Towards Runtime Classification Of Ransomware