https://www.systemtek.co.uk/2018/04/ars-vbsloader-remote-access-trojan/