https://www.cybereason.com/blog/royal-ransomware-analysis