https://forensicitguy.github.io/exploring-venomrat-metadata-encryption-with-yara/