https://www.securitynewspaper.com/2017/03/17/ransomware-operators-hiding-malware-deeper-installer-packages/
Ransomware operators are hiding malware deeper in installer packages