DLL Hijacking — Three Variants with ProcMon Methodology

what if you didn’t need to hollow anything? What if Windows itself loads your malicious code, willingly, through its own loader?