Sakura will add its specific .Sakura extension to each file name. For example, a file named "photo.jpg" will be changed to "photo.jpg.Sakura". Similarly, the Excel sheet named "table.xlsx" will become "table.xlsx.Sakura", and so on. In each directory containing the encrypted files, a text document read_it.txt will be created. This is a memo about the ransom money. In it, you will find information about how to pay the ransom and other information. The ransom note usually contains instructions on how to buy the decryption tool from the ransomware developers. This is how they proceed.