There’s a special place for them, System32. It also looks in the same folder the exe was run from, which could be the desktop. This has been how Windows works since day 1, somebody just finally figured out you could stick evil dlls in the search path.
Yeah, I am getting the gist of it. Incredible. Like Tom Petty says... “there ain’t no easy way out”.