Triaging a DLL planting vulnerability