Behavioral task
behavioral1
Sample
652579ae45ceb25832507ff7d6152b976d504ab525bb24d364bbc7dad3861ecb.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
652579ae45ceb25832507ff7d6152b976d504ab525bb24d364bbc7dad3861ecb.pdf
Resource
win10v2004-20240226-en
General
-
Target
652579ae45ceb25832507ff7d6152b976d504ab525bb24d364bbc7dad3861ecb
-
Size
14.9MB
-
MD5
0cfc42ecff74b0df95225cfd870cd066
-
SHA1
30573ed3008f838b33950b0ae236e4ee0efe6da9
-
SHA256
652579ae45ceb25832507ff7d6152b976d504ab525bb24d364bbc7dad3861ecb
-
SHA512
0b06694d9dd1348335f8c24e8f55bf48e3698baf2d6f566cb655105494d2f2e748f22e0d64ca317539d3da26b0e5955cd9b063a8d6c81de702966ce4032166d1
-
SSDEEP
196608:YHR9wL88hdcNK2irjjtCYllcTnPRV3JOOs2h1CAZ+pUNhj7TH248F:YHRSLBFrrLllcTPk4hXTNBTH2HF
Malware Config
Signatures
Files
-
652579ae45ceb25832507ff7d6152b976d504ab525bb24d364bbc7dad3861ecb.pdf
-
http://www.packtpub.com/
-
https://rockenroll.tech/
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/blogs-links-communities.md
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook
-
https://github.com/PacktPublishing/
-
http://www.packtpub.com/support/errata
-
http://authors.packtpub.com/
-
https://packt.link/r/1805126547
-
https://packt.link/free-ebook/9781805126546
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/tree/main/Chapter1
-
https://m365maps.com/
-
https://developer.microsoft.com/en-us/microsoft-365/dev-program
-
http://outlook.com/
-
https://entra.microsoft.com/
-
https://entra.microsoft.com/#home
-
https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference
-
https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
-
https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-service-plan-reference
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/tree/main/Chapter2
-
https://learn.microsoft.com/en-gb/mem/intune/configuration/delivery-optimization-windows
-
https://learn.microsoft.com/en-gb/mem/intune/configuration/device-firmware-configuration-interface-windows
-
https://learn.microsoft.com/en-gb/mem/intune/protect/endpoint-protection-windows-10
-
https://learn.microsoft.com/en-us/windows/configuration/set-up-shared-or-guest-pc?tabs=intune#shared-pc-mode-concepts
-
https://cmd.ms/ge
-
https://graphxray.merill.net/
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter2/onedrive-settings-catalog.ps1
-
https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-enrollment/understand-troubleshoot-esp
-
https://github.com/mozilla/policy-templates/releases
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter2/gpreport.xml
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/tree/main/Chapter3
-
https://www.ncsc.gov.uk/collection/device-security-guidance/platform-guides/windows
-
https://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs/tree/main/Microsoft/Windows
-
https://www.cisecurity.org/benchmark/intune
-
https://andrewstaylor.com/2022/12/07/intune-backing-up-and-restoring-your-environment-new-and-improved/
-
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/import-export-exploit-protection-emet-xml?view=o365-worldwide
-
https://security.microsoft.com/
-
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/wdac-wizard
-
https://learn.microsoft.com/en-gb/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer
-
https://learn.microsoft.com/en-us/mem/intune/protect/windows-driver-updates-overview
-
https://andrewstaylor.com/2022/08/16/autopilot-troubleshooting-tools-during-esp/
-
https://msendpointmgr.com/intune-debug-toolkit/
-
https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo
-
https://www.osdcloud.com/
-
https://learn.microsoft.com/en-gb/mem/intune/protect/derived-credentials
-
https://www.cisecurity.org/benchmark/google_android
-
https://www.ncsc.gov.uk/collection/device-security-guidance/platform-guides/android
-
https://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs/tree/main/Google/Android
-
http://gmail.com/
-
https://learn.microsoft.com/en-us/mem/intune/apps/apps-add-android-for-work
-
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-android-for-work
-
https://play.google.com/store/apps/details?id=com.microsoft.surface.config
-
https://learn.microsoft.com/en-us/surface-duo/surface-duo-2-manage-oemconfig
-
https://play.google.com/store/apps/details?id=com.zebra.oemconfig.common
-
https://techdocs.zebra.com/oemconfig/11-5/about/
-
https://play.google.com/store/apps/details?id=com.samsung.android.knox.kpu
-
https://docs.samsungknox.com/admin/uem/intune-configure-ksp-oemconfig-2.htm
-
https://play.google.com/store/apps/details?id=com.motorola.oemconfig.rel
-
https://en-gb.support.motorola.com/app/answers/detail/a_id/160503/~/moto-oemconfig-guide
-
https://play.google.com/store/apps/details?id=com.datalogic.settings.oemconfig
-
https://datalogic.github.io/oemconfig/overview/
-
https://play.google.com/store/apps/details?id=com.hmdglobal.app.oemconfig
-
https://solutions.hmdglobal.com/knowledgehub/what-benefits-does-the-oemconfig-app-offer
-
https://www.base64decode.org/
-
https://learn.microsoft.com/en-us/mem/intune/configuration/wi-fi-settings-android-enterprise
-
https://learn.microsoft.com/en-us/mem/intune/protect/certificates-pfx-configure
-
https://learn.microsoft.com/en-us/mem/intune/protect/certificates-profile-scep
-
https://learn.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure
-
https://learn.microsoft.com/en-us/mem/intune/apps/apps-supported-intune-apps
-
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/overview
-
https://learn.microsoft.com/en-us/mem/intune/fundamentals/education-settings-configure-ios
-
https://andrewstaylor.com/2022/06/07/alerting-when-my-apple-certificates-expire-in-intune-using-azure-automation/
-
https://www.cisecurity.org/benchmark/apple_ios
-
https://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs/tree/main/Apple/iOS
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-6/Recommended_iOS_Config.txt
-
https://www.apple.com/business/docs/site/Apple_Business_Manager_Getting_Started_Guide.pdf
-
https://www.intuneirl.com/onboarding-to-abm/
-
https://support.apple.com/en-gb/apple-configurator
-
https://www.youtube.com/watch?v=G_9bPrsJHGY&t=34s
-
https://www.youtube.com/watch?v=G-rvHUY4iA0
-
https://learn.microsoft.com/en-us/mem/intune/apps/lob-apps-ios
-
https://learn.microsoft.com/en-us/graph/api/intune-shared-iosmanagedappprotection-create?view=graph-rest-beta
-
https://learn.microsoft.com/en-gb/mem/intune/apps/app-provisioning-profile-ios?WT.mc_id=Portal-Microsoft_Intune_Apps
-
https://techcommunity.microsoft.com/t5/intune-customer-success/just-in-time-registration-and-compliance-remediation-for-ios/ba-p/3660843
-
https://github.com/microsoft/shell-intune-samples/tree/master/macOS
-
https://www.cisecurity.org/benchmark/apple_os
-
https://www.ncsc.gov.uk/collection/device-security-guidance/platform-guides/macos
-
https://techcommunity.microsoft.com/t5/microsoft-intune-blog/now-is-the-time-manage-your-mac-endpoints-with-microsoft-intune/ba-p/3974449
-
https://www.microsoft.com/en-gb/microsoft-365/roadmap?rtc=3&filters=Mac%2CMicrosoft%20Intune
-
https://github.com/microsoft/shell-intune-samples/wiki/Microsoft-Mac-Admins-Community
-
https://github.com/microsoft/shell-intune-samples/tree/master/macOS/Config/Wallpaper
-
https://get.adobe.com/uk/reader/
-
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-channels
-
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-install-with-intune?view=o365-worldwide
-
https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-your-device-in-intune-macos-cp
-
https://support.apple.com/en-gb/guide/apple-configurator/apd65c9ff558/ios
-
https://support.microsoft.com/en-us/topic/windows-11-version-23h2-update-history-59875222-b990-4bd9-932f-91a5954de434
-
https://www.microsoft.com/en-us/wdsi/defenderupdates
-
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/alerts-queue?view=o365-worldwide
-
https://graph.microsoft.com/beta/deviceManagement/notificationMessageTemplates
-
https://learn.microsoft.com/en-gb/mem/intune/protect/compliance-policy-create-android-for-work#system-security-settings
-
https://learn.microsoft.com/en-us/mem/intune/protect/mobile-threat-defense#mobile-threat-defense-partners
-
https://support.google.com/googleplay/android-developer/answer/11395166?hl=en-GB
-
https://source.android.com/docs/setup/about/build-numbers
-
https://source.android.com/docs/security/bulletin/asb-overview
-
https://android-developers.googleblog.com/2018/06/better-biometrics-in-android-p.html
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-8/create-android-compliance-allsettings.ps1
-
https://iosref.com/ios
-
https://support.apple.com/en-us/HT201222
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-8/create-ios-compliance-allsettings.ps1
-
https://support.apple.com/en-gb/HT204899
-
https://support.apple.com/en-gb/HT201260
-
https://developer.apple.com/news/releases/
-
https://support.apple.com/en-gb/guide/security/sec5599b66df/web
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-8/create-macos-compliance-allsettings.ps1
-
https://wiki.ubuntu.com/Releases
-
https://github.com/petripaavola/Intune/tree/master/Linux
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-8/create-linux-compliance-allsettings.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-8/custom-compliance-json.json
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-8/custom-compliance-script.ps1
-
https://github.com/JayRHa/Custom-Compliance-Scripts
-
https://learn.microsoft.com/en-us/mem/intune/protect/compliance-custom-json
-
https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/zero-trust-identity-device-access-policies-common?view=o365-worldwide
-
https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-policy-common?tabs=secure-foundation
-
https://andrewstaylor.com/2022/11/08/quick-and-easy-application-inventory-with-intune/
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-9/get-applicenses.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-9/get-discoveredapps.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-9/get-appprotectionstatus.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-9/get-noncompliantdevices.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-9/get-windowsupdatestatus.ps1
-
https://learn.microsoft.com/en-us/mem/configmgr/comanage/overview
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-10/compliance-reports.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-10/group-policy-analytics.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-10/co-managed-workloads.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-10/co-management-eligibility.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-10/firewall-status.ps1
-
https://www.petervanderwoude.nl/post/super-easy-start-with-reporting-and-the-intune-data-warehouse/
-
https://jannikreinhard.com/2022/07/10/build-powerbi-dashboard-based-on-intune-data-warehouse/
-
https://www.youtube.com/watch?v=2ICPKRBIews
-
https://learn.microsoft.com/en-gb/mem/intune/protect/windows-update-compatibility-reports#prerequisites
-
https://portal.azure.com/
-
https://learn.microsoft.com/en-gb/windows/deployment/update/wufb-reports-workbook
-
https://learn.microsoft.com/en-gb/azure/azure-monitor//partners?WT.mc_id=Portal-Microsoft_Azure_Monitoring
-
https://learn.microsoft.com/en-us/azure/partner-solutions/overview
-
https://learn.microsoft.com/en-us/mem/intune/fundamentals/review-logs-using-azure-monitor
-
https://andrewstaylor.com/2023/11/07/enumerating-the-logged-on-user-when-running-as-system-with-azure-ad-entra-joined-devices/
-
https://ca.signfiles.com/TSAServer.aspx
-
https://learn.microsoft.com/en-us/windows/msix/packaging-tool/package-editor
-
https://psappdeploytoolkit.com/
-
https://psappdeploytoolkit.com/#functions-logic
-
https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool/blob/master/IntuneWinAppUtil.exe
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-11/create-deploy-win32.ps1
-
https://config.office.com/deploymentsettings
-
https://www.microsoft.com/en-US/download/details.aspx?id=49117
-
https://config.office.com/
-
https://learn.microsoft.com/en-us/deployoffice/updates/overview-update-channels
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-11/add-office-updatepolicy.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-11/windows-MAM.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-11/windows-mam-conditional-access.ps1
-
https://andrewstaylor.com/2022/11/22/intune-comparing-system-vs-user-for-everything/
-
https://github.com/JayRHa/EndpointAnalyticsRemediationScripts
-
https://github.com/andrew-s-taylor/public/blob/main/Powershell%20Scripts/Intune/bulk-run-remediation-ondemand.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-13/connectors-and-tokens.ps1
-
https://portal.manage.microsoft.com/
-
https://graph.microsoft.com/beta/deviceManagement/intuneBrandingProfiles
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-13/customizations-intune.ps1
-
https://entra.microsoft.com/#view/Microsoft_AAD_UsersAndTenants/CompanyBrandingOverview.ReactView
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-13/new-custom-notification.ps1
-
https://learn.microsoft.com/en-us/mem/intune/fundamentals/whats-new
-
https://learn.microsoft.com/en-us/mem/intune/remote-actions/collect-diagnostics#data-collected
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-13/update-deviceplatformrestrictions.ps1
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/tree/main/Chapter-14
-
https://www.microsoft.com/en-gb/microsoft-365/roadmap?rtc=3&filters=Microsoft%20Intune#owRoadmapMainContent
-
https://www.microsoft.com/en-us/security/business/microsoft-intune-pricing
-
https://aka.ms/downloadremotehelp
-
https://play.google.com/store/apps/details?id=com.microsoft.intune.remotehelp
-
https://learn.microsoft.com/en-us/mem/intune/protect/microsoft-tunnel-configure
-
https://learn.microsoft.com/en-us/mem/analytics/device-scopes
-
https://learn.microsoft.com/en-us/mem/analytics/enhanced-device-timeline
-
https://github.com/PacktPublishing/Microsoft-Intune-Cookbook/blob/main/Chapter-14/create-epm-rule.ps1
-
http://packtpub.com/
-
https://packt.link/9781803248486
-
https://packt.link/9781803247946
- Show all
-