examples:

• description: "Place malicious mimetools.dll in the search order location" command: "copy malicious.dll "%PROGRAMFILES%\Notepad++\plugins\mimetools.dll""
• description: "Execute the vulnerable binary to trigger the hijack" command: ""%PROGRAMFILES%\Notepad++\notepad++.exe""

mimetools.dll

Vendor: Notepad++

Expected Location: %PROGRAMFILES%\Notepad++\plugins

Vulnerable Executables:

• %PROGRAMFILES%\Notepad++\notepad++.exe (Sideloading)