indicatorfilename
C:\ProgramData\WindowsUpdateService\UpdateDir\Ipd
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise
File path used by the malicious password filter DLL to store double-encoded captured credentials.