All Detections

Exploit for CVE-2015-1641

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025010

Detects Winword starting uncommon sub process MicroScMgmt.exe as used in exploits for CVE-2015-1641

Sigma