BloodAlchemy DLL sideload via FineReader.exe loading dsp_ippv2_x64.dll

Adarsh Pandey@Pandeyadarsh

•updated Aug 25, 2026•2•0•4

This rule monitors for the loading of a specific DLL file ('dsp_ippv2_x64.dll') by 'FineReader.exe'. This pattern may be indicative of DLL side-loading or hijacking attempts, where a legitimate application is used to load a malicious library.