn.microsoft.com
Block known vulnerable app versions as a mitigation step in Microsoft Defender Vulnerability Management. Learn about prerequisites, block and warn actions, and how file indicators prevent execution while remediation is in progress.
-
web:learn.microsoft.com
Microsoft Defender Vulnerability Management allows you to remediate vulnerabilities discovered in your environment through actionable security recommendations. You can create remediation requests that your IT administrator team can use to remediate vulnerabilities using Microsoft Intune.
-
web:malwaretips.com
This guide teaches you how to remove Unknown .exe virus for free by following easy step-by-step instructions.
-
web:panorays.com
Discover the difference between remediation and mitigation in risk management and how each strategy impacts security and resilience.
-
web:scloud.work
When a proactive remediation script fails to work as expected, it's much faster to test it locally than wait for the next sync from Intune. In this post, I'll show you how I troubleshoot Intune remediation scripts directly on a Windows device. This includes script locations, relevant logs, and registry entries that help verify what happened and why. For some samples and an introduction to ...
-
web:windowsforum.com
Practical mitigation and remediation guidance If you're responsible for a PC, workstation fleet, or enterprise environment, the following prioritized actions will reduce risk quickly.
-
web:www.isitpatched.com
Check any software version against known CVEs, active exploitation (CISA KEV), EPSS probability and end-of-life dates. Get a 0-100 health score and the minimum safe version — free, across 649+ products, refreshed multiple times a day.
-
web:www.majorgeeks.com
Windows Defender may try to remove a virus, trojan, or other malware and return a message stating Remediation incomplete. Remediation incomplete leads one to assume that a virus, trojan or malware was found, but not removed.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.