Tagged ransomware encryption