Potential SolidPDFCreator.DLL Sideloading

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•15

Detects potential DLL sideloading of "SolidPDFCreator.dll" when loaded by an executable other than "SolidPDFCreator.exe" or from an unexpected directory. This technique can be used by adversaries for persistence, defense evasion, and privilege escalation.