Network Connection Initiated By IMEWDBLD.EXE

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects a network connection initiated by IMEWDBLD.EXE. This might indicate potential abuse of the utility as a LOLBIN in order to download arbitrary files or additional payloads.