You receive a call from the IT helpdesk stating that they received a call from a user stating that they cannot access their workstation due to a message on their screen prohibiting them from accessing any of the files on their device. The message demands $$300$ in bitcoin in exchange for access to the workstation. What is the IOC in this scenario that ransomware has likely compromised a user$$s workstation?