Load a DLL located in the c:\test folder with a specific name.
Extexport.exe c:\test foo bar
Load a DLL located in the c:\test folder with one of the following names mozcrt19.dll, mozsqlite3.dll, or sqlite.dll
Execute dll file
C:\Program Files\Internet Explorer\Extexport.exe, C:\Program Files (x86)\Internet Explorer\Extexport.exe
Sigma: https://github.com/SigmaHQ/sigma/blob/c04bef2fbbe8beff6c7620d5d7ea6872dbe7acba/rules/windows/process_creation/proc_creation_win_lolbin_extexport.yml, IOC: Extexport.exe loads dll and is execute from other folder the original path
Adam (@hexacorn)