drop handle exports · memory dump strings · sysmon exports · extract mutex names · match against 500+ known malware family mutex signatures · identify malware family from mutex · flag unusual mutex patterns · runs locally
mutex sources
drop handle / strings / csv
or click
drop handle exports · memory strings · sysmon csv