Payload Ransomware Uses ChaCha20 and Curve25519 ECDH to Encrypt Windows Files