Potential Iviewers.DLL Sideloading

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•15

Detects potential DLL sideloading of 'iviewers.dll' (OLE/COM Object Interface Viewer) when it is loaded from a location other than the legitimate Windows Kits directories. This technique can be used for persistence, defense evasion, and privilege escalation.