live.sysinternals[.]comDomain

Reported by 1 independent source · first reported 20 Feb 2026 by Elastic Security Labs · last reported 20 Feb 2026

Last reported 8 months ago

What the reports say

1 report, newest first · the exact sentence from each

“For example, you can run Process Monitor over the internet right now by running \\live.sysinternals[.]com\Procmon.exe.”

Elastic Security LabsVendor20 Feb 2026
The Immutable Illusion: Pwning Your Kernel with Cloud Files

Indicators reported together

named in the same reports

hxxps://github[.]com/Microsoft/Windows-driver-samples/blob/622212c3fff587f23f6490a9da939fb85968f651/filesys/fastfat/create.c#L3572-L3593in 1 report
e931849d52535955fcaa3847dd17947bin 1 report

Copy these 2 indicators · defanged

2 indicators, defanged, one per line

hxxps://github[.]com/Microsoft/Windows-driver-samples/blob/622212c3fff587f23f6490a9da939fb85968f651/filesys/fastfat/create.c#L3572-L3593
e931849d52535955fcaa3847dd17947b

Thanks — we review every report.

Report a wrong value