6 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Rundll32 Control RunDLL Hunt | Medium |
| Control Loading from World Writable Directory | Medium |
| Windows Office Product Spawned Control | Medium |
| Windows Office Product Loaded MSHTML Module | Informational |
| Windows Office Product Dropped Cab or Inf File | Medium |
| Rundll32 Control RunDLL World Writable Directory | Medium |
Showing 6 of 6