ecf797671dbd73eeaa4e493138c155bbfdbe357a84936ac0973fffa943c708dc

Analysis

max time kernel
148s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 14:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
attachment20261002-278819-w47xrk.pptx
Size 278KB
Sample261002-rneklaszf1
SHA256 ecf797671dbd73eeaa4e493138c155bbfdbe357a84936ac0973fffa943c708dc
MD5 2e327a4a61b7c06167b1259e390a5076
SHA1 800a86674ea621253a52935bbf473319410b9647
SHA512 b0333a4f6ed918702734a2168718cc181aed62688e1a8f84b983e918fb2e8903e59a03903a01801b09786ec09b724715e55b36dde711ac1179ec883f28c8e1ed
SSDEEP 6144:zUTe7QhIGZ7ZXOZdQ+JHbCyVu/WFnbK0aw3TgvHytAWPAMS:zUK7QhllOs+ZbVmCne0aw3Tg6tAWIMS
TLSH
T167545A54887AA14DD0773FB4CBB9A495E771F2A22F0E4E2B019C74702EAFC3AD791845
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	POWERPNT.EXE
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	POWERPNT.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	POWERPNT.EXE

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	POWERPNT.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	POWERPNT.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	POWERPNT.EXE

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2968	POWERPNT.EXE

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2968	POWERPNT.EXE

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2968	POWERPNT.EXE
2968	POWERPNT.EXE
2968	POWERPNT.EXE
2968	POWERPNT.EXE

C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE
"C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" "C:\Users\Admin\AppData\Local\Temp\attachment20261002-278819-w47xrk.pptx" /ou ""
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cab1015.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab1015.tmp
Size 2.8MB
SHA256 a1acf9d982a2531697766e894faab8ad73690e87ec341097fb0f5682e1b76e21
MD5 d7751432d989378ff1072be65d877256
SHA1 90b5bb3eb8b2098e759d52211188b2bdc26e1a1f
SHA512 95a305228692f1accf57220c201172588b866d8a0733bac7eae6a6fbd4de8870b4e984f4b677ad6cc8cf03a64d39b90e05ec4a17277e166af3a5fd8db7a3714c
SSDEEP 49152:qUwqNNZTcomaX/9ImsCnslPrLI6hzr6BifW7JR4uyIpT/hwnXRtJWmMm1vVGoyqP:qvqR5ms9noPrEKzWB0WMuyIpT/hwnXXF
TLSH
T132D5336E9CE93883C8265D1638BC3D5579E794F58F3136A4D791B4888EF229C0B3EB14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab170D.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab170D.tmp
Size 7.8MB
SHA256 8fba95d2c1904dfd921417ce8829fa9198cb650e7b1c0e7344743a7007bc22f9
MD5 9aed2fbbb427d6fa1a4c0d8909cb3f3f
SHA1 2a8bd0bc0b19ea4d194c442a56a4f3c5a5b24846
SHA512 dee6625e3ad33f52a4f9be4386c718901406a1b834c7bd3ca93d2886f61a26427029fd2c7719925ae7c40c8ceed58c2cb0876a3aa0fb73412bce6845188f92fa
SSDEEP 196608:Uu4B2pbfn0wQZOGTHYuFdzCACe9QWPNZKPmMsDfB8D6T:UuTVfn0BcGTHl9Ce9QWPNZKPmHB8eT
TLSH
T1A28633C217260C4DC356A57332E7B2629C30A087392C63BA563F24DE6EC967FDD94678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab3A0.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab3A0.tmp
Size 19KB
SHA256 16c08547239e5b969041ab201eb55a3e30ead400433e926257331cb945dff094
MD5 e3c64173b2f4aa7ab72e1396a9514bd8
SHA1 774e52f7e74b90e6a520359840b0ca54b3085d88
SHA512 7ed618578c6517ed967fb3521fd4dbed9cdfb7f7982b2b8437804786833207d246e4fcd7b85a669c305be3b823832d2628105f01e2cf30b494172a17fc48576d
SSDEEP 384:j3W3yGyjgbA8E0GftpBjEHvFLrHRN7pDAlI66Yv1:j3WFyAA8Pi6HVpDZ66c1
TLSH
T1B19249D2CAACE583DD836C7063D8D9877C3DA7D24D50606A10AAF9D92DC37D5EB0842D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab3A1.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab3A1.tmp
Size 26KB
SHA256 aa03afb681a76c86c1bd8902ee2bba31a644841ce6bcb913c8b5032713265578
MD5 f913dd84915753042d856cec4e5daba5
SHA1 fb1e423c8d09388c3f0b6d44364d94d786e8cf53
SHA512 c48850522c809b18208403b3e721abeb1187f954045ce2f8c48522368171cc8faf5f30fa44f6762afde130ec72284bb2e74097a35fe61f056656a27f9413c6b6
SSDEEP 384:sbUX16g8/atF4NB3TJOvqeMRD/8svIZj/OwgbA8E0GftpBjEYwFLrHRN7mYll7PY:sbhg8yY4nMZK2hA8Pi6Yum4IVR
TLSH
T1F9C27CE5CA7C9083DDD2AC6062D8E9837C3D97C71C00659A605EFAEA29C37C5EB1492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab3B1.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab3B1.tmp
Size 19KB
SHA256 3ee9ae1f8dab4c498bd561d8fcc66d83e58f11b7bb4b2776df99f4cda4b850c2
MD5 4efa48ec307eaf2f9b346a073c67fcfb
SHA1 76a7e1234ff29a2b18c968f89082a14c9c851a43
SHA512 2705644d501d85a821e96732776f61641fe82820fd6a39ffaf54a45ad126c886dc36c1398cdbdbb5fe282d9b09d27f9bfe7f26a646f926da55dff28e61fbd696
SSDEEP 384:KyeISBuydn5rpmp77G8E0GftpBjE/kFLrHRN7ngslI66YVj:KHISBvd5rpmFG8Pi6/6nK666j
TLSH
T108924AE18AB8E983DDC32C7063D8D98B7D3D93D70D20A52A106AF9D82DC37D5AB0851C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab3D2.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab3D2.tmp
Size 30KB
SHA256 f747dd8b79fc69217fa3e36fae0ab417c1a0759c28c2c4f8b7450c70171228e6
MD5 89a9818e6658d73a73b642522ff8701f
SHA1 e66c95e957b74e90b444ff16d9b270adab12e0f4
SHA512 321782b0b633380da69bd7e98aa05be7fa5d19a131294cc7c0a598a6a1a1aef97ab1068427e4223aa30976e3c8246ff5c3c1265d4768fe9909b37f38cbc9e60d
SSDEEP 384:0XbSq3W46TVZb5fOFo1HtZwGqtRT44hS+nyBoiuFgbA8E0GftpBjEcBFLrHRN7Ku:0XpOflfOFo1DMr/iuuA8Pi6cfKjW66b
TLSH
T11FD29DE19AB8D582DDC3AC6063A9D8877D3D97C31D4064A7525AFAD92DC33D4B30892C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab5C7.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab5C7.tmp
Size 442KB
SHA256 1d9c6c49026503e16d584633211df49b82191f3988f466c7f12d29c8ae5e4e4b
MD5 271ff904ceb8b5383b45ecf0da6a9238
SHA1 6b89ccc79d98a96ab00d045e2cf5fd495cb03193
SHA512 3e5197d4f1a24bc903dbf8a0cd3ca9efb6cbfe725c31eea454ea1b4d355229e55b4f51f3b13bfb24d32bb6da6f85b7cb6e31289ad8de6c9c9f1c4c1491afb9d2
SSDEEP 6144:Ggji1e3pEwbB2Y02HSiPTiGE74Go8D6CFQQ5sIxrV2CnOzIt5E6H7f1ADW0QFQhX:GMP9JTHjPuT9+KKIKCnO16bfGGStAM
TLSH
T14AA4238D5FBCBD5BEE0B41251E49E292397C93C1A70488D2B2DF21846E833D26C77A42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab5D7.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab5D7.tmp
Size 476KB
SHA256 4087d3c1e0d93567e67fc8f17cd3ad5587c2fc203b1bbeb8d7a01a750d54e924
MD5 b4312fca4a8a21f8905311d4427e87bb
SHA1 50b314f6ce6d4508557444e04e6265b7353d1087
SHA512 6f828dee15b3351cd15c5b9388afb117b61abdbc45559a7cc0106173e5bc2088babc551474e9f27d183f5dbb3273520a1029b5fc514984ffcb473273c1a6f6f9
SSDEEP 6144:mPoUL7rdGbRXiXMDCVcP0EO3bozD1icl+CabWQRgqOqqs/eMFq8qZumLXvjKUUo6:2D9QdiXMbMxUti/RbWhqcMw8WKUUovC
TLSH
T139A42381ED24B4974BA348F0C1CA8C269D3A7FE86CC2865D61E9EAD01D43777CE19C5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab5E8.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab5E8.tmp
Size 484KB
SHA256 34a36ff02892fd8f89c77992ec7a7eb0fd1459483eccbbee139c38646e8685ff
MD5 ad2d82c2a623c1176d25727003f474a6
SHA1 2e1d67bfc138a7533e13b19fb1747fed47305104
SHA512 1d0d19ce2a144c6dcc18e894bf2dcc8d47ad4bbcfe93d371686572e1d2db5954685496681311bda429684eeefab874391a351b0670a7124200c1d49d6717a9f8
SSDEEP 12288:ZqKfByFV1zSEVKRLYSh6YaYJkImjMjmf0fPae/:Z5QFV1GRbhvaYKB0fy8
TLSH
T182B423B41A36E64236D2F900C138DBE489FAA751574903D268ADF8DC3FE27D51628BD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab79E.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab79E.tmp
Size 931KB
SHA256 8b0631da4dc79e036251379a0a68c3ba977f14bcc797ba0eb9692f8bb90ddb4d
MD5 d4eac009e9e7b64b8b001ae82b8102fa
SHA1 d8d166494d5813db20ea1231da4b1f8a9b312119
SHA512 561653f9920661027d006e7def7fb27de23b934e4860e0df78c97d183b7cebd9dce0d395e2018eef1c02fc6818a179a661e18a2c26c4180afee5ef4f9c9c6035
SSDEEP 24576:9B1Onw3vg7aeYPagzbJ5Vhv6LnV2Dhl7GEYqVjcyd:vww3o7BYPJbJ5Vh6UCqZfd
TLSH
T1CC1533ED199B2F9FCAE72C808550CA568C3BD6C70D40D6BA20E6D7A91CD2783977C44E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab83C.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab83C.tmp
Size 706KB
SHA256 9af92b1671772e8e781b58217dab481f0afbcf646de36bc1bffc7d411d14e351
MD5 748a53c6bdd5ce97bd54a76c7a334286
SHA1 7dd9eedb13ac187e375ad70f0622518662c61d9f
SHA512 ec8601d1a0dbd5d79c67af2e90fad44bbc0b890412842bf69065a2c7cb16c12b1c5ff594135c7b67b830779645801da20c9be8d629b6ad8a3ba656e0598f0540
SSDEEP 12288:NPnBZX7wR3tMwYqNDQGnXTtfzO5U7yo6O7bLhe8yE3LLDok4a:JBMbYE7xzO5U917bLh/DL3oJa
TLSH
T1DCF42393C97819E0D56DCEF03B20EC626DBAC59B8732649888DF915A03526281FDFC5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab917.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab917.tmp
Size 1.3MB
SHA256 9f4cd66a196d3874ba6bc74f9320f4eadde09586dcb0ae00adf0a56ec3eee5f4
MD5 0f56b43d83616d6a60134bf50f9e684e
SHA1 2dbcbdc795f5fb637d73099f27c5be2b6103c060
SHA512 776f63994648a96c763e883d318b2889e7a3a32c21bae8e001cdb9e8f8e2c434939c3bfa221956a715da206bfb9fc837debed2eee532a59523d783f6865bdf75
SSDEEP 24576:pI4ga3jIAemcNjI7L6+iXZ4vI+arjU/QxJMT+wBeXTKgd:Rga9JcNM7L6+oZiyU/Q7G+KeXTKgd
TLSH
T1C15533CB941EF4C3DF19FC71ABB8CD978D7A02F258009C03C9E570AE2A9D69096D9B45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab967.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab967.tmp
Size 1.0MB
SHA256 30aec7f9ecdad690a2cb38ba6a2e07c8158175140b76f17aae7d828a42a727a7
MD5 c4af49f2fbc299ae7d3b8285bc0890c9
SHA1 bb302051a8e305dfb910ac26d23a67a805c3893c
SHA512 8402a0c75fc6afd3b6c86794c5f7eae0b78475989c6b556c89c762f9f312f0f58878c008d0a9cef28effe341f4cf9192ee197575faa3da3b1d2189878c13abf8
SSDEEP 24576:h2WZfFbGSoB3Pf/u/V1HTysuGrieyhhwSvxqi6Spqsgx:h2WZfF6NB3XM1z9rALvOS6x
TLSH
T12035334FE5BC9FC3B70C751D89A6DE48BCBA83DFBA580005813293C5558A2E797B06B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cab9C5.tmp

Path C:\Users\Admin\AppData\Local\Temp\cab9C5.tmp
Size 2.0MB
SHA256 c8b322819a2f84bf80acd654aaaac3e08debb533b1086021078effba27968a37
MD5 466e5851e601cefa5f84681011165ed0
SHA1 0ffcc96b7fcb497cc8494f94703eb60452815414
SHA512 e10d1d40f5a56e13cdf533e2a544bc762bbdec2c08178e7129684e13f93dbbac834c4606bc5821a8d28d48af4cc855b5df92d66207d3f85254867c4813d3d164
SSDEEP 49152:3S7Eynda/aPhPWgYPaNu/I757rju1RAVRe3i89Y7NAc4gdCCg:3S7EyCatWBaNuwi1RuRg9YhT4wVg
TLSH
T11CA533C0EF2FD4BD4D885D383265FCE0C41E63E05B7422D352E9EC9844BE697EA6805A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cabA9B.tmp

Path C:\Users\Admin\AppData\Local\Temp\cabA9B.tmp
Size 1.5MB
SHA256 80adc8c9ede235ad8cd45eeace2f40227aba01d9fef261756f4a4c44eafb146b
MD5 ebcf724f8885692bb8e2ee2406aadc02
SHA1 73b0b931b5d05c2a4b490925e2a54e4a7deeba36
SHA512 71fcc0e5cf084f673c805ec51dfc68c4b93e85e7d593449e6f9732caec32f004f24300a251ba8cbabf1774dbf732fdcb9cfb164b3a77ca0cad14c2825b78ee68
SSDEEP 24576:lAqpS8Oo3NP518YJ7quri1kR0BnuLtBz1GS1fB9z29q4Gdu7BR/jKg5rp:lAWAGNPLJ7qugk6o3AlGdcR/jjrp
TLSH
T1F0753385DAFDCD88C7B797BF068897CA3C6869F84C17DB2749008B5119ADBDC063E858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cabCB2.tmp

Path C:\Users\Admin\AppData\Local\Temp\cabCB2.tmp
Size 2.0MB
SHA256 ad50810112e08b981e967a5984dab3da6c4aaa890316ba38d44f39d80ccbb4e6
MD5 a6de20ba06cd7c8aab98f8c03bbd49f7
SHA1 ceda0fe1eea124eadc13606b5624373b922d24ea
SHA512 54fc0a7c2beb082677882e0bc128cd77f13cc8e3c3c286056db2d5fdc608865add3c3fdc4a8affd120e3a98128bc15fce7fe7d90121a5462a66f8fca0f93aaba
SSDEEP 49152:5IgXLOTa1MKe/VpMDaIWRzU3lLqvaF1buL7rNQVxE:WgXaMMrViuIWtUkvGoHr+W
TLSH
T112953345839C06A23CC7AEB171D0DBE2427A43E3CF725D9D05967C902A68F073A59BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cabD8E.tmp

Path C:\Users\Admin\AppData\Local\Temp\cabD8E.tmp
Size 1.7MB
SHA256 640ad075b555d4a2143f909eafd91f54076f5dde42a2b11cd897bc564b5d7ff7
MD5 828f96031f40bf8ebcb5e52aaeeb7e4c
SHA1 cacc32738a0a66c8fe51a81ed8e27a6f82e69eb2
SHA512 61f6355ff4d984931e79624394ccca217054ae0f61b9af1a1eded5acca3d6fef8940e338c313be63fc766e6e7161cafa0c8ae44ad4e0be26c22ff17e2e6abaf7
SSDEEP 24576:O/gjMj+RP9Q07h9F75a0BXjBccHMVk2Hq2SkGa0QglyZtxmdPP2LcSUtfgfp16Yx:kJ6RP9Q07/X5V7yVF0QgktxAPutUt0zP
TLSH
T16A8533C4A81F428ED50B28F9F7F7E4F52538521586A0A1F84D68853FC2CBA877D7A274
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cabDEE.tmp

Path C:\Users\Admin\AppData\Local\Temp\cabDEE.tmp
Size 2.6MB
SHA256 3779e325d94b6fa8023669da99cf47a3169e6648913018886647ecb9e6f735e9
MD5 57399106826184403a379f7a9a869ad3
SHA1 591ad2d06f93a793441dd6fd18eb7df02549d7ce
SHA512 70789e2d81f52d734afe2446eb7e4925e354fce37bc4bbb4cf0bae7d215144fe81857a507aff107740b8ab824a1662812a5d450961c02f9bef2d3e1768c99f69
SSDEEP 49152:3+eO6OYqspfKnz1J4qgcvFhud2BbPI6fp4q7+lyip3vyUM5ZCFwNn3zMiSfM:386mEfGn4jcvFhD1p4uw1pqUDmn3wiUM
TLSH
T18FD533920B05E40BC8F50E7CA9AD670154BA02D7A43F8A9D6D4EED25C4C36FC7B6C993
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cabE2F.tmp

Path C:\Users\Admin\AppData\Local\Temp\cabE2F.tmp
Size 2.4MB
SHA256 ad26761d59f1fa9783c2f49184a2e8fe55fcd46cd3c49ffc099c02310649dc67
MD5 f256aca509b4c6c0144d278c7036b0a8
SHA1 93f6106d0759afd0061f73b876aa9cab05aa8ef6
SHA512 08c57661f8cc9b547bbe42b4a5f8072b979e93346679ade23ca685c0085f7bc14c26707b3d3c02f124359ebb640816e13763c7546ff095c96d2bb090320f3a95
SSDEEP 49152:NFXdpz4d98p/q5jA4q+9Uf5kx6wHR8WfPJZVhWzH4dRze76YP9nJ7yyAInT76nSY:NFXdKx5sM9SmxHKexZVhutJJVpCSqa0Z
TLSH
T10BC53364C05D3B0180DB8A007771A587F2FCAE5BA6147FB54F4C9D2518AAEF26E48FB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2968-15-0x00007FFF9B120000-0x00007FFF9B130000-memory.dmp

Download

memory/2968-12-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-18-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-13-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-11-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-9-0x00007FFF9B120000-0x00007FFF9B130000-memory.dmp

Download

memory/2968-8-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-7-0x00007FFF9D7B0000-0x00007FFF9D7C0000-memory.dmp

Download

memory/2968-0-0x00007FFF9D7B0000-0x00007FFF9D7C0000-memory.dmp

Download

memory/2968-14-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-10-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-4-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-5-0x00007FFF9D7B0000-0x00007FFF9D7C0000-memory.dmp

Download

memory/2968-6-0x00007FFFDD730000-0x00007FFFDD925000-memory.dmp

Download

memory/2968-1-0x00007FFF9D7B0000-0x00007FFF9D7C0000-memory.dmp

Download

memory/2968-2-0x00007FFF9D7B0000-0x00007FFF9D7C0000-memory.dmp

Download

memory/2968-3-0x00007FFFDD7CD000-0x00007FFFDD7CE000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads