Tools for ETHAN ransomware decryption