SUSPICIOUS — PresentMon_x64.exe

Verdict: suspicious (49/100) · Family: capture

File type: pe · SHA-256: ffb59403bd48ac5ebbfc8d41bcf25c164799a4e4cdbd2edd1405c804c288ad9b

MITRE ATT&CK

• T1056.001

YARA

Dynamic analysis (windows)

1 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

Analyzed on MalwareAnalyzer by Cyble · Open interactive report