Hackers Weaponize Legitimate Windows Tools to Disable Antivirus Before Ransomware Attacks