Word Or Excel Spawns RunDLL32
I’m investigating an alert where the parent process Excel spawns RunDll32.
Parent Process:
"C:\\Program Files\\Microsoft Office\\Root\\Office16\\EXCEL.EXE\" \"C:\\Users\\john.doe\\Documents\\File.csv\"
Child Process:
… Continue reading Word Or Excel Spawns RunDLL32