Deploy DLL to user directory

On Windows, DLL search-order hijacking abuses a target executable's DLL loading behavior: when it requests a dependency by module name, an attacker who can write to a directory searched before the legitimate DLL may place a same-named DLL there. Starting the target can then load that DLL into the host process. Success depends on the exact application and Windows search behavior, directory permissions, DLL architecture, and required exports; a DLL merely being beside an executable does not prove hijacking.