DLL Side-Loading of install.res.1033.dll by Renamed install.exe
Detects instances where a process named 'install.exe' loads a DLL named 'install.res.1033.dll' from the same directory. This pattern is often associated with software installers or potential masquerading attempts where malicious payloads utilize specific resource DLL naming conventions.
Cortex XDR
