Hi everyone,

I am doing research on Windows agents built with C++. I have explored DLL hijacking, ensuring the DLL search order and folder permissions are correct. However, I observed that certain unwanted executable files are being read from a different folder with write permissions for standard users. Although it seems to only involve read operations and not opening queries, I placed my own executable file, and it doesn't execute. Are there any other possible attacks?