Malware / ransomware / security products have been doing this for many years, especially to Windows modules like kernel32.dll and ntdll.dll.