Tools for 888 ransomware decryption