All Detections

DLL Sideloading by VMware Xfer Utility

avatar
SigmaHQ Detections@sigmaHQ
updated Apr 28, 2026000

Detects execution of VMware Xfer utility (VMwareXferlogs.exe) from the non-default directory which may be an attempt to sideload arbitrary DLL

Sigma