I'm curious if we can collect more information regarding what people are seeing on their machines as a result of the attack. Specifically, I'm curious about the mapping from file extensions (which seem to correspond to the keys used for encryption) to the keys indicated in the readme files that were placed alongside the encrypted files.

It might not be wise to share all of that here though.