# Page Not Found

The URL `files/J9Zz2P4kM7nabS5CTW3H` does not exist. This page may have been moved, renamed, or deleted.

## Suggested Pages

You may be looking for one of the following:
- [From IRS Files to XWorm: Dissecting a Multi‑Stage LNK‑Based Malware Chain](https://xto9ot.gitbook.io/malware-analysis/from-irs-files-to-xworm-dissecting-a-multi-stage-lnk-based-malware-chain.md)
- [Analysis Archive](https://xto9ot.gitbook.io/malware-analysis/analysis-archive.md)
- [ClickFix Campaign – Russian Threat Actor Evolves to Custom InfoStealer](https://xto9ot.gitbook.io/malware-analysis/clickfix-campaign-russian-threat-actor-evolves-to-custom-infostealer.md)
- [Investigation of Turkish-Sourced EagleRAT and AsyncRAT Malware Activity](https://xto9ot.gitbook.io/malware-analysis/investigation-of-turkish-sourced-eaglerat-and-asyncrat-malware-activity.md)
- [Braodo Analysis](https://xto9ot.gitbook.io/malware-analysis/braodo-analysis.md)

## How to find the correct page

If the exact page cannot be found, you can still retrieve the information using the documentation query interface.

### Option 1 — Ask a question (recommended)

Perform an HTTP GET request on the documentation index with the `ask` parameter:

```
GET https://xto9ot.gitbook.io/malware-analysis/from-irs-files-to-xworm-dissecting-a-multi-stage-lnk-based-malware-chain.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

### Option 2 — Browse the documentation index

Full index: https://xto9ot.gitbook.io/malware-analysis/sitemap.md

Use this to discover valid page paths or navigate the documentation structure.

### Option 3 — Retrieve the full documentation corpus

Full export: https://xto9ot.gitbook.io/malware-analysis/llms-full.txt

Use this to access all content at once and perform your own parsing or retrieval. It will be more expensive.

## Tips for requesting documentation

Prefer `.md` URLs for structured content, append `.md` to URLs (e.g., `/malware-analysis/from-irs-files-to-xworm-dissecting-a-multi-stage-lnk-based-malware-chain.md`).

You may also use `Accept: text/markdown` header for content negotiation.