Fileless malware uses event logger to hide malware