Analysis
- max time kernel
599s - max time network
451s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
14/07/2026, 04:08
General
- Target Microsoft.Web.WebView2.WinForms.xml
- Size 40KB
- Sample260714-eql18sgs7t
- SHA256 96e468637ee3322db9851e38c0a3d7c32f0d11f60566b47ace2c91ec66179ac8
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Microsoft.Web.WebView2.WinForms.xml"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4328-2-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-0-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-1-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-5-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-4-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-6-0x00007FF86B560000-0x00007FF86B7C3000-memory.dmp
memory/4328-3-0x00007FF86B6BF000-0x00007FF86B6C0000-memory.dmp
memory/4328-8-0x00007FF86B560000-0x00007FF86B7C3000-memory.dmp
memory/4328-7-0x00007FF86B560000-0x00007FF86B7C3000-memory.dmp
memory/4328-10-0x00007FF86B560000-0x00007FF86B7C3000-memory.dmp
memory/4328-9-0x00007FF86B560000-0x00007FF86B7C3000-memory.dmp
memory/4328-11-0x00007FF86B560000-0x00007FF86B7C3000-memory.dmp
memory/4328-15-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-17-0x00007FF86B560000-0x00007FF86B7C3000-memory.dmp
memory/4328-13-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-14-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-12-0x00007FF82B6A0000-0x00007FF82B6B0000-memory.dmp
memory/4328-16-0x00007FF86B560000-0x00007FF86B7C3000-memory.dmp