Nsis Updateassistant Dll Sideload Staging

Arnold Chan@slaz

•updated 29 days ago•0•0•0

Detects NSIS installer/archive contents bundling the specific unsigned/renamed UpdateAssistant.exe (aka AppUpdateHelper.exe) payload alongside its associated staged runtime DLLs and known malicious file paths/hashes used as cover noise for DLL sideloading staging