https://forensicitguy.github.io/adding-process-hiding-to-merlin/