🧰 rundll32.exe

The items that name it 2

• We've got one word for it, and it's usually the wrong one
  article2026-09-10

  Legitimate Windows utility abused to execute disguised DLLs through suspicious ordinal calls in the UAT-10820 campaign.

• Using a C# Shellcode Runner and ConfuserEx to Bypass UAC
  writeup2020-10-30

  Native Windows utility used to execute the exported Main function from the generated DLL (e.g., 'rundll32.exe .\Runner.dll,Main')