GigaWiper Screen Recording Output Written to ProgramData

Duo Tech@duotech

•updated Jul 21, 2026•1•0•1

Detects the creation of files within the 'ProgramData\output\' directory, a pattern associated with the GigaWiper malware which utilizes this location to store captured screen recordings or screenshots during its operation.