A WALLET file is a file created by MultiDoge, a port of the MultiBit client for Bitcoin used to perform Bitcoin transactions. It contains one or more private keys, which are strings of characters used to verify the identity of the user and enable BitCoin transactions.

To create a WALLET file in MultiDoge, click the New Wallet button or select File → New Wallet, name your file, choose a save location, and click Ok. To open a WALLET file in MultiDoge, select File → Open Wallet, navigate to and select your WALLET file, and click Open.

A WALLET file is a file encrypted by the CryptoMix, or CrypMix, virus, which is ransomware utilized by cybercriminals. It contains a user's file, such as a .PDF or .DOCX file, encrypted with AES encryption by the virus. WALLET files are similar to .LOCKY files but became prevalent in 2017.

The CryptoMix virus may also be referred to as a CrypMix, CryptFile2, or Dharma virus. It is dangerous malware that is commonly known as ransomware, where the purpose of the virus is to take your files hostage and force you to pay the perpetrator (by way of bitcoin) to unlock your files. Once the virus infiltrates your computer it begins scrambling your files, renaming them, and encrypting them. The virus then generates a .TXT ransom note (#_RESTORING_FILES_#.TXT) informing you of the takeover and what you need to do to recover your files. The virus appends the [email@email.com].ID[victim_16_character_ID].wallet extension to your files. For example, if you have a sample.docx file it becomes sample.docx.webmafia@asia.com.ID0SHDGS2SJD5DFOCK.wallet file. The [email@email.com] address is most likely one of the following addresses: braker@plague.life crannbest@foxmail.com stopper@india.com amagnus@india.com funa@india.com webmafia@asia.com bitcoin143@india.com mkgoro@india.com lavandos@dr.com worm01@india.com pay4help@india.com NOTE: There is no program currently available to effectively restore your files. If you back up your files you can execute a full system restore.