TamperedChef Mshta Payload Execution

Elgonad .@elgonad

•updated Jan 22, 2026•9•1•59

Detects a process chain where the Microsoft HTML Application Host (mshta.exe) launches the TamperedChef secondary payload 'ManualFinderApp.exe'.