ID Ransomware
Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.
Knowing is half the battle!
1 Result
Rapid
This ransomware has no known way of decrypting data at this time.
It is recommended to backup your encrypted files, and hope for a solution in the future.
Identified by
- ransomnote_filename: How Recovery Files.txt
- sample_extension: .guesswho
- sample_bytes: [0x1B0C3A - 0x1B0C3E] 0x0DF0EFBE
- custom_rule: Original filename "IMG_E5035.JPG" after filemarker
Click here for more information about Rapid
Would you like to be notified if there is any development regarding this ransomware? Click here.