Snoozegnat.7z -

: The legitimate launcher looks for its required library. Because gnat_api.dll is in the same folder, it loads the malicious version instead of the system version.

Implement that flags DLL side-loading from non-standard paths. SnoozeGnat.7z

: The user is enticed to extract the archive and run the "launcher." : The legitimate launcher looks for its required library