![rundll32 exe process library rundll32 exe process library](https://www.drivers.com/wp-content/uploads/2018/06/rundll32-exe-system-32-folder.jpg)
Static PE information: DYNAMIC_BA SE, NX_COM PATīinary string: WdfCoInsta ller01009. Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_IATĬontains modern PE file flags such as dynamic base (ASLR) or NX Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_LOAD_CO NFIG Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_DEBUG Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_BASEREL OC Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_RESOURC E Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_IMPORT PE file contains a mix of data directories often seen in goodware
Rundll32 exe process library code#
text) which is very likely to contain packed code (zlib compression ratio 1048576 Sample file is different than original file name gathered from version infoīinary or memory string: OriginalFi lenameWdfC oInstaller. Static PE information: Resource n ame: RT_RC DATA type: Microsoft Cabinet a rchive dat a, 1384567 bytes, 2 files PE file contains executable resources (Code or Archives) Stop behavior analysis, all processes terminated.Found application associated with file extension.Correcting counters for adjusted boot time.Number of analysed new started processes analysed:
![rundll32 exe process library rundll32 exe process library](https://www.techilife.com/wp-content/uploads/2020/07/rundll32.exe_.png)
Windows 7 SP1 (with Office 2010 SP2, IE 11, FF 54, Chrome 60, Acrobat Reader DC 17, Flash 26, Java.