WriteProcessMemory

High Caution Level
21 Techniques Count
Kernel32.dll Library Name
Read documentation

Through official Microsoft Developer Network (MSDN).

Featured in Techniques

Technique Name Technique ID's Categories Snippet(s) Rules(s)
IsDebugged Flag U0113 B0001.019
Process Hollowing, RunPE U1225 E1055.012
DLL Injection via CreateRemoteThread and LoadLibrary U1226 E1055.001
APC injection U1221 E1055.004
Atom Bombing U1220
Extra Window Memory Injection U1219 E1055.011
PE Injection U1216 E1055.002
ConsoleWindowClass U1209
Treepoline U1208
Listplanting U1207
OLEUM U1206
EditWordBreakProc U1229
WordWarping U1204
CLIPBRDWNDCLASS U1203
DNS API Injection U1202
Breaking BaDDEr U1201
File Melt U1007
Access Token Manipulation: Parent PID Spoofing U1234 T1134.004
NLS Code Injection Through Registry U1237
Dirty Vanity U1242
Process Argument Spoofing U1243

Matching Samples 10 most recent

Sample Name Matching Techniques First Seen Last Seen
prestige.dll 8 2026-07-01 2 weeks ago
2m96.exe 6 2026-06-30 2 weeks, 1 day ago
nopggplus.dll 5 2026-06-12 1 month ago
patcher - ORIGINAL.dll 5 2026-02-10 5 months ago
x64_AcroCEF.exe 5 2026-01-30 5 months, 2 weeks ago
x64_Acrobat.exe 9 2026-01-30 5 months, 2 weeks ago
x64_Acrobat.exe 9 2026-01-30 5 months, 2 weeks ago
0b98de4fbe9e42aa1b79f642c241...ac19b3fc5400705cfba61968.exe 5 2025-08-13 11 months ago
Real Ghost Hollowing Test Notepad Calc.exe 6 2025-07-05 1 year ago
tel.exe 13 2025-06-01 1 year, 1 month ago
View All