HRSword (4a5d22a3-91c9-4026-b2aa-48e539cb3ca4)
HRSword is part of a security software suite developed by China-based Huorong Network Technology. It is designed to monitor system activity as part of endpoint protection but has been abused by ransomware crews to disable endpoint protection systems.[The Register EDR Killers March 31 2025]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| HRSword (4a5d22a3-91c9-4026-b2aa-48e539cb3ca4) | Tidal Software | Play (60f686d0-ae3d-5662-af32-119217dee2a7) | Tidal Groups | 1 |