DLL side-loading via wwide9.dll loading FcHand.dll payload
Detects instances where two specific DLL files, 'wwide9.dll' and 'FcHand.dll', are loaded by the same process on a device. This pattern of concurrent loading may indicate the execution or injection of malicious components, as these specific filenames are often associated with threat actor activity or malware campaigns.
Microsoft Sentinel (KQL)
