BumbleBee DLL Sideload: consent.exe Loading msimg32.dll from ApplicationInstallationFolder_11

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•0

Detects the execution of 'consent.exe' from a user-writable temporary directory, specifically patterns associated with Bumblebee malware loading 'msimg32.dll' via DLL side-loading. This activity is often linked to trojanized installers like 'ManageEngine-OpManager.msi'.