Do not simply rename file.happ to file.pdf . The encryption changes the internal data structure. Renaming does nothing; the file remains corrupted.
The HAPP decrypt ransomware uses a combination of symmetric and asymmetric encryption to lock victims' files. Here's a step-by-step explanation of how it works: