~/Privilege Escalation/Windows/Binaries# cat Extexport.exe.md

Paths:

C:\Program Files\Internet Explorer\Extexport.exe
C:\Program Files (x86)\Internet Explorer\Extexport.exe

Detection: Extexport.exe loads dll and is execute from other folder the original path

Execute

Load a DLL located in the c:\test folder with one of the following names mozcrt19.dll, mozsqlite3.dll, or sqlite.dll

Extexport.exe c:\test foo bar