A threat actor modified the installer download link for the EmEditor for four days between Dec 19 and 22