https://cyble.com/blog/hexalocker-v2-being-proliferated-by-skuld-stealer/