https://cyble.com/blog/uac-0184-abuses-python-in-dll-sideloading-for-xworm-distribution/