check ransomware type