Name: CCleaner_Trojan.Floxif
(https://sensorstechforum.com/ccleaner-trojan-floxif-malware-how-to-remove/): Artifact used by this malware

Query:

select * from registry where path like 'HKEY_LOCAL_MACHINESOFTWAREPiriformAgomo%';

Additional Query Info:
Version: 2.2.1
Platform: windows
Interval: 3600

JSON:

{
  "queries": {
    "CCleaner_Trojan.Floxif": {
      "query" : "select * from registry where path like 'HKEY_LOCAL_MACHINESOFTWAREPiriformAgomo%';",
      "interval" : "3600",
      "platform" : "windows",
      "version": "2.2.1",
      "description" : "(https://sensorstechforum.com/ccleaner-trojan-floxif-malware-how-to-remove/)",
      "value" : "Artifact used by this malware"
    }
  }
}