Vid-20230123-wa0113mp4 Apr 2026

f1e9... (unique digital fingerprint used by security researchers to identify this specific variant).

Periodically taking captures of your desktop activity. VID-20230123-WA0113mp4

New, unrecognized entries in your Windows Startup folder or Registry keys designed to keep the malware running after a reboot. Recommended Actions If you suspect your system is compromised: VID-20230123-WA0113mp4

The malware uses "obfuscation" to hide its code from basic antivirus scans and "process hollowing" to run its malicious code inside legitimate Windows processes. Indicators of Compromise (IoCs) VID-20230123-WA0113mp4

Immediately stop the malware from sending your stolen data to the attacker.