The main focus of this case study will be to fully understand an example of the encryption process that ransomware can use. We are using ShiOne as the practical portion of the lesson not because it is particularly unique or uses any novel techniques, but just the opposite: Its relatively straight-forward and is written in C#, which will make it much easier to show key components. The encryption process starts off by calling: string text = Program.CreateSalt(32); This is a user-defined function that simply calls a standard encryption API to generate an array of 32 random numbers.”]
Source: https://blog.malwarebytes.com/threat-analysis/2018/02/encryption-101-shione-ransomware-case-study/