Rich Warren

Add `cleanup` and `syscall_method` options for CobaltStrike 4.9 support

This PR allows the user to specify the `/password` flag in SHA1 format when the machine is not domain-joined (i.e. local). These SHA1 passwords are calculated as `SHA1(UTF16LE(password))`, which is...

Also adds various options to the test harness to match the functionality provided by the npm package. Note this PR also bumps the .NET version to 4.5.1.

The link to the original blog post is broken. It seems to have moved to: https://research.nccgroup.com/2017/08/08/smuggling-hta-files-in-internet-explorer-edge/