劫持自启动程序

原理：

通过篡改、替换或代理原dll文件来达到劫持。

方法：

1.DLL替换：用恶意DLL替换合法的DLL。 2.DLL搜索顺序劫持：在应用程序指定的不带路径的DLL中。根据搜索顺序，将恶意DLL放在实际DLL之前的搜索位置。大部分时候都是目标应用程序的工作目录。（微软文档：https://docs.microsoft.com/zh-cn/windows/win32/dlls/dynamic-link-library-search-order） 3.Phantom DLL劫持：丢弃一个恶意的DLL来代替合法应用程序尝试加载的丢失/不存在的DLL。 4.DLL重定向：通过编辑，改变DLL被搜索的位置，例如%PATH%环境变量，或.exe.manifest/.exe.local文件。 5.WinSxS DLL替换：用恶意DLL替换WinSxS文件夹中合法的DLL。 6.相对路径DLL劫持：将合法的应用程序复制到用户可写文件夹中，并添加恶意DLL。

实际使用：

寻找开机自启的exe文件，并使用Process Explorer寻找是否有not found的dll文件，有的话直接放在对应位置（顺便提交拿一个CVE），没有就替换正常要加载的dll。建议做一个dll转发来保证程序正常运行。 厚颜无耻的放一个自己的文章：

[原创]一种劫持 explorer 过启动的想法-软件逆向-看雪论坛-安全社区|安全招聘|bbs.pediy.com[原创]一种劫持 explorer 过启动的想法-软件逆向-看雪论坛-安全社区|安全招聘|bbs.pediy.com

可以考虑搭配下面这个文章实现user权限的劫持

Windows Telemetry service elevation of privilegesecret club

附表

此处列出“c:\windows\system32”中易受DLL Hijacking的所有可执行文件。每个可执行文件的旁边是一个或多个可以被劫持的DLL，以及被调用的DLL的函数，可以方便的进行利用。

来源：

Auto-elevated	Executable	DLL	Procedure
✔️	bthudtask.exe	DEVOBJ.dll	DllMain
✔️	computerdefaults.exe	CRYPTBASE.DLL	DllMain
✔️	computerdefaults.exe	edputil.dll	DllMain
✔️	computerdefaults.exe	edputil.dll	EdpGetIsManaged
✔️	computerdefaults.exe	MLANG.dll	ConvertINetUnicodeToMultiByte
✔️	computerdefaults.exe	MLANG.dll	DllMain
✔️	computerdefaults.exe	PROPSYS.dll	DllMain
✔️	computerdefaults.exe	PROPSYS.dll	PSCreateMemoryPropertyStore
✔️	computerdefaults.exe	PROPSYS.dll	PSPropertyBag_WriteDWORD
✔️	computerdefaults.exe	Secur32.dll	DllMain
✔️	computerdefaults.exe	SSPICLI.DLL	DllMain
✔️	computerdefaults.exe	SSPICLI.DLL	GetUserNameExW
✔️	computerdefaults.exe	WININET.dll	DllMain
✔️	computerdefaults.exe	WININET.dll	GetUrlCacheEntryBinaryBlob
✔️	dccw.exe	ColorAdapterClient.dll	DllMain
✔️	dccw.exe	dxva2.dll	DllMain
✔️	dccw.exe	mscms.dll	DccwReleaseDisplayProfileAssociationList
✔️	dccw.exe	mscms.dll	DllMain
✔️	dccw.exe	mscms.dll	WcsGetCalibrationManagementState
✔️	dccw.exe	mscms.dll	WcsSetCalibrationManagementState
✔️	dccw.exe	USERENV.dll	DllMain
✔️	easinvoker.exe	AUTHZ.dll	DllMain
✔️	easinvoker.exe	netutils.dll	DllMain
✔️	easinvoker.exe	samcli.dll	DllMain
✔️	easinvoker.exe	SAMLIB.dll	DllMain
✔️	easpolicymanagerbrokerhost.exe	InprocLogger.dll	DllMain
✔️	easpolicymanagerbrokerhost.exe	InprocLogger.dll	FlushInProcTraceSession
✔️	easpolicymanagerbrokerhost.exe	InprocLogger.dll	InitializeInProcLogger
✔️	easpolicymanagerbrokerhost.exe	InprocLogger.dll	InitializeInProcTraceFlushTrigger
✔️	easpolicymanagerbrokerhost.exe	InprocLogger.dll	InitializeInProcTraceSession
✔️	easpolicymanagerbrokerhost.exe	InprocLogger.dll	ShutdownInProcLogger
✔️	easpolicymanagerbrokerhost.exe	InprocLogger.dll	ShutdownInProcTraceSession
✔️	easpolicymanagerbrokerhost.exe	InprocLogger.dll	StopInProcTraceSession
✔️	easpolicymanagerbrokerhost.exe	policymanager.dll	DllMain
✔️	fodhelper.exe	CRYPTBASE.DLL	DllMain
✔️	fodhelper.exe	edputil.dll	DllMain
✔️	fodhelper.exe	edputil.dll	EdpGetIsManaged
✔️	fodhelper.exe	MLANG.dll	ConvertINetUnicodeToMultiByte
✔️	fodhelper.exe	MLANG.dll	DllMain
✔️	fodhelper.exe	PROPSYS.dll	DllMain
✔️	fodhelper.exe	PROPSYS.dll	PSCreateMemoryPropertyStore
✔️	fodhelper.exe	PROPSYS.dll	PSPropertyBag_WriteDWORD
✔️	fodhelper.exe	Secur32.dll	DllMain
✔️	fodhelper.exe	SSPICLI.DLL	DllMain
✔️	fodhelper.exe	SSPICLI.DLL	GetUserNameExW
✔️	fodhelper.exe	WININET.dll	DllMain
✔️	fodhelper.exe	WININET.dll	GetUrlCacheEntryBinaryBlob
✔️	fsavailux.exe	DEVOBJ.dll	DllMain
✔️	fxsunatd.exe	FXSAPI.dll	DllMain
✔️	fxsunatd.exe	FXSAPI.dll	FaxConnectFaxServerW
✔️	fxsunatd.exe	IPHLPAPI.DLL	DllMain
✔️	fxsunatd.exe	PROPSYS.dll	DllMain
✔️	immersivetpmvscmgrsvr.exe	DEVOBJ.dll	DllMain
✔️	iscsicli.exe	DEVOBJ.dll	DllMain
✔️	iscsicli.exe	ISCSIDSC.dll	DllMain
✔️	iscsicli.exe	ISCSIDSC.dll	GetIScsiVersionInformation
✔️	iscsicli.exe	ISCSIUM.dll	DiscpAllocMemory
✔️	iscsicli.exe	ISCSIUM.dll	DiscpRegisterHeap
✔️	iscsicli.exe	ISCSIUM.dll	DllMain
✔️	iscsicli.exe	WMICLNT.dll	DllMain
✔️	mdsched.exe	bcd.dll	DllMain
✔️	mschedexe.exe	MaintenanceUI.dll	DllMain
✔️	msconfig.exe	ATL.DLL	AtlModuleInit
✔️	msconfig.exe	ATL.DLL	AtlModuleRegisterClassObjects
✔️	msconfig.exe	ATL.DLL	DllMain
✔️	msconfig.exe	bcd.dll	DllMain
✔️	msdt.exe	ATL.DLL	DllMain
✔️	msdt.exe	Cabinet.dll	DllMain
✔️	msdt.exe	SSPICLI.DLL	DllMain
✔️	msdt.exe	UxTheme.dll	DllMain
✔️	msdt.exe	wer.dll	DllMain
✔️	msdt.exe	WINHTTP.dll	DllMain
✔️	multidigimon.exe	NInput.dll	DllMain
✔️	netplwiz.exe	CRYPTBASE.dll	DllMain
✔️	netplwiz.exe	DSROLE.dll	DllMain
✔️	netplwiz.exe	DSROLE.dll	DsRoleGetPrimaryDomainInformation
✔️	netplwiz.exe	NETPLWIZ.dll	DllMain
✔️	netplwiz.exe	NETPLWIZ.dll	UsersRunDllW
✔️	netplwiz.exe	netutils.dll	DllMain
✔️	netplwiz.exe	netutils.dll	NetApiBufferFree
✔️	netplwiz.exe	PROPSYS.dll	DllMain
✔️	netplwiz.exe	samcli.dll	DllMain
✔️	netplwiz.exe	samcli.dll	NetUserGetInfo
✔️	netplwiz.exe	SAMLIB.dll	DllMain
✔️	netplwiz.exe	SAMLIB.dll	SamConnect
✔️	netplwiz.exe	SAMLIB.dll	SamEnumerateDomainsInSamServer
✔️	netplwiz.exe	SAMLIB.dll	SamFreeMemory
✔️	optionalfeatures.exe	DUI70.dll	DllMain
✔️	optionalfeatures.exe	DUI70.dll	InitProcessPriv
✔️	optionalfeatures.exe	DUI70.dll	RegisterBaseControls
✔️	optionalfeatures.exe	DUI70.dll	RegisterCommonControls
✔️	optionalfeatures.exe	DUI70.dll	RegisterExtendedControls
✔️	optionalfeatures.exe	DUI70.dll	RegisterStandardControls
✔️	optionalfeatures.exe	msi.dll	DllMain
✔️	optionalfeatures.exe	OLEACC.dll	CreateStdAccessibleObject
✔️	optionalfeatures.exe	OLEACC.dll	DllMain
✔️	optionalfeatures.exe	OLEACC.dll	GetRoleTextW
✔️	optionalfeatures.exe	osbaseln.dll	CloseOsBaseline
✔️	optionalfeatures.exe	osbaseln.dll	DllMain
✔️	optionalfeatures.exe	osbaseln.dll	OpenOsBaseline
✔️	optionalfeatures.exe	PROPSYS.dll	DllMain
✔️	perfmon.exe	ATL.DLL	DllMain
✔️	perfmon.exe	credui.dll	DllMain
✔️	perfmon.exe	SspiCli.dll	DllMain
✔️	printui.exe	IPHLPAPI.DLL	DllMain
✔️	printui.exe	printui.dll	DllMain
✔️	printui.exe	printui.dll	PrintUIEntryW
✔️	printui.exe	PROPSYS.dll	DllMain
✔️	printui.exe	puiapi.dll	DllMain
✔️	recdisc.exe	bcd.dll	DllMain
✔️	recdisc.exe	Cabinet.dll	DllMain
✔️	recdisc.exe	ReAgent.dll	DllMain
✔️	rstrui.exe	bcd.dll	DllMain
✔️	rstrui.exe	ktmw32.dll	DllMain
✔️	rstrui.exe	SPP.dll	DllMain
✔️	rstrui.exe	SPP.dll	SxTracerGetThreadContextRetail
✔️	rstrui.exe	SRCORE.dll	DllMain
✔️	rstrui.exe	SRCORE.dll	SrFreeRestoreStatus
✔️	rstrui.exe	VSSAPI.DLL	DllMain
✔️	rstrui.exe	VssTrace.DLL	DllMain
✔️	rstrui.exe	wer.dll	DllMain
✔️	sdclt.exe	bcd.dll	DllMain
✔️	sdclt.exe	Cabinet.dll	DllMain
✔️	sdclt.exe	CLDAPI.dll	CfGetPlaceholderStateFromAttributeTag
✔️	sdclt.exe	CLDAPI.dll	DllMain
✔️	sdclt.exe	CRYPTBASE.DLL	DllMain
✔️	sdclt.exe	edputil.dll	DllMain
✔️	sdclt.exe	edputil.dll	EdpGetIsManaged
✔️	sdclt.exe	FLTLIB.DLL	DllMain
✔️	sdclt.exe	PROPSYS.dll	DllMain
✔️	sdclt.exe	PROPSYS.dll	PSCreateMemoryPropertyStore
✔️	sdclt.exe	PROPSYS.dll	PSPropertyBag_WriteDWORD
✔️	sdclt.exe	ReAgent.dll	DllMain
✔️	sdclt.exe	SPP.dll	DllMain
✔️	sdclt.exe	SPP.dll	SxTracerGetThreadContextRetail
✔️	sdclt.exe	SspiCli.dll	DllMain
✔️	sdclt.exe	SspiCli.dll	GetUserNameExW
✔️	sdclt.exe	UxTheme.dll	DllMain
✔️	sdclt.exe	VSSAPI.DLL	DllMain
✔️	sdclt.exe	VssTrace.DLL	DllMain
✔️	sdclt.exe	wer.dll	DllMain
✔️	sdclt.exe	WTSAPI32.dll	DllMain
✔️	systempropertiesadvanced.exe	bcd.dll	DllMain
✔️	systempropertiesadvanced.exe	credui.dll	DllMain
✔️	systempropertiesadvanced.exe	DNSAPI.dll	DllMain
✔️	systempropertiesadvanced.exe	DSROLE.DLL	DllMain
✔️	systempropertiesadvanced.exe	DSROLE.DLL	DsRoleGetPrimaryDomainInformation
✔️	systempropertiesadvanced.exe	LOGONCLI.DLL	DllMain
✔️	systempropertiesadvanced.exe	netid.dll	CreateNetIDPropertyPage
✔️	systempropertiesadvanced.exe	netid.dll	DllMain
✔️	systempropertiesadvanced.exe	NETUTILS.DLL	DllMain
✔️	systempropertiesadvanced.exe	SRVCLI.DLL	DllMain
✔️	systempropertiesadvanced.exe	WINBRAND.dll	DllMain
✔️	systempropertiesadvanced.exe	WINSTA.dll	DllMain
✔️	systempropertiesadvanced.exe	WKSCLI.DLL	DllMain
✔️	systempropertiescomputername.exe	bcd.dll	DllMain
✔️	systempropertiescomputername.exe	WINSTA.dll	DllMain
✔️	systempropertiesdataexecutionprevention.exe	bcd.dll	DllMain
✔️	systempropertiesdataexecutionprevention.exe	WINSTA.dll	DllMain
✔️	systempropertieshardware.exe	bcd.dll	DllMain
✔️	systempropertieshardware.exe	WINSTA.dll	DllMain
✔️	systempropertiesprotection.exe	bcd.dll	DllMain
✔️	systempropertiesprotection.exe	WINSTA.dll	DllMain
✔️	systempropertiesremote.exe	bcd.dll	DllMain
✔️	systempropertiesremote.exe	WINSTA.dll	DllMain
✔️	systemreset.exe	bcd.dll	BcdCloseObject
✔️	systemreset.exe	bcd.dll	BcdCloseStore
✔️	systemreset.exe	bcd.dll	BcdFlushStore
✔️	systemreset.exe	bcd.dll	BcdGetElementData
✔️	systemreset.exe	bcd.dll	BcdOpenObject
✔️	systemreset.exe	bcd.dll	BcdOpenStore
✔️	systemreset.exe	bcd.dll	DllMain
✔️	systemreset.exe	Cabinet.dll	DllMain
✔️	systemreset.exe	d3d10warp.dll	DllMain
✔️	systemreset.exe	d3d10warp.dll	OpenAdapter10_2
✔️	systemreset.exe	d3d11.dll	D3D11CreateDevice
✔️	systemreset.exe	d3d11.dll	DllMain
✔️	systemreset.exe	dbgcore.DLL	DllMain
✔️	systemreset.exe	DismApi.DLL	DllMain
✔️	systemreset.exe	dxgi.dll	CreateDXGIFactory1
✔️	systemreset.exe	dxgi.dll	DllMain
✔️	systemreset.exe	FVEAPI.dll	DllMain
✔️	systemreset.exe	FVEAPI.dll	FveGetStatus
✔️	systemreset.exe	FVEAPI.dll	FveOpenVolumeW
✔️	systemreset.exe	ReAgent.dll	DllMain
✔️	systemreset.exe	ReAgent.dll	WinReGetConfig
✔️	systemreset.exe	ResetEngine.dll	DllMain
✔️	systemreset.exe	ResetEngine.dll	ResetCreateSession
✔️	systemreset.exe	ResetEngine.dll	ResetReleaseSession
✔️	systemreset.exe	ResetEngine.dll	ResetTraceClientInfo
✔️	systemreset.exe	ResetEngine.dll	ResetValidateScenario
✔️	systemreset.exe	tbs.dll	DllMain
✔️	systemreset.exe	VSSAPI.DLL	DllMain
✔️	systemreset.exe	VssTrace.DLL	DllMain
✔️	systemreset.exe	WDSCORE.dll	ConstructPartialMsgVW
✔️	systemreset.exe	WDSCORE.dll	CurrentIP
✔️	systemreset.exe	WDSCORE.dll	DllMain
✔️	systemreset.exe	WDSCORE.dll	WdsInitialize
✔️	systemreset.exe	WDSCORE.dll	WdsSetupLogMessageW
✔️	systemreset.exe	WIMGAPI.DLL	DllMain
✔️	systemreset.exe	WIMGAPI.DLL	WIMCreateFile
✔️	systemreset.exe	WINHTTP.dll	DllMain
✔️	systemreset.exe	WOFUTIL.dll	DllMain
✔️	systemreset.exe	XmlLite.dll	DllMain
✔️	systemsettingsadminflows.exe	AppXDeploymentClient.dll	DllMain
✔️	systemsettingsadminflows.exe	Bcp47Langs.dll	DllMain
✔️	systemsettingsadminflows.exe	DEVRTL.dll	DllMain
✔️	systemsettingsadminflows.exe	DismApi.DLL	DllMain
✔️	systemsettingsadminflows.exe	DNSAPI.dll	DllMain
✔️	systemsettingsadminflows.exe	FirewallAPI.dll	DllMain
✔️	systemsettingsadminflows.exe	fwbase.dll	DllMain
✔️	systemsettingsadminflows.exe	fwbase.dll	FwCriticalSectionCreate
✔️	systemsettingsadminflows.exe	fwbase.dll	FwCriticalSectionDestroy
✔️	systemsettingsadminflows.exe	logoncli.dll	DllMain
✔️	systemsettingsadminflows.exe	netutils.dll	DllMain
✔️	systemsettingsadminflows.exe	newdev.dll	DllMain
✔️	systemsettingsadminflows.exe	PROPSYS.dll	DllMain
✔️	systemsettingsadminflows.exe	samcli.dll	DllMain
✔️	systemsettingsadminflows.exe	SspiCli.dll	DllMain
✔️	systemsettingsadminflows.exe	StateRepository.Core.dll	DllMain
✔️	systemsettingsadminflows.exe	SystemSettingsThresholdAdminFlowUI.dll	DllMain
✔️	systemsettingsadminflows.exe	timesync.dll	DllMain
✔️	systemsettingsadminflows.exe	USERENV.dll	DllMain
✔️	systemsettingsadminflows.exe	WINBRAND.dll	DllMain
✔️	systemsettingsadminflows.exe	wkscli.dll	DllMain
✔️	systemsettingsadminflows.exe	Wldp.dll	DllMain
✔️	systemsettingsadminflows.exe	WTSAPI32.dll	DllMain
✔️	taskmgr.exe	credui.dll	DllMain
✔️	taskmgr.exe	d3d11.dll	DllMain
✔️	taskmgr.exe	d3d12.dll	DllMain
✔️	taskmgr.exe	dxgi.dll	DllMain
✔️	taskmgr.exe	pdh.dll	DllMain
✔️	taskmgr.exe	UxTheme.dll	DllMain
✔️	tcmsetup.exe	TAPI32.dll	DllMain
✔️	winsat.exe	d3d10_1.dll	DllMain
✔️	winsat.exe	d3d10_1core.dll	DllMain
✔️	winsat.exe	d3d10.dll	DllMain
✔️	winsat.exe	d3d10core.dll	DllMain
✔️	winsat.exe	d3d11.dll	DllMain
✔️	winsat.exe	dxgi.dll	DllMain
✔️	winsat.exe	winmm.dll	DllMain
✔️	wsreset.exe	licensemanagerapi.dll	DllMain
✔️	wsreset.exe	licensemanagerapi.dll	Reset
✔️	wsreset.exe	wevtapi.dll	DllMain
✔️	wusa.exe	dpx.dll	DllMain
✔️	wusa.exe	WTSAPI32.dll	DllMain
❌	agentservice.exe	ACTIVEDS.dll	DllMain
❌	agentservice.exe	adsldpc.dll	DllMain
❌	agentservice.exe	FLTLIB.DLL	DllMain
❌	applytrustoffline.exe	mintdh.dll	DllMain
❌	applytrustoffline.exe	mintdh.dll	TdhpSetWbemExtensionBlock
❌	applytrustoffline.exe	StateRepository.Core.dll	DllMain
❌	arp.exe	IPHLPAPI.DLL	DllMain
❌	arp.exe	snmpapi.dll	DllMain
❌	at.exe	cryptdll.dll	DllMain
❌	at.exe	netutils.dll	DllMain
❌	at.exe	NtlmShared.dll	DllMain
❌	at.exe	schedcli.dll	DllMain
❌	at.exe	schedcli.dll	NetScheduleJobEnum
❌	at.exe	sspicli.dll	DllMain
❌	at.exe	sspicli.dll	InitSecurityInterfaceW
❌	auditpol.exe	auditpolcore.dll	AdtEnableSinglePrivilege
❌	auditpol.exe	auditpolcore.dll	AuditPolicyData_DeleteAuditDataInstance
❌	auditpol.exe	auditpolcore.dll	DllMain
❌	auditpol.exe	auditpolcore.dll	LoadFormatStringAndPrintToConsole
❌	baaupdate.exe	FVEAPI.dll	DllMain
❌	bdechangepin.exe	FVEAPI.dll	DllMain
❌	bdechangepin.exe	FVEAPI.dll	FveGetAuthMethodInformation
❌	bdechangepin.exe	FVEAPI.dll	FveGetStatus
❌	bdechangepin.exe	FVEAPI.dll	FveOpenVolumeW
❌	bdeuisrv.exe	USERENV.dll	DllMain
❌	bdeuisrv.exe	WTSAPI32.dll	DllMain
❌	bioiso.exe	iumbase.DLL	DllMain
❌	bootim.exe	bcd.dll	BcdGetElementData
❌	bootim.exe	bcd.dll	BcdOpenObject
❌	bootim.exe	bcd.dll	BcdOpenSystemStore
❌	bootim.exe	bcd.dll	BcdQueryObject
❌	bootim.exe	bcd.dll	DllMain
❌	bootim.exe	BootMenuUX.DLL	CreateBareMetalRecoveryButton
❌	bootim.exe	BootMenuUX.DLL	CreateBootableOSButtonCollection
❌	bootim.exe	BootMenuUX.DLL	CreateCloudRecoveryButton
❌	bootim.exe	BootMenuUX.DLL	CreateDefaultOSButton
❌	bootim.exe	BootMenuUX.DLL	CreateDeviceListButton
❌	bootim.exe	BootMenuUX.DLL	CreateDirectFactoryResetButton
❌	bootim.exe	BootMenuUX.DLL	CreateOSListButton
❌	bootim.exe	BootMenuUX.DLL	CreateRecoveryToolsListButton
❌	bootim.exe	BootMenuUX.DLL	CreateSelectOSPage
❌	bootim.exe	BootMenuUX.DLL	CreateShutdownButton
❌	bootim.exe	BootMenuUX.DLL	DllMain
❌	bootim.exe	Cabinet.dll	DllMain
❌	bootim.exe	dbghelp.dll	DllMain
❌	bootim.exe	DismApi.DLL	DllMain
❌	bootim.exe	FLTLIB.DLL	DllMain
❌	bootim.exe	OLEACC.dll	DllMain
❌	bootim.exe	OLEACC.dll	GetRoleTextW
❌	bootim.exe	PROPSYS.dll	DllMain
❌	bootim.exe	PROPSYS.dll	PSCreateMemoryPropertyStore
❌	bootim.exe	ReAgent.dll	DllMain
❌	bootim.exe	ReAgent.dll	WinReGetConfig
❌	bootim.exe	ResetEng.dll	DllMain
❌	bootim.exe	tbs.dll	DllMain
❌	bootim.exe	VirtDisk.dll	DllMain
❌	bootim.exe	VSSAPI.DLL	DllMain
❌	bootim.exe	VssTrace.DLL	DllMain
❌	bootim.exe	WDSCORE.dll	ConstructPartialMsgVW
❌	bootim.exe	WDSCORE.dll	CurrentIP
❌	bootim.exe	WDSCORE.dll	DllMain
❌	bootim.exe	WDSCORE.dll	WdsSetupLogMessageW
❌	calc.exe	CRYPTBASE.DLL	DllMain
❌	calc.exe	edputil.dll	DllMain
❌	calc.exe	edputil.dll	EdpGetIsManaged
❌	calc.exe	MLANG.dll	ConvertINetUnicodeToMultiByte
❌	calc.exe	MLANG.dll	DllMain
❌	calc.exe	PROPSYS.dll	DllMain
❌	calc.exe	PROPSYS.dll	PSCreateMemoryPropertyStore
❌	calc.exe	PROPSYS.dll	PSPropertyBag_WriteDWORD
❌	calc.exe	Secur32.dll	DllMain
❌	calc.exe	SSPICLI.DLL	DllMain
❌	calc.exe	SSPICLI.DLL	GetUserNameExW
❌	calc.exe	WININET.dll	DllMain
❌	calc.exe	WININET.dll	GetUrlCacheEntryBinaryBlob
❌	certreq.exe	cscapi.dll	CscNetApiGetInterface
❌	certreq.exe	cscapi.dll	DllMain
❌	certreq.exe	DUI70.dll	DllMain
❌	certreq.exe	DUI70.dll	FlushThemeHandles
❌	certreq.exe	DUI70.dll	InitProcessPriv
❌	certreq.exe	DUI70.dll	InitThread
❌	certreq.exe	dwmapi.dll	DllMain
❌	certreq.exe	dwmapi.dll	DwmSetWindowAttribute
❌	certreq.exe	LINKINFO.dll	DllMain
❌	certreq.exe	LINKINFO.dll	IsValidLinkInfo
❌	certreq.exe	SSPICLI.DLL	DllMain
❌	certreq.exe	WindowsCodecs.dll	DllMain
❌	certreq.exe	WindowsCodecs.dll	WICCreateImagingFactory_Proxy
❌	certreq.exe	WININET.dll	DllMain
❌	certreq.exe	XmlLite.dll	CreateXmlReader
❌	certreq.exe	XmlLite.dll	CreateXmlReaderInputWithEncodingName
❌	certreq.exe	XmlLite.dll	DllMain
❌	certutil.exe	Cabinet.dll	DllMain
❌	certutil.exe	CRYPTUI.dll	DllMain
❌	certutil.exe	DSROLE.DLL	DllMain
❌	certutil.exe	LOGONCLI.DLL	DllMain
❌	certutil.exe	NETUTILS.DLL	DllMain
❌	certutil.exe	NTDSAPI.dll	DllMain
❌	certutil.exe	SAMCLI.DLL	DllMain
❌	certutil.exe	SSPICLI.DLL	DllMain
❌	change.exe	logoncli.dll	DllMain
❌	change.exe	netutils.dll	DllMain
❌	change.exe	samcli.dll	DllMain
❌	change.exe	srvcli.dll	DllMain
❌	change.exe	utildll.dll	DllMain
❌	change.exe	WINSTA.dll	DllMain
❌	charmap.exe	GetUName.dll	DllMain
❌	charmap.exe	MSFTEDIT.DLL	DllMain
❌	checknetisolation.exe	DNSAPI.dll	DllMain
❌	checknetisolation.exe	FirewallAPI.dll	DllMain
❌	checknetisolation.exe	fwbase.dll	DllMain
❌	checknetisolation.exe	fwbase.dll	FwAlloc
❌	checknetisolation.exe	fwbase.dll	FwCriticalSectionCreate
❌	checknetisolation.exe	fwbase.dll	FwCriticalSectionDestroy
❌	checknetisolation.exe	fwbase.dll	FwFree
❌	checknetisolation.exe	fwpuclnt.dll	DllMain
❌	chglogon.exe	logoncli.dll	DllMain
❌	chglogon.exe	netutils.dll	DllMain
❌	chglogon.exe	REGAPI.dll	DllMain
❌	chglogon.exe	samcli.dll	DllMain
❌	chglogon.exe	srvcli.dll	DllMain
❌	chglogon.exe	utildll.dll	DllMain
❌	chglogon.exe	WINSTA.dll	DllMain
❌	chgport.exe	logoncli.dll	DllMain
❌	chgport.exe	netutils.dll	DllMain
❌	chgport.exe	samcli.dll	DllMain
❌	chgport.exe	srvcli.dll	DllMain
❌	chgport.exe	utildll.dll	DllMain
❌	chgport.exe	WINSTA.dll	DllMain
❌	chkdsk.exe	DEVOBJ.dll	DllMain
❌	chkntfs.exe	DEVOBJ.dll	DllMain
❌	cipher.exe	DSROLE.dll	DllMain
❌	cipher.exe	EFSUTIL.dll	DllMain
❌	cipher.exe	FeClient.dll	DllMain
❌	cipher.exe	iertutil.dll	DllMain
❌	cipher.exe	NTDSAPI.dll	DllMain
❌	cipher.exe	VAULTCLI.dll	DllMain
❌	clipup.exe	CRYPTXML.dll	DllMain
❌	clipup.exe	webservices.dll	DllMain
❌	cmdl32.exe	Cabinet.dll	DllMain
❌	cmdl32.exe	cmpbk32.dll	DllMain
❌	cmdl32.exe	RASAPI32.dll	DllMain
❌	cmdl32.exe	rasman.dll	DllMain
❌	cmdl32.exe	WINHTTP.dll	DllMain
❌	colorcpl.exe	ColorAdapterClient.dll	DllMain
❌	colorcpl.exe	colorui.dll	DllMain
❌	colorcpl.exe	colorui.dll	LaunchColorCpl
❌	colorcpl.exe	IPHLPAPI.DLL	DllMain
❌	colorcpl.exe	mscms.dll	ColorCplInitialize
❌	colorcpl.exe	mscms.dll	ColorCplUninitialize
❌	colorcpl.exe	mscms.dll	DllMain
❌	colorcpl.exe	PROPSYS.dll	DllMain
❌	colorcpl.exe	USERENV.dll	DllMain
❌	compmgmtlauncher.exe	apphelp.dll	ApphelpCheckShellObject
❌	compmgmtlauncher.exe	apphelp.dll	DllMain
❌	compmgmtlauncher.exe	CLDAPI.dll	CfGetPlaceholderStateFromAttributeTag
❌	compmgmtlauncher.exe	CLDAPI.dll	DllMain
❌	compmgmtlauncher.exe	CRYPTBASE.dll	DllMain
❌	compmgmtlauncher.exe	CRYPTBASE.dll	SystemFunction036
❌	compmgmtlauncher.exe	edputil.dll	DllMain
❌	compmgmtlauncher.exe	edputil.dll	EdpGetIsManaged
❌	compmgmtlauncher.exe	FLTLIB.DLL	DllMain
❌	compmgmtlauncher.exe	PROPSYS.dll	DllMain
❌	compmgmtlauncher.exe	PROPSYS.dll	PSCreateMemoryPropertyStore
❌	compmgmtlauncher.exe	PROPSYS.dll	PSPropertyBag_WriteDWORD
❌	ctfmon.exe	MsCtfMonitor.DLL	DllMain
❌	ctfmon.exe	MsCtfMonitor.DLL	DoMsCtfMonitor
❌	ctfmon.exe	MSUTB.dll	DllMain
❌	ctfmon.exe	WINSTA.dll	DllMain
❌	cttune.exe	DWrite.dll	DllMain
❌	cttune.exe	DWrite.dll	DWriteCreateFactory
❌	cttune.exe	OLEACC.dll	DllMain
❌	cttune.exe	UxTheme.dll	DllMain
❌	dataexchangehost.exe	d2d1.dll	DllMain
❌	dataexchangehost.exe	d3d11.dll	DllMain
❌	dataexchangehost.exe	DWrite.dll	DllMain
❌	dataexchangehost.exe	dxgi.dll	DllMain
❌	datausagelivetiletask.exe	dusmapi.dll	DllMain
❌	datausagelivetiletask.exe	IPHLPAPI.DLL	DllMain
❌	ddodiag.exe	XmlLite.dll	CreateXmlReader
❌	ddodiag.exe	XmlLite.dll	DllMain
❌	deploymentcsphelper.exe	dbgcore.DLL	DllMain
❌	deploymentcsphelper.exe	DismApi.DLL	DllMain
❌	deploymentcsphelper.exe	WDSCORE.dll	ConstructPartialMsgVW
❌	deploymentcsphelper.exe	WDSCORE.dll	CurrentIP
❌	deploymentcsphelper.exe	WDSCORE.dll	DllMain
❌	deploymentcsphelper.exe	WDSCORE.dll	WdsInitialize
❌	deploymentcsphelper.exe	WDSCORE.dll	WdsSetupLogMessageW
❌	deploymentcsphelper.exe	WDSCORE.dll	WdsTerminate
❌	devicecensus.exe	dcntel.dll	DllMain
❌	devicecensus.exe	dcntel.dll	GetCensusRegistryLocation
❌	devicecensus.exe	dcntel.dll	RunSystemContextCensus
❌	devicecensus.exe	dcntel.dll	SetCustomTrigger
❌	devicecensus.exe	dcntel.dll	SetCustomTriggerEx
❌	devicecensus.exe	IPHLPAPI.DLL	DllMain
❌	devicecensus.exe	IPHLPAPI.DLL	GetAdaptersInfo
❌	devicecensus.exe	logoncli.dll	DllMain
❌	devicecensus.exe	logoncli.dll	DsGetDcNameW
❌	devicecensus.exe	netutils.dll	DllMain
❌	devicecensus.exe	netutils.dll	NetApiBufferAllocate
❌	devicecensus.exe	WINHTTP.dll	DllMain
❌	devicecredentialdeployment.exe	DeviceCredential.dll	DllMain
❌	deviceenroller.exe	DEVOBJ.dll	DllMain
❌	deviceenroller.exe	DMCmnUtils.dll	CopyString
❌	deviceenroller.exe	DMCmnUtils.dll	DllMain
❌	deviceenroller.exe	dmEnrollEngine.DLL	DllMain
❌	deviceenroller.exe	dmenterprisediagnostics.dll	DllMain
❌	deviceenroller.exe	iri.dll	DllMain
❌	deviceenroller.exe	netutils.dll	DllMain
❌	deviceenroller.exe	omadmapi.dll	DllMain
❌	deviceenroller.exe	omadmapi.dll	FreeCommandLineOptions
❌	deviceenroller.exe	omadmapi.dll	ProcessCommandLine
❌	deviceenroller.exe	samcli.dll	DllMain
❌	deviceenroller.exe	USERENV.dll	DllMain
❌	deviceenroller.exe	XmlLite.dll	DllMain
❌	devicepairingwizard.exe	dwmapi.dll	DllMain
❌	devicepairingwizard.exe	dwmapi.dll	DwmExtendFrameIntoClientArea
❌	devicepairingwizard.exe	OLEACC.dll	DllMain
❌	devicepairingwizard.exe	OLEACC.dll	GetRoleTextW
❌	dfrgui.exe	SXSHARED.dll	DllMain
❌	dfrgui.exe	SXSHARED.dll	SxTracerGetThreadContextRetail
❌	dialer.exe	rtutils.dll	DllMain
❌	dialer.exe	rtutils.dll	TraceRegisterExW
❌	dialer.exe	rtutils.dll	TraceVprintfExA
❌	dialer.exe	SspiCli.dll	DllMain
❌	dialer.exe	SspiCli.dll	GetUserNameExW
❌	dialer.exe	TAPI32.dll	DllMain
❌	dialer.exe	TAPI32.dll	lineInitializeExW
❌	disksnapshot.exe	CRYPTBASE.dll	DllMain
❌	disksnapshot.exe	CRYPTBASE.dll	SystemFunction036
❌	dispdiag.exe	DEVOBJ.dll	DevObjCreateDeviceInfoList
❌	dispdiag.exe	DEVOBJ.dll	DevObjDestroyDeviceInfoList
❌	dispdiag.exe	DEVOBJ.dll	DevObjGetClassDevs
❌	dispdiag.exe	DEVOBJ.dll	DllMain
❌	dispdiag.exe	DXVA2.dll	DllMain
❌	dispdiag.exe	DXVA2.dll	GetNumberOfPhysicalMonitorsFromHMONITOR
❌	dispdiag.exe	WMICLNT.dll	DllMain
❌	dispdiag.exe	WMICLNT.dll	WmiDevInstToInstanceNameW
❌	dispdiag.exe	WMICLNT.dll	WmiOpenBlock
❌	displayswitch.exe	dwmapi.dll	DllMain
❌	displayswitch.exe	policymanager.dll	DllMain
❌	displayswitch.exe	policymanager.dll	PolicyManager_GetPolicyInt
❌	displayswitch.exe	UxTheme.dll	DllMain
❌	displayswitch.exe	WINSTA.dll	DllMain
❌	djoin.exe	dbgcore.DLL	DllMain
❌	djoin.exe	JOINUTIL.DLL	DllMain
❌	djoin.exe	logoncli.dll	DllMain
❌	djoin.exe	netutils.dll	DllMain
❌	djoin.exe	netutils.dll	NetApiBufferFree
❌	djoin.exe	wdscore.dll	ConstructPartialMsgVW
❌	djoin.exe	wdscore.dll	CurrentIP
❌	djoin.exe	wdscore.dll	DllMain
❌	djoin.exe	wdscore.dll	WdsSetupLogDestroy
❌	djoin.exe	wdscore.dll	WdsSetupLogInit
❌	djoin.exe	wdscore.dll	WdsSetupLogMessageW
❌	djoin.exe	wkscli.dll	DllMain
❌	dmcertinst.exe	certenroll.dll	DllMain
❌	dmcertinst.exe	DMCmnUtils.dll	DllMain
❌	dmcertinst.exe	DSPARSE.dll	DllMain
❌	dmcertinst.exe	iri.dll	DllMain
❌	dmcertinst.exe	omadmapi.dll	DllMain
❌	dmcertinst.exe	omadmapi.dll	ProcessCommandLine
❌	dmcfghost.exe	DMCmnUtils.dll	DllMain
❌	dmcfghost.exe	DMPushProxy.dll	DllMain
❌	dmcfghost.exe	DMPushProxy.dll	PushRouter_FreeGetMessageEventName
❌	dmcfghost.exe	DMPushProxy.dll	PushRouter_Open
❌	dmcfghost.exe	dmxmlhelputils.dll	DllMain
❌	dmcfghost.exe	dsclient.dll	DllMain
❌	dmcfghost.exe	iri.dll	DllMain
❌	dmcfghost.exe	omadmapi.dll	DllMain
❌	dmcfghost.exe	XmlLite.dll	DllMain
❌	dmclient.exe	WINHTTP.dll	DllMain
❌	dmclient.exe	XmlLite.dll	DllMain
❌	dmnotificationbroker.exe	DMCmnUtils.dll	DllMain
❌	dmomacpmo.exe	DEVOBJ.dll	DllMain
❌	dmomacpmo.exe	DMCmnUtils.dll	DllMain
❌	dmomacpmo.exe	dmEnrollEngine.DLL	DllMain
❌	dmomacpmo.exe	DMProcessXMLFiltered.dll	DllMain
❌	dmomacpmo.exe	dsclient.dll	DllMain
❌	dmomacpmo.exe	iri.dll	DllMain
❌	dmomacpmo.exe	omadmapi.dll	DllMain
❌	dmomacpmo.exe	omadmapi.dll	ProcessCommandLine
❌	dmomacpmo.exe	USERENV.dll	DllMain
❌	dmomacpmo.exe	XmlLite.dll	DllMain
❌	dnscacheugc.exe	dbgcore.DLL	DllMain
❌	dnscacheugc.exe	IPHLPAPI.DLL	DllMain
❌	dnscacheugc.exe	wdscore.dll	ConstructPartialMsgVW
❌	dnscacheugc.exe	wdscore.dll	CurrentIP
❌	dnscacheugc.exe	wdscore.dll	DllMain
❌	dnscacheugc.exe	wdscore.dll	WdsSetupLogDestroy
❌	dnscacheugc.exe	wdscore.dll	WdsSetupLogInit
❌	dnscacheugc.exe	wdscore.dll	WdsSetupLogMessageW
❌	dpapimig.exe	netutils.dll	DllMain
❌	dpapimig.exe	netutils.dll	NetApiBufferFree
❌	dpapimig.exe	samcli.dll	DllMain
❌	dpapimig.exe	samcli.dll	NetUserModalsGet
❌	dpapimig.exe	SAMLIB.dll	DllMain
❌	dpapimig.exe	SAMLIB.dll	SamConnect
❌	dpapimig.exe	SAMLIB.dll	SamEnumerateDomainsInSamServer
❌	dpapimig.exe	SAMLIB.dll	SamFreeMemory
❌	dpiscaling.exe	CLDAPI.dll	CfGetPlaceholderStateFromAttributeTag
❌	dpiscaling.exe	CLDAPI.dll	DllMain
❌	dpiscaling.exe	CRYPTBASE.DLL	DllMain
❌	dpiscaling.exe	edputil.dll	DllMain
❌	dpiscaling.exe	edputil.dll	EdpGetIsManaged
❌	dpiscaling.exe	FLTLIB.DLL	DllMain
❌	dpiscaling.exe	PROPSYS.dll	DllMain
❌	dpiscaling.exe	PROPSYS.dll	PSCreateMemoryPropertyStore
❌	dpiscaling.exe	PROPSYS.dll	PSPropertyBag_WriteDWORD
❌	driverquery.exe	netutils.dll	DllMain
❌	driverquery.exe	srvcli.dll	DllMain
❌	driverquery.exe	SspiCli.dll	DllMain
❌	drvinst.exe	DEVOBJ.dll	DllMain
❌	drvinst.exe	DEVRTL.dll	DllMain
❌	dsregcmd.exe	dsreg.dll	DllMain
❌	dsregcmd.exe	logoncli.dll	DllMain
❌	dsregcmd.exe	netutils.dll	DllMain
❌	dsregcmd.exe	PROPSYS.dll	DllMain
❌	dsregcmd.exe	SSPICLI.DLL	DllMain
❌	dsregcmd.exe	USERENV.dll	DllMain
❌	dsregcmd.exe	WINHTTP.dll	DllMain
❌	dsregcmd.exe	WININET.dll	DllMain
❌	dsregcmd.exe	wkscli.dll	DllMain
❌	dstokenclean.exe	dsclient.dll	DllMain
❌	dstokenclean.exe	dsclient.dll	DSRemoveExpiredTokens
❌	dwm.exe	CoreMessaging.dll	DllMain
❌	dwm.exe	d2d1.dll	DllMain
❌	dwm.exe	d3d11.dll	DllMain
❌	dwm.exe	D3DCOMPILER_47.dll	DllMain
❌	dwm.exe	dwmcore.dll	DllMain
❌	dwm.exe	dxgi.dll	DllMain
❌	dwm.exe	dxgi.dll	DXGIDeclareAdapterRemovalSupport
❌	dwwin.exe	wer.dll	DllMain
❌	dxgiadaptercache.exe	d3d11.dll	DllMain
❌	dxgiadaptercache.exe	d3d12.dll	DllMain
❌	dxgiadaptercache.exe	dxgi.dll	DllMain
❌	dxpserver.exe	dwmapi.dll	DllMain
❌	dxpserver.exe	msi.dll	DllMain
❌	dxpserver.exe	PROPSYS.dll	DllMain
❌	dxpserver.exe	XmlLite.dll	DllMain
❌	easeofaccessdialog.exe	OLEACC.dll	DllMain
❌	edpcleanup.exe	DMCmnUtils.dll	DllMain
❌	edpcleanup.exe	DNSAPI.dll	DllMain
❌	edpcleanup.exe	FirewallAPI.dll	DllMain
❌	edpcleanup.exe	fwbase.dll	DllMain
❌	edpcleanup.exe	fwbase.dll	FwCriticalSectionCreate
❌	edpcleanup.exe	fwbase.dll	FwCriticalSectionDestroy
❌	edpcleanup.exe	netutils.dll	DllMain
❌	edpcleanup.exe	policymanager.dll	DllMain
❌	edpcleanup.exe	SspiCli.dll	DllMain
❌	edpcleanup.exe	wkscli.dll	DllMain
❌	eduprintprov.exe	deviceassociation.dll	DllMain
❌	eduprintprov.exe	policymanager.dll	DllMain
❌	eduprintprov.exe	policymanager.dll	PolicyManager_GetPolicy
❌	eduprintprov.exe	SspiCli.dll	DllMain
❌	eduprintprov.exe	SspiCli.dll	GetUserNameExW
❌	efsui.exe	credui.dll	DllMain
❌	efsui.exe	CRYPTBASE.DLL	DllMain
❌	efsui.exe	CRYPTUI.dll	DllMain
❌	efsui.exe	DSROLE.dll	DllMain
❌	efsui.exe	EFSADU.dll	DllMain
❌	efsui.exe	EFSUTIL.dll	DllMain
❌	efsui.exe	FeClient.dll	DllMain
❌	efsui.exe	logoncli.dll	DllMain
❌	efsui.exe	netutils.dll	DllMain
❌	efsui.exe	USERENV.dll	DllMain
❌	efsui.exe	VAULTCLI.dll	DllMain
❌	ehstorauthn.exe	UxTheme.dll	DllMain
❌	esentutl.exe	ESENT.dll	DllMain
❌	eventcreate.exe	netutils.dll	DllMain
❌	eventcreate.exe	srvcli.dll	DllMain
❌	eventcreate.exe	SspiCli.dll	DllMain
❌	expand.exe	Cabinet.dll	DllMain
❌	extrac32.exe	Cabinet.dll	DllMain
❌	fhmanagew.exe	fhsvcctl.dll	DllMain
❌	filehistory.exe	CRYPTBASE.dll	DllMain
❌	filehistory.exe	CRYPTBASE.dll	SystemFunction036
❌	filehistory.exe	UxTheme.dll	DllMain
❌	filehistory.exe	UxTheme.dll	EnableThemeDialogTexture
❌	filehistory.exe	UxTheme.dll	OpenThemeData
❌	fixmapi.exe	mapistub.dll	DllMain
❌	fixmapi.exe	mapistub.dll	FixMAPI
❌	fltmc.exe	FLTLIB.DLL	DllMain
❌	fltmc.exe	FLTLIB.DLL	FilterFindFirst
❌	fltmc.exe	FLTLIB.DLL	FilterFindNext
❌	fondue.exe	msi.dll	DllMain
❌	fondue.exe	osbaseln.dll	DllMain
❌	fondue.exe	PROPSYS.dll	DllMain
❌	fsiso.exe	iumbase.DLL	DllMain
❌	fsquirt.exe	DEVOBJ.dll	DevObjCreateDeviceInfoList
❌	fsquirt.exe	DEVOBJ.dll	DevObjDestroyDeviceInfoList
❌	fsquirt.exe	DEVOBJ.dll	DevObjGetClassDevs
❌	fsquirt.exe	DEVOBJ.dll	DllMain
❌	fsquirt.exe	dwmapi.dll	DllMain
❌	fsquirt.exe	dwmapi.dll	DwmExtendFrameIntoClientArea
❌	fsquirt.exe	OLEACC.dll	DllMain
❌	fsquirt.exe	OLEACC.dll	GetRoleTextW
❌	ftp.exe	SspiCli.dll	DllMain
❌	fvenotify.exe	FVEAPI.dll	DllMain
❌	fvenotify.exe	FVEAPI.dll	FveFindFirstVolume
❌	fvenotify.exe	FVEAPI.dll	FveFindNextVolume
❌	fvenotify.exe	FVEAPI.dll	FveGetStatus
❌	fvenotify.exe	FVEAPI.dll	FveGetVolumeNameW
❌	fvenotify.exe	FVEAPI.dll	FveIsVolumeEncryptable
❌	fvenotify.exe	FVEAPI.dll	FveOpenVolumeByHandle
❌	fvenotify.exe	FVEAPI.dll	FveOpenVolumeW
❌	fveprompt.exe	FVEAPI.dll	DllMain
❌	fxscover.exe	IPHLPAPI.DLL	DllMain
❌	fxscover.exe	IPHLPAPI.DLL	GetAdaptersAddresses
❌	fxssvc.exe	credui.dll	DllMain
❌	fxssvc.exe	FXSTIFF.dll	DllMain
❌	fxssvc.exe	IPHLPAPI.DLL	DllMain
❌	fxssvc.exe	PROPSYS.dll	DllMain
❌	fxssvc.exe	TAPI32.dll	DllMain
❌	gamepanel.exe	d2d1.dll	DllMain
❌	gamepanel.exe	d3d11.dll	DllMain
❌	gamepanel.exe	dcomp.dll	DllMain
❌	gamepanel.exe	dwmapi.dll	DllMain
❌	gamepanel.exe	dwmapi.dll	DwmSetWindowAttribute
❌	gamepanel.exe	DWrite.dll	DllMain
❌	gamepanel.exe	DWrite.dll	DWriteCreateFactory
❌	gamepanel.exe	dxgi.dll	CreateDXGIFactory2
❌	gamepanel.exe	dxgi.dll	DllMain
❌	gamepanel.exe	msdrm.dll	DllMain
❌	gamepanel.exe	UIAutomationCore.DLL	DllMain
❌	gamepanel.exe	UxTheme.dll	DllMain
❌	gamepanel.exe	UxTheme.dll	EnableThemeDialogTexture
❌	gamepanel.exe	UxTheme.dll	OpenThemeData
❌	genvalobj.exe	bcd.dll	DllMain
❌	getmac.exe	netutils.dll	DllMain
❌	getmac.exe	srvcli.dll	DllMain
❌	getmac.exe	SspiCli.dll	DllMain
❌	getmac.exe	wkscli.dll	DllMain
❌	gpresult.exe	logoncli.dll	DllMain
❌	gpresult.exe	netutils.dll	DllMain
❌	gpresult.exe	NTDSAPI.dll	DllMain
❌	gpresult.exe	Secur32.dll	DllMain
❌	gpresult.exe	srvcli.dll	DllMain
❌	gpresult.exe	SspiCli.dll	DllMain
❌	gpupdate.exe	USERENV.dll	DllMain
❌	gpupdate.exe	wevtapi.dll	DllMain
❌	hvax64.exe	KDSTUB.dll	DllMain
❌	hvix64.exe	KDSTUB.dll	DllMain
❌	hvsievaluator.exe	DismApi.DLL	DllMain
❌	hvsievaluator.exe	DMCmnUtils.dll	DllMain
❌	hvsievaluator.exe	iri.dll	DllMain
❌	hvsievaluator.exe	omadmapi.dll	DllMain
❌	hvsievaluator.exe	policymanager.dll	DllMain
❌	hvsievaluator.exe	policymanager.dll	PolicyManager_GetPolicyInt
❌	ie4uinit.exe	CRYPTBASE.DLL	DllMain
❌	ie4uinit.exe	IEADVPACK.dll	DllMain
❌	ie4uinit.exe	iedkcs32.dll	DllMain
❌	ie4uinit.exe	MLANG.dll	DllMain
❌	ie4uinit.exe	netutils.dll	DllMain
❌	ie4uinit.exe	WININET.dll	DllMain
❌	ie4uinit.exe	wkscli.dll	DllMain
❌	ieunatt.exe	dbgcore.DLL	DllMain
❌	klist.exe	secur32.dll	DllMain
❌	ksetup.exe	logoncli.dll	DllMain
❌	ksetup.exe	netutils.dll	DllMain
❌	ksetup.exe	srvcli.dll	DllMain
❌	ksetup.exe	SspiCli.dll	DllMain
❌	label.exe	DEVOBJ.dll	DllMain
❌	licensingdiag.exe	Cabinet.dll	DllMain
❌	licensingdiag.exe	Cabinet.dll	FCICreate
❌	licensingdiag.exe	CLIPC.dll	ClipGatherDiagnostics
❌	licensingdiag.exe	CLIPC.dll	ClipGenerateDeviceLicenseRequest
❌	licensingdiag.exe	CLIPC.dll	ClipGetLicenseAndPolicyForPfn
❌	licensingdiag.exe	CLIPC.dll	ClipOpen
❌	licensingdiag.exe	CLIPC.dll	DllMain
❌	lockscreencontentserver.exe	dwmapi.dll	DllMain
❌	lpksetup.exe	CRYPTBASE.dll	DllMain
❌	lpksetup.exe	CRYPTBASE.dll	SystemFunction036
❌	lpksetup.exe	dpx.dll	DllMain
❌	lpremove.exe	AppXAllUserStore.dll	DllMain
❌	lpremove.exe	AppXAllUserStore.dll	IsNonInboxAllUserPackage
❌	lpremove.exe	AppXDeploymentClient.dll	DllMain
❌	lpremove.exe	Bcp47Langs.dll	Bcp47GetMuiForm
❌	lpremove.exe	Bcp47Langs.dll	DllMain
❌	lpremove.exe	Bcp47Langs.dll	GetUserLanguagesForUser
❌	lpremove.exe	DNSAPI.dll	DllMain
❌	lpremove.exe	FirewallAPI.dll	DllMain
❌	lpremove.exe	fwbase.dll	DllMain
❌	lpremove.exe	fwbase.dll	FwCriticalSectionCreate
❌	lpremove.exe	fwbase.dll	FwCriticalSectionDestroy
❌	lpremove.exe	StateRepository.Core.dll	DllMain
❌	magnify.exe	d3d9.dll	DllMain