Potential DLL Sideloading Via VMware Xfer

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•1

Detects loading of a DLL by the VMware Xfer utility from the non-default directory which may be an attempt to sideload arbitrary DLL