https://www.securitynewspaper.com/2016/05/30/bypassing-amsi-using-powershell-5-dll-hijacking/