<< Back to Top Threats
K7 Detection Name Affected OS Prevalence AV Definition Version
Suspicious Program ( ID51501 ) Windows Low 11.239.40169
MD5

6133b19c05da7f4750b155025ed8a7d6
SHA256

dd69b7f99569ed54d4e75cd69cc3faf724b7d35ea2d8c196fda7c44bf0890eae
File Size

5,722,414 bytes
Packer Information

N/A
First Seen

04-01-2022
Last Seen

07-09-2026
Aliases

Agent.T

Behavior Details

1. Creates Registry:
Adds data
C:\Users\\AppData\Roaming\iconrdb.exe
under
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\iconrdb

Removal Instructions

1. Update K7 security to the latest version.
2. Open Windows registry editor and delete the following keys:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\iconrdb
3. Restart the machine.