dll search order hijack detector — free browser tool | fatcousin

drop file listing and optional sysmon imageload csv · dlls loaded from unexpected paths · known hijack targets · csv export · runs locally

file listing (required)

drop file listing csv

or click

Select file

dir /s /b export · MFTECmd · or any csv with path column

sysmon imageload (optional)

drop sysmon event 7 csv

or click

Select file

ImageLoaded column · event id 7 · dll loaded outside system32

drop file listing csv (required) · optional sysmon event 7 imageload csv

ready