Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
25/08/2026, 07:37
General
- Target Microsoft.Web.WebView2.Core.xml
- Size 566KB
- Sample260825-jf2fdst1ft
- SHA256 d2e44139c2e8e30fecb99112516964143be130c58960a2c65cabc6a2a7c35ca0
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Microsoft.Web.WebView2.Core.xml"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3044-0-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-3-0x00007FFD5747F000-0x00007FFD57480000-memory.dmp
memory/3044-4-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-2-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-1-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-5-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-6-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-7-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-8-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-9-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-10-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-12-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-13-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-11-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-14-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-15-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-17-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-18-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-19-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-16-0x00007FFD17460000-0x00007FFD17470000-memory.dmp
memory/3044-21-0x00007FFD57320000-0x00007FFD57583000-memory.dmp
memory/3044-20-0x00007FFD57320000-0x00007FFD57583000-memory.dmp