https://www.trendmicro.com/en_us/research/22/f/yourcyanide-a-cmd-based-ransomware.html