https://www.petervanderwoude.nl/post/working-with-custom-detection-rules-for-win32-apps/