![c windows syswow64 rundll32 exe c windows syswow64 rundll32 exe](http://img.xitongcheng.com/upload/20180802/15332226636340.png)
For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
![c windows syswow64 rundll32 exe c windows syswow64 rundll32 exe](https://ugetfix.com/wp-content/uploads/articles/askit/how-to-fix-rundll32-exe-error-on-windows_en.jpg)
![c windows syswow64 rundll32 exe c windows syswow64 rundll32 exe](https://www.personalcomputerfixes.com/wp-content/uploads/2011/11/rundll32-exe-error.jpg)
Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_BASEREL OC Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_RESOURC E Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_IMPORT PE file contains a mix of data directories often seen in goodware Static file information: File size 7188992 > 1048576 Joe Sandbox Cloud Basic: Detection: clean Sco re: 0īinary contains paths to development resourcesĬlassification label: mal48.winD file is bigger than most known malware samples Process created: C:\Windows \SysWOW64\ cmd.exe cm d.exe /C r undll32.ex e 'C:\User s\user\Des ktop\games enselw.dll ',#1įound detection on Joe Sandbox Cloud Basic with higher score
C windows syswow64 rundll32 exe .exe#
exe loaddl l32.exe 'C :\Users\us er\Desktop \gamesense lw.dll' Process created: C:\Windows \System32\ loaddll32. Process created: C:\Windows \SysWOW64\ rundll32.e xe rundll3 2.exe 'C: \Users\use r\Desktop\ gamesensel w.dll',#1 Key opened: HKEY_CURRE NT_USER\So ftware\Pol icies\Micr osoft\Wind ows\Safer\ CodeIdenti fiers text IMAGE _SCN_MEM_E XECUTE, IM AGE_SCN_CN T_CODE, IM AGE_SCN_ME M_READ text section and no other executable section Static PE information: 32BIT_MACH INE, EXECU TABLE_IMAG E, DLL