ransomhub decryption case study