Xcitium Cloud Verdict

File Name: DNI.docx.exe

File Type: PE32 executable (GUI) Intel 80386, for MS Windows

SHA1: ec4d1dd578dee5f32edebc8b97c99ce9d5f69e1a

MD5: bb34c3ef615576c659f6f8761233d45d

Download Kill Chain Report

Hooking and other Techniques for Hiding Protection

Creates RWX memory Show sources

injection_rwx_memory

0x00000040, NtAllocateVirtualMemory or VirtualProtectEx

Loading...