| description | ioc | process |
|---|
| File opened for modification | C:\Windows\system32\symbols\dll\shell32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\DLL\imm32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\psapi.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\advapi32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\gdi32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\win32u.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\user32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\oleaut32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\psapi.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\msctf.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\msctf.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\ntdll.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\combase.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\imagehlp.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\gdi32full.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\comctl32v582.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\rpcrt4.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\sechost.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\sechost.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\gdi32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\kernel32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\shcore.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\msvcp_win.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\UxTheme.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\UxTheme.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\DLL\kernel32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\shell32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\bcryptprimitives.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\msimg32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dbghelp.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\exe\rundll32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\msvcrt.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\shcore.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\msvcp_win.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\msvcp_win.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\combase.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\rpcrt4.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\gdi32full.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\dbghelp.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\dbghelp.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\kernelbase.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\rpcrt4.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\oleaut32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\version.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\version.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\combase.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\ucrtbase.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\ce-lib64.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\gdi32full.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\ole32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\imm32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\DLL\imm32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\psapi.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\imagehlp.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\msimg32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\msctf.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\win32u.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\user32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\user32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\symbols\dll\msvcrt.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\ce-lib64.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\advapi32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\advapi32.pdb | rundll32.exe |
| File opened for modification | C:\Windows\system32\dll\gdi32.pdb | rundll32.exe |
