Essential information

Value / Name

winhttp.lib

Confidence

100/100

Revoked

No

Valid from

22/04/2026 14:45

Valid until

17/09/2026 14:40

Pattern type

stix

Published

22/04/2026 17:30

Modified

14/05/2026 05:19

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'winhttp.lib']

Labels / Tags

Labels: amsi-bypass azure-trusted-signing cmstplua-uac-bypass cryptor-as-a-service dll-sideloading etw-patching fudcrypt screenconnect

Marking (TLP)

TLP:CLEAR