windows community v1.0.0

rzlog4cpp_logger.dll

rzlog4cpp_logger.dll — Sideloading hijacking (Razer)

📋 Live Preview
rzlog4cpp_logger.dll
rzlog4cpp_logger.dll

Sandbox: execFile · Timeout: 30s

Capabilities

security.defenseevasion.dll-hijack

Documentation

examples:

  • description: "Place malicious rzlog4cpp_logger.dll in the search order location" command: "copy malicious.dll "%LOCALAPPDATA%\razer\InGameEngine\cache\RzFpsApplet\rzlog4cpp_logger.dll""
  • description: "Execute the vulnerable binary to trigger the hijack" command: ""%LOCALAPPDATA%\razer\InGameEngine\cache\RzFpsApplet\RzCefRenderProcess.exe""

rzlog4cpp_logger.dll

Vendor: Razer

Expected Location: %LOCALAPPDATA%\razer\InGameEngine\cache\RzFpsApplet

Vulnerable Executables:

  • %LOCALAPPDATA%\razer\InGameEngine\cache\RzFpsApplet\RzCefRenderProcess.exe (Sideloading)

References