db0b506f3f274a9b63ed83fe9a8df57d0f73fdb24e0ae8590053ae02c23c1856

Analysis

user interaction
yes
max time kernel
20s
max time network
18s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Jeva.exe
Size 43.6MB
Sample261023-e1kadsby7l
SHA256 db0b506f3f274a9b63ed83fe9a8df57d0f73fdb24e0ae8590053ae02c23c1856
MD5 8205335edcd44a360225117105564ce5
SHA1 269104f613c9c340ec5fcfd66a2241105c6c23b9
SHA512 90b5b12821cef7db28373999983cdce0818080ea9d289a8ec334bfb510835421f7e102a2747dc51ec737bd76502cfd2ae7117690397dd1e2b969618521d919c4
SSDEEP 786432:MHJnQcVSXzgC05kSTUQL++EzOBI9Fmfz+cNTHmsPv4Lbu6QPXoxH:MuOIgC0JTUJrOBLdNbALK12
TLSH
T1F3A7BE107E5B99A9D19BC470834A8AA71D6130DB0B36B9FF44C496383F79BF46F38258
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Jeva.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Jeva.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Jeva.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
3736	msedgewebview2.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3276 wrote to memory of 3736	3276	Jeva.exe	85
PID 3736 wrote to memory of 3452	3736	msedgewebview2.exe	86
PID 3736 wrote to memory of 560	3736	msedgewebview2.exe	87
PID 3736 wrote to memory of 560	3736	msedgewebview2.exe	87
PID 3736 wrote to memory of 560	3736	msedgewebview2.exe	87
PID 3736 wrote to memory of 2704	3736	msedgewebview2.exe	88
PID 3736 wrote to memory of 2200	3736	msedgewebview2.exe	89
PID 3736 wrote to memory of 2200	3736	msedgewebview2.exe	89
PID 3736 wrote to memory of 1348	3736	msedgewebview2.exe	90
PID 3736 wrote to memory of 1348	3736	msedgewebview2.exe	90
PID 3736 wrote to memory of 1348	3736	msedgewebview2.exe	90

C:\Users\Admin\AppData\Local\Temp\Jeva.exe
"C:\Users\Admin\AppData\Local\Temp\Jeva.exe"
1⤵
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:3276
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Jeva.exe --webview-exe-version=1.0.3 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-blink-features=AudioVideoTracks --lang=en-US --mojo-named-platform-channel-pipe=3276.3044.7713130299908378186
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3736
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ff9052cb078,0x7ff9052cb084,0x7ff9052cb090
    3⤵
    PID:3452
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView" --webview-exe-name=Jeva.exe --webview-exe-version=1.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1732,i,2846346766665139688,6775428149172346201,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:2
    3⤵
    PID:560
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView" --webview-exe-name=Jeva.exe --webview-exe-version=1.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1936,i,2846346766665139688,6775428149172346201,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:3
    3⤵
    PID:2704
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView" --webview-exe-name=Jeva.exe --webview-exe-version=1.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2380,i,2846346766665139688,6775428149172346201,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:8
    3⤵
    PID:2200
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView" --webview-exe-name=Jeva.exe --webview-exe-version=1.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --enable-blink-features=AudioVideoTracks --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3620,i,2846346766665139688,6775428149172346201,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
    3⤵
    PID:1348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9472ce077e9b557d296e194fad269cb1eabc864023627d7866a719210f21c5ec
MD5 9fca1d9ef598a6fd3fd24b34844d4704
SHA1 d9e98a6f01c8311f6880462fdfa2e41cdae873f9
SHA512 084136c6f8dbda0fa72bba9107d6b4bdb7820bdcf82fb0f2a193cf552e14b07da089111496d051709be9523cc7e00bf4acd317d125efa2d7c46cf6bd2b97ea16
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7f1cff69a4499d7117b953a42c3ce63179b8ff5eefe4c48f2002ed43f11bc29c
MD5 17de7d5a43bb459759f1cefacfa131e1
SHA1 a0ea2d260485a0bcfb0d81b974a6b4a82817fcbb
SHA512 e5b3e98ade9f7c7c8b6feaa7f99a4f986d593f9388294c7e9516a03890da176a099274decc83065759e90f75c6bdf223c69ce9d74ccd6562895188270681d595
TLSH
T145D0121232130A74C8106033004272090404E60F814640425429953F2A480954D06483
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 48B
SHA256 af6b97b55cd59f6bc72d55366740b27f9ccafd0eaafb319fde4ff6f5fcee462f
MD5 ad49a8d2b0549866eb0fd49ca91a8a71
SHA1 dfb3934a4600bd9f958c33d115da9102e56aeaad
SHA512 2ff40a3a30bde81d5be2dffb90b4b6340e482bf51efe609350783b206f98dc013298d594224cc9ace370990e08be14d7b7ed9130ae0032e2d466d2f012116e56
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 8a71969c22efaee0b1981433e3c9e2226e6b9b3565a333b15d5a69c4484fbea7
MD5 4ebdcc3aa7ffe3f5d16024a92e3da2c1
SHA1 df61cbae7cab831f7664f4e4605f5fd17b9e470f
SHA512 aab5aa2af9df6ee7de61de1ae42076c19dd4e6318a74f53eba677be9517ae38073c406ddc83d469962403e05e431eb71502a51a3e12be44a6011788371d301ca
SSDEEP 3:LstlNllkll/l2B1n/:LsX3lEt2Bh
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Local State
Size 1KB
SHA256 27d882ded91ca4a0a238f297bdc4d92461ed6c7a7c3cc8c7052db96efa52adb9
MD5 2931734dfe411e340d780982b4b0ccc9
SHA1 ef44f3147ca90fa3d96d25390e074ed9dc81494e
SHA512 a574e3b553efe05a91aaced4b239cfd843c69e52e377c81a2697a1bb2f7de28bd694a6d2a3f890c7bbc7df2b93a4b7bd08d7e00ae3fd32e2da882d7fa53abcba
TLSH
T194214273C4E43BB2A6515A15BA12EB4B5E3501BA81218F0CE1DD031C03E75FD5227C33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\Local State
Size 16KB
SHA256 f927878ac14306c84a8939ba0f01fb648aa3ccd29c73855b760c16622181fc49
MD5 05846a96bb41259771d080e55c08cab4
SHA1 c47262e25a58b149789fb3f6b20f18c2160b2604
SHA512 379840ce4ff6750bbf8a4a7ab63def90384471fe6ccc47eea4b6d56418c61476b5746fcd4f7a54bd7b9120694b21b9c796432de2ed413b54d464f4bc31fce36f
SSDEEP 384:z6+OBqImmJvGBLx3NaFMJFGNbNTBEGiSEug6rJ:TcvGtlNwFRiiV
TLSH
T17872BF6A1CB55A232CE7C509BE896B07C73A52A3C1F17FD4DDEC5F0E126B0942352D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6b66365-2737-497a-b76f-d96f86496a37.tmp

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\d6b66365-2737-497a-b76f-d96f86496a37.tmp
Size 3KB
SHA256 b9e09f60e212d2b08c03eb38d3c1b0e41b75c9d4acb9dcda5da95f9a35f230ed
MD5 4c38ffe4f5208af766accb9a2dec93d2
SHA1 18bb915686264503ca8a4419cca9de44b56b5b06
SHA512 d1517984597a5af35c218f3c103e1958158e9cda3d33f7ab0e5fdaa0814220d34476b4f408d8619e367247018aea7299bd3ed8bf46c2d69b8141a20343972664
TLSH
T1B371873299B4BA778EE2DA05BD852B16F77A0177D5913F98D5EC0F1C02D72981342C27
MD5 SHA1 SHA512 TLSH

Submit Download

d92a0fb9-1a82-4806-bf71-6adbacdd0a0b.tmp

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\d92a0fb9-1a82-4806-bf71-6adbacdd0a0b.tmp
Size 2KB
SHA256 ae041d65cf2995690a6930ca523f05dcf99d9cebab1fc4530e6999d4a702910a
MD5 7f227de0a51ef63412cf6eb89b29dd9c
SHA1 34430e5d1075b388cb49fcf1ae5751c0973abdb4
SHA512 8a876870674182fb501e4770a408586ed0f556917d517c6d432c0db5a1608afcdd099c02f88ae5ae37bdfdcf9e43c861a9dc4a837acaa9c2aea6cf5fc7dd8ba5
TLSH
T149518473ACA47BB786E29B04BD466F23DA3B01B58A622F44D5DD0B1C02D716C2302C37
MD5 SHA1 SHA512 TLSH

Submit Download

f8babfc9-4a14-48cb-bfa1-fe6a0643816e.tmp

Path C:\Users\Admin\AppData\Local\Temp\Jeva Data\WebView2\EBWebView\f8babfc9-4a14-48cb-bfa1-fe6a0643816e.tmp
Size 1KB
SHA256 f716cdb66fe5e8a48114fd0a8409c0339acd0e2f07c3732c6e59b1e1d57e987c
MD5 25263131e04bdd1f9cb3f2413cc390dd
SHA1 0d27e69ef593f64e4ec130912c13dd5400722467
SHA512 927c5ba93b269612f08e7b1c9aab837313d66cf7dfab1cebfcac2d6772a837f19ebfa34d6cda40e820501805018b16f0b6e2d4d65f152da65377d67e74347a63
TLSH
T12E316773D4E03B72A951AB167A51AB579E3601BA81228F48E1DD071C03E35ED6227C33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/560-26-0x00007FF91FDA0000-0x00007FF91FDA1000-memory.dmp

Download

memory/1348-142-0x00007FF91FDA0000-0x00007FF91FDA1000-memory.dmp

Download

memory/2200-106-0x00007FF920640000-0x00007FF920641000-memory.dmp

Download

memory/2200-99-0x00007FF920AE0000-0x00007FF920AE1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads