Overview
Indicators of compromise associated with win.ghostengine. 1 indicator listed below.
Not exhaustive, and confidence varies. Always corroborate against your own telemetry before taking action.
| Type | Indicator | First Seen | Confidence |
|---|---|---|---|
| url | https://ghostloader.xyz//loader/build_87390/encrypted/stage2.exe | October 3, 2026 | 100% |
Related content