https://www.crowdstrike.com/blog/hijackloader-expands-techniques/