Robuta

https://healthcyber.mitre.org/blog/car-analytics/certutil-download-with-urlcache-and-split-arguments-2/ CertUtil Download With URLCache and Split Arguments | Health Cyber: Ransomware Resource Center