IOC: Extexport.exe loads dll and is execute from other folder the original path
Execute
Load a DLL located in the c:\test folder with one of the following names mozcrt19.dll, mozsqlite3.dll, or sqlite.dll
Extexport.exe c:\test foo bar
Usecase: Execute dll file
Privileges required: User
OS: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
MITRE ATT&CK®: T1218