71c00fa8aaae931a771694a34aa72fe0fe0e324f0606266408b4cd6a1ba54842

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/05/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ransomtest.exe
Size 73KB
Sample260527-vbge7sdt2j
SHA256 71c00fa8aaae931a771694a34aa72fe0fe0e324f0606266408b4cd6a1ba54842
MD5 969c3f5479e64ef3182ed8c765a5d53a
SHA1 4d678bf0aaf6585f1fbf1d631688f6479763a0fa
SHA512 5c18f432c411d35c504cf0c47974ff6799dfc0884c62729ad7404902e5af856c133fd74962f32e5704e730c300953b32ca9b2c17c700e5ecceb0ccd55b2a3283
SSDEEP 1536:ZKhN2ILKQWmOzX61Ww8wBR2Ko9sgew76BmWGoH5wnVdH:ZKhlGQWVX61Ww8wz7yoH5wnVF
TLSH
T11C733A16D92940AFC35DD9B8C9838905DF72BC8647A2B7CF67501DE60E26AD89F3F201
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

persistence ransomware

Malware Config

Signatures

Renames multiple (234) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsDefenderUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ransomtest.exe"	ransomtest.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsDefenderUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\ransomtest.exe"	ransomtest.exe

Drops desktop.ini file(s) 6 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Pictures\desktop.ini	ransomtest.exe
File opened for modification	C:\Users\Admin\Pictures\Saved Pictures\desktop.ini	ransomtest.exe
File opened for modification	C:\Users\Admin\Downloads\desktop.ini	ransomtest.exe
File opened for modification	C:\Users\Admin\Desktop\desktop.ini	ransomtest.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	ransomtest.exe
File opened for modification	C:\Users\Admin\Pictures\Camera Roll\desktop.ini	ransomtest.exe

C:\Users\Admin\AppData\Local\Temp\ransomtest.exe
"C:\Users\Admin\AppData\Local\Temp\ransomtest.exe"
1⤵
- Adds Run key to start application
- Drops desktop.ini file(s)
PID:1660

C:\Users\Admin\AppData\Local\Temp\ransomtest.exe
C:\Users\Admin\AppData\Local\Temp\ransomtest.exe
1⤵
- Adds Run key to start application
PID:924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BlockGrant.xltx.locked

Path C:\Users\Admin\Desktop\BlockGrant.xltx.locked
Size 196KB
SHA256 77a1a41a62b8425fab476ae364a203f919d9a2bf617c632a12707186244b2ae3
MD5 221b5c7619997ac0130f22cc93d215b6
SHA1 25f8ff427a2ae5a83ac74693161d34483850a448
SHA512 270f1f479eca4db08adbf41491b43efdebb70a73e02d7b6563903ebe9ef3cae201037e8a4831447c25bdfae27804bfb4e01b4aca9d5d810a485c5a58601d3a5f
SSDEEP 6144:yVW4Mx79FW84V7RjytHv1ZaDqlANhXfhM0ZzqB4ztLnOCN:yQHQV7R+NZmNh+0Z/OCN
TLSH
T1BE1423E225B14A4D5737A2BF77D832872CB2479296EA07F71E99745BF700218CED1A30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmInitialize.WTV.locked

Path C:\Users\Admin\Desktop\ConfirmInitialize.WTV.locked
Size 386KB
SHA256 95e1b7be1692b3adedaedf2e7710ec68c9ab36cde4e0dd768707be3ce0eb74a0
MD5 b4be9090cb36082c721fcd72f6ac7981
SHA1 7b82d7d8bae7e28968f3e646992b9d62abbbe1ad
SHA512 46339ce3e12a3fb4e6f6347de0ea42b5ad83617a93204e4c76eaf9763d95484ad365372ed40faf76bb1e828b90ce28aa1ad4650f4b920fe18f728fb91d4c7de8
SSDEEP 6144:hPEMAAv9W+Kmy2m3KV9CGSinqjl9hzX3iLKJZ6oAT5JRPEC5GJkaO/Dg3L6n+r:PlxI3ohqjrhzX3iLAZ6LCkaO/u+4
TLSH
T1A1842388D74A0F03146D909F63927F8961DAD9EDB8F1617F098EEBE40201466F31B9E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectStop.mp2v.locked

Path C:\Users\Admin\Desktop\ConnectStop.mp2v.locked
Size 121KB
SHA256 afc5639ff13a19536d4260033e14b280c54ed3852e44a4da3dc9a10144d0e809
MD5 fab376d757d1d178b963a9785032f1ec
SHA1 8b3006854a4e0cfa04f88e81a229ca0fb7d710d2
SHA512 66d74da137039ebd042dc9f9ec400e702aeb92c890d02f7f61d3319df02785dbc233ca90036436ecee334de44b6508dadad8d730d9d5bc80325975450656bbd7
SSDEEP 3072:PDc2SNNk9aED2SImU/jw+ghNC7TsSGTJ7s9Dtj0jt2WMfmUQJZVY:43s9a62SIxsR3CcSyJQ9D9YtWfmlJZm
TLSH
T180C312934F143B543A4F7B8CC1A76F100FE2AA099C2DD3497239C9F94152AF169EB953
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToJoin.vsdx.locked

Path C:\Users\Admin\Desktop\ConvertToJoin.vsdx.locked
Size 174KB
SHA256 33b62880dd3b1060c5dc3a548875685a530dc439bfc37176034f07693567e932
MD5 10a09cc052dde0d1feb97ca2fcc597ef
SHA1 7a1124bbec93ffc742adf6febd1fdbabf0d27679
SHA512 026774e54aebc8e74d7854ff2e79c1e12e0e77a43cf863bc72729a947050959dcba9dc0ff12856bf3ed711d178e34c5e4855af962b8fecaf1d54398b18a0afd4
SSDEEP 3072:FXOlB2HWgQbYiGkrDEVSkwanL6sqPBcHSS+totYT7sUnZGeF1cslU6yAEU:FXO2HWgQb6krg97qS+O6ZnF1C6Pj
TLSH
T1510423C44CD1ECD72FA6224156AF8DBA9ADD9E9609340C7BC313D6F31CDA9386B0911B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToUnlock.doc.locked

Path C:\Users\Admin\Desktop\ConvertToUnlock.doc.locked
Size 136KB
SHA256 47139447dd6fdd551d7717f86286d2d589f7a16bde7af8be4b901294d65fd286
MD5 a13bd30ff60174991d3242667c4d2493
SHA1 8c8bf8619acd035f49c45f490cb2090affc709ca
SHA512 1bcb069cadeba5730fe7f3b9943994efdbec0a77e907ff1142fe3da443ae5018759829abd85a0370d9c710b28248b7eb1798e96c567159f2141a324fff325024
SSDEEP 3072:kmCfPdfcb7a/HCD8a+17yflrDgl+hZSYTTVJbMMB377VGw5Skr:kLFm7qCg9y1Ul+hZSgBr5dT
TLSH
T1C2D312DD7513E171D209F93C78033DA688359E81AD21BB17AC8918AAFDF6E5D221086E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyUpdate.wmx.locked

Path C:\Users\Admin\Desktop\CopyUpdate.wmx.locked
Size 113KB
SHA256 13877f93164fc6dc0255e489a2449d6d75b1cef6755d7c6e9668044cefe5d6c1
MD5 7c7d5413ba279662e4f570fd17d5d309
SHA1 0a740d91009f20e19b054fe3d75fd37b8863138a
SHA512 e12ef398678fd4cd54a417b0e4efd130967e6aa7eec5ce308feed685c88499b180b8b1b7537bf79a8d691f1596542ca668f11506c29e01e7632746503ccb4c97
SSDEEP 3072:iqQUOrqQjGA+Z7gkp1zMLdwgxzMQQ2BbQBtk9:iqhODGDB1OBQkbP
TLSH
T17BB312AC82BF57CE111D92E88C1129325ED363E30989FDA664FC5493A7D9534A0631EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyInitialize.crw.locked

Path C:\Users\Admin\Desktop\DenyInitialize.crw.locked
Size 257KB
SHA256 b6be657e41e72146c46fdf7e1b0219b93470c8673be2d51868c6b11c2ad80131
MD5 e1de229eb7b8b25e77d836b5ee384e69
SHA1 ac779fbaa4f9a050caa46b6fbf1ac9b275c08a3d
SHA512 50f818eb69676b602735b6bfc0179e4196e77d5af1fc757ab7ae0256320701697c3a9ee3a6ed2b2e74979c87d244511ebc05421f39423aa05de1e0eb237abf2a
SSDEEP 6144:XSAc6++tqDVWwH0fYdIkS6V+sdHZiHOhcTzZP5mZXNeIGW:iY/IVQfYdII+8ZiuhcZ5mJkIl
TLSH
T1F14423C77665364F42465D4C0DE03F160F63B3CF0725DF6A61EA22F6664FAAA048B06B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableSplit.wpl.locked

Path C:\Users\Admin\Desktop\DisableSplit.wpl.locked
Size 189KB
SHA256 7abc68af01fb36a290963e836f4093b481c5aa09d68bdd2482f824ccdd5ef829
MD5 fbb7735c330a140d1699ee1ff3a6ded4
SHA1 99027521c11a59ddd058d43f536fa7396204f2c7
SHA512 29f738f7a99770fc4749875cb7c7d8e42e0492a3320a865b2ba15b110f4321643de6996ca765973e2b2865948d173085651f26f8a72453344eaa8f8940bf1413
SSDEEP 3072:diPIxSP/a5VhytxCa3tGX0Kr78bpd2n/P3WyV3fDxHGINPYrMoQlZq2SnDSBz6XX:dCIk3ajktx0X088b+n/uyDmI+QPq2Snz
TLSH
T1D81422746BB81A04ABFE56C218A5B232AEF4DD1BC7F00193BEB8345B5E752C0450D6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectConvert.rtf.locked

Path C:\Users\Admin\Desktop\DisconnectConvert.rtf.locked
Size 272KB
SHA256 d7a556759605560cff1643c95621bceb7e0a74ea536c38a184f3962c2abf17d9
MD5 a80f95bf4e647223467759147a88f18d
SHA1 4490df7b22a8d0334af3a13af167c799abef6f9b
SHA512 1eba8215da9fca9949691dd4f486d7f359803ff4538d5b806208ac56ab20302e83b8a80b9992312913312f47b56cc23312af52811be08e4f17e570bd7a4199b9
SSDEEP 6144:MRTWKcyxEzXaLPvY1OivpuoZI7fKtx5AS0oWVDcClX2/vhRem+YTr:qNcy2OLPgRudix2JonClMj+Yn
TLSH
T1135422158F724B22C5BA8E060B5C442CD1B5F4E4FE485A81DBEF46E9EE70D6E3148B6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectJoin.mhtml.locked

Path C:\Users\Admin\Desktop\DisconnectJoin.mhtml.locked
Size 249KB
SHA256 9feb2a6129178101ed48a04a27a22f65d0f5a5f6881b39f32dea70600a47f900
MD5 071464808b5924a7d4b4b619bce39f46
SHA1 0d37195d1599c8b933465c585542686998d81548
SHA512 e48b7b36943987a369a9aa8afed2fd4380525baf1b7821503b62fe62f030b323851b660b2722062d95cae55dc328e1248a8beb1fa744c596f6c495aabd798df6
SSDEEP 6144:nmThj9U5p5XH8/rX7n53c1abXNUB6hBRL7EicTFTLoC:nU98w3c4aYhBRL7AFTn
TLSH
T1754423D8939B525DD198A4CD6045056C8FC61FB27C3F2B23113AA367A3DCAD68F1E80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectResume.doc.locked

Path C:\Users\Admin\Desktop\DisconnectResume.doc.locked
Size 181KB
SHA256 8c1faa8d07e5c091442fe10391f63bb1b9c7937313bd4d8d07151d1dafd57d75
MD5 611c61946f7949aa4169addbf083be74
SHA1 15d59039b4891b161456f4f604be4e693dca955e
SHA512 ca801925075859e899e66257601fe4058fe6d63b15466a8ad5956d31b9a1e8749cb0aae76f7d967feb2b9c5eed9ca753b53e892d899c6711138b3f4b3c60ed76
SSDEEP 3072:tXfV3/yVvaRh8fuU53mvue5FTKJTW+o8krIbuGhoqsKadNi07wwOY0Q:RfdyVc2utb5FTKJa+o8kriaqsKadw0fl
TLSH
T1890423D1A8A8FF60552AF864696DEF0EE4AD60ECC7FB83281F010C454590B1EDD9236F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterSubmit.mid.locked

Path C:\Users\Admin\Desktop\EnterSubmit.mid.locked
Size 143KB
SHA256 13d959ab6d7fa3ac54654ede5c3a7b46efc1c6e95632dc6e9476ffb5c670ae78
MD5 c35e10e7ee9e953bfe48c8957a4b0b27
SHA1 1bdb0bd25c9fa0528def345551ff01492869701a
SHA512 520dc673d485586706aeb3a12082dd1fa421e4bdc462ca2b19204f5c125aea45f513375cbb3a6260c184cd0b9fd5b6979d291e3e55bab4e96b6515594e600c05
SSDEEP 3072:UIqWXanYqCpWNtd98L4fXA33znNka74v7epRPshy0ITUq8TFuhZAsnCRp6Nht9Kz:UOXaC0F9y4fw3DNbuEehy0IwlQhy6Nhc
TLSH
T10BE3134063DB7EB27D43017809BCB530DB9B97327DDAE9ACAD490824F93DD06164DB98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandCompare.xlsx.locked

Path C:\Users\Admin\Desktop\ExpandCompare.xlsx.locked
Size 12KB
SHA256 8fbc27ad9f7dde6c4a0c9c5f09664a7e259d39c6d7aa6e85a101251821268e1d
MD5 355360bc9686c3b6c922edc1670ecfc5
SHA1 2b2e6298369cce7cc9209f9458685868e9cce7f8
SHA512 927e7db4af696f3e84572d1ef13c376ccb9010422b69376dd6b5c4d68f68919a95b301619ee6499328ce41e1087e62fe681d369e355338d224299ac92bf20c8f
SSDEEP 192:Krk6L3/lj07fcov5C7YlPw2wHb6KLQvjwUfuiMUepFTG/+j6zgSoURsk:KY6L3vovY7uPM9QvjwXii4/+2z/ak
TLSH
T13242B91C981C49FA734602074367AFA92D23C5B90C8F6776D297CB1BCBB5E867582272
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandReset.mov.locked

Path C:\Users\Admin\Desktop\ExpandReset.mov.locked
Size 151KB
SHA256 4a53292af08414daf09df9794b52adf8356f8c31504e5039b8ede5e98b94ce7a
MD5 ff109d28d04338ecd83be2d89195a0a6
SHA1 1a32cdf628fee681d0b2634c27e4a839850baaf6
SHA512 db82a798806be055460318390e136d0054f2fdd418cce67c6fe32957b06e2821a0787ede1c46c3f353c4d259a631a611a5db8f50c274d8cb6be2a99290fef25a
SSDEEP 3072:j4ZfbY96X5NLerz4bDj3xsTyPO64RQHHcxoJR3n:+HDLymDj3xsKO64RLoJR
TLSH
T1EAE31263B955C185BA4FD7BC5648643A47FC47908927CD4882FEA16A8ACCE4DF3831CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportInvoke.3gpp.locked

Path C:\Users\Admin\Desktop\ExportInvoke.3gpp.locked
Size 219KB
SHA256 cf5e478d242967860dd354873ad488af4b8796cf40d4a81ab3d7cde0c7defa07
MD5 aeaa988bc10df681e1bbff682348faf9
SHA1 07b36afc75915e1127b015e838c532fa0b0daa73
SHA512 20380ff5a1732f6492a6f936db1e2d992bfc47680cfd95f5954b56f28d0b87653a56cab71fbf15fc2e5a42d62b1fa507b862eba3c32e301a36d6cc1c5c064fd8
SSDEEP 6144:n7MtHA4xbZ63FNd+sq8YWGIDq2p4cq6FWq0u47I5WU:n7Mtg0dAGsvqqR5Z
TLSH
T1AA2423DB4B3EC804AB4E2D7E05C1D5ADFE9BEA8B05715334BF4B08632135425D769613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportOpen.kix.locked

Path C:\Users\Admin\Desktop\ExportOpen.kix.locked
Size 204KB
SHA256 e063df747fcfe5f724f6b416bf9497e1d8c8ac94b4691e4311783e65b8c2d18f
MD5 ec133422895d652ca7f83a878b27b74f
SHA1 882e7951ad6c8e1be6c7b88010e3031771002bbd
SHA512 365760cd03c96b829eb0f350408b03ce0ed56c6ecce331a46246e4a7f4cbd93c9dce6481867e54352f5b475d5a7dca870e17dadf67fa104add0edeadff4fbb39
SSDEEP 6144:KDMkFomdfQy7JzBgIBR4LEr45tTZ8475O:KDxFomdTBgI+LEWP5O
TLSH
T14324236940B2ADE1DB367D4E5B40DA187DE702CB7F956D448A83BDB0B0D9182C37B19C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupAssert.vsd.locked

Path C:\Users\Admin\Desktop\GroupAssert.vsd.locked
Size 98KB
SHA256 3aab4080cdedd753e12c8ac00ae45695c1c87bd9e29f3395e1e0d58d8e6e87fb
MD5 e7c9dd7fe52331844be94aa6e1d729b2
SHA1 7886176ca3a4e8b44c3d6610efcc6f16d28554ff
SHA512 fa481d6610c932047b72d51231b713b64f8eddf040ef037892800d66ca3481059d535bd6d1ee029837a4ddca5307e5face620e760a68849c9127f24df0bb5bc2
SSDEEP 1536:6OEGOciq7J7G6nJIGH/Lva9G1lJSFO20EMawH+WJo3lapnq2/R/bvcu1:Qoj7J7GmPzS9ElEFeEVwfJulA/bvp1
TLSH
T1B0A31206D8E22FF0FAFD39AF47884C05B2674EB7D48AC6C4D12C298541EE2A0C9755AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupEdit.m4a.locked

Path C:\Users\Admin\Desktop\GroupEdit.m4a.locked
Size 227KB
SHA256 4bbe57adddb1345f2585b454494890685335a8dac323610348a4a6689151aec8
MD5 9c64070c274452846c0db7da2f1f94ac
SHA1 b0e9e26a4f982869aed9132c3d188542d5c32df6
SHA512 479f7767236197bd04f712919e2544ca3c48d90a9bcec26ee54bf84a70d0c122c7a1a6c7a51137031f993f1a631e39f78e54c27ad3f7fd5464bcb5923da324f9
SSDEEP 6144:4cQly4H1WS+qmzVUHtxhtpq4KFI+vHGZ/ah:KlyFS+qcVUNxNqzuZy
TLSH
T190342344E9C7E9857A4E132F554E331822A374E43E0D6C34C29E67BEF67A46BC438AC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupRead.vssx.locked

Path C:\Users\Admin\Desktop\GroupRead.vssx.locked
Size 106KB
SHA256 64f9be7bc136459f00d373b0ce6336ed39784ecc6f2684deafb241723912180d
MD5 aa4a18326e9129c06d2baf0ea690cde9
SHA1 13c9d0cf303f1776b42144d6a0d7db76e0582c9c
SHA512 a58739c49795af50c9209766a5d3e4a903d37808490ec2be947a7338c8650479dfa52bf70d091d5bf2930b1d09de1895835e97877b99e903a1d2c65dae6cd8b8
SSDEEP 3072:WYR2xvkOCTGT5SvCfZLNyyCERCvpmDem4S9kemGiTXVou:nRO1kGoeZLUDhmDem4feXiqu
TLSH
T176B31240487F7BB74273028EDCBA67A019EC93D02D605B62BA0D355E419DDC9B60B3AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportCheckpoint.kix.locked

Path C:\Users\Admin\Desktop\ImportCheckpoint.kix.locked
Size 159KB
SHA256 ae36f184e8a90b1d6c349121d7e7f41ae99db598fe8b1ca93a00d1f7787b3aa8
MD5 2f0b4cea51b35a6f6f43708b34776f42
SHA1 dd90b438ddd5e655e2839a89950de5bc4d0aae5a
SHA512 02d0332d11fa9630018c173d7250c3998d5ea175db8c6a4bdd6295b15dd50e89643227fd43b39a9ce2fb6c58716f694ae0e5834e3d97e36db9535ba3e4a99bdb
SSDEEP 3072:37y4dOOgFw/3XgHGTlnyoUhY4aD+KsHF1yiMQ1QI5QHZ/ShD0UIEAQfmY62MKeCb:Lyp+vXdTlnfUh1a+zn1QI5eZaJiEXuY5
TLSH
T12CF312E11DD752BDAB02CFA2A73CB4DE169E3063620DB31807A586948B40DC9239F5B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeSave.odt.locked

Path C:\Users\Admin\Desktop\InitializeSave.odt.locked
Size 265KB
SHA256 f7cfcf0cbbdc8d35da54c5435c8df7164b6fc2d042b8c22415ff5a153ed9e6d1
MD5 7e3b16dd476379e35f932dc9766f7471
SHA1 e6163903c74160e7b62396d768ee9edcef05e54c
SHA512 a784a0ce7f3182534d3a7b230c0a77167570dd685266772c72ff95f7c2f55181433766d03c0282bab9d40fa68e1a7e90bc97c263c4c01154808780042733a9da
SSDEEP 6144:4T87OneWvbUzGMqSWXb1dgKbH+qrEEtTCeoHTfJGLWQj9I59gHbU:4TzeWzUKMqBXvgKL+YXtOeoHTfg5Q
TLSH
T123442395F4A9D3ABAF9ECE0C55F74622FF21E01D646CF30DA88D210A7FB84C66394510
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinRestart.docx.locked

Path C:\Users\Admin\Desktop\JoinRestart.docx.locked
Size 20KB
SHA256 ea76cd219370c56c8420aa34c721b862d341f8713f93c8fa85280e0b14c8a169
MD5 aa8c4f2272457fe0b6d0877409271639
SHA1 0979139230e9d17e5273c2e5e22ccf1bff510a56
SHA512 f0932a9ced7d3210a455fdd9ff7dc0487d5c09b7b77b3dc9999c933079121a95fb7ef95c3271ae9e01fbff98553136e98389d02cd750bcde1bbb7ca1642fd21c
SSDEEP 384:70wQdh/nPu3noDEypfmUwqTBjY4xyB/hUheUG8unvuwAp:7fQPGXozmATHyBEewuvSp
TLSH
T10F924B0C885D59F2225612471323AFA96D26D0FD0D9FE3764283CB1BCAB1ECA75C2673
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft Edge.lnk.locked

Path C:\Users\Admin\Desktop\Microsoft Edge.lnk.locked
Size 2KB
SHA256 14184958877150d2b87c9456b0842cf8a5f696dd68fc002a7339f5e30b1c2750
MD5 cbfa502b908ff1060d5de70a93e94e28
SHA1 17b1d486582f98cc2ba37257c9eb544a123b8d81
SHA512 39aa61622c44a85e7eb813851e282e3481b495a798be5345caa21f77a597df6f519beb815b049a26c07c300ffb99a71331bd7b967153740628d287fec30d0b82
TLSH
T13941251D881D58FA72D601034353BF682C23D0B95C9FB3779283DB4BCAB5F8A3092212
MD5 SHA1 SHA512 TLSH

Submit Download

ProtectRedo.vbe.locked

Path C:\Users\Admin\Desktop\ProtectRedo.vbe.locked
Size 234KB
SHA256 87251ca9e014504338517f6d82a86f8c2f54c566ae2ff814a61b3d0f7755467b
MD5 8ffbbefd6508a85ca862cabcc3502c89
SHA1 d8b1f97718f911afdd2c66f92af724dc1cfc8c28
SHA512 28c03425d39bda8ee0b01e16a3ceeac5e5ff882a58772d004d5d6b6425ffe4bc20198f33c30536d792b9eb4b5d82793e6453ae791193abf7ccaf5a2baebbd96f
SSDEEP 6144:l/tXZjnqGWbQvCW3VjKvB9VbZY94V8Zh73BJd:l/91nq4vBa9/VYbd
TLSH
T1263423FAF45E08522CC8E25CA4A70CDEF6E1786132D25DE78E417DA3585FB988A10F5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishSuspend.mht.locked

Path C:\Users\Admin\Desktop\PublishSuspend.mht.locked
Size 128KB
SHA256 48aba4ea5c9205d696bee255406dd0b9b5940d1ecb4d07b15ba97a3e727993b3
MD5 768d94c341aa8241ed0192349a8d3ad1
SHA1 98d358301669e403463a59ad784a9ebb1609daa7
SHA512 693b11007b77b5886093e34e693e444b0df5acf8676e283efda8c53f9cc7fb83381308956b6d1a87663de6ac31f905ab00975ffe4efe1e19cab2d5d17088ec8a
SSDEEP 3072:pqnKBLt4Nsh5qkFLUKeUHtMWkvEtf7Nh8HMDw8/ngi:2SxFLUK0LGf7H8HMU8Yi
TLSH
T18FD312D866D0A782F56EE1D5399BF4B0E3EF4825111CBFF6012E09FD99A63D400A9F24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendGet.mp4v.locked

Path C:\Users\Admin\Desktop\SendGet.mp4v.locked
Size 212KB
SHA256 11250d83b80ef0590d54cd51a7bb81779135912c64e7068207097ee1a5e5c210
MD5 91244a7e05c0ce2686de5137772e6622
SHA1 6e1d816b236035a3226cc053b976995a060f1a30
SHA512 d854a33349c576c341d9b1ce588d06289932ba6237e4b248b034e20abfa80200559e2dc08554244f5ec78be9e56de6611890cc5c46ccaeca13c0cbe855f70dc1
SSDEEP 6144:5p9ByFVlFs7s3nGwjDhYXQ8wOV/YtwpyPYRtnuG8:v9BSVlFb3ntHhYg8wqYt/YtL8
TLSH
T16F2423A526851EC3B4D18443E0762CB1F1D8DCD576E0DD6C9290AEE972ECCC42E92E4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchRestore.ini.locked

Path C:\Users\Admin\Desktop\SwitchRestore.ini.locked
Size 166KB
SHA256 2a055aa07078f9f5a8c0652fd0dabe4a1de69f0742c5687f2c7994d44d26c165
MD5 bda992ffcf227158b74fe03033ce9834
SHA1 2fabdf1a4a65d224b76e4fd469e6a7646c02ba6c
SHA512 4dca3394f516fc4c87bbe91f02957779b0c104869f9902d2ed2a16e868a50b514311e3369541cac721da57802792b676dff47f2def53c9258777af85d8505549
SSDEEP 3072:C39NAN4RSUglCv0ZhOx5xPFs0Bc0ATS4Kdcj2Ai8yVI+lePw0eibVMf5Z:QAUlOorxPOYCTSV+j2L8w1leI0e+Kf
TLSH
T11AF3134D84E3C32B9795E0A04E2E55C2FE02253078B52E655615CBF3F3B71A4BE278E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncExit.crw.locked

Path C:\Users\Admin\Desktop\SyncExit.crw.locked
Size 242KB
SHA256 1070c8a5871d4a254782f6934106ee4007b462e0e8594c3509db97bed72900e5
MD5 72c716b69da2e4d721d0e9073704a6b7
SHA1 88a2197359814b8cd3626ee688df2013983813ac
SHA512 e26abaf64def365068f9e076e488bde53427fe684e1ce98cccb5d08959d71d2db42b784f61b118fce2268b9ed1ac8353afa267b46669ad07d92ea3525fcbe4a3
SSDEEP 6144:uhU4rhugVIuaxMZ5+VMipk5Moq5ysWY7ize:uG4rhLKlu+/pk5Moq777N
TLSH
T10A34230A2DA30C4C86575EF2161448913A891204E74C72F5CDA75F2DBB9C7FD4DACAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TestRedo.lock.locked

Path C:\Users\Admin\Desktop\TestRedo.lock.locked
Size 280KB
SHA256 fd9bd48da47caf5f40cdff50a9e172b6703a9fb2316a77adfc0e8fb49619bf6c
MD5 2bf485470dcb2a4701623487462bdf21
SHA1 d0984ff61727a7ad8252829f17779dc922a174c3
SHA512 86c3de75fe74e7e5e9df9739046597c57f2570e4e306fd343bebe5b86eba612270f2da79cad0007b4514b1729ee6dfa40360888c72e94eb321dcb79e3eb289c7
SSDEEP 6144:8HmIcJpyNrKPP113rv+tRPvnFHSbHQa/EHXyhizurn:8H1c/8rKPN13rv+t1nxSz/AXyC8n
TLSH
T1785422D8364FC9D561E9ED09F9A874214491719BF18BF932603C30B0F6BBB9667238E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini.locked

Path C:\Users\Admin\Desktop\desktop.ini.locked
Size 282B
SHA256 b30c7c8b344a1a6924881bb2cd9dd54e949e5d6e051b007a8390f2b4c244f7bf
MD5 59fffc4d95ba4ce08da7a57796b13634
SHA1 353811ddfc7b06d7a0cca86d7dee8349dd1fa588
SHA512 7c5192ec744ddeafe7d9c7351edf01a812e11d031fc7f5b13cef9be799b0e9ac35f4d4430b967c1791689f25fde1f9b181398814069644161b1901bb6ef4b9b3
TLSH
T152D02B0E949071F347098001D7E24238C095631862C8BA4E6DE7C239A0C365AB455A53
MD5 SHA1 SHA512 TLSH

Submit Download

ApproveHide.xlsx.locked

Path C:\Users\Admin\Documents\ApproveHide.xlsx.locked
Size 12KB
SHA256 e8e562f984cc4fcef0fecdf992dcf5d6b76c7307efdc057965ca98530f294515
MD5 bb824fa45f620e6e8fbea83cfc01e73f
SHA1 bd376ce525f61ef920accbe9c2b8fe5071e775c9
SHA512 3dae3c566787a27300a155d362a1660fc16bf0ed90df57fe444f591ca5faff2886cf16482e9fdc95dee22484c66a6657cc51836d000b493f68b2fc88d8ea7bcb
SSDEEP 192:2B4muggNNQvpb9GFCeYUYnjxjCBcoVaEzfzKYl0QdjAYUvj:2B4myN6bWCWY93bYl0QaYa
TLSH
T1D642B71D884C19FE629612031323AFE87D63D1784C9FB335D697DB5FDAB1E8A3452222
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupSuspend.docm.locked

Path C:\Users\Admin\Documents\BackupSuspend.docm.locked
Size 497KB
SHA256 302081903b2a23a2d354eb38d9657b83685d183390baacade3822cc0ee90c448
MD5 289b1f18e60141096852587059f39877
SHA1 cc418217e53287b04b72d83455fdafca00ae088e
SHA512 8a5d1b263101061bf77a3879bebaf90bc9628bb4e6fdf03113cb2d9e7fcee01188bf0c9ba539738b0def9245a0e5c99fbfa7a0900969a6b3fce4cefcc3755261
SSDEEP 12288:fLa7I9GrcrrLQZ9hFe9ivK+QuJCget1pzHb5xUeIgpbBTKrsv:f2TUXw37QZga5bfBIgpB+2
TLSH
T1FAB42308DBA544852DC7CA9F9D6536C6E7E9A815102AEFD01898E072F2ADFC7176F00E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearAssert.txt.locked

Path C:\Users\Admin\Documents\ClearAssert.txt.locked
Size 1.1MB
SHA256 09bb506101d5e4b4078d399655ec743a6490e069ebd2b574d237dc3ec2f35c9a
MD5 2b566354fa14506c355dda26ae7310fe
SHA1 95c7f8778770ac9e5d30f822ad02828e1ef2ec7a
SHA512 8070a3bd7941dd0c9985cdd405d234dd2567140f104ee33a7766bff95cf776abadbbce52b10e8266c4080e2edc1bcef8583b69a90bd128f4e90e2b87c896eac9
SSDEEP 24576:UPzNqT3wMEPz/l1EM0O7gD8ze2h9zCPAsNiu0nBj:UoTAMEPzN1WO0nk9uPAPuYF
TLSH
T126453335BBE48E66D47E470439C909BB4EB1C5302B5BA62CE0F38E54E7B315E74AAC14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugBlock.wps.locked

Path C:\Users\Admin\Documents\DebugBlock.wps.locked
Size 995KB
SHA256 25d84c001f9f4ce6218ce61da1dd054003793004d118afb9a689dd0e04843acc
MD5 b7314091f1f288b5f08b9ee00101f031
SHA1 ee83b0ceab4e2ef7cca118b8fd1b185404297085
SHA512 784ef787df79be05e3cfa583645a9657009711dde6045e8f08e18468504759a5e39d99f6e0f98620d90ebd68ea2b7e14a71f16687cbca56846484b3e14c240df
SSDEEP 24576:GLd+6iQmRLl7mDvIiIym2/F3ZcSP1NoPP/ouT2IXhuCs:GLE6iQ0LlKUimGZcSNN5uyzh
TLSH
T16F25338B90F467F05E1CE50D2FEDA2F8DB5308CEABD1966707B96096D6B0EB07130961
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugUnpublish.vdw.locked

Path C:\Users\Admin\Documents\DebugUnpublish.vdw.locked
Size 1.0MB
SHA256 f72e9a475cad9995cd6d3beb06fd87731d6b2c03bc4d5fece32b305ac49c4cb4
MD5 2a708f64e05f53d87aab4e7a1ce634c3
SHA1 e49e26cd68962521b061b621e980f439e2123b9a
SHA512 31b218d4b885801873e649fc5fb90f67dfba3ff547cfb4234313da355f3b9c70566adaa65904d43ec526a797eb5c5cddf6a4e4fafc24f8036ec5338ea2f7d141
SSDEEP 24576:BuXSzKQ9rXBPNOUswPiDiirtytR6b/BXlXf9gyjAUR+OEuh/DbEMt:5zrNiwPiDiirtq4bfVRsk/DbEMt
TLSH
T12035333B27C0F5900B4D4B47EFAEE1F259E47680295C2CCE9949BEC6B863BA0517605F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountClose.txt.locked

Path C:\Users\Admin\Documents\DismountClose.txt.locked
Size 853KB
SHA256 adbd1f2d198995d9b3865f6169f3a56021e7d740215eb35b207c6bc6f971e248
MD5 d33146b5706f97613bb493417438f1f6
SHA1 0634746bae3d5b2dddee848d101c4c99f4769422
SHA512 4f46657637f8a40cc518e0ff28e62c465e3539bed3831580446e97f22943c5326277e6124e2f659191ed9e2154f650badb83617412f25320dc792bebe9714fcb
SSDEEP 24576:2JQTufxsM+8ohkxvaMA+cEPu+J1dX3f/yQ+4rA:sfxz+8ohnKm+JbXHfA
TLSH
T1AB053313A9EBB09BCC5185F6078C5616E6178626B87B40D3B6F2FC7E82017B81FC949D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountImport.xlsx.locked

Path C:\Users\Admin\Documents\DismountImport.xlsx.locked
Size 10KB
SHA256 4dcc6a3451bb3d297295b77207a9ee4d8b343a27fb313d627e6d5250357ac10d
MD5 d9f3b133028f3eac13dba93343dd738a
SHA1 db8f2dd9e83de8abc18d506a8bf80f00550256c6
SHA512 13ae73c49d4628fa6c032211e4c2fd6f53b4aaba53b3bd5438226158c7128fa5f29020b99f74a181b1e0bca6314731cb5a7c301340cd3f89bce684d1eb789316
SSDEEP 96:4aaaaaaaaaaaaaaaWKaaaaaaaaaaaaaaaAHxtGmU+RGRwIaaaaaaryiH1luaIBeN:Smqmtqlu/BUnjxjCBcgxiUxdclqZLm
TLSH
T12022855D894D8CFA6286010303639FA87D73D1784C8FB776D297C75BDEB0E8A7092662
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitConnect.xlsx.locked

Path C:\Users\Admin\Documents\ExitConnect.xlsx.locked
Size 11KB
SHA256 1be255f873353277e05048eb4aab95c78ee61d5297daf8cbf3ef0947d35ea00c
MD5 03db68fc75c6d68c174a75039f120c2c
SHA1 53b06bfe730a4c8ce3562a98bc701b34d7773250
SHA512 8bf4d7425687d580614c2a5e5483aab6f1ca6bcbcad6b9687b1269d2f38dde7db7acdae2a3b1ccc838b65c903df5bb7b91442cd606ce7fdede41b47b13ca8fd1
SSDEEP 192:nMhl2hjTH8QfnLduIak8y8R5AXghqBzuL3WnyAgooBbPljXMeTJhrbB:rhfHNLdlkp8XkqhoJPoObPSshrd
TLSH
T15232954D881C18FE268606134313DFA86C23C5B80D8FA73682D7DB4FDAB1F9D7182262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportRemove.docx.locked

Path C:\Users\Admin\Documents\ExportRemove.docx.locked
Size 19KB
SHA256 413fce1ae0d02693c0a77b0bee80d1ffb219d0b7edc16f8f0bafc46822401856
MD5 85777ef6c4e6650ec299cd5d5623239b
SHA1 f4800903c6024f488a5ae3160b2ebee96fe1ffc4
SHA512 e602453a0c00ca7bcfcc40090bf45b0c2f75b434851065efb619a384a2effb1c6d15de97aefed8222103bc371ef74c2a43a6dbb92d92a2ac56d0bc6639665c73
SSDEEP 384:7NVOpf0CKgsVDgLfgeR5cId44lsbxg80Ho1HJkNy6iMvQP:7nEf0C4mMBlQJw1puvY
TLSH
T10C924D0DC84C49FA529252431B67AFA93C53D0B90C9FE37786C7CB57DAF5E893492222
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitEdit.doc.locked

Path C:\Users\Admin\Documents\LimitEdit.doc.locked
Size 640KB
SHA256 c32ed19c959c4aad3b1e2f0b002d823b266c73033fceec8a266cf4fa104f608d
MD5 84715a0c41877d5874e1b3023c490a16
SHA1 5867ad385519e97ef8b005f9f7ac424d0b561e8d
SHA512 ca70cfccd0321ba8f6d96a9fc19055ff3829effb1e576ee9a8e0c91d01fdf56cfecec9a476b81bde0734cc872a4ee907ab3057a056c21c1df6a23ed79093e133
SSDEEP 12288:Ej8HTqzPfbbwjqxrIq3DsF9A/trLR0iPwVQGtN/3Z388PV:Ej8zAnbmqxrIq4TAVycpkVpNt
TLSH
T192D4231A19F839B85A631827E6D99C9D9AFE617334FC73905106FA4C087C1E7BF27940
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewRename.xltm.locked

Path C:\Users\Admin\Documents\NewRename.xltm.locked
Size 711KB
SHA256 d4746cbe49153540cfa5744ce2166dc76dbe8956369d70b060444a963b255c2d
MD5 5af3afeba7f38ca4219b189ecd1f7733
SHA1 96f265ad203ac38b3714320a0ad8a468e709e5f7
SHA512 4d26693dc399b673b6e6c195429a51c0c91463d991fd0de0ef8be1d0d549525089a9d7e185592d18f84b3bf884c99e2f14f2276230e277bc1aea01c8f9e97167
SSDEEP 12288:dmWNDkSbO5t1s746CNkMOrvbV/+mxUfVp1aM0UQOFivnYd9Fykhub:FDlbM/s7cmjVWmONppKO4Y3Fnhub
TLSH
T171F4330761DAA39CB85AD93ADF59BF804EFEDF460A92645D3D2808F01CE717169812CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Open Notebook.onetoc2.locked

Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.locked
Size 6KB
SHA256 ffff76eb483e7048a1ed909218700f6ea52ba4fa9e0549ef2455d2bf187362f4
MD5 0760b2974a306a410646044b233caeee
SHA1 b43291d88cad45bff8ed0ea96641d331afcb3c8e
SHA512 f5a5fdbb2e39301c161b4977d3ae37728c21b4c70484314f62694dd67f4a3a2bacc69dbaf711d0d8bd4031da3de80c8d148aa681e0dfda18c5b2a89b9e221e16
SSDEEP 96:eg2A92alaaaaaaaaaaaaaaaaaaaaaaZxaaaaaaaaaaaaaaaaaaaaaaaaaaaaEyaa:P4GxF/
TLSH
T17ED1AA5CC85C19F73686021707739FA92D27D1F80D9FA3719293CB0BDAB0E9A3192663
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Quick Notes.one.locked

Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Quick Notes.one.locked
Size 351KB
SHA256 7a31489ca3681f91e6497b65d8b4ae2c18bea186c60245183aeb2212f93e1894
MD5 1f757014a3b233f7733fe3b8f69cef26
SHA1 90a45c2ce158e434aff87ef8e592035d75ab423f
SHA512 88dc852429b9225cc7488f66c2536ac2827eb010c0f22daf0680da3ae014be5524b2499bf1fd1104dbef8073fbbe698dc6451ed0b0d44eb7907f4fad057081d5
SSDEEP 6144:S9n1tjN95JvkUWFg+s5pXy+IdyOFzJhIv4QOzAHXuWguo5lcHIwP6RElnocT6KAK:m3j7XWDs5FgBIgpzAengVP8ono6hAK
TLSH
T11F74DFAC884C19FE2394071347679BB46D13C4B84FDBA72A42D7D747EEB0EC5B092662
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Quick Notes.one.locked

Path C:\Users\Admin\Documents\OneNote Notebooks\Quick Notes.one.locked
Size 5KB
SHA256 c788e5c41eba9f8f1b31db45d996c7a48a88dac885d236e81bd822cdb096bc94
MD5 5214e9417310042cd379ea6b952f28ac
SHA1 1765c57c5c88faf49105c1cfb5e1184960c31295
SHA512 32d3f220fcf312ccaa7047df6e80e5de246fa3a01fdd1cba3e8aa6ee30782a378c40a72f4bbe796912ba18f38972fc49f6a25f94ce6b12d8a2577af2003a4084
SSDEEP 96:mB2REcalaaaaaaaaaaaaaaaaaaaaaaZhaaaaaaaaaaaaaaaaaaaaaaaaaaaakaaQ:whw2
TLSH
T137B1BB4DC84C14FA3696130747239FE82C37C5F95D8FA3729293CB5BDAB0E997096622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Outlook Data File - ktnursvcei.pst.locked

Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - ktnursvcei.pst.locked
Size 265KB
SHA256 64f1de282a9eb39ed9c399ca7655522ebefc9656accfe968bcf9fb0b1007bf02
MD5 4a8a9f0de05dc9918ecd9c02b6f6d500
SHA1 a6c78ff1c4dba72adda0816f76ab3bcae4df47cb
SHA512 fb137274e19ef62ed57ba51f6e84e3d590a968d59b4ffe4dd7b7788cc90b03052b1bb5da4c419ae0e11a2d9582d675b775116f074bd895d85208d49073dced76
SSDEEP 768:1QKCv95X17wU2uc3sdHjwuluc5Fm5e3eJVDFvpcW+/LuzZT0CelkGYh58GmU:vO5X1HdttX6vk/S/egmU
TLSH
T14F44AD4C981C18FA625246475763AFAD5C63C4F94D8FA7768687DF0FCEB0E8A3483522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterReceive.htm.locked

Path C:\Users\Admin\Documents\RegisterReceive.htm.locked
Size 568KB
SHA256 735c0da628034fc19a8f85b36bb1d87c35d82e85090ac67475d6caa916fc758d
MD5 9a06b20112e3f72b6efefafc17187296
SHA1 c390e36f0dd57c5577859ff2fd9cc1fab611d0dd
SHA512 cd9da2b47b019b5ccaf565a49ef7425bf059f22d50cc3b2a77e78b790cadd78e10fe563eb7adc874e2aa20001338de34a76178d8af7fcc7127a002b8aa96a7b4
SSDEEP 12288:1B2f1o6y9ZAqJGae3MzsHW/hS+rhwpueHnUDiriYQa5N0wBbhVtrm7i:D2f169NE3ms25SRuAMZhFwBbv
TLSH
T1C9C423CC2401A30F93A4FB3C776871B19998155BB786EDEEA007D1F1DBD92B1E06E948
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartTest.docx.locked

Path C:\Users\Admin\Documents\RestartTest.docx.locked
Size 14KB
SHA256 2023a662f2c115e94b597a1363458d00a9d7f2748c1b252e7b7f7b37447da8c7
MD5 2a4346dd03ce4f8897b5c0e995285efd
SHA1 23e614c586aee4b33b59c2317c0a2920d9f2c1a2
SHA512 e094f3e38f111fc120faebf19c44494e28b350a15040934b1ada5d54051e14ea1b2a534b4b6c8356adb101e9b2c33247e3ce28a1c4a68c4684ee161d227e7d05
SSDEEP 384:79NoDWJ809zYpsOwmY6SHxDNQjPdUhdH2e:7rSlpy6SRDGWdHp
TLSH
T10052E71C885D59FE269652474363AFA96C53D0BC0C8FE7339683C71BCAB4ECA3052223
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipApprove.xls.locked

Path C:\Users\Admin\Documents\SkipApprove.xls.locked
Size 426KB
SHA256 f72a83e4ca7336df952863a2a73c63b274d311bb9ec3641f41e744a6b3062b19
MD5 cd3e6804d195c9a05a9ed3fe7f3b14f9
SHA1 b277599e0667f571f9e89696b4dd1c8aa17e59a4
SHA512 a86a3f9cbf4747d634d6268c67bf61c64e9644fdf412c7114fc7ef9d5f58dc9f5eaa67feb7d5010af7edaa5ed6f4d87fe1a095f93b873df845a85fe73f3d6af5
SSDEEP 12288:OQpC/rrY29KmwrnTgLC6z+tfjR3KCbQMcvyN:D8jmyCi+Z1J+c
TLSH
T14194230968B369EC4098BCBDF7568AA987C893CBD796EB16D5819D14704C8F337F8098
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipTest.pptx.locked

Path C:\Users\Admin\Documents\SkipTest.pptx.locked
Size 782KB
SHA256 86ca5d55b20975f8b16f6b62765a8c6bf6caeb51160550add9c4b3b3dc6af83a
MD5 a13bb3a3bfe35b9c9fc03dc3664a6639
SHA1 13262117da4bc4bbb311d135cb88f15863da095b
SHA512 daa9114a2beb7428e91ec7ba920f340def9ff3a4388e41b755c1c7e57d394999dc556493c4f3fb8e4aacf59cd47e3a4847b9311a1b1830cbca0ca30e9d19906f
SSDEEP 24576:8mDlk5odT1thfdtmpbuSCf1BOTI6+Y0J6MCHMzw3CcWykyeV4nLV:lDlk5UT1popCfXOTIbUm0ycW0eW
TLSH
T1080533D7B1C06F613222BCD202BD689204D399E9C746A62691BE965FE35C41F6CF03E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartSearch.pdf.locked

Path C:\Users\Admin\Documents\StartSearch.pdf.locked
Size 1.6MB
SHA256 5235e89ee5532d1ad7baa5a912e01398f35f94cedaab2f755a6b9e75846fe0c4
MD5 ce31d62d597d27971d506a6436abfacd
SHA1 2c83b3c15ab33e2556552388bd414dea5cb4abcb
SHA512 d54f40cee2c6505bbcf1c41c5d21a56f9e626e19a14361d470232f47c6afcbc1114cb9ca945b496bed712243edbdaaa521118f77a7a967f2e8f3a7090258ec18
SSDEEP 24576:gEl0WMVPgaMypDjjs0AzP8OuNjZwBkHe6whk0gwgk0U8pW8EqBy+0bl5LMx2O7cQ:VVGolydsRz3uN7HyYwUU8soYXblJm8jC
TLSH
T15075336CDD37A3E5A1A246816B74C78A35F3B41052275C96B9A02805EE2913FF9CFCC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceSkip.xlsx.locked

Path C:\Users\Admin\Documents\TraceSkip.xlsx.locked
Size 14KB
SHA256 4000847c470a803ba2ece852c4b21e931e5d222b4f915788c09677adf6443e63
MD5 73d6f192a35c7aa482df454b2db82b78
SHA1 46f4034a097a28f3a4584f3035d2da9eefdd9157
SHA512 5a0e3554eb73affa520b96c7d7eb9c7b3fcdb00b9ed965df546295ee09a671fc7fa0933cb4b1c00ebc533983f919d38bc08dccf000a2f23119d49dde552e1aee
SSDEEP 192:vHaxXlT60Hw8vv5C7YlPw2wHb6KLMWHwNOmW1ei4NZHAQ9kRAofIHA:oXY0QEvY7uPM9MWoOxgi4NFAQ9C8A
TLSH
T1D752E85CD84C55FB2396051743235FA9AC23D5B80C8F67729293DB5FCAB1E8A7492233
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockSet.dotx.locked

Path C:\Users\Admin\Documents\UnlockSet.dotx.locked
Size 924KB
SHA256 6ce53ca2dc73896faf5dc7cac75b264e029fec87829f2c15f47164fee4954575
MD5 0e33541d7354acafd7da5915e1de6807
SHA1 888907240f71b5bf8bb33d4a596867df5e1a5ab2
SHA512 08aab8f11095855bebd00dbe93f422556b05d9c40d08afa784d98a191c54cddc5d3f8a646bc7165f9bacec92f6ae915ce463d7c34a31e3930533ef1a55c7e0bf
SSDEEP 24576:4DsN/QOiWI7JYr8WQAuoSUZsVUMtvXsr32zAc1eREU/D3f:7aOijLo0UMtvXA32z9en
TLSH
T1CA1533C80518D2DD97F78F24CA98D581A26EC4930F74AC1B3A54639626E3F1B3C7693E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini.locked

Path C:\Users\Admin\Documents\desktop.ini.locked
Size 402B
SHA256 44f3223125ac0400378c105b47c2679ed45b933eba285e1c1d2099cc79b75354
MD5 908c41d99bc37f095a90f2d11ae25494
SHA1 bc6f07332abc4fbb8909b3516b95467d22885545
SHA512 3a199873f0b8039304fa4f7e67f912ac7a76a68921c35bc9733003f45e4c7bec660c67cf439bcaaef6d692e45e586412e1930286f051b1cc3596cd5859a84e1f
TLSH
T11FE0F84F80F068F25B09C623D3728278C0A1532E16C8A0182CFB8338F8C3230B519623
MD5 SHA1 SHA512 TLSH

Submit Download

AddInitialize.tif.locked

Path C:\Users\Admin\Pictures\AddInitialize.tif.locked
Size 258KB
SHA256 ad4a66d06bc75b408b20b2e92736c0836361c27235c98873cf207c86f577bc80
MD5 b9eb0f9062c4201d85c344895d5b1610
SHA1 2a7deec740d0c55570bbc85dd7b27b161fbf5757
SHA512 d345a3e779215da069de00a81c31279acd017f53c7f67faccf13f1d5b58c4fb6d94634ae687d7ccb46601537a8ff6decd61478eb383b4441a55d34d5bbb32855
SSDEEP 6144:k2a52mEU2F196tu9vtpDKEpU6hRH/K+S2kmwFdPdMo:k27Fj6tu9vtZKOUKp/Kx2T0dL
TLSH
T16844239B819C8AF9D97BD1B3BA23D078F9104A2EB143564C14DF449BC7D18CF6B8D5A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddRevoke.ico.locked

Path C:\Users\Admin\Pictures\AddRevoke.ico.locked
Size 223KB
SHA256 a1160106f360a9abf07d56cb9cebe933146062dd48e00ac473ed44577941dfb2
MD5 af974def53b5af6a126400b642873a4a
SHA1 b18b550966b2c8c359c4395f652dec407ce94a8f
SHA512 5ff0e74ffed0c905eefbd2f780b8a147c2159e306d41ce4d4982161e54803e0bb03148f34c6609342d6ae747887dcb895ff19f6b77f6093384435f4ac1ae5d19
SSDEEP 6144:3kvpee0u9vu7NiCUH4XoZx0uJcIyrAKnqP8:0vplUivCoZ1iUIO8
TLSH
T1982423A66788CB577668B7883ECE53C6717499E1AD01AC6E8875FC00371C8F443E6F4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveAdd.bmp.locked

Path C:\Users\Admin\Pictures\ApproveAdd.bmp.locked
Size 470KB
SHA256 3f300bc058defdbc129fb810c4377dfa5cccea12199fca39c242598971e97d43
MD5 29de4fc81e8dd43e8f90b98d8bc548b3
SHA1 da089c48a9ab7e9d78b407893c3582452879bb9a
SHA512 0549d5fb2ea096b226436563ba1980db84475d90516eef68dfae380c1d1439763a22d9b9777b8ea1ad5b548be7a0bf51f86d1c938d26eb25a98f85ee2f9a2dd0
SSDEEP 12288:LK9FeGSCURQMyv18rAoWKPEvQkYe8TqNFceVrwe8c56hL3f7B:LKeGS3RmY6KPEvKe8oCeOe75ALPF
TLSH
T19DA423DAA18DBF5828FC708F9F3045D33F9476A032944EE1B86A5E09705438E5E72B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertCompress.emf.locked

Path C:\Users\Admin\Pictures\AssertCompress.emf.locked
Size 246KB
SHA256 4c48405747e010e63bc9142b82ef20d351cce2815a3d88078d3e171c32ef41cc
MD5 d103a753b36d7a62f704c6d416683a70
SHA1 1b44f1ef8f6d1078bf9ab779b469f40268f3bc9f
SHA512 d5ba4aceccd1604e9f45bc233239a1fc9d6a27a930f3f26d887dbe1a8b37622897b5e0f53ed688cdc54afb19b5c5053a39aaa9db91bfc1aded4f9ebf6ab9628e
SSDEEP 6144:X5seduJzo/LBHX4Vn4TfKa+AJX5oSm7/ttvP:psHINWVa+AJpC/ttvP
TLSH
T19C3423534EEB2A1390D1617753F6E0C658F682821504A4B2D4FE55AF2EC1C682E5BBBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini.locked

Path C:\Users\Admin\Pictures\Camera Roll\desktop.ini.locked
Size 190B
SHA256 254efc344f3c56c9d16956d1fdcaad93f0aae1f3d0a8e31530f497a6c419237d
MD5 ebda69b86c57c5bb1648082840c3cbad
SHA1 456b12fbac5dd8c47de38c19bc95f7773f49c1f8
SHA512 4b439223455a7dd89d61c385c4f9f715c31a0d4a9b31f55f02b8b4c53da0068b27c185d8bfee3f59aee3b4b44696da454bcd3cbc264a6a008f4e05eab5756ff4
TLSH
T190C0122E8555A2FA7209990263B542350141932750C4651F9BCBC47984D2594F159117
MD5 SHA1 SHA512 TLSH

Submit Download

CompleteBlock.emf.locked

Path C:\Users\Admin\Pictures\CompleteBlock.emf.locked
Size 411KB
SHA256 22ab6ef6562271f89676a7c73aab9403ef256d8de315e4c459d01135e65d862a
MD5 5542c86b78ec871a28cda3dfb0d34283
SHA1 223350d884a97d32fbf00fd9bcfcdbd7464bb128
SHA512 cff806fbef0055dd6ac5a3763302e309ca7adb050d4facf67d16faafbcb8c06131d8310ae4b421fb97df6d108687febde03d30a39392f70dd5a91db7e23704c1
SSDEEP 12288:FWv/ucQZW2jZJRClSUZSRYB/Cxl3KsSIRa:YvRcviICdCfKtT
TLSH
T18194238E6C06BDF0C9AF9BC7D54B9A8E607747073C7031D52A1E5C615B7264826BFB08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromOut.dwg.locked

Path C:\Users\Admin\Pictures\ConvertFromOut.dwg.locked
Size 270KB
SHA256 690e25f91a0420ea6cc87a51bde8bd54c3cc587e8a963bb684fc49a9a53e6dc0
MD5 e8b04a94fadb3e5a3afde55fa154ba5e
SHA1 ed0038e5c0b45ffc8068c3ce8e635e839c355e26
SHA512 9e67af0f1bd0878e8870fe3fc70d4b15f303bf0fe2ab5d891f67857f5e2d3ba38e32ee505dd69133db09c2f23733981346b6f327b78b46e3ff78c80577858a82
SSDEEP 6144:WJLRA9W1OtbW1ZiRmt7aMR3JuMnTgoh7RunvFg9mR2pqP0OaJw:C9itMsRCaMR5uMnTJNqimM08Oaq
TLSH
T1A9442370D7476C2778961E37497A9286C66893FB207F20F5D3319430AC8F11A63B6B9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugSave.crw.locked

Path C:\Users\Admin\Pictures\DebugSave.crw.locked
Size 364KB
SHA256 b113f072aad4bbb1ce91888e070a049c3f4bfc055bd0e2b0bb14600d61e3a8d2
MD5 9adf91d8e31595d60362dc1f8a17d016
SHA1 50ebfeeaf8e7b0f41c8e2c0918394314a9e5f0eb
SHA512 40da1b9cf1326e9a521d9f49af77b55578118836e976b3bce0bde25ebdc99bc353cfd44cad7e4ddaeb9ac02715e5ce6da90de84367c38495b17c8f4ab707a13f
SSDEEP 6144:B3rG9xNrnYy8zsEZzBYSCAo7BiDgpzMJUkraVmilE5koLC4DEu:B3qDNcyuVoFiU5M2EBpzZ
TLSH
T1658423C92AB1F470C9C335C0DFB51EC16968D8A45DB9BF818C4DCBABB6827517D182E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyStart.gif.locked

Path C:\Users\Admin\Pictures\DenyStart.gif.locked
Size 423KB
SHA256 0ac7fd9c119e5ede7489e4c73cc9d432b509ee9cd7d3fd103ca8f0ee81c71605
MD5 c4ce92a20a6cec0e3ce70562cf773c6b
SHA1 8619117675dfe3e1000a6cfbcb43fcb8ef0d22ca
SHA512 e7c33dce7175c704753e5f3de07b30ebf64073f118b5115f0790ff7f9123b32efa0244ab156849ab9d99db65aab3d508c583e13fd534fbaf11bb3cb862a06f6a
SSDEEP 12288:Ng0kzVkEe9Air6DS2kCMgUuWb20E9F8LmgERi8d4Yi:Ng0oVy9x6Zkzhl2/9FTQhYi
TLSH
T16C94238F69AD50A998F709192C4C8DC8E7FF0720C619D08C896947C16E1DA3C7D76E9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

anKv.jpg.locked

Path C:\Users\Admin\Pictures\anKv.jpg.locked
Size 25KB
SHA256 29bb4c4da0775b47f6ca485872dae16955c660070ecd56cc90e6972cd6900605
MD5 4e9d21c33d8f83ee11b5cd475621f060
SHA1 c762b3c7a9b90aa3b95166dadc7c88794b4e2ba4
SHA512 13490542b3272c89104356df79dd86f4d115a8c1a43ca00e16c174ef0ebc745df930a015d0440c2027e8542c3dabba4e6d82aeae316caa1e9621b956d56043c9
SSDEEP 768:YWjZNv02l2E1RqnJgMC35+Y8WXNNCt0LD6:tl5qGRqOMCQYlXNjLD6
TLSH
T18BC26A5DD81D14FA368707034367AF98AC26C4784D9FA731D997CB0BC9B089B3196262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini.locked

Path C:\Users\Admin\Pictures\desktop.ini.locked
Size 504B
SHA256 9bdfb3eff45dace24b3d56115d24ff3d7270640e40e677d63ebd3e335badea9c
MD5 8db19169f874101a22b3a1ea6c7c4323
SHA1 bca89768c5c1b9c319ad0e5a6d50f82c87afe9a8
SHA512 6abb9b09c10ea2a6d84379d09e772b9b5625bf55e02e993d167ff91bca1a831ce9674857ff9e472743e58643ffd047f0e69778168e42dbc393db61558a889271
TLSH
T1C5F0549FC09623F183A25420D3D187308143232D21C0941B1CFBC124AC637A77054313
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads