Umbrij version a — malicious .NET DLL sideloaded via legitimate executables to steal Google OAuth authorization codes