Windows Shell Common Dll Located at: c:\windows\system32\shell32.dll; c:\windows\syswow64\shell32.dll.
shell32shell32Sandbox: execFile · Timeout: 30s
security.execution.command Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | low |
| Disk I/O | low |
Launch a DLL payload by calling the Control_RunDLL function. (Load a DLL payload.)
rundll32.exe shell32.dll,Control_RunDLL {PATH_ABSOLUTE:.dll}Launch an executable by calling the ShellExec_RunDLL function. (Run an executable payload.)
rundll32.exe shell32.dll,ShellExec_RunDLL {PATH:.exe}Launch command line by calling the ShellExec_RunDLL function. (Run an executable payload.)
rundll32 SHELL32.DLL,ShellExec_RunDLL {PATH:.exe} {CMD:args}Load a DLL/CPL by calling undocumented Control_RunDLLNoFallback function. (Load a DLL/CPL payload.)
rundll32.exe shell32.dll,#44 {PATH:.dll}shell32 is a Windows LOLBin. Windows Shell Common Dll Located at: c:\windows\system32\shell32.dll; c:\windows\syswow64\shell32.dll.