https://5dok.org/document/7qv9k4dy-detecting-scareware-by-mining-variable-length-instruction-sequences.html