diff --git a/apts/ghost_emperor/info.md b/apts/ghost_emperor/info.md
index 83699f3..7ccc514 100644
--- a/apts/ghost_emperor/info.md
+++ b/apts/ghost_emperor/info.md
@@ -1,3 +1,5 @@
 https://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407/
 
-https://www.sygnia.co/blog/ghost-emperor-demodex-rootkit/
\ No newline at end of file
+https://www.sygnia.co/blog/ghost-emperor-demodex-rootkit/
+
+https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2021/09/30094337/GhostEmperor_technical-details_PDF_eng.pdf
\ No newline at end of file