GhostShell: bypass the AVs, VMs, and Sandboxes