Skip to content

<<< Hide Navigation Hide TOC >>>

DLL Loaded via CertOC.EXE (242301bc-f92f-4476-8718-78004a6efd9f)

Detects when a user installs certificates by using CertOC.exe to loads the target DLL file.

Galaxy ColorsSigma-Rule...Attack Pat...
Rows: 1
Loading extensions...
Collapse filters
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.2

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Cluster A Galaxy A Cluster B Galaxy B Level
DLL Loaded via CertOC.EXE (242301bc-f92f-4476-8718-78004a6efd9f) Sigma-Rules System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4) Attack Pattern 1