1
0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-03-15 11:58:49 +01:00

676 B

Xwizard.exe

  • Functions: DLL hijack, Execute

xwizard.exe
Xwizard.exe will load a .DLL file located in the same directory (DLL Hijack) named xwizards.dll.

xwizard RunWizard {00000001-0000-0000-0000-0000FEEDACDC}
Xwizard.exe running a custom class that has been added to the registry.