examples:
- description: "Place malicious d3dx9_43.dll in the search order location"
command: "copy malicious.dll "%SYSTEM32%\d3dx9_43.dll""
- description: "Execute the vulnerable binary to trigger the hijack"
command: ""%LOCALAPPDATA%\Temp\HPDIAGS\0699814c-9c5f-46ad-8c9d-a1c61a163f2b\d3dim9.exe""
d3dx9_43.dll
Vendor: Microsoft
Expected Location: %SYSTEM32%
Vulnerable Executables:
- %LOCALAPPDATA%\Temp\HPDIAGS\0699814c-9c5f-46ad-8c9d-a1c61a163f2b\d3dim9.exe (Sideloading)