All Detections

Rundll32 InstallScreenSaver Execution

avatar
SigmaHQ Detections@sigmaHQ
updated Apr 28, 2026000

An attacker may execute an application as a SCR File using rundll32.exe desk.cpl,InstallScreenSaver

Sigma