{"verdict":"True Positive","executive_summary":"Parent process, explorer.exe, ran powershell.exe, which is suspicious. A command was injected stealthily using -NoP -NonI -W Hidden. A registry was modified and this indicates an attacker is trying to execute malicious code.","artifacts":"192.168.1.10, 2B2B6D120897FBB5783C3F8DCF57DBBA, calc.exe, DESKTOP-7GTHB9K, jdoe,","analysis_answers":{"action_taken":"Parent process, explorer.exe, ran powershell.exe, which is suspicious. A command was injected stealthily using -NoP -NonI -W Hidden. A registry was modified and this indicates an attacker is trying to execute malicious code.","conclusion":""},"submitted_at":"2026-03-16T02:58:46.091Z"}