Sun.ocx DLL Registration Detection

Shivam Malaviya@Shviam

•updated Jul 4, 2025•1•23

This detection identifies the registration of a suspicious OCX file named "sun.ocx" using rundll32.exe with DllRegisterServer, a pattern often associated with malware installation and persistence. The rule is valid.