The injector calls CreateRemoteThread . It sets the thread's starting address to the location of the Windows kernel function LoadLibraryA (or LoadLibraryW ), passing the allocated file path string as an argument. The target process is forced to load the DLL and run its entry point ( DllMain ). DLL Injection Methods Explained : r/hacking
Checking the file's metadata and strings to see which processes it targets. dllinjectorini 2021
When DLLInjector.exe parses the DLLInjector.ini file, it typically executes the following sequence: The injector calls CreateRemoteThread