Notepad++ ProShow Malicious File Creation

Georg Lauenstein@gsec

•updated Feb 9, 2026•1•0•56

Detects creation of malicious files in AppData\Roaming\ProShow directory used in infection chain.