Suspicious LocalAppData Updater Executable
Detects the execution of executables with names like 'Updater.exe' from suspicious paths in the AppData\Local directory, which are associated with fake PDF converter malware families like PDFClick, Easy2Convert, and ConvertMate.
Sigma
