Wizard-Loader

Xwizard.exe is a commonly used diagnostic tool for Windows setup and installation, and like other executables, it loads dynamic link libraries (DLLs) to perform various tasks. However, The PoC patch the Xwizard.exe binary on order to make LoadLibrary API load malicious DLL instead of the intended one.

Detection

Name		Name	Last commit message	Last commit date
Latest commit History 8 Commits
Wizard-Loader		Wizard-Loader
.gitattributes		.gitattributes
.gitignore		.gitignore
README.md		README.md
Wizard-Loader.sln		Wizard-Loader.sln