https://www.crowdstrike.com/blog/the-anatomy-of-wiper-malware-part-4/