Mimic Ransomware decryption