Dohdoor Possible Harmful DLL Loaded From Shared Folder
Detects a library file with a common Windows name being loaded from a shared folder instead of the Windows folders. This can be a sign that a fake library file is being used to run harmful code.
Sigma
