https://securelist.com/evolution-of-jsworm-ransomware/102428/