indicatorregistry_key
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GupdateS
- First seen
- 2026-05-28
- Last seen
- 2026-05-28
- Sightings
- 1
Posts referencing this indicator
- The Gentlemen ransomware: Dissecting a self-propagating Go encryptor
System-level persistence mechanism