Winsecurity Info 2

OSquery

(https://sensorstechforum.com/windows-infected-2-viruses-scam-remove/):

Query

select * from chrome_extensions join users using (uid) where name = 'Winsecurity.info';

Additional Query Info

  • Version: 2.2.1
  • Interval: 3600

JSON

{
  "queries": {
    "Winsecurity Info 2": {
      "query": "select * from chrome_extensions join users using (uid) where name = 'Winsecurity.info';",
      "interval": "3600",
      "platform": "",
      "version": "2.2.1",
      "description": "(https://sensorstechforum.com/windows-infected-2-viruses-scam-remove/)",
      "value": ""
    }
  }
}