MSC denotes Microsoft Management Console files used as a malicious delivery format, not a single malware family. These XML-based Windows console files can register scripts, command lines, or programs and execute when double-clicked. Observed variants exploited CVE-2024-43572 in apds.dll or used Console Taskpad commands, often masquerading as PDF or Word documents. Kimsuky-themed samples opened decoys, downloaded payloads with cmd.exe or PowerShell, created scheduled tasks, and decoded encrypted data into VBS scripts.