SharpBlock: method of bypassing EDR’s active projection DLL’s