Rundll32 davclnt.dll Execution Triggering WebClient Service (WebDAV Callout)

Duo Tech@duotech

•updated Jul 21, 2026•3•0•5

Detects rundll32.exe loading davclnt.dll, which triggers the WebClient service to auto-start and perform a network callout to retrieve WebDAV-hosted content.