劫持自启动程序
最后更新于
最后更新于
通过篡改、替换或代理原dll文件来达到劫持。
1.DLL替换：用恶意DLL替换合法的DLL。 2.DLL搜索顺序劫持：在应用程序指定的不带路径的DLL中。根据搜索顺序，将恶意DLL放在实际DLL之前的搜索位置。大部分时候都是目标应用程序的工作目录。（微软文档：https://docs.microsoft.com/zh-cn/windows/win32/dlls/dynamic-link-library-search-order） 3.Phantom DLL劫持：丢弃一个恶意的DLL来代替合法应用程序尝试加载的丢失/不存在的DLL。 4.DLL重定向：通过编辑，改变DLL被搜索的位置，例如%PATH%环境变量，或.exe.manifest/.exe.local文件。 5.WinSxS DLL替换：用恶意DLL替换WinSxS文件夹中合法的DLL。 6.相对路径DLL劫持：将合法的应用程序复制到用户可写文件夹中，并添加恶意DLL。
寻找开机自启的exe文件，并使用Process Explorer寻找是否有not found的dll文件，有的话直接放在对应位置（顺便提交拿一个CVE），没有就替换正常要加载的dll。建议做一个dll转发来保证程序正常运行。 厚颜无耻的放一个自己的文章：
可以考虑搭配下面这个文章实现user权限的劫持
此处列出“c:\windows\system32”中易受DLL Hijacking的所有可执行文件。每个可执行文件的旁边是一个或多个可以被劫持的DLL，以及被调用的DLL的函数，可以方便的进行利用。
来源：
Auto-elevated
Executable
DLL
Procedure
✔️
bthudtask.exe
DEVOBJ.dll
DllMain
✔️
computerdefaults.exe
CRYPTBASE.DLL
DllMain
✔️
computerdefaults.exe
edputil.dll
DllMain
✔️
computerdefaults.exe
edputil.dll
EdpGetIsManaged
✔️
computerdefaults.exe
MLANG.dll
ConvertINetUnicodeToMultiByte
✔️
computerdefaults.exe
MLANG.dll
DllMain
✔️
computerdefaults.exe
PROPSYS.dll
DllMain
✔️
computerdefaults.exe
PROPSYS.dll
PSCreateMemoryPropertyStore
✔️
computerdefaults.exe
PROPSYS.dll
PSPropertyBag_WriteDWORD
✔️
computerdefaults.exe
Secur32.dll
DllMain
✔️
computerdefaults.exe
SSPICLI.DLL
DllMain
✔️
computerdefaults.exe
SSPICLI.DLL
GetUserNameExW
✔️
computerdefaults.exe
WININET.dll
DllMain
✔️
computerdefaults.exe
WININET.dll
GetUrlCacheEntryBinaryBlob
✔️
dccw.exe
ColorAdapterClient.dll
DllMain
✔️
dccw.exe
dxva2.dll
DllMain
✔️
dccw.exe
mscms.dll
DccwReleaseDisplayProfileAssociationList
✔️
dccw.exe
mscms.dll
DllMain
✔️
dccw.exe
mscms.dll
WcsGetCalibrationManagementState
✔️
dccw.exe
mscms.dll
WcsSetCalibrationManagementState
✔️
dccw.exe
USERENV.dll
DllMain
✔️
easinvoker.exe
AUTHZ.dll
DllMain
✔️
easinvoker.exe
netutils.dll
DllMain
✔️
easinvoker.exe
samcli.dll
DllMain
✔️
easinvoker.exe
SAMLIB.dll
DllMain
✔️
easpolicymanagerbrokerhost.exe
InprocLogger.dll
DllMain
✔️
easpolicymanagerbrokerhost.exe
InprocLogger.dll
FlushInProcTraceSession
✔️
easpolicymanagerbrokerhost.exe
InprocLogger.dll
InitializeInProcLogger
✔️
easpolicymanagerbrokerhost.exe
InprocLogger.dll
InitializeInProcTraceFlushTrigger
✔️
easpolicymanagerbrokerhost.exe
InprocLogger.dll
InitializeInProcTraceSession
✔️
easpolicymanagerbrokerhost.exe
InprocLogger.dll
ShutdownInProcLogger
✔️
easpolicymanagerbrokerhost.exe
InprocLogger.dll
ShutdownInProcTraceSession
✔️
easpolicymanagerbrokerhost.exe
InprocLogger.dll
StopInProcTraceSession
✔️
easpolicymanagerbrokerhost.exe
policymanager.dll
DllMain
✔️
fodhelper.exe
CRYPTBASE.DLL
DllMain
✔️
fodhelper.exe
edputil.dll
DllMain
✔️
fodhelper.exe
edputil.dll
EdpGetIsManaged
✔️
fodhelper.exe
MLANG.dll
ConvertINetUnicodeToMultiByte
✔️
fodhelper.exe
MLANG.dll
DllMain
✔️
fodhelper.exe
PROPSYS.dll
DllMain
✔️
fodhelper.exe
PROPSYS.dll
PSCreateMemoryPropertyStore
✔️
fodhelper.exe
PROPSYS.dll
PSPropertyBag_WriteDWORD
✔️
fodhelper.exe
Secur32.dll
DllMain
✔️
fodhelper.exe
SSPICLI.DLL
DllMain
✔️
fodhelper.exe
SSPICLI.DLL
GetUserNameExW
✔️
fodhelper.exe
WININET.dll
DllMain
✔️
fodhelper.exe
WININET.dll
GetUrlCacheEntryBinaryBlob
✔️
fsavailux.exe
DEVOBJ.dll
DllMain
✔️
fxsunatd.exe
FXSAPI.dll
DllMain
✔️
fxsunatd.exe
FXSAPI.dll
FaxConnectFaxServerW
✔️
fxsunatd.exe
IPHLPAPI.DLL
DllMain
✔️
fxsunatd.exe
PROPSYS.dll
DllMain
✔️
immersivetpmvscmgrsvr.exe
DEVOBJ.dll
DllMain
✔️
iscsicli.exe
DEVOBJ.dll
DllMain
✔️
iscsicli.exe
ISCSIDSC.dll
DllMain
✔️
iscsicli.exe
ISCSIDSC.dll
GetIScsiVersionInformation
✔️
iscsicli.exe
ISCSIUM.dll
DiscpAllocMemory
✔️
iscsicli.exe
ISCSIUM.dll
DiscpRegisterHeap
✔️
iscsicli.exe
ISCSIUM.dll
DllMain
✔️
iscsicli.exe
WMICLNT.dll
DllMain
✔️
mdsched.exe
bcd.dll
DllMain
✔️
mschedexe.exe
MaintenanceUI.dll
DllMain
✔️
msconfig.exe
ATL.DLL
AtlModuleInit
✔️
msconfig.exe
ATL.DLL
AtlModuleRegisterClassObjects
✔️
msconfig.exe
ATL.DLL
DllMain
✔️
msconfig.exe
bcd.dll
DllMain
✔️
msdt.exe
ATL.DLL
DllMain
✔️
msdt.exe
Cabinet.dll
DllMain
✔️
msdt.exe
SSPICLI.DLL
DllMain
✔️
msdt.exe
UxTheme.dll
DllMain
✔️
msdt.exe
wer.dll
DllMain
✔️
msdt.exe
WINHTTP.dll
DllMain
✔️
multidigimon.exe
NInput.dll
DllMain
✔️
netplwiz.exe
CRYPTBASE.dll
DllMain
✔️
netplwiz.exe
DSROLE.dll
DllMain
✔️
netplwiz.exe
DSROLE.dll
DsRoleGetPrimaryDomainInformation
✔️
netplwiz.exe
NETPLWIZ.dll
DllMain
✔️
netplwiz.exe
NETPLWIZ.dll
UsersRunDllW
✔️
netplwiz.exe
netutils.dll
DllMain
✔️
netplwiz.exe
netutils.dll
NetApiBufferFree
✔️
netplwiz.exe
PROPSYS.dll
DllMain
✔️
netplwiz.exe
samcli.dll
DllMain
✔️
netplwiz.exe
samcli.dll
NetUserGetInfo
✔️
netplwiz.exe
SAMLIB.dll
DllMain
✔️
netplwiz.exe
SAMLIB.dll
SamConnect
✔️
netplwiz.exe
SAMLIB.dll
SamEnumerateDomainsInSamServer
✔️
netplwiz.exe
SAMLIB.dll
SamFreeMemory
✔️
optionalfeatures.exe
DUI70.dll
DllMain
✔️
optionalfeatures.exe
DUI70.dll
InitProcessPriv
✔️
optionalfeatures.exe
DUI70.dll
RegisterBaseControls
✔️
optionalfeatures.exe
DUI70.dll
RegisterCommonControls
✔️
optionalfeatures.exe
DUI70.dll
RegisterExtendedControls
✔️
optionalfeatures.exe
DUI70.dll
RegisterStandardControls
✔️
optionalfeatures.exe
msi.dll
DllMain
✔️
optionalfeatures.exe
OLEACC.dll
CreateStdAccessibleObject
✔️
optionalfeatures.exe
OLEACC.dll
DllMain
✔️
optionalfeatures.exe
OLEACC.dll
GetRoleTextW
✔️
optionalfeatures.exe
osbaseln.dll
CloseOsBaseline
✔️
optionalfeatures.exe
osbaseln.dll
DllMain
✔️
optionalfeatures.exe
osbaseln.dll
OpenOsBaseline
✔️
optionalfeatures.exe
PROPSYS.dll
DllMain
✔️
perfmon.exe
ATL.DLL
DllMain
✔️
perfmon.exe
credui.dll
DllMain
✔️
perfmon.exe
SspiCli.dll
DllMain
✔️
printui.exe
IPHLPAPI.DLL
DllMain
✔️
printui.exe
printui.dll
DllMain
✔️
printui.exe
printui.dll
PrintUIEntryW
✔️
printui.exe
PROPSYS.dll
DllMain
✔️
printui.exe
puiapi.dll
DllMain
✔️
recdisc.exe
bcd.dll
DllMain
✔️
recdisc.exe
Cabinet.dll
DllMain
✔️
recdisc.exe
ReAgent.dll
DllMain
✔️
rstrui.exe
bcd.dll
DllMain
✔️
rstrui.exe
ktmw32.dll
DllMain
✔️
rstrui.exe
SPP.dll
DllMain
✔️
rstrui.exe
SPP.dll
SxTracerGetThreadContextRetail
✔️
rstrui.exe
SRCORE.dll
DllMain
✔️
rstrui.exe
SRCORE.dll
SrFreeRestoreStatus
✔️
rstrui.exe
VSSAPI.DLL
DllMain
✔️
rstrui.exe
VssTrace.DLL
DllMain
✔️
rstrui.exe
wer.dll
DllMain
✔️
sdclt.exe
bcd.dll
DllMain
✔️
sdclt.exe
Cabinet.dll
DllMain
✔️
sdclt.exe
CLDAPI.dll
CfGetPlaceholderStateFromAttributeTag
✔️
sdclt.exe
CLDAPI.dll
DllMain
✔️
sdclt.exe
CRYPTBASE.DLL
DllMain
✔️
sdclt.exe
edputil.dll
DllMain
✔️
sdclt.exe
edputil.dll
EdpGetIsManaged
✔️
sdclt.exe
FLTLIB.DLL
DllMain
✔️
sdclt.exe
PROPSYS.dll
DllMain
✔️
sdclt.exe
PROPSYS.dll
PSCreateMemoryPropertyStore
✔️
sdclt.exe
PROPSYS.dll
PSPropertyBag_WriteDWORD
✔️
sdclt.exe
ReAgent.dll
DllMain
✔️
sdclt.exe
SPP.dll
DllMain
✔️
sdclt.exe
SPP.dll
SxTracerGetThreadContextRetail
✔️
sdclt.exe
SspiCli.dll
DllMain
✔️
sdclt.exe
SspiCli.dll
GetUserNameExW
✔️
sdclt.exe
UxTheme.dll
DllMain
✔️
sdclt.exe
VSSAPI.DLL
DllMain
✔️
sdclt.exe
VssTrace.DLL
DllMain
✔️
sdclt.exe
wer.dll
DllMain
✔️
sdclt.exe
WTSAPI32.dll
DllMain
✔️
systempropertiesadvanced.exe
bcd.dll
DllMain
✔️
systempropertiesadvanced.exe
credui.dll
DllMain
✔️
systempropertiesadvanced.exe
DNSAPI.dll
DllMain
✔️
systempropertiesadvanced.exe
DSROLE.DLL
DllMain
✔️
systempropertiesadvanced.exe
DSROLE.DLL
DsRoleGetPrimaryDomainInformation
✔️
systempropertiesadvanced.exe
LOGONCLI.DLL
DllMain
✔️
systempropertiesadvanced.exe
netid.dll
CreateNetIDPropertyPage
✔️
systempropertiesadvanced.exe
netid.dll
DllMain
✔️
systempropertiesadvanced.exe
NETUTILS.DLL
DllMain
✔️
systempropertiesadvanced.exe
SRVCLI.DLL
DllMain
✔️
systempropertiesadvanced.exe
WINBRAND.dll
DllMain
✔️
systempropertiesadvanced.exe
WINSTA.dll
DllMain
✔️
systempropertiesadvanced.exe
WKSCLI.DLL
DllMain
✔️
systempropertiescomputername.exe
bcd.dll
DllMain
✔️
systempropertiescomputername.exe
WINSTA.dll
DllMain
✔️
systempropertiesdataexecutionprevention.exe
bcd.dll
DllMain
✔️
systempropertiesdataexecutionprevention.exe
WINSTA.dll
DllMain
✔️
systempropertieshardware.exe
bcd.dll
DllMain
✔️
systempropertieshardware.exe
WINSTA.dll
DllMain
✔️
systempropertiesprotection.exe
bcd.dll
DllMain
✔️
systempropertiesprotection.exe
WINSTA.dll
DllMain
✔️
systempropertiesremote.exe
bcd.dll
DllMain
✔️
systempropertiesremote.exe
WINSTA.dll
DllMain
✔️
systemreset.exe
bcd.dll
BcdCloseObject
✔️
systemreset.exe
bcd.dll
BcdCloseStore
✔️
systemreset.exe
bcd.dll
BcdFlushStore
✔️
systemreset.exe
bcd.dll
BcdGetElementData
✔️
systemreset.exe
bcd.dll
BcdOpenObject
✔️
systemreset.exe
bcd.dll
BcdOpenStore
✔️
systemreset.exe
bcd.dll
DllMain
✔️
systemreset.exe
Cabinet.dll
DllMain
✔️
systemreset.exe
d3d10warp.dll
DllMain
✔️
systemreset.exe
d3d10warp.dll
OpenAdapter10_2
✔️
systemreset.exe
d3d11.dll
D3D11CreateDevice
✔️
systemreset.exe
d3d11.dll
DllMain
✔️
systemreset.exe
dbgcore.DLL
DllMain
✔️
systemreset.exe
DismApi.DLL
DllMain
✔️
systemreset.exe
dxgi.dll
CreateDXGIFactory1
✔️
systemreset.exe
dxgi.dll
DllMain
✔️
systemreset.exe
FVEAPI.dll
DllMain
✔️
systemreset.exe
FVEAPI.dll
FveGetStatus
✔️
systemreset.exe
FVEAPI.dll
FveOpenVolumeW
✔️
systemreset.exe
ReAgent.dll
DllMain
✔️
systemreset.exe
ReAgent.dll
WinReGetConfig
✔️
systemreset.exe
ResetEngine.dll
DllMain
✔️
systemreset.exe
ResetEngine.dll
ResetCreateSession
✔️
systemreset.exe
ResetEngine.dll
ResetReleaseSession
✔️
systemreset.exe
ResetEngine.dll
ResetTraceClientInfo
✔️
systemreset.exe
ResetEngine.dll
ResetValidateScenario
✔️
systemreset.exe
tbs.dll
DllMain
✔️
systemreset.exe
VSSAPI.DLL
DllMain
✔️
systemreset.exe
VssTrace.DLL
DllMain
✔️
systemreset.exe
WDSCORE.dll
ConstructPartialMsgVW
✔️
systemreset.exe
WDSCORE.dll
CurrentIP
✔️
systemreset.exe
WDSCORE.dll
DllMain
✔️
systemreset.exe
WDSCORE.dll
WdsInitialize
✔️
systemreset.exe
WDSCORE.dll
WdsSetupLogMessageW
✔️
systemreset.exe
WIMGAPI.DLL
DllMain
✔️
systemreset.exe
WIMGAPI.DLL
WIMCreateFile
✔️
systemreset.exe
WINHTTP.dll
DllMain
✔️
systemreset.exe
WOFUTIL.dll
DllMain
✔️
systemreset.exe
XmlLite.dll
DllMain
✔️
systemsettingsadminflows.exe
AppXDeploymentClient.dll
DllMain
✔️
systemsettingsadminflows.exe
Bcp47Langs.dll
DllMain
✔️
systemsettingsadminflows.exe
DEVRTL.dll
DllMain
✔️
systemsettingsadminflows.exe
DismApi.DLL
DllMain
✔️
systemsettingsadminflows.exe
DNSAPI.dll
DllMain
✔️
systemsettingsadminflows.exe
FirewallAPI.dll
DllMain
✔️
systemsettingsadminflows.exe
fwbase.dll
DllMain
✔️
systemsettingsadminflows.exe
fwbase.dll
FwCriticalSectionCreate
✔️
systemsettingsadminflows.exe
fwbase.dll
FwCriticalSectionDestroy
✔️
systemsettingsadminflows.exe
logoncli.dll
DllMain
✔️
systemsettingsadminflows.exe
netutils.dll
DllMain
✔️
systemsettingsadminflows.exe
newdev.dll
DllMain
✔️
systemsettingsadminflows.exe
PROPSYS.dll
DllMain
✔️
systemsettingsadminflows.exe
samcli.dll
DllMain
✔️
systemsettingsadminflows.exe
SspiCli.dll
DllMain
✔️
systemsettingsadminflows.exe
StateRepository.Core.dll
DllMain
✔️
systemsettingsadminflows.exe
SystemSettingsThresholdAdminFlowUI.dll
DllMain
✔️
systemsettingsadminflows.exe
timesync.dll
DllMain
✔️
systemsettingsadminflows.exe
USERENV.dll
DllMain
✔️
systemsettingsadminflows.exe
WINBRAND.dll
DllMain
✔️
systemsettingsadminflows.exe
wkscli.dll
DllMain
✔️
systemsettingsadminflows.exe
Wldp.dll
DllMain
✔️
systemsettingsadminflows.exe
WTSAPI32.dll
DllMain
✔️
taskmgr.exe
credui.dll
DllMain
✔️
taskmgr.exe
d3d11.dll
DllMain
✔️
taskmgr.exe
d3d12.dll
DllMain
✔️
taskmgr.exe
dxgi.dll
DllMain
✔️
taskmgr.exe
pdh.dll
DllMain
✔️
taskmgr.exe
UxTheme.dll
DllMain
✔️
tcmsetup.exe
TAPI32.dll
DllMain
✔️
winsat.exe
d3d10_1.dll
DllMain
✔️
winsat.exe
d3d10_1core.dll
DllMain
✔️
winsat.exe
d3d10.dll
DllMain
✔️
winsat.exe
d3d10core.dll
DllMain
✔️
winsat.exe
d3d11.dll
DllMain
✔️
winsat.exe
dxgi.dll
DllMain
✔️
winsat.exe
winmm.dll
DllMain
✔️
wsreset.exe
licensemanagerapi.dll
DllMain
✔️
wsreset.exe
licensemanagerapi.dll
Reset
✔️
wsreset.exe
wevtapi.dll
DllMain
✔️
wusa.exe
dpx.dll
DllMain
✔️
wusa.exe
WTSAPI32.dll
DllMain
❌
agentservice.exe
ACTIVEDS.dll
DllMain
❌
agentservice.exe
adsldpc.dll
DllMain
❌
agentservice.exe
FLTLIB.DLL
DllMain
❌
applytrustoffline.exe
mintdh.dll
DllMain
❌
applytrustoffline.exe
mintdh.dll
TdhpSetWbemExtensionBlock
❌
applytrustoffline.exe
StateRepository.Core.dll
DllMain
❌
arp.exe
IPHLPAPI.DLL
DllMain
❌
arp.exe
snmpapi.dll
DllMain
❌
at.exe
cryptdll.dll
DllMain
❌
at.exe
netutils.dll
DllMain
❌
at.exe
NtlmShared.dll
DllMain
❌
at.exe
schedcli.dll
DllMain
❌
at.exe
schedcli.dll
NetScheduleJobEnum
❌
at.exe
sspicli.dll
DllMain
❌
at.exe
sspicli.dll
InitSecurityInterfaceW
❌
auditpol.exe
auditpolcore.dll
AdtEnableSinglePrivilege
❌
auditpol.exe
auditpolcore.dll
AuditPolicyData_DeleteAuditDataInstance
❌
auditpol.exe
auditpolcore.dll
DllMain
❌
auditpol.exe
auditpolcore.dll
LoadFormatStringAndPrintToConsole
❌
baaupdate.exe
FVEAPI.dll
DllMain
❌
bdechangepin.exe
FVEAPI.dll
DllMain
❌
bdechangepin.exe
FVEAPI.dll
FveGetAuthMethodInformation
❌
bdechangepin.exe
FVEAPI.dll
FveGetStatus
❌
bdechangepin.exe
FVEAPI.dll
FveOpenVolumeW
❌
bdeuisrv.exe
USERENV.dll
DllMain
❌
bdeuisrv.exe
WTSAPI32.dll
DllMain
❌
bioiso.exe
iumbase.DLL
DllMain
❌
bootim.exe
bcd.dll
BcdGetElementData
❌
bootim.exe
bcd.dll
BcdOpenObject
❌
bootim.exe
bcd.dll
BcdOpenSystemStore
❌
bootim.exe
bcd.dll
BcdQueryObject
❌
bootim.exe
bcd.dll
DllMain
❌
bootim.exe
BootMenuUX.DLL
CreateBareMetalRecoveryButton
❌
bootim.exe
BootMenuUX.DLL
CreateBootableOSButtonCollection
❌
bootim.exe
BootMenuUX.DLL
CreateCloudRecoveryButton
❌
bootim.exe
BootMenuUX.DLL
CreateDefaultOSButton
❌
bootim.exe
BootMenuUX.DLL
CreateDeviceListButton
❌
bootim.exe
BootMenuUX.DLL
CreateDirectFactoryResetButton
❌
bootim.exe
BootMenuUX.DLL
CreateOSListButton
❌
bootim.exe
BootMenuUX.DLL
CreateRecoveryToolsListButton
❌
bootim.exe
BootMenuUX.DLL
CreateSelectOSPage
❌
bootim.exe
BootMenuUX.DLL
CreateShutdownButton
❌
bootim.exe
BootMenuUX.DLL
DllMain
❌
bootim.exe
Cabinet.dll
DllMain
❌
bootim.exe
dbghelp.dll
DllMain
❌
bootim.exe
DismApi.DLL
DllMain
❌
bootim.exe
FLTLIB.DLL
DllMain
❌
bootim.exe
OLEACC.dll
DllMain
❌
bootim.exe
OLEACC.dll
GetRoleTextW
❌
bootim.exe
PROPSYS.dll
DllMain
❌
bootim.exe
PROPSYS.dll
PSCreateMemoryPropertyStore
❌
bootim.exe
ReAgent.dll
DllMain
❌
bootim.exe
ReAgent.dll
WinReGetConfig
❌
bootim.exe
ResetEng.dll
DllMain
❌
bootim.exe
tbs.dll
DllMain
❌
bootim.exe
VirtDisk.dll
DllMain
❌
bootim.exe
VSSAPI.DLL
DllMain
❌
bootim.exe
VssTrace.DLL
DllMain
❌
bootim.exe
WDSCORE.dll
ConstructPartialMsgVW
❌
bootim.exe
WDSCORE.dll
CurrentIP
❌
bootim.exe
WDSCORE.dll
DllMain
❌
bootim.exe
WDSCORE.dll
WdsSetupLogMessageW
❌
calc.exe
CRYPTBASE.DLL
DllMain
❌
calc.exe
edputil.dll
DllMain
❌
calc.exe
edputil.dll
EdpGetIsManaged
❌
calc.exe
MLANG.dll
ConvertINetUnicodeToMultiByte
❌
calc.exe
MLANG.dll
DllMain
❌
calc.exe
PROPSYS.dll
DllMain
❌
calc.exe
PROPSYS.dll
PSCreateMemoryPropertyStore
❌
calc.exe
PROPSYS.dll
PSPropertyBag_WriteDWORD
❌
calc.exe
Secur32.dll
DllMain
❌
calc.exe
SSPICLI.DLL
DllMain
❌
calc.exe
SSPICLI.DLL
GetUserNameExW
❌
calc.exe
WININET.dll
DllMain
❌
calc.exe
WININET.dll
GetUrlCacheEntryBinaryBlob
❌
certreq.exe
cscapi.dll
CscNetApiGetInterface
❌
certreq.exe
cscapi.dll
DllMain
❌
certreq.exe
DUI70.dll
DllMain
❌
certreq.exe
DUI70.dll
FlushThemeHandles
❌
certreq.exe
DUI70.dll
InitProcessPriv
❌
certreq.exe
DUI70.dll
InitThread
❌
certreq.exe
dwmapi.dll
DllMain
❌
certreq.exe
dwmapi.dll
DwmSetWindowAttribute
❌
certreq.exe
LINKINFO.dll
DllMain
❌
certreq.exe
LINKINFO.dll
IsValidLinkInfo
❌
certreq.exe
SSPICLI.DLL
DllMain
❌
certreq.exe
WindowsCodecs.dll
DllMain
❌
certreq.exe
WindowsCodecs.dll
WICCreateImagingFactory_Proxy
❌
certreq.exe
WININET.dll
DllMain
❌
certreq.exe
XmlLite.dll
CreateXmlReader
❌
certreq.exe
XmlLite.dll
CreateXmlReaderInputWithEncodingName
❌
certreq.exe
XmlLite.dll
DllMain
❌
certutil.exe
Cabinet.dll
DllMain
❌
certutil.exe
CRYPTUI.dll
DllMain
❌
certutil.exe
DSROLE.DLL
DllMain
❌
certutil.exe
LOGONCLI.DLL
DllMain
❌
certutil.exe
NETUTILS.DLL
DllMain
❌
certutil.exe
NTDSAPI.dll
DllMain
❌
certutil.exe
SAMCLI.DLL
DllMain
❌
certutil.exe
SSPICLI.DLL
DllMain
❌
change.exe
logoncli.dll
DllMain
❌
change.exe
netutils.dll
DllMain
❌
change.exe
samcli.dll
DllMain
❌
change.exe
srvcli.dll
DllMain
❌
change.exe
utildll.dll
DllMain
❌
change.exe
WINSTA.dll
DllMain
❌
charmap.exe
GetUName.dll
DllMain
❌
charmap.exe
MSFTEDIT.DLL
DllMain
❌
checknetisolation.exe
DNSAPI.dll
DllMain
❌
checknetisolation.exe
FirewallAPI.dll
DllMain
❌
checknetisolation.exe
fwbase.dll
DllMain
❌
checknetisolation.exe
fwbase.dll
FwAlloc
❌
checknetisolation.exe
fwbase.dll
FwCriticalSectionCreate
❌
checknetisolation.exe
fwbase.dll
FwCriticalSectionDestroy
❌
checknetisolation.exe
fwbase.dll
FwFree
❌
checknetisolation.exe
fwpuclnt.dll
DllMain
❌
chglogon.exe
logoncli.dll
DllMain
❌
chglogon.exe
netutils.dll
DllMain
❌
chglogon.exe
REGAPI.dll
DllMain
❌
chglogon.exe
samcli.dll
DllMain
❌
chglogon.exe
srvcli.dll
DllMain
❌
chglogon.exe
utildll.dll
DllMain
❌
chglogon.exe
WINSTA.dll
DllMain
❌
chgport.exe
logoncli.dll
DllMain
❌
chgport.exe
netutils.dll
DllMain
❌
chgport.exe
samcli.dll
DllMain
❌
chgport.exe
srvcli.dll
DllMain
❌
chgport.exe
utildll.dll
DllMain
❌
chgport.exe
WINSTA.dll
DllMain
❌
chkdsk.exe
DEVOBJ.dll
DllMain
❌
chkntfs.exe
DEVOBJ.dll
DllMain
❌
cipher.exe
DSROLE.dll
DllMain
❌
cipher.exe
EFSUTIL.dll
DllMain
❌
cipher.exe
FeClient.dll
DllMain
❌
cipher.exe
iertutil.dll
DllMain
❌
cipher.exe
NTDSAPI.dll
DllMain
❌
cipher.exe
VAULTCLI.dll
DllMain
❌
clipup.exe
CRYPTXML.dll
DllMain
❌
clipup.exe
webservices.dll
DllMain
❌
cmdl32.exe
Cabinet.dll
DllMain
❌
cmdl32.exe
cmpbk32.dll
DllMain
❌
cmdl32.exe
RASAPI32.dll
DllMain
❌
cmdl32.exe
rasman.dll
DllMain
❌
cmdl32.exe
WINHTTP.dll
DllMain
❌
colorcpl.exe
ColorAdapterClient.dll
DllMain
❌
colorcpl.exe
colorui.dll
DllMain
❌
colorcpl.exe
colorui.dll
LaunchColorCpl
❌
colorcpl.exe
IPHLPAPI.DLL
DllMain
❌
colorcpl.exe
mscms.dll
ColorCplInitialize
❌
colorcpl.exe
mscms.dll
ColorCplUninitialize
❌
colorcpl.exe
mscms.dll
DllMain
❌
colorcpl.exe
PROPSYS.dll
DllMain
❌
colorcpl.exe
USERENV.dll
DllMain
❌
compmgmtlauncher.exe
apphelp.dll
ApphelpCheckShellObject
❌
compmgmtlauncher.exe
apphelp.dll
DllMain
❌
compmgmtlauncher.exe
CLDAPI.dll
CfGetPlaceholderStateFromAttributeTag
❌
compmgmtlauncher.exe
CLDAPI.dll
DllMain
❌
compmgmtlauncher.exe
CRYPTBASE.dll
DllMain
❌
compmgmtlauncher.exe
CRYPTBASE.dll
SystemFunction036
❌
compmgmtlauncher.exe
edputil.dll
DllMain
❌
compmgmtlauncher.exe
edputil.dll
EdpGetIsManaged
❌
compmgmtlauncher.exe
FLTLIB.DLL
DllMain
❌
compmgmtlauncher.exe
PROPSYS.dll
DllMain
❌
compmgmtlauncher.exe
PROPSYS.dll
PSCreateMemoryPropertyStore
❌
compmgmtlauncher.exe
PROPSYS.dll
PSPropertyBag_WriteDWORD
❌
ctfmon.exe
MsCtfMonitor.DLL
DllMain
❌
ctfmon.exe
MsCtfMonitor.DLL
DoMsCtfMonitor
❌
ctfmon.exe
MSUTB.dll
DllMain
❌
ctfmon.exe
WINSTA.dll
DllMain
❌
cttune.exe
DWrite.dll
DllMain
❌
cttune.exe
DWrite.dll
DWriteCreateFactory
❌
cttune.exe
OLEACC.dll
DllMain
❌
cttune.exe
UxTheme.dll
DllMain
❌
dataexchangehost.exe
d2d1.dll
DllMain
❌
dataexchangehost.exe
d3d11.dll
DllMain
❌
dataexchangehost.exe
DWrite.dll
DllMain
❌
dataexchangehost.exe
dxgi.dll
DllMain
❌
datausagelivetiletask.exe
dusmapi.dll
DllMain
❌
datausagelivetiletask.exe
IPHLPAPI.DLL
DllMain
❌
ddodiag.exe
XmlLite.dll
CreateXmlReader
❌
ddodiag.exe
XmlLite.dll
DllMain
❌
deploymentcsphelper.exe
dbgcore.DLL
DllMain
❌
deploymentcsphelper.exe
DismApi.DLL
DllMain
❌
deploymentcsphelper.exe
WDSCORE.dll
ConstructPartialMsgVW
❌
deploymentcsphelper.exe
WDSCORE.dll
CurrentIP
❌
deploymentcsphelper.exe
WDSCORE.dll
DllMain
❌
deploymentcsphelper.exe
WDSCORE.dll
WdsInitialize
❌
deploymentcsphelper.exe
WDSCORE.dll
WdsSetupLogMessageW
❌
deploymentcsphelper.exe
WDSCORE.dll
WdsTerminate
❌
devicecensus.exe
dcntel.dll
DllMain
❌
devicecensus.exe
dcntel.dll
GetCensusRegistryLocation
❌
devicecensus.exe
dcntel.dll
RunSystemContextCensus
❌
devicecensus.exe
dcntel.dll
SetCustomTrigger
❌
devicecensus.exe
dcntel.dll
SetCustomTriggerEx
❌
devicecensus.exe
IPHLPAPI.DLL
DllMain
❌
devicecensus.exe
IPHLPAPI.DLL
GetAdaptersInfo
❌
devicecensus.exe
logoncli.dll
DllMain
❌
devicecensus.exe
logoncli.dll
DsGetDcNameW
❌
devicecensus.exe
netutils.dll
DllMain
❌
devicecensus.exe
netutils.dll
NetApiBufferAllocate
❌
devicecensus.exe
WINHTTP.dll
DllMain
❌
devicecredentialdeployment.exe
DeviceCredential.dll
DllMain
❌
deviceenroller.exe
DEVOBJ.dll
DllMain
❌
deviceenroller.exe
DMCmnUtils.dll
CopyString
❌
deviceenroller.exe
DMCmnUtils.dll
DllMain
❌
deviceenroller.exe
dmEnrollEngine.DLL
DllMain
❌
deviceenroller.exe
dmenterprisediagnostics.dll
DllMain
❌
deviceenroller.exe
iri.dll
DllMain
❌
deviceenroller.exe
netutils.dll
DllMain
❌
deviceenroller.exe
omadmapi.dll
DllMain
❌
deviceenroller.exe
omadmapi.dll
FreeCommandLineOptions
❌
deviceenroller.exe
omadmapi.dll
ProcessCommandLine
❌
deviceenroller.exe
samcli.dll
DllMain
❌
deviceenroller.exe
USERENV.dll
DllMain
❌
deviceenroller.exe
XmlLite.dll
DllMain
❌
devicepairingwizard.exe
dwmapi.dll
DllMain
❌
devicepairingwizard.exe
dwmapi.dll
DwmExtendFrameIntoClientArea
❌
devicepairingwizard.exe
OLEACC.dll
DllMain
❌
devicepairingwizard.exe
OLEACC.dll
GetRoleTextW
❌
dfrgui.exe
SXSHARED.dll
DllMain
❌
dfrgui.exe
SXSHARED.dll
SxTracerGetThreadContextRetail
❌
dialer.exe
rtutils.dll
DllMain
❌
dialer.exe
rtutils.dll
TraceRegisterExW
❌
dialer.exe
rtutils.dll
TraceVprintfExA
❌
dialer.exe
SspiCli.dll
DllMain
❌
dialer.exe
SspiCli.dll
GetUserNameExW
❌
dialer.exe
TAPI32.dll
DllMain
❌
dialer.exe
TAPI32.dll
lineInitializeExW
❌
disksnapshot.exe
CRYPTBASE.dll
DllMain
❌
disksnapshot.exe
CRYPTBASE.dll
SystemFunction036
❌
dispdiag.exe
DEVOBJ.dll
DevObjCreateDeviceInfoList
❌
dispdiag.exe
DEVOBJ.dll
DevObjDestroyDeviceInfoList
❌
dispdiag.exe
DEVOBJ.dll
DevObjGetClassDevs
❌
dispdiag.exe
DEVOBJ.dll
DllMain
❌
dispdiag.exe
DXVA2.dll
DllMain
❌
dispdiag.exe
DXVA2.dll
GetNumberOfPhysicalMonitorsFromHMONITOR
❌
dispdiag.exe
WMICLNT.dll
DllMain
❌
dispdiag.exe
WMICLNT.dll
WmiDevInstToInstanceNameW
❌
dispdiag.exe
WMICLNT.dll
WmiOpenBlock
❌
displayswitch.exe
dwmapi.dll
DllMain
❌
displayswitch.exe
policymanager.dll
DllMain
❌
displayswitch.exe
policymanager.dll
PolicyManager_GetPolicyInt
❌
displayswitch.exe
UxTheme.dll
DllMain
❌
displayswitch.exe
WINSTA.dll
DllMain
❌
djoin.exe
dbgcore.DLL
DllMain
❌
djoin.exe
JOINUTIL.DLL
DllMain
❌
djoin.exe
logoncli.dll
DllMain
❌
djoin.exe
netutils.dll
DllMain
❌
djoin.exe
netutils.dll
NetApiBufferFree
❌
djoin.exe
wdscore.dll
ConstructPartialMsgVW
❌
djoin.exe
wdscore.dll
CurrentIP
❌
djoin.exe
wdscore.dll
DllMain
❌
djoin.exe
wdscore.dll
WdsSetupLogDestroy
❌
djoin.exe
wdscore.dll
WdsSetupLogInit
❌
djoin.exe
wdscore.dll
WdsSetupLogMessageW
❌
djoin.exe
wkscli.dll
DllMain
❌
dmcertinst.exe
certenroll.dll
DllMain
❌
dmcertinst.exe
DMCmnUtils.dll
DllMain
❌
dmcertinst.exe
DSPARSE.dll
DllMain
❌
dmcertinst.exe
iri.dll
DllMain
❌
dmcertinst.exe
omadmapi.dll
DllMain
❌
dmcertinst.exe
omadmapi.dll
ProcessCommandLine
❌
dmcfghost.exe
DMCmnUtils.dll
DllMain
❌
dmcfghost.exe
DMPushProxy.dll
DllMain
❌
dmcfghost.exe
DMPushProxy.dll
PushRouter_FreeGetMessageEventName
❌
dmcfghost.exe
DMPushProxy.dll
PushRouter_Open
❌
dmcfghost.exe
dmxmlhelputils.dll
DllMain
❌
dmcfghost.exe
dsclient.dll
DllMain
❌
dmcfghost.exe
iri.dll
DllMain
❌
dmcfghost.exe
omadmapi.dll
DllMain
❌
dmcfghost.exe
XmlLite.dll
DllMain
❌
dmclient.exe
WINHTTP.dll
DllMain
❌
dmclient.exe
XmlLite.dll
DllMain
❌
dmnotificationbroker.exe
DMCmnUtils.dll
DllMain
❌
dmomacpmo.exe
DEVOBJ.dll
DllMain
❌
dmomacpmo.exe
DMCmnUtils.dll
DllMain
❌
dmomacpmo.exe
dmEnrollEngine.DLL
DllMain
❌
dmomacpmo.exe
DMProcessXMLFiltered.dll
DllMain
❌
dmomacpmo.exe
dsclient.dll
DllMain
❌
dmomacpmo.exe
iri.dll
DllMain
❌
dmomacpmo.exe
omadmapi.dll
DllMain
❌
dmomacpmo.exe
omadmapi.dll
ProcessCommandLine
❌
dmomacpmo.exe
USERENV.dll
DllMain
❌
dmomacpmo.exe
XmlLite.dll
DllMain
❌
dnscacheugc.exe
dbgcore.DLL
DllMain
❌
dnscacheugc.exe
IPHLPAPI.DLL
DllMain
❌
dnscacheugc.exe
wdscore.dll
ConstructPartialMsgVW
❌
dnscacheugc.exe
wdscore.dll
CurrentIP
❌
dnscacheugc.exe
wdscore.dll
DllMain
❌
dnscacheugc.exe
wdscore.dll
WdsSetupLogDestroy
❌
dnscacheugc.exe
wdscore.dll
WdsSetupLogInit
❌
dnscacheugc.exe
wdscore.dll
WdsSetupLogMessageW
❌
dpapimig.exe
netutils.dll
DllMain
❌
dpapimig.exe
netutils.dll
NetApiBufferFree
❌
dpapimig.exe
samcli.dll
DllMain
❌
dpapimig.exe
samcli.dll
NetUserModalsGet
❌
dpapimig.exe
SAMLIB.dll
DllMain
❌
dpapimig.exe
SAMLIB.dll
SamConnect
❌
dpapimig.exe
SAMLIB.dll
SamEnumerateDomainsInSamServer
❌
dpapimig.exe
SAMLIB.dll
SamFreeMemory
❌
dpiscaling.exe
CLDAPI.dll
CfGetPlaceholderStateFromAttributeTag
❌
dpiscaling.exe
CLDAPI.dll
DllMain
❌
dpiscaling.exe
CRYPTBASE.DLL
DllMain
❌
dpiscaling.exe
edputil.dll
DllMain
❌
dpiscaling.exe
edputil.dll
EdpGetIsManaged
❌
dpiscaling.exe
FLTLIB.DLL
DllMain
❌
dpiscaling.exe
PROPSYS.dll
DllMain
❌
dpiscaling.exe
PROPSYS.dll
PSCreateMemoryPropertyStore
❌
dpiscaling.exe
PROPSYS.dll
PSPropertyBag_WriteDWORD
❌
driverquery.exe
netutils.dll
DllMain
❌
driverquery.exe
srvcli.dll
DllMain
❌
driverquery.exe
SspiCli.dll
DllMain
❌
drvinst.exe
DEVOBJ.dll
DllMain
❌
drvinst.exe
DEVRTL.dll
DllMain
❌
dsregcmd.exe
dsreg.dll
DllMain
❌
dsregcmd.exe
logoncli.dll
DllMain
❌
dsregcmd.exe
netutils.dll
DllMain
❌
dsregcmd.exe
PROPSYS.dll
DllMain
❌
dsregcmd.exe
SSPICLI.DLL
DllMain
❌
dsregcmd.exe
USERENV.dll
DllMain
❌
dsregcmd.exe
WINHTTP.dll
DllMain
❌
dsregcmd.exe
WININET.dll
DllMain
❌
dsregcmd.exe
wkscli.dll
DllMain
❌
dstokenclean.exe
dsclient.dll
DllMain
❌
dstokenclean.exe
dsclient.dll
DSRemoveExpiredTokens
❌
dwm.exe
CoreMessaging.dll
DllMain
❌
dwm.exe
d2d1.dll
DllMain
❌
dwm.exe
d3d11.dll
DllMain
❌
dwm.exe
D3DCOMPILER_47.dll
DllMain
❌
dwm.exe
dwmcore.dll
DllMain
❌
dwm.exe
dxgi.dll
DllMain
❌
dwm.exe
dxgi.dll
DXGIDeclareAdapterRemovalSupport
❌
dwwin.exe
wer.dll
DllMain
❌
dxgiadaptercache.exe
d3d11.dll
DllMain
❌
dxgiadaptercache.exe
d3d12.dll
DllMain
❌
dxgiadaptercache.exe
dxgi.dll
DllMain
❌
dxpserver.exe
dwmapi.dll
DllMain
❌
dxpserver.exe
msi.dll
DllMain
❌
dxpserver.exe
PROPSYS.dll
DllMain
❌
dxpserver.exe
XmlLite.dll
DllMain
❌
easeofaccessdialog.exe
OLEACC.dll
DllMain
❌
edpcleanup.exe
DMCmnUtils.dll
DllMain
❌
edpcleanup.exe
DNSAPI.dll
DllMain
❌
edpcleanup.exe
FirewallAPI.dll
DllMain
❌
edpcleanup.exe
fwbase.dll
DllMain
❌
edpcleanup.exe
fwbase.dll
FwCriticalSectionCreate
❌
edpcleanup.exe
fwbase.dll
FwCriticalSectionDestroy
❌
edpcleanup.exe
netutils.dll
DllMain
❌
edpcleanup.exe
policymanager.dll
DllMain
❌
edpcleanup.exe
SspiCli.dll
DllMain
❌
edpcleanup.exe
wkscli.dll
DllMain
❌
eduprintprov.exe
deviceassociation.dll
DllMain
❌
eduprintprov.exe
policymanager.dll
DllMain
❌
eduprintprov.exe
policymanager.dll
PolicyManager_GetPolicy
❌
eduprintprov.exe
SspiCli.dll
DllMain
❌
eduprintprov.exe
SspiCli.dll
GetUserNameExW
❌
efsui.exe
credui.dll
DllMain
❌
efsui.exe
CRYPTBASE.DLL
DllMain
❌
efsui.exe
CRYPTUI.dll
DllMain
❌
efsui.exe
DSROLE.dll
DllMain
❌
efsui.exe
EFSADU.dll
DllMain
❌
efsui.exe
EFSUTIL.dll
DllMain
❌
efsui.exe
FeClient.dll
DllMain
❌
efsui.exe
logoncli.dll
DllMain
❌
efsui.exe
netutils.dll
DllMain
❌
efsui.exe
USERENV.dll
DllMain
❌
efsui.exe
VAULTCLI.dll
DllMain
❌
ehstorauthn.exe
UxTheme.dll
DllMain
❌
esentutl.exe
ESENT.dll
DllMain
❌
eventcreate.exe
netutils.dll
DllMain
❌
eventcreate.exe
srvcli.dll
DllMain
❌
eventcreate.exe
SspiCli.dll
DllMain
❌
expand.exe
Cabinet.dll
DllMain
❌
extrac32.exe
Cabinet.dll
DllMain
❌
fhmanagew.exe
fhsvcctl.dll
DllMain
❌
filehistory.exe
CRYPTBASE.dll
DllMain
❌
filehistory.exe
CRYPTBASE.dll
SystemFunction036
❌
filehistory.exe
UxTheme.dll
DllMain
❌
filehistory.exe
UxTheme.dll
EnableThemeDialogTexture
❌
filehistory.exe
UxTheme.dll
OpenThemeData
❌
fixmapi.exe
mapistub.dll
DllMain
❌
fixmapi.exe
mapistub.dll
FixMAPI
❌
fltmc.exe
FLTLIB.DLL
DllMain
❌
fltmc.exe
FLTLIB.DLL
FilterFindFirst
❌
fltmc.exe
FLTLIB.DLL
FilterFindNext
❌
fondue.exe
msi.dll
DllMain
❌
fondue.exe
osbaseln.dll
DllMain
❌
fondue.exe
PROPSYS.dll
DllMain
❌
fsiso.exe
iumbase.DLL
DllMain
❌
fsquirt.exe
DEVOBJ.dll
DevObjCreateDeviceInfoList
❌
fsquirt.exe
DEVOBJ.dll
DevObjDestroyDeviceInfoList
❌
fsquirt.exe
DEVOBJ.dll
DevObjGetClassDevs
❌
fsquirt.exe
DEVOBJ.dll
DllMain
❌
fsquirt.exe
dwmapi.dll
DllMain
❌
fsquirt.exe
dwmapi.dll
DwmExtendFrameIntoClientArea
❌
fsquirt.exe
OLEACC.dll
DllMain
❌
fsquirt.exe
OLEACC.dll
GetRoleTextW
❌
ftp.exe
SspiCli.dll
DllMain
❌
fvenotify.exe
FVEAPI.dll
DllMain
❌
fvenotify.exe
FVEAPI.dll
FveFindFirstVolume
❌
fvenotify.exe
FVEAPI.dll
FveFindNextVolume
❌
fvenotify.exe
FVEAPI.dll
FveGetStatus
❌
fvenotify.exe
FVEAPI.dll
FveGetVolumeNameW
❌
fvenotify.exe
FVEAPI.dll
FveIsVolumeEncryptable
❌
fvenotify.exe
FVEAPI.dll
FveOpenVolumeByHandle
❌
fvenotify.exe
FVEAPI.dll
FveOpenVolumeW
❌
fveprompt.exe
FVEAPI.dll
DllMain
❌
fxscover.exe
IPHLPAPI.DLL
DllMain
❌
fxscover.exe
IPHLPAPI.DLL
GetAdaptersAddresses
❌
fxssvc.exe
credui.dll
DllMain
❌
fxssvc.exe
FXSTIFF.dll
DllMain
❌
fxssvc.exe
IPHLPAPI.DLL
DllMain
❌
fxssvc.exe
PROPSYS.dll
DllMain
❌
fxssvc.exe
TAPI32.dll
DllMain
❌
gamepanel.exe
d2d1.dll
DllMain
❌
gamepanel.exe
d3d11.dll
DllMain
❌
gamepanel.exe
dcomp.dll
DllMain
❌
gamepanel.exe
dwmapi.dll
DllMain
❌
gamepanel.exe
dwmapi.dll
DwmSetWindowAttribute
❌
gamepanel.exe
DWrite.dll
DllMain
❌
gamepanel.exe
DWrite.dll
DWriteCreateFactory
❌
gamepanel.exe
dxgi.dll
CreateDXGIFactory2
❌
gamepanel.exe