DLL side-loading of SolidPDFCreator.dll via ITG27 lure executables

Amit Ambekar@Amit007

•updated Aug 24, 2026•2•0•9

Detects the loading of 'SolidPDFCreator.dll' from a specific 'C:\ProgramData\IDM\logs\' directory by specific executables often associated with potential malicious activity or masquerading. This behavior is indicative of potential DLL side-loading or execution of masqueraded binaries.