Self Extracting Package Creation Via Iexpress.EXE From Potentially Suspicious Location (b2b048b0-7857-4380-b0fb-d3f0ab820b71)
Detects the use of iexpress.exe to create binaries via Self Extraction Directive (SED) files located in potentially suspicious locations. This behavior has been observed in-the-wild by different threat actors.