Skip to content

DLL Hijacking

OneDrive DLL Hijack List

"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Secur32.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\VERSION.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WININET.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WTSAPI32.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\USERENV.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\SSPICLI.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Wldp.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\MSVCP140.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\VCRUNTIME140_1.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\VCRUNTIME140.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\VCRUNTIME140.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\VCRUNTIME140_1.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\VCRUNTIME140.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\CRYPTBASE.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\CRYPTBASE.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\CRYPTSP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\CRYPTSP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\profapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\profapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\IPHLPAPI.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\IPHLPAPI.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncHost.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncSessions.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Telemetry.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\UpdateRingSettings.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\SyncEngine.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\LogUploader.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncViews.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WebView2Loader.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncFS.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncEvents.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\dwmapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\dwmapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\wer.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\wer.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\UIAutomationCore.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\UIAutomationCore.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\XmlLite.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncSqlite3.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\XmlLite.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WINHTTP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\WINHTTP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\urlmon.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\urlmon.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncEvents.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\UpdateRingSettings.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\UpdateRingSettings.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WINHTTP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\credui.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\WINHTTP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\credui.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\MSVCP140_ATOMIC_WAIT.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\ncrypt.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\ncrypt.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncEvents.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\adal.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Telemetry.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\XmlLite.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncSqlite3.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\UpdateRingSettings.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncEvents.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\PROPSYS.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\PROPSYS.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\XmlLite.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\LogUploader.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WINHTTP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\WINHTTP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncCxP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WnsClientApi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\XmlLite.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\XmlLite.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\RstrtMgr.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\RstrtMgr.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncSqlite3.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncFS.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WINHTTP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\WINHTTP.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5Core.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5Qml.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncFS.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5Quick.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5Gui.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5Widgets.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5WinExtras.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\dwmapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\dwmapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\PROPSYS.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\PROPSYS.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\iertutil.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\iertutil.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\libcrypto-1_1-x64.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\srvcli.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\srvcli.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\netutils.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\netutils.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5Network.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\MPR.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\MPR.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WINMM.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\WINMM.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5Gui.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\NETAPI32.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\NETAPI32.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5QmlModels.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Qt5Network.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\MSVCP140_1.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\d3d11.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\d3d11.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\dxgi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\dxgi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\MSVCP140_1.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\DNSAPI.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\libssl-1_1-x64.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\DNSAPI.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\NTASN1.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\NTASN1.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Wscapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\Wscapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\MSASN1.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\MSASN1.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\WINSTA.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\WINSTA.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncCxPImpl.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncFSNtfs.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncFSNtfsWB.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncFSCache.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FileSyncFALWB.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\cldapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\cldapi.dll"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\FLTLIB.DLL"
"C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\24.076.0414.0005\FLTLIB.DLL"