RagnarLocker Deploys a Virtual Machine to Hide Ransomware