Internet-Downloaded Executable Launched Through Windows Shell

Daniel Jeremiah@daniyyell

•updated 6 days ago•5•0•7

Correlates internet-origin executable creation with subsequent execution by Windows shell processes using matching device, file path and SHA1 hash within a five-minute timeframe.