https://deepquest.code511.com/blog/2021/10/trojan-spy-win32-ardamax-ocx-insecure-permissions/