indicatorfilename

C:\ProgramData\Microsoft\windosDoc\update.txt

First seen: 2026-05-13
Last seen: 2026-05-14
Sightings: 1

Posts referencing this indicator

Intelligence Center
Dropped .NET loader disguised as a text file
2026-05-13