ID-ADD471B8US[crypt32@mail.ru].mgazadcanwa2aa
So file.txt becomes file.txt.ID-ADD471B8US[crypt32@mail.ru].mgazadcanwa2aa
I searched the ID Ransomware site and was given a case SHA1 of 58e663031b092c5d5e13763721d67013909a844d
Edited by omnichad, 21 January 2017 - 11:26 AM.