Suspicious wmiutils.dll Loaded [closed]
I have an IIS server and while monitoring the windows logs I encounter an interesting sysmon log.
It was an Event ID 7: Image loaded log which showed that w3wp.exe loaded wmiutils.dl.
They’re both legitimate versions and not tampered with…. Continue reading Suspicious wmiutils.dll Loaded [closed]