Tag
Adversaries may use sdbinst.exe to install shim databases with uncommon file extensions to establish persistence or elevate privileges.