Blog post I wrote for work on a particular piece of flawed ransomware. The information from the ETag paper is also utilized.