Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'SecurityHealth' = '%APPDATA%\Microsoft\Windows Defender\Platform\SecurityHealthService.exe'
- %APPDATA%\microsoft\windows defender\platform\securityhealthservice.exe
- %APPDATA%\microsoft\windows defender\platform\securityhealthservice.exe
- '%APPDATA%\microsoft\windows defender\platform\securityhealthservice.exe'
- '%APPDATA%\microsoft\windows defender\platform\securityhealthservice.exe' ' (with hidden window)