System Startup details for ab3a9512305e83caf94732f69ad985b2

Location

Registry Key

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\

Display Name

Windows Recavery Adware

Filename

lsass.exe

File MD5 Hash

C00D7D119E7E96D913AC7CBA3B9FC11B

Command

C:\WINDOWS\TEMP\lsass.exe