https://henking.pages.dev/posts/common-malware-behavior-808195/