0xxx Ransomware decryption