InstallFix - MD5 Victim Fingerprinting (T1082)
Identifies PowerShell commands that generate a unique victim ID by hashing the concatenated ComputerName and UserName, a technique used by the InstallFix malware.
Microsoft Sentinel (KQL)

Identifies PowerShell commands that generate a unique victim ID by hashing the concatenated ComputerName and UserName, a technique used by the InstallFix malware.

Already have an account?