All Detections

DLL Sideloading by VMware Xfer Utility

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects execution of VMware Xfer utility (VMwareXferlogs.exe) from the non-default directory which may be an attempt to sideload arbitrary DLL

Sigma