wannacry | ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa

Analysis

max time kernel
149s
max time network
28s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 13:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
Size 3.4MB
Sample261009-q2ft5sbc32
SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
MD5 84c82835a5d21bbcf75a61706d8ab549
SHA1 5ff465afaabcbf0150d1a3ab2c2e74f3a4426467
SHA512 90723a50c20ba3643d625595fd6be8dcf88d70ff7f4b4719a88f055d5b3149a4231018ea30d375171507a147e59f73478c0c27948590794554d031e7d54b7244
SSDEEP 98304:QqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3x:QqPe1Cxcxk3ZAEUadzR8yc4gB
TLSH
T173F533F4E221B7ACF2550EF64855C59B6A9724B2EBEF1E26DA8001A70D44F7F8FC0491
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery execution wannacry impact persistence privilege_escalation ransomware spyware stealer suricata worm

Malware Config

Extracted

Path

C:\Users\Admin\AppData\Local\Temp\@[email protected]

wannacry

Ransom Note

Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94 Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �

Wallets

13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94

Signatures

Family: Wannacry
WannaCry is a ransomware cryptoworm.
ransomware worm wannacry
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047

Creates a file in the Startup directory 1 TTPs 2 IoCs

A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

persistence privilege_escalation

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SD4227.tmp	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SD423D.tmp	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Executes dropped EXE 17 IoCs

pid	Process
2648	taskdl.exe
1300	@[email protected]
3028	@[email protected]
5768	taskhsvc.exe
2160	taskhsvc.exe
2364	taskdl.exe
6100	taskse.exe
2748	@[email protected]
1872	taskdl.exe
5332	taskse.exe
1124	@[email protected]
2572	taskse.exe
2312	@[email protected]
4816	taskdl.exe
5984	taskse.exe
4080	@[email protected]
3532	taskdl.exe

Loads dropped DLL 14 IoCs

pid	Process
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
2160	taskhsvc.exe
2160	taskhsvc.exe
2160	taskhsvc.exe
2160	taskhsvc.exe
2160	taskhsvc.exe
2160	taskhsvc.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
6108	icacls.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound 2 IoCs

Network activity triggered a Suricata alert

suricata

flow	pid	Process
3	5768	taskhsvc.exe
3	5768	taskhsvc.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\evovfhxotleg702 = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\tasksche.exe\""	reg.exe

File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
defense_evasion

Windows File and Directory Permissions Modification
T1222.001

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
4624	cscript.exe

Sets desktop wallpaper using registry 2 TTPs 2 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]"	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]"	@[email protected]

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 4 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5024	cmd.exe
5396	cmd.exe
1884	cmd.exe
3572	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	WMIC.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	WMIC.exe

System Location Discovery: System Language Discovery 1 TTPs 20 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskse.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskdl.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reg.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	icacls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cscript.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskhsvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WMIC.exe

Modifies registry key 1 TTPs 1 IoCs

Modify Registry

T1112

pid	Process
4220	reg.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
5768	taskhsvc.exe
2160	taskhsvc.exe
2160	taskhsvc.exe
2160	taskhsvc.exe
2160	taskhsvc.exe
964	WMIC.exe
964	WMIC.exe
964	WMIC.exe
964	WMIC.exe

Suspicious use of AdjustPrivilegeToken 53 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	964	WMIC.exe
Token: SeSecurityPrivilege	964	WMIC.exe
Token: SeTakeOwnershipPrivilege	964	WMIC.exe
Token: SeLoadDriverPrivilege	964	WMIC.exe
Token: SeSystemProfilePrivilege	964	WMIC.exe
Token: SeSystemtimePrivilege	964	WMIC.exe
Token: SeProfSingleProcessPrivilege	964	WMIC.exe
Token: SeIncBasePriorityPrivilege	964	WMIC.exe
Token: SeCreatePagefilePrivilege	964	WMIC.exe
Token: SeBackupPrivilege	964	WMIC.exe
Token: SeRestorePrivilege	964	WMIC.exe
Token: SeShutdownPrivilege	964	WMIC.exe
Token: SeDebugPrivilege	964	WMIC.exe
Token: SeSystemEnvironmentPrivilege	964	WMIC.exe
Token: SeRemoteShutdownPrivilege	964	WMIC.exe
Token: SeUndockPrivilege	964	WMIC.exe
Token: SeManageVolumePrivilege	964	WMIC.exe
Token: 33	964	WMIC.exe
Token: 34	964	WMIC.exe
Token: 35	964	WMIC.exe
Token: 36	964	WMIC.exe
Token: SeIncreaseQuotaPrivilege	964	WMIC.exe
Token: SeSecurityPrivilege	964	WMIC.exe
Token: SeTakeOwnershipPrivilege	964	WMIC.exe
Token: SeLoadDriverPrivilege	964	WMIC.exe
Token: SeSystemProfilePrivilege	964	WMIC.exe
Token: SeSystemtimePrivilege	964	WMIC.exe
Token: SeProfSingleProcessPrivilege	964	WMIC.exe
Token: SeIncBasePriorityPrivilege	964	WMIC.exe
Token: SeCreatePagefilePrivilege	964	WMIC.exe
Token: SeBackupPrivilege	964	WMIC.exe
Token: SeRestorePrivilege	964	WMIC.exe
Token: SeShutdownPrivilege	964	WMIC.exe
Token: SeDebugPrivilege	964	WMIC.exe
Token: SeSystemEnvironmentPrivilege	964	WMIC.exe
Token: SeRemoteShutdownPrivilege	964	WMIC.exe
Token: SeUndockPrivilege	964	WMIC.exe
Token: SeManageVolumePrivilege	964	WMIC.exe
Token: 33	964	WMIC.exe
Token: 34	964	WMIC.exe
Token: 35	964	WMIC.exe
Token: 36	964	WMIC.exe
Token: SeBackupPrivilege	5488	vssvc.exe
Token: SeRestorePrivilege	5488	vssvc.exe
Token: SeAuditPrivilege	5488	vssvc.exe
Token: SeTcbPrivilege	6100	taskse.exe
Token: SeTcbPrivilege	6100	taskse.exe
Token: SeTcbPrivilege	5332	taskse.exe
Token: SeTcbPrivilege	5332	taskse.exe
Token: SeTcbPrivilege	2572	taskse.exe
Token: SeTcbPrivilege	2572	taskse.exe
Token: SeTcbPrivilege	5984	taskse.exe
Token: SeTcbPrivilege	5984	taskse.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
1300	@[email protected]
1300	@[email protected]
3028	@[email protected]
3028	@[email protected]
2748	@[email protected]
2748	@[email protected]
1124	@[email protected]
2312	@[email protected]
4080	@[email protected]

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 3640 wrote to memory of 4340	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	90
PID 3640 wrote to memory of 6108	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	91
PID 3640 wrote to memory of 2648	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	94
PID 3640 wrote to memory of 5024	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	95
PID 5024 wrote to memory of 4624	5024	cmd.exe	97
PID 3640 wrote to memory of 2448	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	98
PID 3640 wrote to memory of 1300	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	101
PID 3640 wrote to memory of 5396	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	102
PID 5396 wrote to memory of 3028	5396	cmd.exe	104
PID 1300 wrote to memory of 5768	1300	@[email protected]	106
PID 1300 wrote to memory of 2160	1300	@[email protected]	108
PID 3028 wrote to memory of 1884	3028	@[email protected]	110
PID 1884 wrote to memory of 964	1884	cmd.exe	112
PID 3640 wrote to memory of 2364	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	115
PID 3640 wrote to memory of 6100	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	116
PID 3640 wrote to memory of 2748	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	117
PID 3640 wrote to memory of 3572	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	118
PID 3572 wrote to memory of 4220	3572	cmd.exe	120
PID 3640 wrote to memory of 1872	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	122
PID 3640 wrote to memory of 5332	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	123
PID 3640 wrote to memory of 1124	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	124
PID 3640 wrote to memory of 2572	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	125
PID 3640 wrote to memory of 2312	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	126
PID 3640 wrote to memory of 4816	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	127
PID 3640 wrote to memory of 5984	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	128
PID 3640 wrote to memory of 4080	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	129
PID 3640 wrote to memory of 3532	3640	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	130

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

Views/modifies file attributes 1 TTPs 2 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
2448	attrib.exe
4340	attrib.exe

C:\Users\Admin\AppData\Local\Temp\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
"C:\Users\Admin\AppData\Local\Temp\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"
1⤵
- Creates a file in the Startup directory
- Sets desktop wallpaper using registry
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3640
- C:\Windows\SysWOW64\attrib.exe
  attrib +h .
  2⤵
  - System Location Discovery: System Language Discovery
  - Views/modifies file attributes
  PID:4340
- C:\Windows\SysWOW64\icacls.exe
  icacls . /grant Everyone:F /T /C /Q
  2⤵
  - Modifies file permissions
  - System Location Discovery: System Language Discovery
  PID:6108
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2648
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c 101831791553532.bat
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5024
- - C:\Windows\SysWOW64\cscript.exe
    cscript.exe //nologo m.vbs
    3⤵
    - Executes a VBScript file via the Windows Script Host.
    - System Location Discovery: System Language Discovery
    PID:4624
- C:\Windows\SysWOW64\attrib.exe
  attrib +h +s F:\$RECYCLE
  2⤵
  - System Location Discovery: System Language Discovery
  - Views/modifies file attributes
  PID:2448
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected] co
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1300
- - C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
    TaskData\Tor\taskhsvc.exe
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:5768
- - C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
    TaskData\Tor\taskhsvc.exe
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    PID:2160
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c start /b @[email protected] vs
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5396
- - C:\Users\Admin\AppData\Local\Temp\@[email protected]
    @[email protected] vs
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3028
  - - C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
      4⤵
      Executes a command shell one-liner
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:1884
    - - C:\Windows\SysWOW64\Wbem\WMIC.exe
        
        wmic shadowcopy delete
        5⤵
        Reads the TCP/IP host and domain name from the registry
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:964
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:2364
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:6100
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - Sets desktop wallpaper using registry
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:2748
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "evovfhxotleg702" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3572
- - C:\Windows\SysWOW64\reg.exe
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "evovfhxotleg702" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
    3⤵
    - Adds Run key to start application
    - System Location Discovery: System Language Discovery
    - Modifies registry key
    PID:4220
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:1872
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:5332
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:1124
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:2572
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:2312
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:4816
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:5984
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4080
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:3532

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Windows Management Instrumentation

T1047

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

File and Directory Permissions Modification

T1222

Windows File and Directory Permissions Modification

T1222.001

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

OfficeIntegrator.ps1.WNCRY

Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WNCRY
Size 5KB
SHA256 3887f0c7688b9d3ea81ecd5b8a57aae9cfbdccf052d3d01d29f122cc3006fec1
MD5 791f1f27a71824c772b236fdf7df0e01
SHA1 56ace5ce7ce37bfd3ab739f956c375f66525c893
SHA512 8bcdc140c8b8a0167252fa1d6c67b01f33f5b18be4e092db54cafcf2a25396632b336a771464e8b87f69eecbf30290ab2d034e822e8b41f02ea0bd394d69cc7b
SSDEEP 96:oc0EZTKAveQebmywQqTuJRyGOPkmLri4xaR3sMIpDTf4n/8LnWx7dOyLJZugOyku:oEh2QebmyBWRGOnHi4xaR3xcT8/8LWbd
TLSH
T176B19EB1C6053E250C62AA8D1BD4F7C3AD90C69337C119A7A9FC55C31B1BA297D664C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stream.x64.en-us.db.WNCRY

Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\27BD3A68-1D42-4278-BE21-034F6F45EA8C\en-us.16\stream.x64.en-us.db.WNCRY
Size 438KB
SHA256 7cc186a4ca9490252b9dd18c981652f5e44a515505a1aa744871d8c8a25ccf68
MD5 b61ca7a6f55852f1dee586cc847052bc
SHA1 b1d6bb65ac73846328357f3632a0a36282327da1
SHA512 3460ffd099d3a7e5adb8e2a1986b96056064cf2b28aaba74e990723a2fa55ba11d35b5e854ffff6989a92ecc4e7f6b85d5761700d161f1aa74bf594d526e4492
SSDEEP 6144:FUOW3NvhQxXU4HpEswB90NegOz0ncx5HF5eqHfKOs4RMX8gR9Oymv1qkdOn1jQif:duhV4HSswIogAxzsa1BRMdAymsdQif
TLSH
T112A42371E5613071AC5A5FE2A8C3EE27ACB5C1960CCDDC9B0A40FF068966EC8716B4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stream.x64.x-none.db.WNCRY

Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\27BD3A68-1D42-4278-BE21-034F6F45EA8C\x-none.16\stream.x64.x-none.db.WNCRY
Size 1.8MB
SHA256 ae3b8bdb17496e98c8ffb91035efb902f3c5b0a5960d71cf6458dc5d14d2f8c2
MD5 92d0f43062b3ac19d4b0d38eae1f1006
SHA1 e4ebaf3bd1ce4fc9dfe91aef78fbe1b9e26f8304
SHA512 350f73596daee4e4fc84814292a911ce231040be5cb37e0731a8e81aafa76770956626d019b73fb0d6b50963c94c9b845516d9d1015572b21d8772f6fd1b5718
SSDEEP 24576:LCfkre73C7pOqan5Z+w0MiRXtUAKdPlGxRVa7XE0WcMLXDcdz63vDo60Rydpump:W373C7pO5A9XtU50aXOvD93v06EynP
TLSH
T197953360248C988FCB0F60291A4D997A97D67D5E7F342BAD3C5283D402DFB8A37B095D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WNCRY
Size 126KB
SHA256 64b8e652a5e7e76c9f78735b779f1e0b1be50901ad852fc815b47f19f9ffceee
MD5 74b5724a593ee4f72d8b59ebea8a4920
SHA1 1072889319e35306785497395fb680893d2ce3bc
SHA512 dd8c6ea5b9e3404c791257c3eb63ccdc32fbb3b60524f8b55228fbbe0e800899e35d53b21a4179a08d767b96529aa08b2a2bb572a22d1212ad04b66205a7baa7
SSDEEP 3072:X2/LsjeHXsiPkSgry8L5hY7r+qiuWkYuh7v+tpHFpV11XX:X2geHXsiPkSgJLHY/UIhatpHFpdX
TLSH
T1A9D312AD6B9F6376B82350B17E632310CCA3F4F638E847F9281A3D4C1269B59DD0D658
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

device.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WNCRY
Size 43KB
SHA256 b4c4d398fc758076e5e1d05aa5d33cc03e69d039c0d4ed84f569d8aa208fb83f
MD5 1279593d1b171b18f5b74738c1fcba04
SHA1 6c3a4af41f708a568b43a8b8c3afb50d85c01490
SHA512 3d1f8a84648c6d864c4040b37a0b8f0dfc5fc12dcd812905a6cd30c53592b7afa4742f7ca28ae925b66b740082f2b8c202f7dbb9ad31365474cf7b015b81f52d
SSDEEP 768:XHyAan8c7EeWSoubGCx3MFGndQuvWJT+uBdrQvmYuq2fuFBX1Rk6VqiHDzNhxhaG:XHzan8c7EPi1xMGdQKWJTrQuYuq2fuLJ
TLSH
T18913F148C9421E1E516DC2E6E89DD7C64B335D2D0880C5FB7AF01C4B98B8F59BB572B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WNCRY
Size 28KB
SHA256 9e28f76dbeefeed260d0258be2b61bea5e8711b3b87c394947f663ac0b103d52
MD5 6f7ae6a6b6da1f11fe332e3a0b2de73d
SHA1 18d84c9822fcea2ae4f487288395c9941776fd14
SHA512 c5f6115e2b503fdec5280df2b5d6a775fae961b6c8cff4efe54ab068151e5dac48107e361f0ffb2c0a73984282e89dbf677fd78f2f291f03c7a48e015caca185
SSDEEP 384:spn47LuTpEiyYZv2Y2l1wiVB+5qrNmFWXQVQg05pNz5LzshEpyau3lMrwunHYWWM:OCLs9d5iTQVQT5L9Tya2ls4vw0g
TLSH
T185D2F2FDE5FC41A9D3A1F1140B16F1ABC96DDF422E5AD72E4784CCE3A931E61ACA9004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

superbar.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WNCRY
Size 38KB
SHA256 bf2619a5b26bb8cb0e97faa5c5712b3a5f0da6410f7fcafbc159f201323a7636
MD5 8d075e1ecd0bcc59c928aab5c63e2dc0
SHA1 63ca17c2b6f1d3e67f84eedaaba4b5e065cc0ca3
SHA512 085283428e38d07444f38391c9916524d733d71066f81b7e1d8820e983b04f1b67cdf3868e8fc9a6bcb7fcd5fe384479eb310aae70113275673792ae32fcada4
SSDEEP 768:9E1mt4aCroAXG3ziJOAu1dcSiskeM1Glz0Z975P78SfPekXfrDCLEUF9:omt4a4lGDiJi9wz1GlIX9P78wZfnCLh9
TLSH
T1320302219ECA25E9E0191451698059C6A6CF5E74DD63122CB738F222ACF5FD91B37E02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WNCRY
Size 126KB
SHA256 25d604d978c1849d3963ae1092f612806aa60269006a5d67c6ee11b18c883ddc
MD5 8919bda76403dc80a18c3ae9572eec76
SHA1 7ee40613d7172046bd98bc5ae2e44f5cf498dff0
SHA512 0b415a2a93c87a2d0cbc5f6ae7d37095ad91466fe61acf51cd3fae6ef70460396c24e68c7b1e557db0210f391c3e14c170549041662d1b81f78898792b1f9b18
SSDEEP 3072:uasUilKx3nnsnzrx25TpMstLjqCAAJyUDkgtG6nGzn4tYckrHO:5UzVqWOLjy+FDkgbnGz4tcK
TLSH
T1E6D3124C206D55214A291D71D7986A7E0EBFD43A87DACF34DA6B8FCEA4384C843D5CB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

watermark.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WNCRY
Size 28KB
SHA256 7df5ee3c14871bbead0bf43c4bfc815f6d185404c48c3501c66990ddd3850b48
MD5 5e630bf649a1499479628c9cd2c8a183
SHA1 b899c4809600c3e20c77bc0bc465249113801430
SHA512 0acbb2054735091a4bebd4bcdc9332a9aebfc6ecc52338b772cbb9112e15edca46bcb3d396e611e81eac05d32643c03da5f7332dec3e301b8b13d73237cf6505
SSDEEP 768:DhbS6Et95dIqhwYj5t6n/d8mne2jfdnEoJH:lNEf5dQYduZZEE
TLSH
T1E1D2E1D46A2B42D6A05114307E9ADF3FED0558150A0C93CC83B8E17B47CB6FA897F26D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WNCRY
Size 108KB
SHA256 28c6252f0d72af10a4f12f9ec17e68d64d8dc0c6ae619d1a0441f76959ca0481
MD5 07a6a251ba315f9feaf39e3d4dcfe2f8
SHA1 ebfcb8bef36fbb626c549aac689d002bc1a425fb
SHA512 d1e59130ee017446960d80a55d549b80d7c42bfc7dfb8a113988ee4a6dcb51224052bf4f28f2982bd36aff1d2bc478a3f7af7dee2134af7cbbcf519ad9b01001
SSDEEP 3072:1k+j5it4ySPG4VSvNGDFpwY3Qfrxuej1nzvk:i+j5igjVSvNMHwJjxu/
TLSH
T1A1B3129A8C660E6CD5570EB8EB030DF9CABBEF745DF3A7670523C12870C15AE5911E42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WNCRY
Size 48KB
SHA256 1f25403a37043605d8e72706731cd2d040f99c6135b2f6047f6e4a36b665b650
MD5 de1c6994eeab40adf79eb12fc6090cfa
SHA1 0b85d8eae811b5deeb6efa68ac22bbf4d4054471
SHA512 9236e8f6fe05f427eb99954067fca974040c9cb7f55daa88749a9d2e030870613464ae76c600dd5697f344d3e220012b2fb07090cfedc6bbaeca6450805e0039
SSDEEP 768:81FrIb3rPnron/BHU4ubzi0W0F0ZKYORVz79UncGb9sae7oRdGvrdI7QS:qhIzrPU/qzi0W09RVz7m5bFeCYvrs
TLSH
T177230246B8F9FB170250EA5BDA4F5065E4E3BF10F79023714BA4F2883A4E09EB791694
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WNCRY
Size 20KB
SHA256 7a84054510f16c6596bd472aab07cb5db904f64105b8de8928a168a66ee5aa95
MD5 9dc0d30c181eff27c826815d4cfc7128
SHA1 2734159ed337a507b8dbeaa1c01d28548fbb1350
SHA512 1ae19ae83ba75a7a0199c1cd0cf8e0366d1fa262518d214ba927f6eb841189cb3af837d9056573c8d0887007eb6d6722f9b9aa58a2a8ffba85257f8112d886c2
SSDEEP 384:96d0eWLOd3XdhmY06Hv5hZYRl/Cb7wkFRo4GAIy7lmAnM0kRh04mSveDFSp:96+eWLAnd4Y06bZYRl/CbMY+4GA57nMZ
TLSH
T10292D19DB155FC02985339C1F40315E8E5E89A32F96E0370A8B2D5CB56E91CB056D273
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osver.txt.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WNCRY
Size 296B
SHA256 fa802f0fe0402bff341622c687b7545e9d4b6600c75d9bd949558b4ef403ec5f
MD5 13a530c216eef70a7a99a8bec91b7811
SHA1 7bedee1db14aa66c046c8d90d5ea536c65765d97
SHA512 60fecdb04439bf891ec4564d677d16380c88e9f12041c0bb62f12cca7b3647b8d2ab02b698db486bf5ed57ace826a631c0ff7cdf94b29a40cd88ab4ed9d6a70a
TLSH
T12DE0EB3CA6C99212F82103FE801E2242EA5A1002EA28B615A0B64619E89A0008F0C8C5
MD5 SHA1 SHA512 TLSH

Submit Download

qmgr.db.WNCRY

Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WNCRY
Size 768KB
SHA256 074a2ba6a52ddf7cc00ce8ca4ea9455d16a872d7916e406d24c8e16144c7a199
MD5 618c76b8475f1d0bb5edc9db4f6a4cae
SHA1 c414261e30d78ac3d722c0bd89d8310cdd1c4b89
SHA512 47fe75ed4c6a6ac62077d3750d1d018868b23ed7a0e245921c110c6ff44ee6ba4c5168c6329f4be14f63328da841960867bd3b5a8b6bdf95ca2dfaf0243956d1
SSDEEP 12288:Ysoq1NbaytTLcki2fHVLMkmDVEL5I9fF5BQJ7wBRjqDUa7QrV3PSuKX2p:Ysvwi4J2/jmhU29f2JqZqmV3PSuKXQ
TLSH
T1C7F423CB3ED8CC938FB8212FC289ED8727DCEA16B85B8723D749651A24540F4D459B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PropMap.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db.WNCRY
Size 76KB
SHA256 16d4a88b8b3adfa021dd6d5b962bafdcaa2fe62a42a96d8a4eef2e4357e8781a
MD5 213da9d7b7825c656f030d9cac641b7d
SHA1 0ec7eace005c6530ae15f47c4aea9885eda9ec93
SHA512 2f6f39a092523df443088d2e269011bfb3e4bfa9ab08d90b140b9cb84a9da25de14544591c4f0704448c7c685e9ed6cf2c01a6dfcd15ff64c11567c3cbeb76f8
SSDEEP 1536:10ElinrvlZ589Q/Fms+BZCZ8IDXBJ5qnXQ8ENxIZnoNy3V/KTSdzS:xordf89WF+BZCqI1foQLbIRo43U2dzS
TLSH
T1167302B6F70E39989A37745868A0BA106F164B705FD18E485EE11BEA6E23ECC0474FD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SecStore.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db.WNCRY
Size 36KB
SHA256 2492e37c0b01a5d3ac6b45f0bbd47f8eaee4b8503fdd50361dc4d7d7ecdbd489
MD5 7492b22af0d75621154839ab31454778
SHA1 ea290f76c7e81ad4e93bf75403545f0046a0b22c
SHA512 e58a77fe4bd36bef74523f99690aec4e7338e23be178930d3ab7cd37d27641a70ba0e76d19ef35246925e8651ea283e5a6ddd09a8f7e40f1d1e92110997d0902
SSDEEP 768:aFRKDRM0w5YSzl2aSSMkqriujBENpck++QupVVvVGv6qcTNmXsPGO+VQaLKCJzwP:aFRAqP5KSRQiujBUi/aw1VQaL1JvS
TLSH
T18BF2F11152D10BAF943A2DBC03D462B6643A71DF799D1603A7F30F388A5D1658BF524F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows-gather.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db.WNCRY
Size 44KB
SHA256 323dad348c7df627d32987ad2a1b7e49870048e2af2be37742d3b0e91079576f
MD5 8e11368ccd98dd4336d6950a1f9f36e3
SHA1 5f8ae2704afd0a0d163b5e7c747731c001b5e3ca
SHA512 4e57de06e1fbd3e1edf7d21bd33bf953c4b8a0faa76195c0655f4b3d0b53adf37d832571535d71f4bc183732cc28dd2246aa4e5fd5e11320a13982ff41e8a9c1
SSDEEP 768:cG/76oXA0a+kyWwI4EP8k2Kj8ZeJs08ByQo5VwbFKvkxfriuuZ9UF2:cGT6oQ0a+kyWwI4EP8kXj8ZeJs0SWVwc
TLSH
T1BC130211907A4271DCDCA3056A17BFB04EA66F6F6D178BA4064F4F390B1862FE42F92D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows-usn.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db.WNCRY
Size 4KB
SHA256 fee25dc083fbbbf4f88275f68080b76048bc8f7298c3186b92444d042aaac05d
MD5 5db223727ed0bd34e3d56a6a79a27b11
SHA1 297a393b0d7052ced4fe176b1cb2c1f457db21bd
SHA512 517400476442c1de764b816f50a578063c77762161e64fc7d616af09d3d8ee34aaee97793a60abc0e84374e04d5dd266baa63bcdd322bf8cdfc0f2685e50c9a8
SSDEEP 96:oBCD2L8RAmJwMAbhuVRcebt4LZxLTdsNnWUpgmo7:u82HboncehgNsNP2j7
TLSH
T13D918CDE27D693FB2444834342C5396A2CC7F6A29520C7BF1D175A6F6C60361F47819C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db.WNCRY
Size 544KB
SHA256 3e590101e5c37a1f6946244aac1c5cad5e324bfdfbc3d1df152cf28c513bfc4f
MD5 1ed63900f809c0bda4d9f62609fea9af
SHA1 934aaa914cadf8242563f9015ae6d269cb036450
SHA512 d79e69f9f8d47dee32f790cc9972f0e947e31c13b7d3c37a072537584f540f5418b5b3bbaefae8a113a113e6835e2bcedd15d85fa92beb022f10abb49902d832
SSDEEP 12288:68nMgqxpplYAzxXwCMBaj3eU6P4L6w6ddAtaD6ufxF/DcHO0EVN:62MdpfYAz5Fnj3eMXULD/HeO0QN
TLSH
T1FAC423E1EBE82155479B8A154772EDEC275B318FEAFAD90F4D0F1A3360644CE46A3027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterInboxTemplates.ps1.WNCRY

Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WNCRY
Size 904B
SHA256 18dac39f9ddada81a7e3a0eaa412323836f4524869338169aa9875146716b496
MD5 c2beb5f5899aa04d8722a2507e4544cc
SHA1 3f6f8a83a24f76cd73dd92ee0b40e103ae591cb4
SHA512 d406181fb36fc96702fce5ee383ff03c3ba9af7e66586dd43e536d31505934c72f5354fd724b7bbd37e493923443a89e8cf82295ec948cd10184c15391006f6e
TLSH
T15411B7C875178C646AD5180C5CF924C46C08444DA232E154FFFC72ED5364652C4AD1A9
MD5 SHA1 SHA512 TLSH

Submit Download

guest.bmp.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WNCRY
Size 392KB
SHA256 2e70bbfe1ee57926196c43e2dde65d980e8a99baa5f582b23fccd5f886476728
MD5 723df65026b9ca32b6b8906aeb2e2571
SHA1 3e40f4dc52057fa9ee463043954b509565011b13
SHA512 06488fd45c545f37ea88db6be529f86b31371cbd604f2a99da4aa28068424dc964b663142900557d276147d7a297ee30a25495008a435fdeb0d61abcf8d211e6
SSDEEP 12288:EkZKmUuM2in2VNCqsvF2JIBiRybMv5OlqbuEy42X4euam:0mUucrqM26BiYRqbuEy42XmZ
TLSH
T17984232DF16440E49EDACA30FC667F3FE408BF86382D1617B3E8162951529B5533D68E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

guest.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WNCRY
Size 2KB
SHA256 ef6a857f80dac0641b19057f1312479bc53db9f21458459463b03cd979e9b122
MD5 52e5e1ae3e7d5774176e682c095dbb8d
SHA1 b175be298be7f1bfca5a520ade2b3690118f49fd
SHA512 b65bfb6d94ded43436f6a512f3b5713ca956831cc120454d21b08fe9972f7cb93f0d1e36ed08520213c45d561b50886b248923262cb25251a1dce9f54a57f379
TLSH
T1F9416EC31D5AD9DAFC61BDF02D006D0D5C0A57FBDE0ADA02567A44384061DD27106E4E
MD5 SHA1 SHA512 TLSH

Submit Download

user-192.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WNCRY
Size 1KB
SHA256 0a294b33a373e3c9236910ce186b7b72f17255ed861c3597ea1221015d5419d4
MD5 887cac8722141142bb51d411d5774f8c
SHA1 99f0a319254ce93b3afc41d449c3b4594d16234b
SHA512 f6a150fe9daf7143a9f944c22f1dbe808a7b2185648ec256703b6df3c4f019e6f8bb59f7a93f10074332bc44f73d129adb2e06cace5b0452c53db4e8f30923eb
TLSH
T16A1186F178D97BA3E88E6D987A14145A9BEA2D1A5864E133B15137B2608110A1CED072
MD5 SHA1 SHA512 TLSH

Submit Download

user-32.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WNCRY
Size 472B
SHA256 8f254f461e5f7be86e4604eb37d94452372fcb560da9693d6ee3f0e9af05a014
MD5 e37436999e9cfd22a4a1d22f3eec0afe
SHA1 1ebc6602e79eaf0328613cb861bdbd99bc55e8c0
SHA512 1a18a97e55eab81bf709e3cc800b9e40d14344c4c565333967f646fa1b17d4364b6338fdbf8295a9154927de69ddeeadc73131dfd5e94b842fe16c62e0cc5eef
TLSH
T1E0F054F117626817C0016333CB538F4C1A6723EC1C2F8226B08548E97C71543509E5E7
MD5 SHA1 SHA512 TLSH

Submit Download

user-40.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WNCRY
Size 504B
SHA256 e084ace0fa5b1ac6e8c2ccfd263c65602b036005a81ea1ba774110c874e66e2a
MD5 58b15266d4ffc42c90f1b198e7dea046
SHA1 6add2c9e286db266534899048d65fd6265666050
SHA512 b804e4fa2eb92765ef74506ac9859370fbde04dd39a6a5ad49e228619f0694241b5a82a61d7b8a78e95f3531ade17af6752621514e11ad1704280999f629c837
TLSH
T126F07503A984C95A3DB171FD00B3789157A334B26D58D9C07AD3514D351EB600E0F027
MD5 SHA1 SHA512 TLSH

Submit Download

user-48.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WNCRY
Size 504B
SHA256 12326f4267ad85f699d888f8aa8a47fd3506cc84f2ac720d15e2907cf4c136a6
MD5 6f3486077d77b572759109ea73f54369
SHA1 6e8f3ccd54f0b7cd435c2688ed570dd7603d1d62
SHA512 2cad0d2422c3c489366c4e97555c001915444ec84cadf5a2628a999b20fb15b2ff45579568afd6dcb5fc87a39a6ee41bc91984ff67a9a28a0399723dc7016905
TLSH
T143F00E21085C8078F6D72A740562B6C1265A82601E3D282CED94644F83E668F4F6E064
MD5 SHA1 SHA512 TLSH

Submit Download

user.bmp.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WNCRY
Size 392KB
SHA256 c5baccec55689efab935901468757ef00a934efaa416cbbe7ae112e4e92a6669
MD5 b446ffb30737e3c132d78cf020071167
SHA1 88dd6d63a926c12f46e62f4a56372708d3e86a17
SHA512 3db487e30d70ebd15951ecba8b75476f58547aa2f38de0bcae3702f9b463bea663c09b3876c6f6ff8c787a29707bcc532c37f19bc2229eaa4b761b92bf382456
SSDEEP 12288:/c5lpnjBeEQnibC+qMD7RZMX4GdKvW0n5ivWDJcqgbjZ:WPVeEiJiDdZMXaW0Av0NYF
TLSH
T1A38423E12B118658BCBB61EF179276FD4EB909356421DD9780CB0B59BD08EF8320EDB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

user.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WNCRY
Size 2KB
SHA256 d22ee9fa9fc9cc39aa6986e0ca8f842ef7f0dad93642b2ad9f8ccdae310b7359
MD5 ce3c3ccc2cdb5a4f18bb418d79c8cacd
SHA1 7359c4e56eda63bac6e1bb3a9323d38eccae0f75
SHA512 40ea3abdc7e29c179dad11ea88433e26123a7d01fa2af39e81648fc4a4bd2b12daa911f4554cda9485606a83ef478ce6ccc31ee75d710513a785a7fa8774613b
TLSH
T197413AE7F8835C778F324A7C3538705BB51B62265A326AB02649CCF0B20A09F8648112
MD5 SHA1 SHA512 TLSH

Submit Download

cversions.2.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WNCRY
Size 16KB
SHA256 60813ad24c021a01dff3a40a21e5c8daaccb863623aec1362f3931981efc85df
MD5 ca81310bfdaa6530f6bc45ab14ecf801
SHA1 eeb9cde7a15f410a62db1d95b4a6702178223383
SHA512 f249501b672bfe63cc49a71b72848167428357df299dc4a5e4b0b37186854645a5baede2b220abcf649fcfcbdb6dc398e0a326c3567e3dfe90cb6476edcaee13
SSDEEP 384:KhkLnVMflser4x6d7ekUPd1yTuaSrIP/fje973nG9mVLRwc+:nLVMfaac6CBry6BIHfmznwmVLRj+
TLSH
T19F72C0D2FC9D4058F8EC8805159387B9B6646B32968C41F49C0C41BBE41775777CDABC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
Size 297KB
SHA256 f6a92423f0f02f0be618def4dc2992e1fbbe62ccfc1b7b2e15688a64d2e4664e
MD5 127839182e7047c8384dc29f6905fed2
SHA1 bf25bfd521c2658a7bb871e9f2326b2ccfd1f849
SHA512 46252f2d0700cc41ae7e8d7ad96b2621eea9572da018afd3bec5f706b7c11de94ecd2f587f4d86ed8253f536c1da8f8ac7cb9669618f18c2aea012d215ee855e
SSDEEP 6144:L6uJBveRbL0PCcIZ95fM0zQpl/VaEC6WONJ+ktB0VU1nHkiVNTU0qSYq:LTTemjyAf0+WI+ktB0V+HkSNg03V
TLSH
T1BC542398843EFEB7C9BFEB88A9239598D64F7240530CEA4567905E24CF854C72EDCC81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{977107FA-AE1F-423F-9EF5-F3ADBD86EF54}.2.ver0x0000000000000001.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{977107FA-AE1F-423F-9EF5-F3ADBD86EF54}.2.ver0x0000000000000001.db.WNCRY
Size 1KB
SHA256 4fa0118a01cb11e2f7fce251e0c151cb37436a0c88e0452dc07e28d3f5d34014
MD5 759d27023437509330857f63d8d38305
SHA1 11b3417a8082505fabd29944d782ee7b824928fc
SHA512 bb1c7e95ea6042b006fce31df709775646627ad9243563bf13d821920b94c918eec77fecc21aa04427fa76139d922e8c3de6b1def31245a321c7d6c62044d735
TLSH
T10E31B791E9B786CD90E44770E509B9732B4E81281206B557BC8B0BCF6AE7B4F114FE46
MD5 SHA1 SHA512 TLSH

Submit Download

{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
Size 639KB
SHA256 40199b602c7a556a16c9381c636d8ccaff00e95e9c9e687077b169639f1c29ee
MD5 e2e93eab5149a62df964fb4682218b78
SHA1 154049728c4557b77b0ee9f248a9a2b013e4d6a7
SHA512 94d843ba9e94da3d8aa81368b0a9db75502c0933a2a7f3dae3a9cb056fa3cc73bf2020fc732be8edcaf6ffbe710ffb0cb67319312e7ad7a49c9f84dded669a9f
SSDEEP 12288:ZHQab1slD3ZCK+5LOWHVUCmXeGfT44u9esZbMlD70q53ncAEZI+0wyM:ZH03+JHVUCoe4KekbYDWAY0y
TLSH
T1E6D423AF67FC0F5F80815212F92A18C60F40FD4BB949DA589EDF09F1A63BF580878586
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ActivitiesCache.db.WNCRY

Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WNCRY
Size 1.0MB
SHA256 39c68e0c1d7bb7056cf12fbc9e2373095854aa03836d9eebfc8499a6c073d387
MD5 ebb3874ba3a586c2534801378b27a904
SHA1 8a293fea29ec4a104f05de9b235c5a2d41a839d1
SHA512 7fd35e3671a35b0c5a2d76adddb69dd8e359195e7263d582cf941e0187bc67469f0bf8d5743b571d27779ee6ae7ea2ea63be7b34186ee763c2a113ef7174b338
SSDEEP 24576:WHEPyFio9TT8/0YsuXiy1BqUGD5Xf4SuVeZq979h0ZuOD:WHWo9To/0YsuXiy1BJSXf4pvCZuOD
TLSH
T13F253364FAA1FE41B73DCAF17429F8BDE30914A8F1755490C28488A5036D4B9E4BC9BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IconCache.db.WNCRY

Path C:\Users\Admin\AppData\Local\IconCache.db.WNCRY
Size 12KB
SHA256 76ba9406f83578246a1ded3c9bcf7a45537497c18f9659b5ddaf46adb0240d4a
MD5 5a55d83246df84625c6bc950ced4c0f2
SHA1 6ecf59457ee711538839cc75003885df70e06b97
SHA512 c739c57942944ef3e8adf3698d97766342d38b0df799d81dfffc4cc9d26cc716739eb077956f571a06ed458bb4bcb35fad4f2e8704ef7496ec5507e4df19a9ce
SSDEEP 192:sz9W1ZlOSa3vVW92bK83OChNM08xce1DSnAlX17ZnsgS3orj964OpXgP1AJfOkRU:szRSa09MxOek1DSsn/S3496Rpg+JfOga
TLSH
T1C542C042AE4B66654A950879C9D37F8501C4D2EB72BFF3A30F18E32F29E359E9474444
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeEDropSQLite.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WNCRY
Size 32KB
SHA256 3f1ea7e5f65e1a8379b7a85098ba6c329b7aae0ea8f5ba1c2a2f9d778803fe5d
MD5 7f1e812c6cd1706a215399869709805e
SHA1 200a874b2a7745d1fdd91bf53f7419f5f5d2ddf7
SHA512 485fe9fddc5403da7d1fb769414b891fa1244732cdf9495d90970927cf483fa67d7692116a4049ae60a2909fbf35d38ca4c29aee79efb76b83791f2bf688fd3b
SSDEEP 768:jLSCju82cL5juSlrcOXbEQK7JUAcFLgbnWqPVY7mCb5HuhAtdSf:vJekwSXwv7JbceWiVY7mC32f
TLSH
T1D4E2015D1771335DCC4FD9AE436AA26258DF6C035B253C4BFBC2C64792C682A71421AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeHubAppUsageSQLite.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WNCRY
Size 32KB
SHA256 503e499a038eb47aec4495b279fdc4b8622a779646f67142620420313745a652
MD5 6eff5becc209005172c348760fa682df
SHA1 53afd32f20eac9ddd9f8ec4f62b408449b55e897
SHA512 f29d61652f9f07bdd82e398211373b36cc60f2a75f9f55133691bfaa78dbffef73b521af99bc5ac1da3afa9da917cb441e0e4143df857355f4a2e918613a8cff
SSDEEP 768:6niXE8NqdmGTLvco/YxEVUZZeMlWZW10gB:NjNkm6vZmZqWGgB
TLSH
T11AE2E0B43AFC2C8C1A169095908FC1FEFDEE00E69747DBAC54725992BEA46F5404D8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WNCRY
Size 5KB
SHA256 1dbdfa7d3281dfe0517449918826e3f7cecc69031679a661d295488c5a0dc22f
MD5 ee59360c01b2ea3db4532fb17cf37f24
SHA1 2c334be63256b2402bccfea0fc4a748ba479bc36
SHA512 5c4634cbf4a436aec6676ef447009179378f0f3120e9dd3e24e8393f9ef950267ce26279f15061d4e97b5587e0b62f383cc274a21143966c7f145aff445978a4
SSDEEP 96:o8wqBQd+/jvT0ae4dCTzSfsnU1BAFaePPuSZp2Ao3CF1jNwKD3kFc0c+5:31rvTe4fs3YePppDo3GxwKYFM+5
TLSH
T12EB16C7A2B0E625B6C04C9B90AD09DE67F46022F14D89A5A96C6C736736A740FA7F840
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offscreendocument_main.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WNCRY
Size 130KB
SHA256 ba2a0f0fb148a9ded0f00d54af53ad791beed14cd9046d6c0091e00730026014
MD5 f5ae828dc4093b2b37a334d4159e6c2d
SHA1 7f9cade78db81d8223dd0947be5c4bcf658981eb
SHA512 7e92814399332e267545a26310b218fde3ca383b6c3d99e3ca87747f292eaf985158b261de792485f3e63fd50652e19359529545b4e61e77f873912faa3a88b9
SSDEEP 3072:keNQ5ieUZa8MjVxdUj+Q2fP94LWIh8wWmbz:keNQ5ip45U65XWLWloz
TLSH
T1C1D312788BA7767F483EB0C985E4306430BBB1DCDF9BCD086C5C3147A98668086599EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page_embed_script.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WNCRY
Size 632B
SHA256 aede4c25bec3e2014d1ca6eed8b1c45f71614eabcfd82120f98712bfbc91a232
MD5 0dec3a14ec66ecdd0a811be1f2caeb06
SHA1 921f66ef5427f4008bd1ea9e9ac4377d9751109f
SHA512 8c70550d9aae5861a5de20bed7d03759a9c108c4248c8f2d046c6ce4de955fe0564d6c738c2495de9dda8b67f184b5f499036c558d7157c5cb8fab892a20c28c
TLSH
T1DEF068571D7CA76443E2F828944DD67D877314D602C4622534A381FE4F852C21E1D455
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WNCRY
Size 136KB
SHA256 1c7db377515cde1bb9b5c187de91f44884f0b2072836dc35d8bf8c4b8c2e7630
MD5 022e7bc15a9c2cc4b4d4652f21433274
SHA1 596c5bd9385ec831db6f17e0b5fa65dcc1d91ae1
SHA512 58830f073c8d87f55ab58c00dfa04ebb4566e40ce15abab7defdf88bb152d00dd797067748093a67b08c54f4cd0a980fb9d6cad4faf3ed056c8210c2588df981
SSDEEP 3072:C89skGkXUmFvfQny4eXsAi0fBCpvBsL9mD8DZ7FiUJk096blCUP:fukGU1onynsAiuBCpZbDS3OIUlf
TLSH
T127D3128B493E779E8CBD9B393DE4620C6D562054CE0148417E2EA606D649FF37806EEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js.WNCRY
Size 9KB
SHA256 79f644b4da76fa40f03ae3273e1e56aea6dabbc931f9a99b94ea93d373082f47
MD5 eea01e953b5626c9bd7dbbac356dce2e
SHA1 708eb9fbf67bb8f83da0317bb0d2b602a51ac9a8
SHA512 4db5db0efefc9f844f56f65adfd320c0299a2191e5ebc7dfc98420639dcaf3e74eb81409b58fb31d13acfa9d4d8d9d22b65aaeda638be69bddb990a91041c373
SSDEEP 192:W6SixctA8IMtTA7Y3e6P5YaAfX8QsyC/s5raHgCnK1c5YZoRi:W6SiSat4dHOaAf8QqsRCnKeOoRi
TLSH
T15E22BF5850DE59BD7C76226508F82762E83321D17FA2F24AFE31B93984437C86197F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content_new.js.WNCRY
Size 10KB
SHA256 566837fe18b077d16d3c8463e3a75bd5aafb9f9bd012725ee65bcb1424a19064
MD5 06a2cdda110c54f02d8cf7d3ffa0446b
SHA1 246c472350cb0f9d853cc7295b8c9f2fda857270
SHA512 c03935edb64bca9dd1bc3d0bb94b6084779c18de8984a38a858c43a05d59dd0e4ac11ecf3d7bd20aa4ee5998f97d8dfd349b45837bc170f6402da80921eab4bc
SSDEEP 192:WAvBobdZt28cWVeEhYJLpK7yjo5MFI/GYZ+KWhKBJkfL0KdR7yiwM4Q:WEB8dpcWHYJLA5MG/GYQK1BJ0ZdR7jgQ
TLSH
T14322B108319C69DD0669B3E10277C56E16D9EACE17576750F65FE631B30808DB83B1BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WNCRY
Size 664B
SHA256 599b1a1f5bf158c3113e996c5aadf21a2e8596580668f8dce03df6dba9b4f7fe
MD5 22f7a3f3225c9e1c997c43d3c51ff70e
SHA1 f92e76f8140419ba88ff4a06d76973002cb533ad
SHA512 8966f807c486aec35a30ddb7f5c3f5cda602def8c38e2b5787c3a2d4a4937b4879e00a9878261ec485aac625f061f368f79ad3bcb9820535b53f032574048527
TLSH
T1180168EDDDAC6DD4D22321BA6980EDC0597DC5300C0CFA3135E4B91E995027A39CF476
MD5 SHA1 SHA512 TLSH

Submit Download

heavy_ad_intervention_opt_out.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
Size 16KB
SHA256 2c17b1970a708143e8ec91036f9cc179cb06c113cca7c21df2cc223f82fb2751
MD5 07a5182afed6cfa16d77a9975ed915b4
SHA1 7e4192d6bae6ab328ca4ba9a8560cfe40f4eaaf6
SHA512 7b78810574e363195d3c3dffe602ce873302b495d9754ce143a6261c2981825eaaead24e6f8aa14df6c9ba051b6718b4562c8d3c4255a23ddea3efa42961452a
SSDEEP 384:66wCTNzWfik8LZzuVEveZhRBEd2GTi/BYS+2xN:7wCTNKfl8LBeEveE12ZH7/
TLSH
T14172D06C958F52B4FBCF6EDC0CEAD8D59BA6ED453E1302AFF698087080225545A7068F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WNCRY
Size 84KB
SHA256 1cd9d44e208c98f28b21f8cea0e5029c19799674aba2a4de8d818a1fd5ec8b03
MD5 204635da916f8e0d67bef77ebec1af31
SHA1 97cacdf885e4fc4abc8872eaf4322f3dc5058b30
SHA512 64f515afa30afa51a9d6e1b40181c41308df3b0e822f87ba594930e3b7b0d5fa5942e4906b2fbb97f72ba770181835f946e898b5c550b0854c1729f3a048097e
SSDEEP 1536:IaZqIl5vqtffYuqD92lRguTPIuo4rgczabXAYUsZR+jZjpYpyMDKwx42:fZJVqVY1D92lR17Ih4EeabQ/wJ9KwxB
TLSH
T170831227B57E8D9AF9522BC0F6D9A373149F34ACF1D5430DA80ADC3D82ADCC841A1AD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db.WNCRY
Size 48KB
SHA256 5ce4bf9332d2d49cc9ba3b43214628343932cc83cda1eeb7395ef76a37df8010
MD5 7db594f5080bf7419e7f7264675abd8e
SHA1 a1e55eb9a45be670f0e92fffe2ece144752ce6ab
SHA512 c0a40d3658d94406d6b3703bffa28b46382749811da90165f9e6cb7feae0bf588745f8a813efb328c5ae0c8636a4643e247fc29c9f22fc9ad417a51e964fe550
SSDEEP 768:XuRKM5pMQ4bAnz/0/WZ5DZrps5GPSl4dgbB4Yq6huvNT5NO0doZxMxYLYe9d91D1:XuRKM5if2H1ZKIYE6huVTfBdkxzV9lD1
TLSH
T14F2301C717601A378049A03BD21EB16EAE751E72A80351A21C6F748AFD3BD4406FE97F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

brndlog.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.WNCRY
Size 6KB
SHA256 b16593199d3aa22c117084cdef30afa2f47b6fc265dd9bf5311bca937895a611
MD5 8aa4b1c20add3b3d095a4ea55a0a2229
SHA1 584a60c727c5cf612eeee05b03253b8d4195cc16
SHA512 72464134f603c1a18042ed36ace0d46ff214ce66bb48c31b225d3172cc29b3b3d75f26e09884c0c662a65912cf1803623a89374a0c1ebdd25cdea77c58aac743
SSDEEP 192:WsSQEPq/UYEGWgc2yxXPJdrjhIKXBzwl7i9a7YibB:rSPC/U1gc2Q/rj2mkUKYil
TLSH
T1BBE1BF1C0AE9B9C6D18BB583C92D10A11A9D31AB3D1473B34A5C840767A22AB795E935
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mip.policies.sqlite3.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WNCRY
Size 36KB
SHA256 3b104b3901fc985990a9d83a897a8aa6fe0806a1deffe15613ea6be13174d3a9
MD5 28491de2df6fe8f5fa70180cd375ebe9
SHA1 707bd8b5ce737ea24a2563aa2826091229852039
SHA512 061a83a6d1db05743262bc88f552e562e911fa58eeca50e51be605f90c0bae47c2e8bdb6011e87454b3ee295f36bc5acb0b94228c92f87b2f79b7333896c3326
SSDEEP 768:NwqdS9kbTXVHG+Qh/3gEERIBah8blLCL9X8x0Of5OjW3hyw:NHUkM+OgEER6C8huL9XzOojW3Aw
TLSH
T13FF2F26454B0053E4157226AE28DB7B994C6A9FD184800B325D1664AFF62FE7B0B3C9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

excel.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WNCRY
Size 24KB
SHA256 a8c699425a13168ce85f6fa541c1bec63cc25f8b6042224ffd5f24b62b4e24ba
MD5 2f02adcf20c278cff400753442b7bdbd
SHA1 c311005a92d78d85c7f235b5b4c70ad77da19972
SHA512 78ff2ef637d2ddd8a4c0c5efa570901dc0b3ea4b0a0899a9130eb94442682f081176b724d458f4f70ec34c360d8bc810c1f5cb1f3f5624621a0e7c422e25a382
SSDEEP 384:UDl/Br2xnya0qah3Vl55gPmEAEJV1NirT2/D2Yx31gjKdGYuUGffPW7j:UR/ayXbfMm1ETmra72AOmdGKaPMj
TLSH
T1CAB2E1AD1439C80FCF22D41E5899CDC8B63C535B78A982AC02545EF4CC596DAF33A5C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

officeclicktorun.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WNCRY
Size 24KB
SHA256 a3aeaeda094fd499641fb12d73adaa71fa1a99c67d64bce4bd58cf6b18c91f64
MD5 64d43442f741762a630641a905f70e9e
SHA1 7ea4780795b08c6117b96336de2ecf6817fcc5f3
SHA512 645b6e8db74306acd2a4bd81797c8d5197bf4ee83e5fd352c2482c423136147ae0a008b3b32b011112c94d2ffe855cab7d9f78d0185e77ad960b7feb1d84c740
SSDEEP 384:YyXnCC2ikOGEG9JRtai8uVdZputOCUu8x+M5LNEeZITQ3Q4YwI4Jbzvy:lr839J98iutObu8x+mpEe6TSfvry
TLSH
T1B1B2E1E84451AB2201D58633484CD06EB9FAB3825CBE496DE357DD81DCAC4E3E39DCE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

olicenseheartbeat.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\olicenseheartbeat.exe.db.WNCRY
Size 24KB
SHA256 cdf2e9cd5ed783eaf6288c3a54badef7915991810afa4afea4b6564d6301dbc1
MD5 69d1aa3e15697f03dae0f8c5ee96cbc0
SHA1 a135e5126dc7f4025cef55da6210bdcbb2ffa1b9
SHA512 38a85f655ee3be3d2e4cc315f9ededa60cb7bc1e4beda34f73510ab74057a98a852c13921a4057f035d20c361bbe3542e4dcdee179c77ab7c295633c8405d698
SSDEEP 384:jPX8aZndkGyZ5o07wbiJvLNDxmjbo7tnX0FuK2ZvmpacyK0V4aJp9rAqGs:r1nSo0EiJv1xmjkbpZvmpacyKwb9r1
TLSH
T1FAB2E151A3A24405574C62E287E63AF6D0B8BC0D4A59FF2868C42FF9F672EF1CA51D0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onenote.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WNCRY
Size 4KB
SHA256 9b19ed1672d89e22d1fc0fe526b7d10207a0b7aa6bd581a6cc0a835c6e30398b
MD5 187965bb0caa27ef665200c74b69df6a
SHA1 2954f40c7f10320c794b3715ff0da086ccc46c6f
SHA512 4cc1dfb693b20021073e88e1ee45154bec3d2694fa2490e06a08fddf49cb134a52dfc8829f0da75599afcc593b5b5d611daab4bbe2d1b735bbcd0876ab0e69c3
SSDEEP 96:oG6lAWEuQXDy40A4ntEdZ33lJSenwBvjfVbmihk54ulOCGKME6+0:gtvQ6vn2dUSmvjfVbdkdVME6+0
TLSH
T1ED917E7521EAB22561792A6398AC4B9A6437C341132AC4CFC3F339B744CDE542047BF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

outlook.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db.WNCRY
Size 4KB
SHA256 cd024218cf7ab75a228a38fdb7728cc202235bf470569b8aefef715af03bb508
MD5 f750dcd4852446ab40e569bbee2d6174
SHA1 1768be2668d24025884086d303803ed824309ffd
SHA512 066b0bfdd3aa32251662be9f9f5aa0f0f5fad848c531e6115542db31283ebb321177c683e71cc207ba0989c909ecc9ce029d1b82a91b4c2be596485ac3f16d4e
SSDEEP 96:oHQMM0MGF3zKvtHlmwkQEriRHLjtpslTGevZaJU/90H3jdzU5X+:oM0rlKV9rEriF9p2G2Z5QjYX+
TLSH
T124917C110BECFCE25DA0A8B59FFE189CDAF954944CF40D67B64B8418D05B33BAEA4C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winword.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WNCRY
Size 68KB
SHA256 98d9dc646cb440be25876c48e1a5dc6ca1ed342c3b0e0a3228b6d30cd3eea079
MD5 c20db53a0ffcca20c0014a96601f8cc5
SHA1 d9946066790f965eace8a1a80664745862dbdabd
SHA512 13ba3a30c9d773e68d2e79fb2bffec751f174c93a8c8323f49d8eef11af43b51e5ab577a881f14b1ba3e3e6109163413ab1eb7018f56124d60e53f129d9b0a46
SSDEEP 1536:66JC+VpZ/ALKLaR283bDVBujR4ENH//KgaVNqsGMT/cqBIYIMnt8:6aCkpmu+MuVBuRBa3qK//Bhn2
TLSH
T16E630227DF2D8B096BD8B156F2620278D2706DA4E6BF044EC4E3716336966867723CC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WNCRY
Size 5KB
SHA256 1e51259d439f1f527761a9cf7e2be23bc684230007aad45703f9ef1ab4ba6c77
MD5 64235c37d2b7eb39ef01744d37b5f7f4
SHA1 3e289545414196a121754c5d175e4fd5a71055ea
SHA512 36b80ccac234fa2ae337ea99eb750d8936f8241223569904a3c6c67ae704ffb171ea4eb05be05d1e1b757b5e45aaf6da0dc5d1f748d9ec9bf5f299acc7a94ff0
SSDEEP 96:omwzVW+EhFtB2RD16aKv/vX/WVEuGqcuv71fVGnZUeG:XEFcsKfXeVEj3uvFVgDG
TLSH
T191C18F7AFF71F998A814E61110F165B098D806201D166E4DF51FF36C039D03B9E49C4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WNCRY
Size 7KB
SHA256 fdf75275f8d0eed1fb84e93042b16850b83a9843c1e0adfa50847138c869c6ea
MD5 d20b56f9d697fc91046194ec87fae9a1
SHA1 39b6f5676cbed1f980b370d92c764f60516be641
SHA512 daa1217b3a2f0dd4c9c01c924465b6b3794b8f7c4b843439a9ecc2ca72bf2f4cc2ff294e469cdd96d421234815af466def88e1dbb9d442ecb1b747ed1617c6e3
SSDEEP 192:98bUQcwSlQKFwX5Jj7qxJxbFN9mAXfdBzp7iQqlrp93NRo:WUQcwSlQKFy7q7dLl1AQqlrD9O
TLSH
T10BF1B030A924FA5FC90203973D8B796BD7546990D662A36D83D10CFB03DE8A1353C5E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WNCRY
Size 8KB
SHA256 9bf8df85c0e9ce11a62ea8c602348a44b775c4f915ef89bd720b0f553e1c94f2
MD5 6ed7375e2bf0d5e6f8c977a1dc605264
SHA1 b024d3da531da0a9bc5ac401c4b697105c289bc4
SHA512 13d07e20a9bb153fa49c971ca703737e07ea9e81b901d2d4e7663cf6e697d45a570ac755efca13564eaab073408a9a044786b1f541c57fe37654587ab0e6ffcc
SSDEEP 192:QD9aPwQtF2yYP5gGwvTpRLUz9AEtSLm3yzC:Q0wNCGETppUzF/3wC
TLSH
T1BF02AF9134F6F68DC11E46E1032DC467C6705EB4FA521F9810E6DE8B0A91A277ECD1BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WNCRY
Size 3KB
SHA256 0aadab00522044896b464cae253ed27b0f844a51d6ec1aab77bc4724690e2c28
MD5 a4f92ed34dadf68a6de01c14d33a50de
SHA1 057fcef916a9825c5c938906a7d7cf626323b030
SHA512 f2b24b19579f646c0dc7e55a8f1529a84370cde6a3d855d339ed889d36594f3f599995e3172e343122ff40b725faa68359e6f2bbc30c9cb5c746667792a9bf19
TLSH
T1A0617FB0483DF3408A477497011AE647E1DC0F040A37B79AB58AF4E463DD7851E0ABAB
MD5 SHA1 SHA512 TLSH

Submit Download

AutoPlayOptIn.gif.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WNCRY
Size 374KB
SHA256 0643f7643bcfe50474d26ccc63e170e3c55f014c9965d0f892dafd343cb76497
MD5 d12667b3d0df1dd85927810f2abaec4d
SHA1 fc9bdffed674c238567d2227caa0de5ad1919960
SHA512 81635250caa8b1c3d8ce01bd0e404771119255ed60d9e386dd8ca1f7fcf128f71c9a4b4a27d142c71b25645c4cb74a5e2891a088ab09457db3260f017bb6241e
SSDEEP 6144:LqNvu47wjlgf1I9r6O80k6NwtdGyPK2unb8Iepge/Bpx07UIbCDVxxr/HI3L:eYKAgfMOD0k6NwTGyPKd8due/7x07eXu
TLSH
T1E18423F88742715EA542BCC7904AD073C284916EBB178A1FCDF92A74B44AE741F4FC9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoPlayOptIn.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WNCRY
Size 10KB
SHA256 7e47ba0b3e99f0ad8e03adad2a43f6866147932b77aee0d2527ea7692128e149
MD5 ecfa475e269ade534d5acb42436a26d4
SHA1 f46e9e955525bf7a4d55d75f307a3da934901b9c
SHA512 0dc857801ee389ce79ae9d393fb8f693df0920a915f324d3a4df11044e2ce265e8e064b83ebccf9ba8e063a4125340debb5507bc3c7c7234cceffea52f04789a
SSDEEP 192:w6g92eZ5QcW9jFQGhXtvyOn137YvV/Mb41czRXbFOck6u06ZVEqnqiCswHLj8J:w6M2eZ5Qc4jOStvZ37Yv5N8+ch0SAJCI
TLSH
T10222CF1BF05BB2107889AD5A853A7C8C1497E5C0E3C9A6D20BA15CC0D2C4A3B7B8FB65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CollectSyncLogs.bat.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WNCRY
Size 6KB
SHA256 9278a1706468a9c0d5955c51eaffb9a3dbda82a77ffde0737cef40eef2c237d4
MD5 e3186a81b23ff1f01abde4ddf8299e45
SHA1 c4ad52e5c82a4eaec2bde46d968d35fc5384c09c
SHA512 a606c324b518789c11ad53b1ca4d353bfe21aca48215513959d27567006c9f7b19363e6a3a9d0f5f26462614561c4e23183b205ec6859aaee6423b3a5e5425d2
SSDEEP 192:JzBJg7ugR4pF7BAwdfFfaXdWhyyPOReAbjntlVF3vs2zT:JzXlTpH1dfFfaIhygOXbrBF3dzT
TLSH
T177D19F622B69F41E5A29EA4A1528CBEA1E3EB5CE372C02D5E85103B9D0778D41D93D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ElevatedAppBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WNCRY
Size 7KB
SHA256 d21fcb408fb43f6761b1a7f51f16f2126a64c8816e8acdef2887fcb23a66aaf4
MD5 d9b1306a9fe7842f72b7a551f5ec4ac3
SHA1 b60cb21fc9844210d2f372b6620bcea98f604665
SHA512 03cf47da21b608c4317e2071a38ac9545e22f046b72fb16ab058059d2df0d0da1e98225d3fdd7c5025366a063227a712e5aa14245e5928687d1c54dc31900b6b
SSDEEP 192:a3DrNiV2byrn7OfHjGOM1nbV16wOs5hsvaxcl:a1iV2mrnyfDGOGbDnOsG
TLSH
T156F1BFDA37FDDD10B93837E7630D896A83A87866B405D5A5E31CD0B07B4F8801096D1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ElevatedAppWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WNCRY
Size 5KB
SHA256 e02edaed14c9c25be66ab8d216a8d9fd48dd548be054f7c00d2a5e9869792360
MD5 d6abf328d465c90bc9b2a05a11fe82b7
SHA1 328d1db8c4762fab5a689873b4184d558dd377bd
SHA512 dc015835532d002227b46251919f22e9b1617d5c5b99380092acfc8bd1b9932a1aeea4a9c33cf0462d7fa2173a73f8bcfe44dab905ef42d5eb9367033b5430fb
SSDEEP 96:ovnE04FqgsDbsdwDCRmnhCjLmjIIj1M5cyxEr5VCQLq:RFqgNihf0E+ctr5EQ+
TLSH
T1B9B16E6A5FC1D11CFA7E839D0344329184B546433E9DCA148E37436AA46C257C477EDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Error.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WNCRY
Size 7KB
SHA256 7a919d369edaa521ce45fec6668e0163f98b9fc74f79e43a1636557b91e7cfb7
MD5 b387852f934ed152330b600d0c7ffe3e
SHA1 6bed5da6902f4cbaac1afa98587b8ee3db718761
SHA512 8fcf478ad57a0dd67b873475d5f6cee3daabf843e9ebae64b45fd61106acf1ba6ef8aeb34757a446f2ff9f49bbe97ecfa23e67170d9bbd62eef72a3500074877
SSDEEP 192:aJAxojPMi6hF6FNtpt97TWo+mouyKe441BfpXmvDM8utX0/jaeN:RxojEyFNVhTgmouNh4jpXmvQ8uaWeN
TLSH
T1A9F1AE1806DA2ED28807206C9F5F8DB118C2DD765E05398737EDD268FBD2BB361CC529
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMHeroToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WNCRY
Size 15KB
SHA256 41f4e737904576e4a5c51a2ba63cd711c89162aea8fdeff8d1667d0055862f97
MD5 849cfe29efdc0ba11f0525d5e660dc58
SHA1 9ac44110dfd4e94d3ab250442348ec9f603353dd
SHA512 dda1392b1574b0aa6fd1098d39627becbcbf3771a646da48ed0e5672ea7c6f1b3e3da9463d92da071b7939d321467acfb1b4752fc2f06cae11c29395ea28fbbe
SSDEEP 384:VZO4gAQMuDSIQPchYWQLJr+sY0H8RerpyJpYaSAg+Cg:VZtQM4S7PchpQ5+sT8xbSDy
TLSH
T17A62D10E9692DA4FABB4971B5573B1C9F7F55004F8E86976CC8FC08E812121DEA3AC81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMLockedFileToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WNCRY
Size 10KB
SHA256 b3440a31cdbf16c419eb38efd8b780abc18a9e686280bc105385694fe27a3487
MD5 e75d29ec282891194f02835d26dd8dcb
SHA1 9a15ea08fc343d102924a6d164ca3aec5e72386b
SHA512 f73254f1635ce9a468e29656cd5d6a47f0daaa22d531d350d2a31326a065947c213bbc00d53f8643745d49b953a69193002860e5eb9b7cb320a475ab09cdc3a5
SSDEEP 192:75GCUurV4D1D7bHaoVP33DSd+we92rWXa+q8Estz+gqTpaaxc/JvT29GriL/4:7lUe6D1z6odnWd+x92rWC8EezYGZvz
TLSH
T12E22D064600BEFB3C943A522DEBEDF598685CE1403BB7D2E46BAB192487126D920C43D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMScanExclusionToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WNCRY
Size 10KB
SHA256 2a91e773013e5d54d6de6959cc2aeb8f15430a0d67dfe44a5f0c8462bbc697e0
MD5 cfed58b211b43afe8a3768b05fe12be7
SHA1 91dfe8ec7635efdb18acfe3e87bfca8b7d98e018
SHA512 a5d70ac068637b6ab1b8a30af9b20c8b504873a64ec10b17e9137f81cfe1da72db9d65b7b7d95e23bd08bd0d77fd0b91ec7f388c9a6a53418db2993065543ff6
SSDEEP 192:qmiOKpHbZSu1sVvSAcNBA/q5wS6UJAWogpATi3GIUH7j/eGpaxkb6wnw1Lf4:piOKpHxsVvSAcNEq5f6UiWogV2b7jDpf
TLSH
T1F322AFE189C88ED1C9FD9AFEA586289CA072CE017361D5DC2545C368951FBC64ACB228
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneDriveLogo.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WNCRY
Size 4KB
SHA256 fed3ef51c4288863a447b7c801c09502a101a9a9c4ca2933bcf016f9a2266b2d
MD5 ef198559f9c5d1f1891eaacdc88c0866
SHA1 0d152a78d110855787811f149526503486fcd15e
SHA512 79fe8cbab1fdc99419264f8be12d86f757e00d76f9913ed2ec3b5db75d71bdbdc04537b9e58d0d7e44a07e298ebe8e7855f0e80ad621725630f6406beb7245f2
SSDEEP 96:oo2WBn+xhh+rWDJt/rImt0E14le5YDbNqwMI4t6jf+HI+CVXGc49wrOrctwxcDgD:n2WBn8SSDYmKE1y1D13is+HI+CVprAWu
TLSH
T1F0A1AF31548D49624E5842D529CE627E66CC152BFEE275B8C4F9F3258B5FE007038FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaCritical.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WNCRY
Size 8KB
SHA256 30de35626549286cbd35855493fab5c09e4f0994e13e804b805e53d9440feec0
MD5 d25a808c7b32d74c7e174a9cafe21901
SHA1 f0c29f64391da8b08c7ada89cf4bf02f99c9d4ff
SHA512 3d41c72dbd58f2248e976b11e77540dcbfd46de5f5aeca8bc98de3e3619b3379d6a63d96d94a71cc1ea4352366cc91e5573f99f23b3f9668be142392ec519065
SSDEEP 192:H5316zZXqdkT2uofYQNOc0+OaW5zEZFtYRYv3Txy7TwJGXJS3ZttP+xZ:H5Uzck6TNjW+Xue3k7ko5SpX+j
TLSH
T13812CFA33F674DB2741B16BB0072933C487AA3D9C5E312C50C18D64BDB4162E93B94BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaError.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WNCRY
Size 9KB
SHA256 8269024f8f2f4f752b7a7812b4a73fd9c3a43ef9ff8f1e68c10ed06375328961
MD5 d19a2965ff4b4205adbccb6965ae6944
SHA1 86fedfbc8eb8a28f82b77ff5274ef7787bed8e71
SHA512 f3b60b8e45963f303846700fe28fb66ed91b8fac59347359c36df4c6878c57048c6e29aec5b3f7f2e4a502f64c0ea0c60a1c5e7c9532dce61c31e9d25d8c4ec9
SSDEEP 192:bJux/HqFdzPFy+a7IIUEN/dlTfUtbPXRjrqGoIKmq1JKl8SC+S8JY4rifMc+:kx/KFZdytUmdpUtLdrqBIKj13V+S8JYs
TLSH
T18C129E4477425C51FB83E10CF8144AE6F67C64B2ED65C7066EA31B8693BADEC660222D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaNearing.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WNCRY
Size 7KB
SHA256 c48bd5a4d93b40e73cfe1f805aa674ab7397df1e61c21cc57d57a65ea2b8c34f
MD5 2a18f02982a4e103e083d90fcc3dde63
SHA1 74b963bffdc9b1f6f46d464f4f843aaeae855252
SHA512 9b39e0979bc02b865819fca96b992b08ec6815b150b442b0f555e8e8bdb496fe81086dbc5a24dac7b0b9fb633573082501d5beff25053f5e2130d8c89c830984
SSDEEP 192:lrnLA5EMGYQlOE7IyjuG9ur1DZpkQB3FcXIPxc+:lEhGYmOEpuG92DA0cYi+
TLSH
T170F1AF3B371706D1C1811ADBA36F481976C571EDD4A15BF2FC28392EDEA42F4852B600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ScreenshotOptIn.gif.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WNCRY
Size 238KB
SHA256 238e1dabab5f4048efa393e3cb9eeba312db9423e8c0923f4c15a1002ac26203
MD5 4e1ac427652ddadf70ec28109283c949
SHA1 367a1bf07462fc21a5ee97240e7fd78f3ebc5afe
SHA512 8a7d74747a44dc52fc1c3883cd5894fd1447fdbca8a94d34707abdcbe1dd13da1eebd84f51fc01d35fa103b77bbe65ca6902dac14326645e8ef6ade44f0118ee
SSDEEP 6144:VLe011CQ6jyMCu50rkhstr+DLxg5CHuVW4J+oS:teeiGMurYst+CLBJTS
TLSH
T1EC342314C55AF228D717F951262770A8AD10DE33DEF09F241BECD8AA9497902B0D3F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ThirdPartyNotices.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WNCRY
Size 48KB
SHA256 5e312f7bfb6692858d545805fda8bc98aaeee0d6563d30a7ba9bd57f3001322e
MD5 3d090acfd3e9e5abafb45695a53042c7
SHA1 d934f9562b0b08c2c9e6e6b8274bfb3585e8570b
SHA512 d5a085ed08dc3c332096cf77bcc07887a4168d3a6a7a94b5ca9ef7a6678b0f493e3b9dd1f032f43d00789e910400014c81b527da26ea2d1ea4ecdd1f759cb96f
SSDEEP 1536:dnjNXKNuq98q3Q47sIC8Idm3LPqJgkS6vm:dhXK2EQ4c5m3LPmgkS6vm
TLSH
T19223019A1D50CD5FC4D3872AEC38113A4B3ED351C1ED39AC552E5422EAA4296E23CDCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Warning.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WNCRY
Size 2KB
SHA256 a8cabc4a9f2e7df7f2f7118d506c6d499330d55506736c914062d2ac96b73d67
MD5 961587ced8bd95b050701bd7466d8b74
SHA1 28a6878a33bca9c8ea738f3117e53b8205c758d9
SHA512 13dc021f1de49fc24c6314fe07cbc983e1bbd5d9275902d31ae218cb163c23461fe965f081d89889923df1b298690050975fb2ee9aca7c85d9675470cdecc0c1
TLSH
T189513B0ED6B7FFA0D3D545BDD4EAE3A0A89419FBB2B9D2C133283583114AD467645082
MD5 SHA1 SHA512 TLSH

Submit Download

alertIcon.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WNCRY
Size 1000B
SHA256 181f7da995619e39af2f999061a2369616660807eafc6ee017d60de2faf07987
MD5 7d1e37379c064dd57fb129821d23b66a
SHA1 dea0ca16525fa732258b40895c8559819031794c
SHA512 22ee0f5f3dd97a93989e1dfec535574ec6ccd55d86cf9e84e59af8babc22f1d955224a55d01b449122912ac7a73aed224f97798da27f32dbd991afd1e56fabd3
TLSH
T1D51108E9CB31CBF9F3E703E04A291C9649DA2443C279046684018A3CFCB07CB093EC60
MD5 SHA1 SHA512 TLSH

Submit Download

acmDismissIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WNCRY
Size 2KB
SHA256 81610ce1efc06cfdffda77ff104c89bdf7e2d05e0ef9d3b2100e1997004dc1f7
MD5 6d22393389394dedc6efa32a88077bac
SHA1 a4b7dce417357a4876a6787ca06e5549a833e9e4
SHA512 1180aebbdfa86d140d130cf5ce7c35a274daa54c097d3f187c854b11e19950ffcc6e06467e7d6b9ebe8095bb0be15c99882dbba744f6076d47ce484f888f3a6c
TLSH
T1C9514C3FF481BD22679C12DDC32802CA07EE56F15DFD211ADDB1E424291D2D545278BB
MD5 SHA1 SHA512 TLSH

Submit Download

blurrect.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WNCRY
Size 1KB
SHA256 daa196537ae0e36978c5f8248991ca76281b8b8a669cb676008b63a7b00cda00
MD5 056e4bba579ba66aa38fbd5118c49473
SHA1 3e44c367a5f0af2af3c9c2af797131334c6d4f6b
SHA512 935f151a12496b46dd4b057f52b36a254adb8a4b53bc4f158b54b192bb29b769da3f5a2aa9b920b29a05eb8ca479342e403b1206d356ea3273cdb1c0b8e2df7d
TLSH
T14D11F6AA3DDFB6468C4E02F499A846FD4EDA2137D02281E2B5821C53B50406300AACCC
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_finished.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WNCRY
Size 504B
SHA256 931ec64d7e3c22837b1335f0efd6f1c951f0a4bea767b3f5932c89944c448dfa
MD5 ed33acaa3c266ae97f7ddf212701db80
SHA1 817e4e6fa5dc72885623a29a631de76a51ac0d83
SHA512 da8860d6e05bd2bd1ccb5b9149a89ac23e575d9c7100a17ad9898988bb9397edbd3ca4dcaba08b0d4b0303984cf50b7e3a7200f2e0f71ff0a4d25940eb6cc4a5
TLSH
T125F00516B4AD540FE4C5427A5C9809A44BF80B8514125AD50AA345BA55315BE42B23C1
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_hovered.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WNCRY
Size 680B
SHA256 7dafa7f924060a248bf61ea7fa3787d65b838a2ea93c41410f03448e4399b733
MD5 3ac63d75df7798551feb8692501d50c9
SHA1 686c366842a06c095342114c94e7280064881318
SHA512 4affa50372f016b337d822e02f489a17ff97f704b38c10a8ea1457ea8674f388b63654a5e890a962dd998e386eaba29a8aa46289a9f8cb7e39a1f351e6a1d157
TLSH
T14E018874C7DB7908584A27541402DB89E64C6F136358BD1DF67C7C971870F01221EA92
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_in_progress.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WNCRY
Size 680B
SHA256 86d43c865f889a7fb4b312766d545cc54a0b1de73355326cb0f62fd77f0ca31b
MD5 a1f44a94f1d52c3533ecfe76c3c3318c
SHA1 3c15ebec6a6e6e53f15b59aac605eeafc19c59d5
SHA512 a269a70dad98d41244828ffaa55c93eef545409d10441e55807ec3eed9100ca4dbddd6ff3f51176363832b708cf3a64b30ba1e036a719e88a096cbd939499331
TLSH
T1110144394C63E716D4DC80451A31916C2A0AD1EAF171D4853E971009DB61C51CA8A57F
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_selected.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WNCRY
Size 680B
SHA256 c742d0c59494fac0f1f2a53552bf92a78701548a8fd512f532fb9bea29697b05
MD5 abae59c996a9841492e4ce771f8e74eb
SHA1 92a0028396a33a4e885b1b7683892cc567eb3d54
SHA512 08fa7b5770795651af1e1c88ffaf593cd56554fc4412b0ecebdabb09f6cf77f0e6e978eefc31fa742e0700b22c596fab87a53cfecc0e99d8175b0439849b8bfe
TLSH
T18A0144AE8F7C164CC65339B3C23D7217669426095D25B8246B7D06C1049E241F45E39F
MD5 SHA1 SHA512 TLSH

Submit Download

chevron.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WNCRY
Size 584B
SHA256 2196296954ca6b2231a74a8582ace35542338d7cdc6e2b8639b4bca6c26a485d
MD5 00e01a6efa33ae86ebfccc90b9e2cf8b
SHA1 fcca030c4ebac9b37d8566ce7c9baab7675cfade
SHA512 027c4ad16acb6ff8d710ab3c113c46a75b9afc6f65e94cd1baead921b8bd178e680fcba3b6604d491fe2664eb6d641c42d9b16807694a8bcfc8d27b8bd26f5b1
TLSH
T10DF0475CDB34D5BD794FDC6CD0E61875952E0759A891520B951BB4346CD1F2C440C464
MD5 SHA1 SHA512 TLSH

Submit Download

chevronUp.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WNCRY
Size 552B
SHA256 27e44d1db86e494ce468ce13a635d921314deaed1ded030e373da4d899251a57
MD5 30fee8324884a55e5dc3b16b5f5b31ca
SHA1 7ebe21023e207e644f173861c14a1585b6b95219
SHA512 50ae3185b635314792676a084a6faec133d6fc0f41cbeae62615043159efa739dde51a391e563f2204ee9ad8118515a894b69627908b0b70e0080b16395fb63f
TLSH
T1C7F0E1514228FC20A7985FFC750D5C4095110B543B72BA8AE224680556AB62A9E27C11
MD5 SHA1 SHA512 TLSH

Submit Download

cloud.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WNCRY
Size 1KB
SHA256 5470e86453547d7aee28fa14eb4427c4020c00dea456ba40ba8634c43860b0af
MD5 e7e4344992e1b426a0f25c944cd58c12
SHA1 68c212914944868f5633a16bf906b9d03d9a1f24
SHA512 32560b3400a0c05a43fc0b631b93af57d7605a9069f4b8431d5b97aafe047550540a4832890592b468f532dcf7f75d3f186813a5a56a9d9a0ff83c122b7913c6
TLSH
T170412AC1856BE50FE43B6557E633BC402B0E0C1476C1B3981F9779A52E22A134862270
MD5 SHA1 SHA512 TLSH

Submit Download

done_graphic.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WNCRY
Size 15KB
SHA256 f8958c6260c89310ff0179dba1e98f0ab7fc906a9353aca2ebcffaaa53c8ecd2
MD5 aa5647d9a39bfb4135b00357c333d383
SHA1 e97cd42bfbbc45dd7059521c4c2c1c05f56d299f
SHA512 5728aba1fd17149dfbdb97b7f02d3d4a054a670479e3dacef8fdf7cfc1c1672c85f85e3accee5f01296973404935bd1647dd06da6d29c70decb6f2b4506740ee
SSDEEP 384:IhqJoATRjVfuKu1eZg91HoGcmKazRA+FZnlVO6dX6ky:MOJfuKsuOHo2zRppO6dY
TLSH
T1F462D0B96F5382438916095FDBF2B0D23E8648E47C1953F42978B8B5AD9D322019E47B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

errorIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WNCRY
Size 1KB
SHA256 8d534444460bd1bf18d6a6f2252f9fc3b848f8994e8c226038130ca582ab5d5a
MD5 cf4919e5675914bfe03dfead500077e5
SHA1 42e6d909d0c17e735e9e15581bf5494f7ce32035
SHA512 9b151cfbbf053233fc4aac784d1866ed3c45845c2873e122976ef8f77cedcb35d7ba936c2e2bd4c2c3c4350980efbf76f17c1e4be00a5532156580b77d1edff4
TLSH
T12811895AE2D54F7150E1EA229ACF43290359663166B405853B013E0F94C6A4FF2DDE80
MD5 SHA1 SHA512 TLSH

Submit Download

folderIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WNCRY
Size 1KB
SHA256 4b4a230916747a970425e769d7c5aaf2a80938cb3145a3c698ba6487b984bbe4
MD5 8dec0fa04480c619c654aeeefed76ad7
SHA1 fcbde51fe4ad45753bcc53d171b2e9d74347f976
SHA512 586c90ad1830fba0ba7ef2d82a5b0f6fa404e9a7dcf64f61428bfc5751486ce2ed4ff8bc46c8e24802eaa3b329491a015c5cbc6f8f6b826644c8156aa986dbd0
TLSH
T114219654E64850B9BD5871F14A18EF8ACFB61EC03ED1A832A92943B518A9D487A4402B
MD5 SHA1 SHA512 TLSH

Submit Download

folder_image_desktop.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WNCRY
Size 2KB
SHA256 d134bce66e59b29df3886833e0ee648905ebd55009b597721469d61227290ce9
MD5 92168bd29e28fa6edbc3a3d9e578eb56
SHA1 66d978604d45a10f4e6a0bc76fafbc10dd2fe941
SHA512 5d2f41a56b07b74ab9406f1944a0bdf55b2795cde49fe5cb0c8deaa4f152ae31389f494aabcec283e1e5bd3cee50760f6a63a53ffb403236e5a711b52d7035b3
TLSH
T1DB413CBCF14B66D2BC90F4E64871C445973510F3E5B3110E5F40D1A8CA08B3D04A9ECE
MD5 SHA1 SHA512 TLSH

Submit Download

folder_image_documents.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WNCRY
Size 10KB
SHA256 14029418b501c5c5c56cfa04593cb4081db808842778101ce7b25b5d5f8bf052
MD5 ece0dc85eae35bbd2b3775a125ce159f
SHA1 232995f1733d18d60ea5247cfad3e71cb9ceb654
SHA512 eba86b6c83df4aa27547599a75ca551516bd7873353ddf90f8b1890ec62cb8814d0f52ee567f2102d3e88a1d4e93f8b2847bbbb9abfaa722376e9f02a2df54f8
SSDEEP 192:/yF/uwMbLMNdoOq7IjFbyf7zhhNmelH+R//bj8tPdOG49N60gEriT:WCYPoOjj8DzjNjJ+NqFJ4TgEriT
TLSH
T10F32D0A0A9D4E9C2EED044BAC2E61282D3E457D1B53C0679F5357E61DF15E26643C033
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

folder_image_pictures.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WNCRY
Size 7KB
SHA256 c9f98a553a72deaac5810c68437d19110bfeef375a5d8d1b74e75121864b1518
MD5 646b4224d70fcb6d3b06f5a2590ec146
SHA1 37742a55f02d31a820e0316c60dd7ca52cc29bc3
SHA512 a38ea635a1702d550980117cf8af02a64e577809803e78d4ad6dcdbe9c43f6aa5b7f186e454f1ea05c42c1f88f31e509bd81bf42fec077055f6088a6cb522ee0
SSDEEP 192:44tbndtprJWJ7W/BYuxpXl4o1CQ7jzijGNvZHWH:44Jd/FW96xTl3l8G7Q
TLSH
T10CE19E7BA9D5070322355E2878CFF6C979776686B5F0A0A754D0B2258BA348277CD30C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globeIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WNCRY
Size 2KB
SHA256 f88b77960465fe81173c1292c1ef796d5a93f753f0a9994f18128fd587cca095
MD5 a5ab3f87c2d74c8abaffcfc14def3069
SHA1 87860c51388cca94ca7063f2dcc5cd869bbf167d
SHA512 287803bbf8ec830fae0ce8b697ce5133597defab07ac7c04f30ca4aef553d6c412675f0948c1a4b16e56db8b32a45c3d9dd58d81992d502f8f5fe0807c05bbbc
TLSH
T157512C48D76044ECFA8801F159C75AA05C5B3B693EB0DBC039A8D19C307F6D0A5559B5
MD5 SHA1 SHA512 TLSH

Submit Download

iceBucket.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WNCRY
Size 6KB
SHA256 15e0b5b42b8b2340de4ad413017ed51be22cc675c66e7558d90cfe24da2bb36e
MD5 88cf46cf10b65f5d278767333f4ef384
SHA1 6e46d1e7c8792cd3e4ed50ad8be1d4aa132f2808
SHA512 738abfbf56083672b2f1e8fb7b42da2d51a3023590183e4a9a0846ea6f52fb59f6c534e0c6216a962953e2a1076e53da11b3c816f63d0758a4bde7b5ab60ca1c
SSDEEP 192:wFCFieUjbBaA53PBWr6JsrEXXZzBDF2Eb:SeieU/cAtPo66OzBJvb
TLSH
T164D1AE828FEAC34312926DA92441CAD5EF71C06CBF01E06BF20EEE919F31CE52E145B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

infoIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WNCRY
Size 1KB
SHA256 6060d4b091b98904c467a28d0cecc7c3436ed77c6568c1cb020ede9546a67a46
MD5 3d015c7b963df1d3644184276a33e6d1
SHA1 e251c30af1290f6b7780a4ebc4f7766a90bbf4bb
SHA512 2fa8cc4e237cab2506a66833d9ecad7b27fe8fb63ee62f8c0956d7aefacfdef7e7b4c337781ba9d7c5ba311dff3a7b680e83ea74d4ffe999a2ec4b0719c48012
TLSH
T1D7212DDDA27C0584894AFFB440A5B101CE162BD6DC64223890C2552F44F9D32FF7E321
MD5 SHA1 SHA512 TLSH

Submit Download

kfm_folders_image.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WNCRY
Size 20KB
SHA256 300e0ca8391c13c02c9887f0bdcfecbce75426d4385b52f37b7c914b27f40449
MD5 26f059db06a0edcfafa97e3a0eeba388
SHA1 c55315520320c32bf9d3be78d6df75864b2862c4
SHA512 d63ebd8ad2e2fdfa54498dffb7f2858a63acbb6027066f512325639d0d54766714eb0702314e81771c1523d8dd3d2a29c0e7d5e8b4d713b40caea73304ba7f23
SSDEEP 384:tKbJDzPWP0NJi3RiwUC6ILwyfracRNNaeoDRvpqcnGwIhO8Tqb:tcJnRXi3RqC6ILwA17aeERgpk8M
TLSH
T11492D00B6B423CD2ABB9099BFF7EC0FA9263D75129B1408F46B1F55D32D64190A4732D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loading.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WNCRY
Size 1000B
SHA256 7d075c761e0cfb017aed48ef244b844b03430ce559b080891040de3a1b91cce2
MD5 873d4c564b9ea0bc6211c2442213f6ba
SHA1 9fb1c3b2c037ee56ad9c02aa2170ba09144741da
SHA512 ee143f8f2cc36159718015f1e232d297e80065b5af4ee19e201035b8cb6f538b35304427eadd68c61548c185332a5acf72a86ee92be403a466e20d2ec3b02968
TLSH
T1DD11C8E928D1E90668221F76123E1B05B5D6717BDE847963D118A84300CD032AD3D283
MD5 SHA1 SHA512 TLSH

Submit Download

loading_spinner.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WNCRY
Size 712B
SHA256 6b0a4766fb55ab44d29c09d48a04bad91f3d0441cfa455f7c9ed0181301a8510
MD5 f61957f89a0b3a222337ce06f94c2c40
SHA1 7ba2106b2ad1893b3f9c7f68507d155eda77739c
SHA512 0d3affb05bd630bd67365e5996fcb20a3c7c016fce663ec37400d62e1276558dc58b2fdfc4998b90cd83d71b2bce2bf8fb91557f9fe7cef114d6fe0b7c805a57
TLSH
T18A011018AF90198AE1C3B5ABB467F6D8F61596B90A11821AD829180B5AC98780309403
MD5 SHA1 SHA512 TLSH

Submit Download

onDemandFiles.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WNCRY
Size 7KB
SHA256 47f8fe933c73885389fc12fc26de53f85685b404606b8029f92d6061f10b0bc6
MD5 22606a7267d9d510dded25c47bc2304b
SHA1 6230f94699a1d25d21c99b177e774e996ba810c9
SHA512 2b11681455fdebad949c6750ffab5fc18e5405af61e58bc37a7ecdc18363aa8beccd60814b1ca317d94110b0125cff84f81ad36146b90e8ff4631fff977fc45e
SSDEEP 192:ialQrqfkJdbNBWx8rYOyhOCg1mqO53SZcWWDHOl0cj4k:Grqs7xBw0ao1mbMZaulXj4k
TLSH
T188F1AE1D39B0F848BA98D3D19E48ED8E0545E0A40B2612FB7ECE710C71AA8F7B46E158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onDemandFilesDehydrate.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WNCRY
Size 9KB
SHA256 cca102e821b43e31a131bba7eb95df1be07d94f7017b8bbdf8d064ecf94dd8f8
MD5 92c2001eb76490e5ee7b28dce4f86cea
SHA1 df572b626c5971582ccb61cb07531d4142858f07
SHA512 1bd770c93b9173703e75b7bc5658098e09efbf0d078774c2ce7fa035628acb21f6599bf492160a87689b380ba34b4d75c0e6d2e2dd7c854d19ace1f68f2fb2c5
SSDEEP 192:D1rsRab//4mGq8KIh1XHIqxjGsTa7neKM9fEiJB2aUPl+Jpw:DFsRo/fw4q5GsweKMtzv2Jl+s
TLSH
T10B22BE37E5D31756818BB091696BD809E0FF9D025AFEE6C509DE20630DEBB8BB11242C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onDemandSelectiveSync.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WNCRY
Size 2KB
SHA256 d9efc574717321069ea1f0020bcbc5f07c471f967bfb267b61b7264a318c82a1
MD5 c2c007c4fcf6857b3efbf41788086d01
SHA1 33764fc0d49fd2125a8ccb0f3addaab123135d1b
SHA512 e8071583ecc09bddcdcc3be06bba03a9c176399dd4b44c90d29c2667e40cb0c4d7891cb6a1b3034198b13889e18d97aea72029f213bb5b4cf2f99db8a0cfe9ca
TLSH
T1C2514B1F68942BC6CB000BBB014A500A2FB6AB66403511710F96B2DDC82F9F6EE7217A
MD5 SHA1 SHA512 TLSH

Submit Download

overflowIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WNCRY
Size 1KB
SHA256 5316b228b71a8fb05dc94e02486c69360068b1289b4af9d2e499c98bc32665a6
MD5 be5919a7bea6db03b394aac87786a4e4
SHA1 cb05bbc36f9a0bacb36fd770645e1c6de0536d53
SHA512 70cfafb0908e846f6ee17af572c1c953b19922c9552a8d0242071b4099ff27bdc9e8df9f8e35d0701e57e67791779eeca7c7d171c921c241b5721f04e6bb6d39
TLSH
T1C121E75358F9CA30C99B582883B117B85A78C8AB34126520586027AA28399FBAC0EBC1
MD5 SHA1 SHA512 TLSH

Submit Download

overflowIconLarge.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WNCRY
Size 1KB
SHA256 fc9b2489ed3f1036ab0f28b405829f6d22a5ea78963f9ecd74a09d0399e79151
MD5 4120baa6f801fd805b90a42363eaf793
SHA1 1ef87a302e3e604845aa19a1de8fd52a9e1cd2e1
SHA512 ba2fca568e777137ce65dc9961ec6138842c58ebd6ed494ca9956677e08087bbb7e40c265a07c50a0ddf8236ad60670b0dd40a56131f7c3314a34e4bea26e429
TLSH
T14B21D8A6F4451F408A99193F3FE45A57C821A431A78370D468CC22F10D4DF9B5D227FE
MD5 SHA1 SHA512 TLSH

Submit Download

partiallyFreezing.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WNCRY
Size 4KB
SHA256 d0d95af84f06eccd6df6353c05888e47610a3c428c11232e7e8cd01f3ec3a299
MD5 4168910fcf0dd8710870f88e69fcbf08
SHA1 2da2c87bef273a2552637e1b6cb31f2a66d187b5
SHA512 6cc3bb7ca8cb48a3527e253f173986d81e7787a932aa234510c52aa4665112db328c2a7ad54ebf36f0500750071b584567824bca94bd5ae0027e5f0fff1cd5f2
SSDEEP 96:oIXBfZg0pgMWVZcWeZZOuNH0E49GwqBdQwRa2zAk0:/XBfZ9NWVZFeZZOuNH0E49GwqLQz2sk0
TLSH
T142A17F5E99FD4FC6EBBB63071165160890C4719C2513397A908EC55FDECD15288E70B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

paused.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WNCRY
Size 600B
SHA256 becfe9519a6613ca69929a3aef14fc76ff93f21d61772e5266dfa27c0217d763
MD5 fd1c11bfee3439af1423af0720851850
SHA1 eb26d962500ec065c22cda01e9bd5451670cea5d
SHA512 3ead0a1bcfe632c5804e8b5794803691f43c3048ba40cba2cacd0122dba2a4bffc0230783a3bfd992f3d05264d1ca9e57ee75c2081e1dfac8980e4cf1cb762a3
TLSH
T126F0479611E76645937D4225C04A3D505D473759AC20074B3DF91A91E8CB5E4245451A
MD5 SHA1 SHA512 TLSH

Submit Download

premiumIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WNCRY
Size 664B
SHA256 153fbc1fb7f4645177938e676f297cb729adb8a57f983132b41475305ec802a1
MD5 5520d583c335354da624313312b1c22d
SHA1 593d1e41f5baaeacfe660c4607843f7ea0b92839
SHA512 1c7251b9a059b5bbb339e5f7e0499742382633adf0f1db42e2de8020312f18aba59c0102182bd534bfb7f582f077b38962c141f003464c411477d645e555523c
TLSH
T17E01C8A10D3AC449F3C9142EF2E5BC08A88471FBB027C98EF533A51BD5418080F81800
MD5 SHA1 SHA512 TLSH

Submit Download

recycleBin.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WNCRY
Size 3KB
SHA256 bdb1d1c971f333ca669beefb26ae00146f97df0bbf1c6ff1e953ce64917eb0c5
MD5 269e6867873241107722ba9555f0c022
SHA1 9d822181e4f7a2b41f9e3b0871a45ce79730c964
SHA512 9aed171767fa67b88c6742f7004971bd46d8065206a4943248846f2f4970843057d2757444b8e3bcaf1d09ed85def6528c1798c5bf638cc23ae9c687be2854e5
TLSH
T1C7718E222DACC468451E39BC18932E159F9FCF3379E6AD41353753F31821A00755F111
MD5 SHA1 SHA512 TLSH

Submit Download

shield_icon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WNCRY
Size 1KB
SHA256 dc4529c33e21ffcec81a5e507af10f72699e1191fbf57439268715ad5b27f9e6
MD5 80b410471f9e3cb1095ebd20a9a276bc
SHA1 5fc67398caee05c001b1ffe5ecd0a2015912df6e
SHA512 3d52a05614487e4295a4f2288f3c1c2dbf0871e2429e1eb9fbfbaf479c952b55d125be5043033e392af58d155776062358c16178f5579736e5ade3d9d324bda9
TLSH
T14A31E9D384600A86A492029C6C7F3F21490A8A45BCBB3D4FBD46821BD7E3C4FE5F0681
MD5 SHA1 SHA512 TLSH

Submit Download

signIn.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WNCRY
Size 10KB
SHA256 7dc97e30c24512a893b10b75921150b2adbffe562f432bc7aab009ed2036aa6b
MD5 f3a3451532e589e492c9625b5ac89e43
SHA1 30d8d52327a70f5968c9e5700a9733c002170c5c
SHA512 73cc8a5d4d307d2d5bdb82818d2fc690586b3506faa5a27b1be095f59d492c1a8aafe75c2c1eb732bd3624800e849f4ba99838cf58718613b727520acd65880c
SSDEEP 192:yYqXplOQY55Ul6rg6PdlBLT3CahVzF7+bLJ6mR6v4QIVuhXWSzE:ytWQY8L6bBLT3FzspPCIKXm
TLSH
T15F32BF83EA3E55E8CCF6154B4F41A89B52FF2A314A39A953241215723EDF07ECEB10C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stackedIceCubes.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WNCRY
Size 4KB
SHA256 b6cf90543b363aa65c21e647978fd86a1e9c6286804f777ff9cb1367af0e0a93
MD5 14b641acc5b763cf50bae0a691b455ce
SHA1 47be0a89edf1ac6b7f8abab3c0a24b796547f19c
SHA512 9c7610835a24739febe9bbff0d123d33151b10a6d807c9593e3c09366a5700630a1a954948151dbfc698225892c5eabf8875ae20d925c4e977ad2ffd686024d6
SSDEEP 96:oqFSZRgeUkqtwgm3E2764rFwu0VzPkE7AqjOIoRpE46YE5U30hP:vgZqmgr2brF8z1zj8ehYSsQP
TLSH
T18BB18FC38F174C0BC89B79BDCC5153844891F59B674C72A70A565F5F0DA2A1A39D0B4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

warning-symbol_grey.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WNCRY
Size 536B
SHA256 31d9c68a8dc7ffea8a48c56455d928f191e95ee0e17dd251cb909eceb80d2c59
MD5 6d5f4f8135c3b067b23803f5209ab166
SHA1 c7e7d06c09d25e2e22a310b57f213063c7ec9d68
SHA512 c87a5bf252977d58e13c1b86961c8a26cee6c93f124a973dda713f839a86f456130c064136818a81cf5582b728c41f73d534fa768d80e966ea622ed898453e5b
TLSH
T1FBF0C0F80691A254D35126B216AAA665232EBDA9CFC2D90CA3C80BD70A1FA653C5D642
MD5 SHA1 SHA512 TLSH

Submit Download

waterGlass.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WNCRY
Size 2KB
SHA256 8075242d6654067743cc410cc51afb18d865787a69c493c3023fe6dc1a4886f0
MD5 aa27894b5c314f7426e3e6cd6a408313
SHA1 819a61a233e86d0f78d1f1ec124db05bfc16a8e2
SHA512 e9d1b1d7d8f3eb404f5815f700e9ec73669d6b8f69a58e460f7e7552533eb9e958d69ad1902a8307b5a616608d460a626ccddfa73e713ab33f475e569e3ccf35
TLSH
T1A1411A4F12A855F7A77E96F04A7A64981F6CA0436B1F90BBF2291014C17863C42DD615
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WNCRY
Size 936B
SHA256 0f3f76e4d105d8592d4f87885e2f889bd933f4edb211fe05daac0dd706472f61
MD5 bd015d454ca7bb912d7bb16db2561b18
SHA1 d9a4a0a21fb3b42e574f75892d20ea78b561148e
SHA512 e33f1799ecec6032daaa98ea929516d6426fabd38de261dc7cfcc646cd954aeef58b6f70ce8d9f75494677c3522c079818f6144884d9c44171f1750f173887c2
TLSH
T14C11885C8F2B7516C4852B7D96CB52C55310D5F45D50AFDCEAB4DF0B072A3629238D02
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WNCRY
Size 1KB
SHA256 e17f0cff4cbb315eacc07577fbd9d6d1669dbfa66526e095743e5f04beb43d59
MD5 eb663d4818eba9dfd9e548e4e8800c4c
SHA1 cebe0d1ecb2fe3b5ce63af275fab3eeb24e7d9c5
SHA512 da85bd20d542e781aa5eddbb75f3024c796597ba8528583a18a01730a5490b72ae199d49876822ead709cd27fe8e8dec2ff87145e6c2d57f1f05e84818ebeadd
TLSH
T14821C6C554D460879484AF3BD973AD949EB36B746235988B88FF0820099A61D46747E0
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WNCRY
Size 1KB
SHA256 ca9c4cf9db2dfbc4b7a9b2f8febfee12db96de43c762a3023681841105b84ff3
MD5 ebd0b32dabbd1d2e944635672551c100
SHA1 5a49f1095ac922c3994a01e849b8e75ff066bf62
SHA512 ad6ca5865e5dc1689628df2a5d4ef5836ec31d4837c9095d9ee3540e23772d6a826f1088e350630cc031f030371fca6b47856fdf5ff68d1342e2b670b8f17b72
TLSH
T1D3211A0D6B7AE83C440890E49ACA11DC7DC475E76C70C100F6DCF8F865D030269753A6
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WNCRY
Size 1KB
SHA256 5d4e32266245790e288b72f3330ba965f0dd7f6e788f0723a45b279b7412cf23
MD5 2776a6c96448f6b6d7d3297762fdf0c6
SHA1 856e44f111e5de52fc6a450e0cbf7375556de895
SHA512 347e79908fd94c1169e92b7d20d37c0e76fd45131a844ea11214bc9eb41ecd4ca0d55157c1e5024a7a007c27766f0e8c2bad7a6e159c4943f648cfa72a3c9a4d
TLSH
T1B4313A89F034D09BF532A0683AA258BC0F8025C6BAB2FA96F5ACE87D55248313D14C12
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WNCRY
Size 3KB
SHA256 9c36a44cd185d5bdd0fadc434bd8d17581408d8f782eeace632869bda4ed9e34
MD5 022d521829033d408fc8c12af5539c7a
SHA1 7f170fcc7c55015400ec803f7ee4c88b572c16a6
SHA512 167f128c7a6ec2ff4a7cb535e0d8d2ae940df771cceccb74a1802e2fbbac348e7a19447adae5a0254a7b8caab0f1a3bb6fa992c7050b96eb73840ec9021e2548
TLSH
T1E0715A8C6FC159DFF286E0EC77F92A401CD408CA920B873F97486062097ED5BDE76802
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WNCRY
Size 952B
SHA256 54f58d33d4dcc3cf6156abe6af50c90e97f5d283e72bc9889eef8109d4fed246
MD5 2debb07057fc34e842024c1bcaef68fe
SHA1 dcc4247a7967671906f244a0b3c0316d4a4bae4d
SHA512 beeffa419fe0a27d2b86195acbd5ca2c55d6bb918d6c511c8ac5030437893e9bfa9bacfd736e054e19758e84f9c7a8411925d56ea95b0cc51889de9b4d30ac50
TLSH
T18811944C91C12DBA55AF83944B66F42BE9BEF8BD01220CA2B2B58E211583C08228A19C
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WNCRY
Size 1KB
SHA256 08ba10867d32b054a97a9a31cfb3b9033ba843ce9b0cc88acb9c0296f3d10276
MD5 ba053c9fe6005f89aa04d8d613e6150f
SHA1 76c321330832e5ad9f5ef960ae5018074d5ddc3f
SHA512 0353f1b397b8b77e04c1b947e483f136eb9bc1cfd98a0706e07d61d0e44c5936689555ec47f2250271b752c9ebffa89761391d8e06e48ecdc222e5725d34af9c
TLSH
T18B21A7E7A3081D0AD67529EC0FD60903CD14AD744433927A300216A87A5B0774FA9A97
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WNCRY
Size 1KB
SHA256 f523014dea7a1a1ddc3df5e83ab3f220b0399187a6b84e23790f839b351afce6
MD5 a044199fcefe64e65a05ac6d4482846c
SHA1 4119b61945a3a4d8eb045e86a0cc9363bcc9fdc8
SHA512 ba4a04f060067d415bdd0a02e05f799393d653eadb779225d0b866d52a41981b62f0b1cd2ebf707d4448f19127001662c27fa3121d81240218bffbc45b76d1c4
TLSH
T139111883105F871FFEBA8C3E171B860C20E80CD18E1A2CD652443B4DD49B3CA410C70A
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WNCRY
Size 1KB
SHA256 f0cf6271ef7a882730a3101d0f5b4db1a60978a307d6e8ddfa4e2110e1b5660d
MD5 07231ff81594e4792b29f71e359c4ddd
SHA1 3a4ccf6c6b8c58a5acb11aabab7bec2d849f0c77
SHA512 55ceea6658ab2cc327e52919007fe780574dfaa0dff70a9970520ad986064f513fcd0a55acc04670d031a0f1e0c04f47635de24905a7d6f7f3d3e80bea9ce14b
TLSH
T157312B407740330C47BD12A10018EDEE362463993B9F4378F6F01EA39AFC8081772B28
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WNCRY
Size 3KB
SHA256 5b64d2d18af6650e8dc579a5299024f294ebb43de25fc02ecfbbdf716991058b
MD5 551639db9607e7148fdcad83aebdcd17
SHA1 ba783fa5fd0f4e9d878ce5920807eb1f16bd888e
SHA512 e8ebe951be6736765e8796c69bdc5a589079a78b16aefa946a15d4c8037d640d1228103110c6cb8676157f4ff6165d88f0acbd55300023161336aae31161e920
TLSH
T1ED815D337065B91FC4BFB0E681C20B9FCDFA39764B05691E53A8017668441E2ADF0D19
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WNCRY
Size 936B
SHA256 b7aad9b10c64ea0fdf723a166607d824a7d5d6d6c686a9b278c8e73d38663294
MD5 cd85c1518bd95549db2bb4e93a93f8af
SHA1 6074ed993362e01fcf851088d4bf6589679f11ca
SHA512 395c26f8b52285454ef308ec3bd8e0543892d6e81ee9120521971fad9ffd2131ccba172d521dcb1d2667500728fbc6741c353eba82b7ea67220a29eb3b81f779
TLSH
T10D11FB3C5EC17CC262B7557CA6684C3D881C274C943D53A6B0C98D633C0B724659C71A
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WNCRY
Size 1KB
SHA256 199534a59c5032049eece1f42e2cf2745c4261d41b2343aa3405d067ec063de6
MD5 d8c46669741f960e96e5d18b8749ab8e
SHA1 0983c9f75c51f53fd18eb70b2da5e24bf5d1ff9f
SHA512 fbfb5bd09f196e13d72a39795e62838f223001ebf3fcc2fffac9a02885ededd78e2f886b9c5f5e0e04ccda023bbc74e4a7bf22d47b1616117cd140814ed18a23
TLSH
T19521C6A4FFA41522CE24C07B53690DA83F1B0D500C6071808A8267170AB3E6ACF8408B
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WNCRY
Size 1KB
SHA256 4d1d84ccbe35ac0b875531059cddd7bc57290285e2255627fcb6258c2f17cf0a
MD5 18c976aa4206ca0b2edbfa9500826dc6
SHA1 be983b271073a21e2a472a01fc58ec5ed2bfb26a
SHA512 a27aac0de975287b6a30868a92644969a0d91b8588d19f8c9d89a48f68deddcfe1c1ee524f8ffbb23166ef0692482ed5b5e007582b69acf27aaff1e6e579616e
TLSH
T1D621D5F4C8687811DA6F1A549A8E4BE2913163B04E29D042D8C5873D1AD18116EC9A56
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WNCRY
Size 1KB
SHA256 8632c5de900747cf5274003da665bcece1faf6d7ee1fb9850ac4e02b288e6414
MD5 2cd17556cbba65b41be221d4a5dd7fdc
SHA1 cde1b1d011d4e073ab8e95edba25d6186ac1ecfb
SHA512 1fa020680c187611dfc7a0a938312b10262d0ed97e9c45749bee83c85b8b3540e94b26fe7792c86df76119b8a76bf80c9180c741dcaa70efb9d80242e3b4277d
TLSH
T15B317CA0CFE8801FA60D3220F8280157EF0B3EF3654A78E01F956E66130202E662CDCB
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WNCRY
Size 3KB
SHA256 d884b0974c9f7a6f10ab45472ff11ccff5cee5deb3ad6215a694f4879bea3607
MD5 3a979941629a62d4b35027ce9a77c4af
SHA1 06a51577ebcbd8135360fb57082811b3ddc99b89
SHA512 bba5ab070537830d76462b4bcd28c590a1ca9ee234911022d0a7930e5b8825cb123203da8e02005b2c5330d64ac822b0b296ad709b3741dd900b3eb849a17aa2
TLSH
T12D715CFCC53C8E63FD906A2517BB901C0950A77BA6A8C751B25461870FE2EC974E3B82
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
Size 696B
SHA256 a8e9582164a5571bb1db2dbf067e0428aa9c74e476e16ad27b5cea9602031f5b
MD5 8712501866794ef6deeddc2ddf1e9c5f
SHA1 6bbc734f288bcb029481cb4faee0802bc907c4ad
SHA512 70bdd1bfd2d176131dd714961c42c99352ce2dc0ce6fde4e53718fe5cf7155a06342fa2030a4234330bc698624d8c8f16409bc0d1b2b0fc488ce9c11bda5bd46
TLSH
T18E0194C003D87A07D584382F68605B1689432F645820C21295BC87D02ECE4EDCC29BCB
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
Size 808B
SHA256 98142fb5227c6b74a659ff5c5a6d8d611de1700dd4000747b535916c7babcf00
MD5 9438ecacd2601fb5f74759a7584e4434
SHA1 40231c4ae7760792a140a86a3cd09971fbb3f806
SHA512 0e4f04927ee4f0df48b12a7955208fef1f32a4b5a8294b5fca40142f93084b79bca7b741caff4ecbd212241ec05a62bed03d7ee3168ce421823321e466142eac
TLSH
T1450152219124D048CCC1C973DAD23E7582B522306CA9B0C03A1462B2F6F86A4B988466
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
Size 872B
SHA256 66217ed0ae0fca759dccdb2d419e4151164d57c3993bd03474c75adc07bee17b
MD5 9e4d23cb459207fa9f758123543d681f
SHA1 d2f0ee63c000a63207bc3a66f53a15be147af6ff
SHA512 1f76da91ac694e09178733b0a1227092143cf19c5aa898eb902d69822530c539b453437f697c608f029409699180e48cb750b03b3b31762c4e4eb0421c2b300c
TLSH
T1311196C4215257854C7EDBFE1FA178BDA005D47E5DEB0543E135A5E6294F69F2801F03
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
Size 1KB
SHA256 a9c7cc1c5c3f616d0ff3625d7fafbffafa7852a2566ff0baec3daf21c776aaa3
MD5 a78693c530018c0db4980702871b8120
SHA1 a5f43730505c89907f28e2b70f0bffb4d4add8aa
SHA512 a642e982bec190b1b132eb2a33dcb00eb8e8eef6600feb01443275a2c3591c10d20ec2ce730f4048e9177d36c49caf6b2c3f5073589bf09d5fbf9dfdf6d80de0
TLSH
T1DE11B95792938B9BAE08A231711E883F15611107D74F34266A52915E30F15F0D7E980C
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
Size 1KB
SHA256 48fc4cfc71f86b87856a258ca2bf08bae9de1e2d596ce2011067f5300b4ae30b
MD5 3d2741b58ec5ff84462c603b2cc6edac
SHA1 be7b0f185158648546329fa0d518c2afd1180e92
SHA512 8d7692b701a20a9ab665776d88e200dce9ed0a845fa02acd3812bf539488068902181a3b9e279850451aea68ec5abf8cd33d86c49353c48214e87b9f0b6c0f94
TLSH
T1A5412CB8F24F2851BDE4B263E4E0EF0A5C72C500F55D9581E95B14774B119234ED5EF1
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
Size 696B
SHA256 078d95ceab7bbfab1efcd89c8f63ce6790db109622b9a16562f9efc7d300b850
MD5 a8134e5745dd2b50960be5d5a9be6026
SHA1 7e07d080050fe80ee7e48eb7829bd132eb575a7b
SHA512 55d896f2a9b7cc85e4c9592fb917027a53afe2b4abe4b0e9eed2631505f0b77c6993f8b6bae37eaee8562362db72fb5bf86124d52805cedfc8e8aec72b705562
TLSH
T143014E4B076850AE59AEFD6B2D8353A00B04C0D8D6ED06C809F582B809E5022A0C5082
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
Size 824B
SHA256 8bf146688132d9d3c99083dbef25759007947aa3487306c5df52952faac4a79c
MD5 fb7f170cdd387865bf74fb5ddb5c2574
SHA1 b10237a2ee6b92c701c7db9046027108a5a22915
SHA512 ac265b2a225a94e9c4156046b9d4c8f2fe4e0058c8904aac0f7e922068ffd6d7beabc6c31f27c30c638e9f42c88eae8b10626426b5f1d84cdaa37b45889c9fa5
TLSH
T17F01867502C332D7DDC0DA33A4A40451499726D22771C531F4807982D07F6D067FB90A
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
Size 888B
SHA256 704c85e20fc47b7aad532e2d511fe40b5c370b243261fa58036c7bf66add47c0
MD5 9a2d2f509a75c45060b22c2e004ceecc
SHA1 a02a4b64373d756b90e786fc6e332264c1bdef0a
SHA512 08d9ac21662581976977f4f4d8f38fa5b9c18e1d3e796cf88a4ef49ef16d536c428628e5d4e14647d0b6c2a86281b26cf4aadf527dca697dba457d9bd101dacc
TLSH
T18111B7413FB845B99B52027024CF54D04CABB62B310AB2087D446D28C566B55438E38B
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
Size 1KB
SHA256 dced7d097bb34babc43417d0cdb3d3b9077a2f329408fcd57b4fde331cc3f546
MD5 71ad74dbf5e1016c345c9e98a2f0b8c6
SHA1 c07653b3a996eb3c8a8629766e56c881f1f676f9
SHA512 54a744422b4cf00af00235570dcd10cb595738a8ad2f5c86c85f27b1ebf8077e4db2241b45d3790c7f47eff86bf7e55e4f2ad8ced705b281312e7feb03e4f480
TLSH
T1A911B6C328E17181840BFEDF89E40720FE4A51DFBF50B44D30628637272E61B5180F82
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
Size 2KB
SHA256 5d2a098931b743e7172919014250d1b661e0478fb980f981feb4480835c175f4
MD5 da21eb7d7b148fc4e1dfdd087fb0c6a7
SHA1 e8d9e26620b63f8c3a98ed757b7beba2aaeb0767
SHA512 8a8ad1ab6614028ceaf15f9844cc954703dcb33f78f6e9459c2acca4d96dbae1bd93a8fbea46eb3e40d93de5a618c1e78dfe7246c8232b1a613e05fe5f1132d3
TLSH
T1BD412C60D776717FD365CA987AC180FCC0205459D87614B255D860E2A6AB6D3116E907
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WNCRY
Size 696B
SHA256 2c34a9e0b0f81ce876eca1131f232166cabd3b28265fb9d2bf34e9ace9dbd0ea
MD5 17c0efe41d691ae012a799e58d947e42
SHA1 7970829b65d7616273be81d4543086a14617eef9
SHA512 d2b63459331c3671c287b2fed1c5c13f0f81ca2d8d09b25e602319045cfc8343d44ea30e7edbb518d6ad97ed16fbbf6e092f21340fd8d5493337f8bcaace42bd
TLSH
T1ED018862ADD11832869E7F33E59A40710503378CD4B6370A75965534DC08B17231F662
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WNCRY
Size 808B
SHA256 70bfed4276f84a81301b615c82ac085f1afb278619be1babceac71291a9bef2d
MD5 a9485f0d631cdcd561d550e26c30b097
SHA1 9fb44940757db9a3ff98fe037c92a8615a3fd2f0
SHA512 11067d3bf46b7915301a65375300c07b42dfcf6ee5ea2d02786fe00783d3ba3dec11d783c949538bafb2d487b69feef4f62fdbc425ec2d4b5ee122738f9ec4b7
TLSH
T14E014130BE3376858409E67A51A33BE316C2C74E1624AF8B95B75971580393FE9A6610
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WNCRY
Size 872B
SHA256 b0b9f3b3084d190256690ef91f9ab31c4b3d0e8cba97555e510b276418f94f32
MD5 54c7a7c783955c3209bde719b339c62e
SHA1 6878662ed70476e9415af14f3951c5cb6437e5b8
SHA512 5b98affe73693b529d0f384de2362d4286de527714974deed2aa4d704986b4ba08eda0d6cf705164e0f3bb56bb14f7a24326ad00441803d6a400e8be612b7249
TLSH
T1DD119613D5A2E622D5C9B1BDC8133963B5DD51532F974575223D22AD41810D0D578F00
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WNCRY
Size 1KB
SHA256 ee1692fe0ee3b836c98c53a4a33f473fde5de1f54d284fb34c5bb09eb35a450d
MD5 568f49e277daf51a73d03d2052b8fc83
SHA1 564a4f8f9ea899f83a0bdd196d806d11a6e9ff59
SHA512 d9019194f9178a7117e48a86a7ea209707bddb7d5a69cffaea01a615e7807772bf0253656271ddac7009c1cf9981b8e9e000ce9c46354ad07968d06fed959923
TLSH
T1FC11B9E04A2A54A586D8E02DC5DBCDCA4D76D6004B019614C73E54A87055BE4712C54C
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WNCRY
Size 1KB
SHA256 b2dd5552b11cdc6eff9b89713582282082803688d0165c70ba81c77a619dfb97
MD5 aa1d7395df621b78a940fcfeded5d9ba
SHA1 13c8615e13a2b300b7152d467c68942c3428824b
SHA512 3ccb8bf6c0c0a69b1775bbe5e676dcf98929d45f6882397516b24be5ffec6bd19c2a6c5506e8a211667e999e4c38e0d47352a79a4ff8d9f6be8712d06199fba7
TLSH
T1F4414C0916B842689B50A2D11D9F1F3E4E6C04F32DE12525CBA9CD0E6829C45CF9934E
MD5 SHA1 SHA512 TLSH

Submit Download

cversions.1.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WNCRY
Size 16KB
SHA256 3d502f459d73cd94ca72e1ad908fb51249d948eef9539957ba4dba563554b3e2
MD5 ff579af496789725e05e1061eb3a8cc5
SHA1 d126cac6a4742e65cca7cc7becbbce3f68921422
SHA512 4fe9f2fbf7637a150e11c285b1b28ee55b6379ebd15a9ae7a22b95b5b6f0d11be376fba359dc53812651823f61f5545d34342fe64171add88a42f5fe29b8652a
SSDEEP 384:1c+Cspq3J9iaMDiRYzgKuL0yUkJ1cYAFrDe:Rp4J9zvRYzLuPPJuYANDe
TLSH
T14372D0131A21E10560DABCD886983F851BC54B1EB7730D2B95E1A0AFEC21BE9777F14E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cversions.3.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WNCRY
Size 16KB
SHA256 80a2921bc74941a42eb08c416767ac67887d08f34d2b9f6f7f8404218e92d2f1
MD5 67376b8cd47c2bc5f0db3c3a90ecf18d
SHA1 71b6048fb54eb5dc32eb3911610c80bbd4dfe94e
SHA512 b8b12ea90060b61f2cae91f735b5bf04ee9f00012e364b3950760ef83a58210be92609b29fb64f168c74bc2ad5c7f6ab7de6432563a2cdad2ca0fad5f20772e3
SSDEEP 384:9xGzDsQN0s9OMIpTv0hZyGNEWjeqwopUnOhMtlXCW:9xGzAQKwOdpTv0hrNEXqzuOhMtlXCW
TLSH
T17272D0F16257C1E07F746C9D658687D91E8E839774624FE21670A821E8AAC855D30F28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
Size 423KB
SHA256 e5c73cb57d9c9cbae74493073dd8faf81ead8d8701d50c31b4759497d80d45f7
MD5 69e27baecf612bb6dac4b66fc2942cba
SHA1 3d725049b34023f87b0353e68353a1a2863a07e7
SHA512 dcfeeb83a7c1c3d9100599095d2881aa4c99ac46b994575828d89ebbc718b427904f5cc4b5b06c9eda77215178da082dead8706f711e35550c685b19b94abeba
SSDEEP 12288:WTc6TtUvn3slIeqIcoNdE7ik8G0xjwD04lCGl3TBQrQ:WwRf8abIfzE7ik8SDv3TK0
TLSH
T1DF9423024A9027CCFF176AD77E23DD4A5C78588C4BEB581ADBD89DCE8116A3F9036349
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001a.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001a.db.WNCRY
Size 90KB
SHA256 0507d037c6c0e9eb09d15187746424514444d6c1ca69cf8d6f048bae1d8c3c87
MD5 efc181f08f9800b6af45ec047b2ad694
SHA1 36a296bff158c12d5e267e0b5a19b951921584d0
SHA512 9c0869ff8b366d900b958a8bb853699e8ad9b402ddf7678ec9d19adfc4027acaef588266f1a205807e164a6a239afc5f56c4e9001f4359c1f0055e9311d1b838
SSDEEP 1536:DtL2OLF4y7bAZBTfHMrPstDCyo5qWsP//6jLMp8K6h6/WvC8orq5JE:DpDLSGA7rKUt+L5qWsPKjLMUwuHorV
TLSH
T1209312433261A01424D8DDBCEE20AF9A840AD5AB79A3FF8B8D0DE2722D75674371CDD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db.WNCRY
Size 64KB
SHA256 07c93c0ec72fe9b05c43cff53e11712cd633cf514e909f871b2036b4547af1e3
MD5 6f350b3b7aa417e33f3841430c8ecefe
SHA1 0bf7960cea2bd8ac5a229ee4e194518780d81296
SHA512 68beb8296945f24b928d48d4bef64d8be64e70e576f809c2352beab7f2c06c39aa3b77b97412f91dca17fc8f599ca8e8100df5fd6584f1a5ed4da02a6ebc7849
SSDEEP 1536:IL0hTpbGgnEi3o5Ugq2hPqBeviZW/gLQxTIvmb:5vnfo5XqmSBv6NxTIub
TLSH
T1165302A67BD93B7E6DCEEB42C49421D04F2E6A9881266C4A39C2D5D4D03B07E3E6350D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_1280.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WNCRY
Size 312B
SHA256 c59253d0174972a399f1d9cc4e92fb0fe6e89a304578c36578271266d4010d1e
MD5 a34b58802c4df6d67d1c013b4a20d64b
SHA1 581982e5d0d34bf46d15e5665c92a21a085e360c
SHA512 638b5cc6bb95530796a866d9933ab252f605d2be8304bb31417c4d909a6c9ef6e1e62b5496ec1c2d7638d9f4ad44c203d29cb85c9d581daf1f405453a1d67b0a
TLSH
T10CE02D27CCAC85B0D321CB6A63E834C51183EB2B98921FA9B06C80E0209B00B440A017
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_16.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WNCRY
Size 1.0MB
SHA256 cd22d0dd313322ffab3add395085ea7905adcbb7994a3bb748a597647d0820bd
MD5 2cac008ff807fa97ea878a5c053b7a63
SHA1 5e6c80f6e672900e30e2b9e5fbabde6b46404929
SHA512 e678bfef80589cccd40df3cab35e47420d2def5380df3919b6c32f6845c85d9aec496688afddb9c48ea8d913701e01000873543222b2fac6a3727b0d3bf3473b
SSDEEP 24576:+GBeuDlBdqnzaK2PKvMFNCCxYVUr23ZoFIBr7ThGL:5Hx/qnuKvuFYqUHB3FY
TLSH
T1A02533E434382712BA663B43E58FEC9D71295883B507FEF75983C0142AA57D62C293E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_1920.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WNCRY
Size 312B
SHA256 87770f39ee55393d3596cc66bd87273a0d85f3f7c33eaa9f5cfe4c332c79e28a
MD5 7f4ae02e2a4172bdb7a10e63d5dd58bf
SHA1 32c7178e860e9bf74a0b95e7641c3b9f41df69c0
SHA512 5b090de894ea1c5c9bf9acb06936c0d5b45cddc9d7629a74cabe34c27df7caaedb26c766aa41907851d93fc40912ff4a1113a118d1dbfc2cf735e369e1cb12ff
TLSH
T162E0E7D5FFA5D1E1C1546331876C3822721087C403801690DDB0E24F635C04F15FD5DC
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_256.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WNCRY
Size 1.0MB
SHA256 c9c7a001d7fa279309d711c21dc60e2f968966ab5f9c48d857919fed136b88ca
MD5 912ec239eaa4beca4b4aaf411a0a7c38
SHA1 e9238fafa1eee2d7e98b6ad1c4bcdf723cc9d812
SHA512 0e7f481e6000ddbcf3dbebae862ceef8052d69a15515acc15965cb74e118808dbf22fab2a3ba39d67a05c040e20ee13701039132051a911ef99914e7b2c7aa7a
SSDEEP 24576:FAFYk3j/W3B1qYSn9LQGVuuKBcvlcywSxX0:FAFn3WQn9LQG1Keey7E
TLSH
T1D525338CBEDCAF3C008F3E8490AA836530E66B179D8DBDA7DFE6B4A06553D479076450
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_2560.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WNCRY
Size 312B
SHA256 8e73972f0f492165c2507cf3c2c565683ae8763ad49d7c21ca786968ade6621b
MD5 e3c75b8ee58f24125fb2b93b10c66c60
SHA1 1b37ab10301670dcb1090dffc7e8bf06d7372259
SHA512 482e082e0da5614f12751b046c0f00f43f712b0fc4ce9ecf06de2851adda5e6f127f568519890fcdf9d6dd678fe433a8e3c70a3eecd1fa8b48989d44081cec4a
TLSH
T104E07D5889D74370C4A6E3B98C6101E002EA2082A955D2802896B3E7691E747BEDD4BF
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_32.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WNCRY
Size 1.0MB
SHA256 37d435ca8e4e8bf89a49932c52c290251160a0d545270fd2a0ef486c4d27976e
MD5 e73e5a3fd93a5375ff1afa8c5b07e5d4
SHA1 75602b0baa13dd8e482c2351dff70294a8f524b7
SHA512 586c7a8f34124edc457ebd8cf20566bbfe6e3869c1b50f469683d5d6d788f679750d6ab226b06b41a3fcafac9d95390503e27fe2914f5e52a833d6c60531ccf7
SSDEEP 24576:GCNJxSvjZxRloccAh962feYNBblW9uZAzVBpnd++u17i+wWUf38:lDx2pVv962f1zxiOAx/U17i+sfs
TLSH
T1FC2533377CC6A541101F489B427015009FC2CE54D68EC64FE639BE4B5AB1AADBFBAF02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_48.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WNCRY
Size 2.0MB
SHA256 5e28077b62a8ad563c9326f533b7ecb0b766374e35044c0ceada720a0e8a5627
MD5 71fc08765d30bca9ed899d5d7e32fd85
SHA1 28788c1253e45a6a068586736124a916e6661d06
SHA512 bbafb5f4b44ee9ffe4d7b7b4197acff5211d8e4e06fac395375c53d6c0761d69f9d5bd6864dc56fc9f6b3687e6ee170e9ccd2d98e559b9dc61ac838a9a3e023c
SSDEEP 49152:JK/VVxeERgpeRXil4+0XkOGjgWe8AQ6dv8NwMGEzUDx9Zk:J+YEKpe9ildDjdAtdv8vro9Zk
TLSH
T1BDA53306C45CD5FB721906DB4D25CF8FEAD8D6953AC6BAA0EE8003194C73CA72A07F21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_768.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WNCRY
Size 312B
SHA256 522bd20770d33a656717e028f19ebf89a4dd207f787192c379149a8d84ec0067
MD5 9728a3ef1cd788d8da4b28cf53ababdb
SHA1 d9324ccb76aaacfcd4d60e0dce259f2bbd0462b1
SHA512 0bb0077d70cea3447466b4f93b2cc051be7733dd8b9870515e4602deae55afaa3462806350ee54058d62d9acef8c99567768f5b6985fcf7208194813cf4df6f6
TLSH
T1E1E07DF9A4848B1EF55044783CEE630BA7A15E650B649BA6946B6291A602005A63CC59
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_96.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WNCRY
Size 312B
SHA256 ccf8390334ca792b1ca1bb6d5f20391a243c2eaebc4711e311b2f4ad3607bb9f
MD5 8d5e829529597a2fe6894aa7540a613c
SHA1 425223f5b3e5e60b9165cc29f9544aedbc76abe9
SHA512 ef9697d4a1aa00a5e67fbdc556dcf72be019e95e25b201c9bd0d7c6a1ee0343e11c09639030786a5af6f146e4d03c5950aa2eec78ee20b8f21a16efc5dc8c716
TLSH
T122E02D72F24C9AB4C28BC3B68C6C0522D9C7A2E0A1880820F004BA4606D3C42000AA4C
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_custom_stream.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WNCRY
Size 312B
SHA256 4d3367b8d3580ca354c519970f3cab4ca1a5959571d0a086362082fc6844e9b1
MD5 a820e85ad36b8aafe2b7142f2af22ba2
SHA1 9bd256c048578518efcde494870c84ac7e8ed60f
SHA512 4cd5c325baeae04a1ce216ceff17482a78848c4f086f496e6035dca567fc999cd4c0a9a787bf71c3234fd6e157fb4028c974bd27ed33e6429db658a8c054656b
TLSH
T13EE07DE1C51CD42BE22E01FFA6D8B011D78666C4B704E186C3462842424543D4AC6865
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_exif.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WNCRY
Size 312B
SHA256 53341e37f50f8cd3b6a952a505d26321ed1470c78dcf12329ad876c74aabeacf
MD5 a188294379e83b5a19b8125be369eb90
SHA1 c6cfa97eb44a9583a090ae589a45879563949a8e
SHA512 f8bf7091c176a0118940e54eb49d8de01b77068a862010f49eff6944956b7b796a63bc7940aab7a962ce821dd9429160b7d43abda1d303f8bc546ff8526bd034
TLSH
T1C6E0E745C5505AF1FFA555F1CB0D270155A7F74D670505DE3744CD0BC30917F0457858
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_idx.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WNCRY
Size 28KB
SHA256 2f298d01aa2369ec645e6f94c384e5b7b7c655f8c6b46c5fadc3a73ec9facb83
MD5 6f550b84e24590b70da2566ba4f3a520
SHA1 53a350ea1a891472bfc0fc80a81c6dc36370d11b
SHA512 65d41263dfc2bf2f51f4f7e903937b6e6fece1cea0cb3a50039ce650415e28f8044831d38229f59d96271f22e3d9c589137dc798a0dd9d5cf3669e4cb4344e71
SSDEEP 768:hZ7pgojegrC/0fmBUENwDvNbfRrvVAP+4hwTQA3U4r06:Lqo3rTfgnSLNbfwP+3TQA3Us
TLSH
T1DDD2E108B4BCBE351A0E73E05E04249E98DD26C92E3DBC1CD0D725968B3EA4B6BC3549
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_sr.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WNCRY
Size 312B
SHA256 2989408f5d4d2b20c00c3e040b33e6796d64f91fee24e5663657223ef568a557
MD5 8c752a428d6ec1623f3f5b15a0c8ac22
SHA1 2c1eef6e0dd1cc46d102ee0ef8e4a82bdb037eef
SHA512 9e5f526bf1cfba0b6d99df5f86e94b0a4595dbcf7bde989a9e27566d416ace044a74aaab0ead46ab704348b88f8ee0e7b6cc48d057f594f0b91755150ff14c76
TLSH
T102E07D422E306D22CD18B8B904C491A294156B1E4C991940C3D44509DA856EB81A8D6D
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_wide.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WNCRY
Size 312B
SHA256 ebf41a4290d7ea0c9027d3185e7010def317173b78c44c75a90a3a228b3e534e
MD5 03cd6f5df0d801cf62f245f504bd7b9b
SHA1 d6d548cd0fc05a71550fbeae7e64c99087f5d2de
SHA512 fa277fb0ac14f1ed6b71a701e561743bacea80aa96dd7f4778d20184abb06ef29f1232ab39a7befa9f210f657adc9c3cec3292f2ccddcb6e45a70686f471800a
TLSH
T1EAE07D155D16D968C1A44BBA3DF0F158C4CC9BED6304D513BDDBA420A6AF2569C70F12
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_wide_alternate.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WNCRY
Size 312B
SHA256 963c5145f6cb1b1128c9b2c0fdedfbeaca8e8b467a19306262f4acce6e336777
MD5 d6741100856ea8f1f5604c556cee720b
SHA1 7889b4d691ce4fae32037887deae2927a57b98b8
SHA512 5ba196eed4da8e97694b87a711974a0ad3f0f8e5aa6a97503f104781283e643006267ce7144b1c2f81db30da6e0f618b359115ada7680e54d5b11fab83011ebc
TLSH
T168E0B731121FE20DD00F10B425C948F81BC748E0338012CF14445C501D0F060842F18D
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_1280.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WNCRY
Size 312B
SHA256 bee4b80bfcbae3e23e2e9e4e5a8490f56a39b9f37828a511dbbc227a38a9c037
MD5 c79ec0fef6cb738217244a2a76de78ff
SHA1 ae2a38e970a81eb7b21487fdd5e65ed318e4db27
SHA512 8a5dbb082d165329a3505f476d2500d664c344084e3eca268a5ce91c2ff83c30943b0972e17d7c8f0e35402e6cdb1669649fea2bbbb69da3aa762faee8b332e2
TLSH
T146E07D1533B6A6D0D60D135B84D75A2106AEC316B60912C6A80B482744D8109907915C
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_16.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WNCRY
Size 312B
SHA256 f2197ee6661b7d8433e3fdd9577cb2cbf14f841ac1e14abe27a8a824e8582c1a
MD5 5d32619ad31efe94a8e0b8268402cb01
SHA1 d4abc5fc7b450dc60b695cae829f49702f69297f
SHA512 5259f55d34548655f16ccf4f90c15a7edfa2a88503073e09be5e9f754c694f5c24989733a5140a4c84a5743925011b55c49193095fa5849908acdc844679e9c9
TLSH
T18EE07D60A810CDB5EA30D631F6CA4161E8DB201275278AC4FDD56756E35918F0E05971
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_1920.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WNCRY
Size 312B
SHA256 cf2b15139dd6e65ad81e1118fd433b49754fc055003d3041a56463752377b2ec
MD5 ef5125ddb82a3214d4f4ca284390b0b4
SHA1 db259b276e975b30f8b95e4fb20edca1b52a1d78
SHA512 0b5ff0f747d8a70429fd9d8a3c7d994eb3b9090f35b0fa22982e2433e7561caf6146a37e9bd1f4d57550d358ea51a3b9d136d49eca24032dba754155c1b73988
TLSH
T1B9E0E7659B5C7D2883A5463410D41CA79374DD75F89D61703AF87D501C150F712476FC
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_256.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WNCRY
Size 1.0MB
SHA256 210dccbf6d7ae369ba0c8dec043a0e527027c524cf34ca7562a68f3b1c07e13c
MD5 0eedb043a9398268e5a7a435a55c902a
SHA1 b260b41d9ebb7d96c3774bada56de1906e48736e
SHA512 88344891b20a3fb46925c4f4ee646bffd6b59e9974a022b905595e374d839d8969dc3ac0e628dc29f7c7c66b33de48978047bdc55cc8acbb2ab16662df9850a5
SSDEEP 24576:0NPKQSJ0GabXfSu/MTixIAhQsf7RsatdRGdxVbCn2:aKQSSGarquPuyQsf9btdUdx1Q2
TLSH
T16A2533AFDC643CFF855C678D920FA9672DC522C4F9A534919C0EBD01D84B36CA7A0A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_2560.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WNCRY
Size 312B
SHA256 be43cc1656bf8df5cf0bb856818202e2ed827047f93c755ea813ec9e7554801f
MD5 c4d9c5e9ac9394ce5f966dec80fb30ad
SHA1 f2fd15193193bb2d49539eecf41889dcc8598b49
SHA512 d5aed0b6d112c6e7e2353b252d753396285c59400a7391997a248bf382e1a2d235c8a6d07a111fa31140826934c1a693acecdb7d2353fd82fac367d35f5b9714
TLSH
T1E7E07DCC8E505006F988B2324F7A044F952D93697E5305218170D585D048B6F083D178
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_32.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WNCRY
Size 1.0MB
SHA256 4787551ef91f59bd84bf160ca09c8bbdbb325f3dc75e1e23f565bbd41b6cb31d
MD5 d7e402756c8b4124492a663dfe303e78
SHA1 9d177c7db405b96705cb9f6b2f0caa2244163ccc
SHA512 f9678a2e8678f4a1f5c489ecf97d37f94798d38983fa111db5f4d85a8286125b8947f9ca2d77abf81147e74f98053a64093dd0a3c4e464cd7c16b09f46158fda
SSDEEP 24576:EXVfSzVw7PXnNu0APh9BfVH+I88BIQXwsgg8hGh8Pxsh:eVfSzVwDNu0ApPfVefjaF
TLSH
T1EE253380B63F3651DE48EF19E6E5F02A81691CB8CD177EF861D300456FEA9A6F0E1748
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_48.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WNCRY
Size 312B
SHA256 a4368b25548c8bea26cc4992c0ad33ce2b5793606c6cbf4f474b5cfd0afcc4c9
MD5 93db5d85c1b30254ca2bcd985fe84609
SHA1 c29556903e97770a81fc35e5e6228683eb455b40
SHA512 8a013228911788e30338b1452229b67d8888314048c2fbefde293d5d3dd9334d31622e2ac025560276b2ecf4d41f0aba4b662c7914ed05ded0f05ceff961c326
TLSH
T1BEE07D91D6D19C01ACC84DFC582C9A4A08A951491CF069389593D142C7A1B86C559085
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_768.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WNCRY
Size 312B
SHA256 7b22dd9412f21deb6df95d4c2da9e0389fa8d81f3f2926a28fcde02c69b6aa45
MD5 1179f0dca8699cee3c2d7b1a5858bc52
SHA1 4deaa682b526f263fd34e639546c3a9cf3843fd1
SHA512 48d7778b84e9163824ea2426ab024c9456769cd0e5ef8cb53b8a82e78c113f5bd99bd335c8af930c31dbcb797bc3715b09bbd347ab943cac71c0afe21b19b4d6
TLSH
T11FE07D4A84F9E31C8108B171E17A9463E625D1BE9E20E64841354DB108CC4FC893BDFC
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_96.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WNCRY
Size 312B
SHA256 264818007786cf45afed62a9851139741c1187fc8d63e2a27a486b7c0e56b92d
MD5 1db9fe279b44b6a85d610525cef41472
SHA1 0b0cebab279a3b276c9f33a328ad1960d1a12874
SHA512 d3934bdfe46dd59077e10fdbeaa5ef3b4f20dfcff478554d09439e989fb69df16c443ffb2032f7e09891cb1ea2754fe9386207fb65670c15a6f47ac239a02ce3
TLSH
T130E07DDD2741361DE55C3238719360735591A295D49465F090DFBB0D14EFB440148851
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_custom_stream.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WNCRY
Size 312B
SHA256 9144e285e8c904e08ccdaaf9a25404388dbb577620af8d9d6d066891314ba023
MD5 f7d2d5adf81a2ccf9120cf41cff02b63
SHA1 03b2ab9d666f6b30297b2a1c3ac9cae4e4eb3ce7
SHA512 73433abcfa017aef941c9e6ab9b69a348527baa9d65a6f92b28f910e0f46b24acc4a2b6a313e6c2c5b1019a1df5f3b7eefc85a9e64835b3926ebc4f729b30d13
TLSH
T1D3E07D804DC8F890E5284CB606A9BFA2CB5273ACC9723ED045D6C52382E58CB5B8F0C3
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_exif.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WNCRY
Size 312B
SHA256 9b21047d7c4ddf39ab205584e4c9020539fe2a174e503e0dcfbad8ca3bbf70ff
MD5 01c3f278823f2ffd1dee7f7c441ef81a
SHA1 b1c5356fc5b423101502d7f2d6a8e2a7ced51eb7
SHA512 205549b99c6367ad00ebaf159f8a999513a4a26d42dfedc9a33db8675f89246258a78cb6789ce2357d860172788eafef86bd5c9e63cdea4285dd664ddb5a2f23
TLSH
T1C7E07D0F46C0482FC01BCFF0C65A66E39794274427218EF75045B10490B11CB6579F16
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_idx.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WNCRY
Size 7KB
SHA256 d9abf88c8ca87cf6398f52071d10c82fda7d29486c2b749f2c062b7721b05ccd
MD5 e4da4d1663a325b95f90e1ad4f12dc8c
SHA1 4a274bc8b710a00fb51fc31ecab5300c4123b25c
SHA512 6e86d623939e903b6143b5cb81937c725b8e932961e4d7d9a1face6de0d5558e9eea0f86fb98633b61f6a5ab22b6de43ef32fbede6e86a3c54cd1b16739b9587
SSDEEP 192:iYMQ1b4sXMyBS8fFw/Lh5CI+nUY74I3Be0U9aU:iYp1UsfRfMF5CI+nXn3BlU
TLSH
T184F1BF361187DDE601FD8E1E1BFC82EF017118A9C76B7D72E74D4A4663A8ACC3391404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_sr.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WNCRY
Size 312B
SHA256 22bdc930533c5992bcec230494525f1f1026a3935db81c15dae2c98f3244703f
MD5 acce9b4d98ba1ce6e9beb273592f1745
SHA1 cd6de1da4062553aa3c6e3fd5d43e49020bf0073
SHA512 0e2cde413b223746e8d84718b260762be4b0d2287d25b93e480dc926f99b29a0c656f2c5eb7063c20743b61f9323abcf9b0e25e050140c4d29054ed45b050c4d
TLSH
T105E07D6E1B0DD298C88AF5BCA2071C7409C34BE988CC68A0F177A8820E212B2866D104
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_wide.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WNCRY
Size 312B
SHA256 537c86623c4b1709d610c99ae8c2a5410d0ab6ed98fcaa7c61ac830c1a608b7f
MD5 4927cc666dc143db07217c7c0cca2f08
SHA1 32de85da6530030daab2fb738a414623a8b2df9f
SHA512 4461df7d09ed434bc14a565f6067b42b2d4969f2bbbe5815ef2f78114cdc20527c3ea3c52ca2b48396577fd8afa101d66ad80d680ef046dead9494dff67c4d72
TLSH
T1D0E07D9AB446A274E02940B5BFDC4E462645720486161973F5825815704597D206362A
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_wide_alternate.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WNCRY
Size 312B
SHA256 00c386ee6ee03322fa8eb892fbfcc5b924b1d8f37450331304199beffe0bc4f9
MD5 890b92ed8a1319a15246907d53aab97a
SHA1 2777d82fc4932a5b6a0a46b4e764eebddf930870
SHA512 960c7111959e9aaba0ce8fbb77938bc47f202c32ab553c489bcfc9a2d8e1bc7ea26920458f995340b1d7e37cda3d6a608cc839b44035c84e88aa4d20fa75e05b
TLSH
T15FE02DD03B6049E8C3974C2690CAE9230F4F2110323143C6D58E698202F6C8C024F290
MD5 SHA1 SHA512 TLSH

Submit Download

{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WR34X31D\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
Size 6KB
SHA256 64031ced3c16426639b827ae699e49ed7b1fea24e13f8a211cdbce80112bec8a
MD5 b95829a6b5602149b0da5e08a8bea198
SHA1 afb3c2671c532dc7663fd3261739bb06017885a1
SHA512 09ed04ad5a8d2ec592e2598ef0f3b560349edf1464f2393625e3e80bc3c1a33964c84c12800c9dadb4c3e6d261a6fb5e6ddfedf730fc6b098901edf474ec1db8
SSDEEP 192:ZS0yGzzBjOYX3AZt06wW5O3O6khmTrsA4CzwoRNf:ZSZGzzsmB7AQyhRCzwoR5
TLSH
T157E19ECDD98157EFA2D092B0627ECF9C48E28CD7E4422345DEFD0A198229B586676E42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wpndatabase.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WNCRY
Size 1.0MB
SHA256 a914044d03d01ddea8d7b36bd04691539f54ab72a12397c136fef18e1a45a5c0
MD5 e319f255ac03911a1ed46a968f747c52
SHA1 2a59db1b636036870b37cde8f3fffd2cec2c87fd
SHA512 423b3c98a54ceae1d64f9346e5ad8ac0c3a2da144fe80e9152219d54b703404cdd8449dc5ab2ce5d562c94b84a9bf74306764a0cc7e150b174b8c3a73c3141fb
SSDEEP 24576:IbdxYL7mwZkymsIhwoStiFyonr9VNOrL0X+Yja+UXDuV/d26eeCZ:IR2L5m9xut4j9vyL0X9eyXDM
TLSH
T10A25230AB9542339CE71F8BC93228899FF92413E5D3921AF1654E73A450A876CFB6DC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\appsconversions.txt.WNCRY
Size 1.4MB
SHA256 fa98ea640405d11918c95de617904fc034fde551dd362262f341d46082b4456d
MD5 8198be2875a6bb41c99428bf2b9557eb
SHA1 e8509c10f9333ce4f0c601da6306d8e2143194f2
SHA512 80eaa452d5b025cfecddf24bc19b0080bed78b0bfe9a66a0ac7d7cc00b80193a29775f3e4f9b1813b5cc62e570eae3f6f606d6c48851452460d9d16a16881b62
SSDEEP 24576:/oPre9/FaC1FNjngB/mmxhGVEAXyXLaNJl2Z0ZHrVRT/pZpDrfl:Irc/8ChggVZXyXLSgUrpDbl
TLSH
T1DE6533EA26FE4CF2203D12ADF9E3EE619D51CC574175EE920265838DE6E2B1D731E240
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\appsglobals.txt.WNCRY
Size 331KB
SHA256 685b0f666c08dbce51ac8f39536c9c068ce9256a7af2a1a1d68c6dbc33f0686a
MD5 7616785089a7e2040aa1c5ee9f3b05b7
SHA1 ba7ef84b6a3c3e18076abca354c53e720a717d3b
SHA512 311ee1da430ac9619ca6666e8c48a6d8331dbf6c512008ef78314cd5960b9524778d667e190614f959fbb4cc8aa3a1ee78b100259f7b2b3f1389d7c6d13b9cd4
SSDEEP 6144:SXBn/IfFH/p4zkU0jYV83g3v/Etru5HXoM6+uTf9L9jFC:un/QFHObAJg/giA+ufFC
TLSH
T1077423D9DBE99B866CCB8C5CD709C4303B4538BCD80499F2527CADEBA0788369745B5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\appssynonyms.txt.WNCRY
Size 374KB
SHA256 6d994f13fc83456ee9a7b04ff96b2c64655d0e6d3866f610fcd91d4b86a8cd32
MD5 3c037d5f1ec4d4d42712d65a032fe716
SHA1 57ba3f5d8828129c41537d0fddf83f2e41fd46a8
SHA512 6fad29ca5626647cbca7d7a890c69bb17570f70582c16ea59669da8ab2f7fcfedc30b6978fc5972563a5cfdf3f95ab49953455394a36c9360a983fbffcd26f70
SSDEEP 6144:VxZ5mmCdJWDFpb77CM5SnyGDr/F9vzsK6qm/2pqKRPENkQHr7/U6YSwOXq2:V19C7WBpb77NonyGXF9vz3YpkUr7/U6x
TLSH
T17984233E32D56DC7D9EFB1D0FE5C2B0A7013A945A0B283C88FB31C75A781966D41399A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\settingsconversions.txt.WNCRY
Size 520KB
SHA256 de2a02c611ed8607f43ab9b3ebc5b5fb2d7110863213a9e9c1464dbd64ac5539
MD5 025d5ea221f2d036d3775e36e9dc06b4
SHA1 a0d5434d57bb5d2b45208eab3d483d0aa3492fdb
SHA512 6a26d7d538cf60e1dda3fc1417f2b4695f2846089dde3b8db856962710e9399a314d86ef80c5982a03708a04444468dbcc6f34ddc109e45cd2fd0c07871e0d6a
SSDEEP 12288:WY7R39izWC3HgXCU7wc/nOLmZhLBWwry5A6x/:F139izWMTU7j/nOLm4DH1
TLSH
T134B423410F5C8E3710255584DA8B8F926EA90728D1710B2D57FEE4A7C2EDC49FA2F72E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\settingsglobals.txt.WNCRY
Size 61KB
SHA256 ece9c79e939dc6c2a0381781e44ef250ea78862cacdbf94a91234249604cd750
MD5 18c3848612579d51eb6e58005a782cab
SHA1 07398eb7a335326d8abcbc77c8b3c9e22890f8b6
SHA512 0f7c4aa9bb51a56636036c24d164b892f1fde0cd4269e9acd3ae4a7469fe2fa759d3ae0156226f3da52050de24bc3c020c9a595614a7e7cb4f3172c40f3e299b
SSDEEP 1536:beQo5AxqlJ9LtuaoSfaDgPCo/U8W2RKtYXCFR:beQUgK3Ea5S3hPpX
TLSH
T19B53022183DE94F9926EEB7C4942232EDE50119DE9CD9AAF5EED02B15DB7F87700100D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\settingssynonyms.txt.WNCRY
Size 125KB
SHA256 e2c639ed82f05ccfc7327bd22ee41e8f134897659680bea713cf4e076af8e530
MD5 fcba52fbc24a1b847aed41d799b18b1b
SHA1 58dadd6277088df9fd90a3cc6bacd72942f55ba6
SHA512 21703c564520374d9bb12d95f964dcbe0426a17413baf945d3b365d3ed51f7a222d4559c900671599f1434ba0639bb5ef7262d0c6d1625e4c9c00a2335e7e2b6
SSDEEP 3072:L0W2O/LKFJ+uIxTcPr9yRkiG22ZfEPp9FAbz1aW54SOj:L0Nt4SD9yRxu1EPp9+V85j
TLSH
T14AC312D7E110E6BA37FE613F26A821854ED8281EB367C751E8250D949D3CF3438AC66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\appsconversions.txt.WNCRY
Size 1.4MB
SHA256 6fab0e093ffebf94d165626ba96ee0b1872f2fb3630d9a9c1445f9f51276b0c1
MD5 14a1eb008cde89177150a913dd012385
SHA1 284ae27b854ea4bc32648dbc4e0ac9ded34068c8
SHA512 e29b32a13a71f089f1a73f4b4f2bae54938611b85a87ee27ed6442efce7e34216bf86e2c44d8053f9ee97f5a9ecad61f5613f8238d39c26df52cc438d8211c7a
SSDEEP 24576:GU8320lx+e1k/NKeBVSirPpBtdZED2rIkJGIRPlWm1M0ekLUvk4Ak6pwXsHuvxmw:c32KbyAer/rRBxXMkYIRPPMBk4susmx
TLSH
T1BE6533B008B54E1CDB9AAC27DBF6203376516AF1BF12D1E03CBFA796021959D8F16B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\appsglobals.txt.WNCRY
Size 331KB
SHA256 b21c87866a068b2c53e76c076ac8c41669c556d2087a2f8e2202be1e6a8b9e25
MD5 b4b3eb3c45a0830904b6cdd638cd4fe2
SHA1 e6e3815a9e1b38a036d1a5321ecbd2302fbbe201
SHA512 743bfbc123e0d0fae271e5c8230890f566d098d90fe50cc2aa91dd5787f1c768020a2f3118586bbd6f1a3b9333170299a5ed51d669bcbd734a8e3eebca09b0f2
SSDEEP 6144:qXweYgs75G/xH/L17r7EgagDxhTUAfggz7XR17+7PGsfyhAgCJ3RCFuIcEmjkUZg:4qRNCT17r7VPlf57XRd+nKhd63suvEHv
TLSH
T14574232F925E391BD9B6C919DFBC0E0202BB73292F11557A34E9509B44AF4E1DA23E4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\appssynonyms.txt.WNCRY
Size 374KB
SHA256 445cfd1c7a8ae37a3fe5fbdaddf6dc9653d25e17cc1e4b27cc1399e75adeff51
MD5 c13024ed0a47b3175c07ff636b3cdf24
SHA1 39b587def586db89b33940397aa3264ff7850608
SHA512 3171136ee2fd9465b09ea3a21ef33fcd4157fba4ce4943bc11d438cfacef539f6cd54f27277ed2369e8e4e197133defca100cce268547091c1c912efe93c065d
SSDEEP 6144:aG8wO0qnNpXd70kPNx4uWHTVmG1dxQNR6V53dGm04YciJlN4Y3mtBVCzVVy9b0Ti:6fvvd7hPNjHU/IR6H3UmviJf4Y3mtBVZ
TLSH
T11A8423AD045FE8C781991F348D37E7C935E528AB3CCDE4920A7AF48B885387B19D4939
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\settingsconversions.txt.WNCRY
Size 520KB
SHA256 ba1bdf32c92ed36b1f23b58c9a784b9742a6d2471d7face01ec0f82bb18ecb85
MD5 296900340f455b95ed4d837d86610aca
SHA1 06fe293a372af8442be44b3dd109dba1824d7c6e
SHA512 937ddd6c57a2bdc3d0026c233a3c88efb65e0ea5ebffe93947a19a10068d18469a2203a726426b68758075ed03307f7fc8f563629931bb6ba105efbeb87d5f73
SSDEEP 12288:SyaSNJR0ehJsZhaDH6mi7nuz2nQZQrXeaDo:SHkJiehJsOayjV
TLSH
T1C9B42303EC9A1921219B8E557EE177BE259317C232D0AD1CDDB483A5884B76FFC1F84A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\settingsglobals.txt.WNCRY
Size 61KB
SHA256 af7620a42b9aaa035367398987b2927919349c892f92ac6323ec14dfdaea4045
MD5 8016b873f755c55c0c930029dbf758b4
SHA1 f155ed7fbe7a1d431e289690a7ed76963850eff3
SHA512 f2853935c2005780e7362e21fe01f0388a748c25136d61a89051945b9e5acb0ae7ecf3e2d6adce0a043daf8c1c8837fe58f7be2e3554cd1fd77dd7426fc42c4b
SSDEEP 1536:MiMyHDwlrDJ6m8rPiobD2PS3McKvl+b3VTbYCzHqQcZdF:6MD+DJ6moqobCPS3MzlUTbYGHI
TLSH
T18853027B15F6AA3F3864638B1D78A9603576C973113734BB8C28B35DC715216540EEF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\settingssynonyms.txt.WNCRY
Size 125KB
SHA256 e4a735bd672c2472c7e2fb5da3066f75982bc5d420443d054f50061bdd783d17
MD5 c1420ea1ae1381ff73f943a7fc7cfdab
SHA1 0f867df9c2a7d083ec408fe4a637ae6889321fd4
SHA512 cf3cc70c01e03a7712832b638bc83b79913912873c5ea3fb9baef62dd8732965e21426fb99e605a60d4bb3347a456536016864e08146e32239a4d50e090fcf39
SSDEEP 3072:MM7nJUwGjWImPp5CeLVTtDlySsucF7Epv6utiS:X7nJUsImPpLTt3sBFwpv6HS
TLSH
T170C312571A823A3185CB86B9D73D28891496E398A0EC0BD3D4EB38DC6170E14DD3DDAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppsIndex.db.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db.WNCRY
Size 1.0MB
SHA256 eeff24afea038c0d63aeb5faca64928f34265d83be3a3efb0c3e5505074e8a44
MD5 026b0c1cdb0204ccac96e352b81f1ee5
SHA1 388929301ed5ee7d07128d5908d8e003a584caaf
SHA512 5c5c7564702e625a77f2ecd6ea07510b732e7cf2b5bd469bccc93454c047fd15fc09455d7c1b098e1583bc6a940570dd282b34b9a9691eb783b33280845d5c2b
SSDEEP 24576:OD3us2jNfwxGjdjxoVXHFInD/9o/JVCdJPv8sM1GvD6wa3CT5Iej:OD36NfU6elHFoD/9o/PCHvZHa3wF
TLSH
T14B3533B83CA9AD56B2772A77AF6D034F533863B12F0F656C683A77595C23859703C280
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.db.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db.WNCRY
Size 1.2MB
SHA256 2d1bfbb1c100e43399baaf0ba182224b235290c51c6f9c0670d67a8f3f5a1d5d
MD5 9c4af7c9e3384d4007043f754fd39fec
SHA1 57c3ebbdf0f864670bf483381a9ad7ad4bccdf8b
SHA512 bba01eaaa5e24dc915bfd1e96d411a090e7590793d1d903ab4926f92c86319e07fe40a032e583a6806880caeed0dbba193363d6aa6969aedd7c9f217509107e2
SSDEEP 24576:dVfy9kPxMcF3Lifhr/HpFy7kblriQPsNNkm6Hh5eMJpL5lLmxds6f+:d5y9uxMcdLKhLH2obl9iNv6HHJ3lbx
TLSH
T1905533B5A9DCCCE55E5505148B5A09F2732DAF025D2320AF063EFBB98433FDCA118B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SettingsCache.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SettingsCache.txt.WNCRY
Size 575KB
SHA256 c9cd20c270a903f57b91f533ebdda9f6c213048dbe1ce4e39d81c322b2467560
MD5 92e66e9fe051e5440630efb22fccbf2d
SHA1 e1f12858bf8c5b27b7fe622ff3ea19c7182de145
SHA512 cd3d8aa802ebb3f1189567a5e84902bb4407c79cec9d1fd64b0c3e10fbc0d23e9aff23c5603dc52779b199f903f97c5925ef4a4b8880b05c2386c7598360c342
SSDEEP 12288:+gAsqTRcGuCsGUDUZlDTp7v0UwYujAv2Gkq438FGWdBIM:+KYUCKkRD0DYu8OGD43YGUz
TLSH
T1B5C4231ACF21961F80B96441ED6C2CD64BD122A3F5580B5ED3E12964AD7EB24FD023FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000000.res

Path C:\Users\Admin\AppData\Local\Temp\00000000.res
Size 136B
SHA256 72a1e9331678d50c3cd204d56159e5fa3cc815855468b4c71539b85c88012a9b
MD5 ebc3eb7d4b93d1e6bf99c95ac53c4e53
SHA1 b6a9b18a6655bee8c3837fbddc71e3e93d3de63a
SHA512 b89f73273febc14484655e3813bc5466182a899ae79be6d943fe829ad49bc2c5be9e0db8e4b6cc060a6d2c477770fbf0a5f43c5f54881669d923b01c36e93b9e
TLSH
T1E2C004C5C00C5150DC174530D30CD101D4075C31700F017D504D0F4F01D3153100C071
MD5 SHA1 SHA512 TLSH

Submit Download

101831791553532.bat

Path C:\Users\Admin\AppData\Local\Temp\101831791553532.bat
Size 340B
SHA256 4e25c23aa5babc853889d3e1e79bb01ca7650837b250314a8d50f2e2c4b6730f
MD5 3867f2ec82a7d77c9ffefb1aac8b7903
SHA1 06fccf19b9c498b5afa2b35da00e3ab28d56f785
SHA512 b413994e5b9f0ecb956055c7befff14845b56bb658fd8280d3213fdfa175ff76bc56e082174f2475fdf2d1f9eff618ebfd80ee2b67c091eaf1fd9c94697da5aa
TLSH
T11AE0262BF88EC26A07410247083B81FCC4B10859278BAE14C733D90828412DD7B5A003
MD5 SHA1 SHA512 TLSH

Submit Download

@[email protected]

Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
Size 933B
SHA256 4a25d98c121bb3bd5b54e0b6a5348f7b09966bffeec30776e5a731813f05d49e
MD5 7e6b6da7c61fcb66f3f30166871def5b
SHA1 00f699cf9bbc0308f6e101283eca15a7c566d4f9
SHA512 e5a56137f325904e0c7de1d0df38745f733652214f0cdb6ef173fa0743a334f95bed274df79469e270c9208e6bdc2e6251ef0cdd81af20fa1897929663e2c7d3
TLSH
T1C311106EAE2972505BF284623939E497E602412F125A02A379878274237C17F1AEB0D8
MD5 SHA1 SHA512 TLSH

Submit Download

@[email protected]

Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
Size 1KB
SHA256 2a436d0202fe42efd39f5940523d542da9e06d2029c7d61a457a7bbc35b72c5c
MD5 6bcb364d00af5b2d44aa51bfd97c5d7b
SHA1 2029731c327d238e34526351d64db527da8aaec2
SHA512 4075f9d9bc5c775d252179eb66c73bd5c1a8160adcbfe6a269e63f07a704443b833cc5555b0464c7608cf275dac31b46b5225f203c4abcb97f4c864741958285
TLSH
T1161156020FC72F62CBA5C97F58FB2319C175B444A74B9F18C58392450832B137E44B2E
MD5 SHA1 SHA512 TLSH

Submit Download

LIBEAY32.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\LIBEAY32.dll
Size 3.0MB
SHA256 58be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19
MD5 6ed47014c3bb259874d673fb3eaedc85
SHA1 c9b29ba7e8a97729c46143cc59332d7a7e9c1ad8
SHA512 3bc462d21bc762f6eec3d23bb57e2baf532807ab8b46fab1fe38a841e5fde81ed446e5305a78ad0d513d85419e6ec8c4b54985da1d6b198acb793230aeecd93e
SSDEEP 98304:W5FYc9YouOquJVqrR1LlZRUT83DlJrqd+kq:WrjYouOquJgrlZ283xFqdq
TLSH
T17CE5B712E4930DAADD576F7086C9B33F19A9E9044A32CF7FDA10A71BED076C9060D729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSLEAY32.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\SSLEAY32.dll
Size 694KB
SHA256 bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1
MD5 a12c2040f6fddd34e7acb42f18dd6bdc
SHA1 d7db49f1a9870a4f52e1f31812938fdea89e9444
SHA512 fbe0970bcdfaa23af624daad9917a030d8f0b10d38d3e9c7808a9fbc02912ee9daed293dbdea87aa90dc74470bc9b89cb6f2fe002393ecda7b565307ffb7ec00
SSDEEP 12288:hXhKnXI0Fkw80VEJtzwIA6Ouah6ESyrWlp36Z:thKnnkw80VEJtzwIAiazSxlFw
TLSH
T132E4D650E5D74DF6ED425ABD85CBFB1E213CB6400A36CFA3EB10963AAE13AC13644719
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libevent-2-0-5.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libevent-2-0-5.dll
Size 702KB
SHA256 77a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f
MD5 90f50a285efa5dd9c7fddce786bdef25
SHA1 54213da21542e11d656bb65db724105afe8be688
SHA512 746422be51031cfa44dd9a6f3569306c34bbe8abf9d2bd1df139d9c938d0cba095c0e05222fd08c8b6deaebef5d3f87569b08fb3261a2d123d983517fb9f43ae
SSDEEP 6144:Ir2r5rFriGKbgai112Yq/5hcQTcGzAHzSHeqoftOEEdD4B2pihSpKOKm:naiV25uQTcGzAHOEW+Pzm
TLSH
T1CCE4D860D1D38D6FCC8326BA868EAA49A1B8F6444B22DF0F4F504A35DF77BC09765316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libgcc_s_sjlj-1.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libgcc_s_sjlj-1.dll
Size 510KB
SHA256 9aeccf88253d4557a90793e22414868053caaab325842c0d7acb0365e88cd53b
MD5 73d4823075762ee2837950726baa2af9
SHA1 ebce3532ed94ad1df43696632ab8cf8da8b9e221
SHA512 8f4a65bd35ed69f331769aaf7505f76dd3c64f3fa05cf01d83431ec93a7b1331f3c818ac7008e65b6f1278d7e365ed5940c8c6b8502e77595e112f1faca558b5
SSDEEP 6144:+ymz8Jq1p95avGpuO+/jUE8ADu2kNBMY8KHNygoB0+6tMqSsVwvN:+ylSZ+/jU7ynIK5Bb6Y
TLSH
T114B45CC6BBC6DDE7E80202754DFA531A0738E55052C6CB9BBF04AB3D98433629FA5784
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssp-0.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libssp-0.dll
Size 90KB
SHA256 f28caebe9bc6aa5a72635acb4f0e24500494e306d8e8b2279e7930981281683f
MD5 78581e243e2b41b17452da8d0b5b2a48
SHA1 eaefb59c31cf07e60a98af48c5348759586a61bb
SHA512 332098113ce3f75cb20dc6e09f0d7ba03f13f5e26512d9f3bee3042c51fbb01a5e4426c5e9a5308f7f805b084efc94c28fc9426ce73ab8dfee16ab39b3efe02a
SSDEEP 1536:pEiL38qIuOFcErNX5d0tRCZiBP2DrbjgpfM2ydbv:aiLsqIHFPpdiU2q
TLSH
T1669318D6BBE6ADA3E911133F46E68319073CF6D04BC38B072E31A93A47572917F85606
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskhsvc.exe

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
Size 3.0MB
SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
MD5 fe7eb54691ad6e6af77f8a9a0b6de26d
SHA1 53912d33bec3375153b7e4e68b78d66dab62671a
SHA512 8ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f
SSDEEP 49152:5m9/gUvHrLaQ4Dt4PC+3xhae2cQX7E5zNvQIJZW/1h4+o4:MiuLSDt2C+3baAQX7ETQIr+h4+o
TLSH
T179E5E53C8747D0B7CC8137B15606A4EE27A07BB0D4B28D1EDA6C1C48E737E66C66A356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib1.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\zlib1.dll
Size 105KB
SHA256 66d653397cbb2dbb397eb8421218e2c126b359a3b0decc0f31e297df099e1383
MD5 fb072e9f69afdb57179f59b512f828a4
SHA1 fe71b70173e46ee4e3796db9139f77dc32d2f846
SHA512 9d157fece0dc18afe30097d9c4178ae147cc9d465a6f1d35778e1bff1efca4734dd096e95d35faea32da8d8b4560382338ba9c6c40f29047f1cc0954b27c64f8
SSDEEP 1536:NlN3sTKU7xniaO9ADje81EQ3aL8WNdUCqfRnToIfBoIONIOqbW+xCvETe:DpsmU7xaiDjeJL5qf5TBfgHqbdxCv6e
TLSH
T154B35DC1F68746F2CB770B7540C7A73FCA20A5028C34CEE7D28C974AD52B9626A197D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b.wnry

Path C:\Users\Admin\AppData\Local\Temp\b.wnry
Size 1.4MB
SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
MD5 c17170262312f3be7027bc2ca825bf0c
SHA1 f19eceda82973239a1fdc5826bce7691e5dcb4fb
SHA512 c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c
SSDEEP 384:zYzuP4tiuOub2WuzvqOFgjexqO5XgYWTIWv/+:sbL+
TLSH
T1D4655707E03F2FFDE2BE33F708C56DD9E111887A0B669933A769E299C505C50B412B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c.wnry

Path C:\Users\Admin\AppData\Local\Temp\c.wnry
Size 780B
SHA256 ef0ed0b717d1b956eb6c42ba1f4fd2283cf7c8416bed0afd1e8805ee0502f2b4
MD5 93f33b83f1f263e2419006d6026e7bc1
SHA1 1a4b36c56430a56af2e0ecabd754bf00067ce488
SHA512 45bdd1a9a3118ee4d3469ee65a7a8fdb0f9315ca417821db058028ffb0ed145209f975232a9e64aba1c02b9664c854232221eb041d09231c330ae510f638afac
TLSH
T1E101975030257C52D3B474B20201ECCCE372073899C2BAC7C0A2C820CF506729BE541C
MD5 SHA1 SHA512 TLSH

Submit Download

m.vbs

Path C:\Users\Admin\AppData\Local\Temp\m.vbs
Size 219B
SHA256 7fbdc49f4b4ba21949eca0b16c534b4882da97e94e5ca131cec1629e60439dfa
MD5 82a1fc4089755cb0b5a498ffdd52f20f
SHA1 0a8c0da8ef0354f37241e2901cf82ec9ce6474aa
SHA512 1573a0c7333accef2695efefe1b57cba8f8d66a0061c24420ee0a183343a9a319995267d306ee85084c95580f9855bcdf9dee559b28a200b27fc3cc353315e78
TLSH
T110D0A706D9CAC3AB474711431033D50CC8B10C283689AF204B51CE0C395250D5A7A142
MD5 SHA1 SHA512 TLSH

Submit Download

m_bulgarian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_bulgarian.wnry
Size 46KB
SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
MD5 95673b0f968c0f55b32204361940d184
SHA1 81e427d15a1a826b93e91c3d2fa65221c8ca9cff
SHA512 7601f1883edbb4150a9dc17084012323b3bfa66f6d19d3d0355cf82b6a1c9dce475d758da18b6d17a8b321bf6fca20915224dbaedcb3f4d16abfaf7a5fc21b92
SSDEEP 768:Shef3jHdCG28Eb1tyci8crbEw6/5+3xFkbP0vyzbZrS14e:SheU5De
TLSH
T1C42399664803B245C2631398FB1BF40A662AF42D86FC5494619BC2B76FBF87EB173417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_chinese (simplified).wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (simplified).wnry
Size 53KB
SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
MD5 0252d45ca21c8e43c9742285c48e91ad
SHA1 5c14551d2736eef3a1c1970cc492206e531703c1
SHA512 1bfcf6c0e7c977d777f12bd20ac347630999c4d99bd706b40de7ff8f2f52e02560d68093142cc93722095657807a1480ce3fb6a2e000c488550548c497998755
SSDEEP 768:SWjkSFwwlUdcUG2HAmDTzpXtgmDNQ8qD7DHDqMtgDdLDMaDoKMGzD0DWJQ8/QoZ4:SWcwiqDB
TLSH
T1283300E85C12579AC29312BDAE25F0883E2BF60AD4F5C4D970AFC2BB453EDBCD251512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_chinese (traditional).wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (traditional).wnry
Size 77KB
SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
MD5 2efc3690d67cd073a9406a25005f7cea
SHA1 52c07f98870eabace6ec370b7eb562751e8067e9
SHA512 0766c58e64d9cda5328e00b86f8482316e944aa2c26523a3c37289e22c34be4b70937033bebdb217f675e40db9fecdce0a0d516f9065a170e28286c2d218487c
SSDEEP 768:SDwtkzjHdLG2xN1fyvnywUKB5lylYlzlJpsbuEWeM/yDRu9uCuwyInIwDOHEhm/v:SDnz5Rt4D4
TLSH
T19973CDF80C066784D6B193A8AE19F4EA1C75F00161F49598B23BC1FB9A3FE65C359F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_croatian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_croatian.wnry
Size 38KB
SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
MD5 17194003fa70ce477326ce2f6deeb270
SHA1 e325988f68d327743926ea317abb9882f347fa73
SHA512 dcf4ccf0b352a8b271827b3b8e181f7d6502ca0f8c9dda3dc6e53441bb4ae6e77b49c9c947cc3ede0bf323f09140a0c068a907f3c23ea2a8495d1ad96820051c
SSDEEP 384:SheftipUENLFsPzy3EFHjHdb2YG2+d18Scgn8c8/868H1F8E8/8Z3m8VdAm86a8n:Shef3jHd3G2n+p/mZrS14A
TLSH
T110031FA804426359D39323D4EB19F0493F2BF51955E894D431EBC3BA62BFDADF132922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_czech.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_czech.wnry
Size 39KB
SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
MD5 537efeecdfa94cc421e58fd82a58ba9e
SHA1 3609456e16bc16ba447979f3aa69221290ec17d0
SHA512 e007786ffa09ccd5a24e5c6504c8de444929a2faaafad3712367c05615b7e1b0fbf7fbfff7028ed3f832ce226957390d8bf54308870e9ed597948a838da1137b
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2yG2gv8n8+8zfB8k8F8i8k1Z8M8I818E838C8A8s:Shef3jHd2G26nyMZrS14g
TLSH
T17A030FA90043A259D29313D9EB19F4492E2BF41D16FC84D432DBC2B963BF9ADF133952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_danish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_danish.wnry
Size 36KB
SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
MD5 2c5a3b81d5c4715b7bea01033367fcb5
SHA1 b548b45da8463e17199daafd34c23591f94e82cd
SHA512 490c5a892fac801b853c348477b1140755d4c53ca05726ac19d3649af4285c93523393a3667e209c71c80ac06ffd809f62dd69ae65012dcb00445d032f1277b3
SSDEEP 384:SheftipUENLFsPzy3EFHjHd02wG2roqni2Jeo75Y3kmA31dv61QyU:Shef3jHd4G2M5bZrS14Q
TLSH
T164F243A800421359D39313D4FB1AF4483B2BF91955E484E871EBC7BE667FDACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_dutch.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_dutch.wnry
Size 36KB
SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
MD5 7a8d499407c6a647c03c4471a67eaad7
SHA1 d573b6ac8e7e04a05cbbd6b7f6a9842f371d343b
SHA512 608ef3ff0a517fe1e70ff41aeb277821565c5a9bee5103aa5e45c68d4763fce507c2a34d810f4cd242d163181f8341d9a69e93fe32aded6fbc7f544c55743f12
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdp2oG2/CzhReo75Y3kmA31dv61Qyz:Sw3BHSWjHdBG2/UhsZrS14f
TLSH
T16DF234A80041175AD29312D8FF19F0483B2BF91969F484D871EFC3BD657FDACE622962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_english.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_english.wnry
Size 36KB
SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
MD5 fe68c2dc0d2419b38f44d83f2fcf232e
SHA1 6c6e49949957215aa2f3dfb72207d249adf36283
SHA512 941fa0a1f6a5756ed54260994db6158a7ebeb9e18b5c8ca2f6530c579bc4455918df0b38c609f501ca466b3cc067b40e4b861ad6513373b483b36338ae20a810
SSDEEP 384:S93BHSj2cguALeT+sPzy3EFHjHdM2EG2YLC7O3eo75Y3kmA31dv61QyW:S93BHSTjHd0G2YLCZrS14y
TLSH
T1A5F224A80045175AD29322D4FF19F0093B2BF91969F484D875EFC3BE617FDACE612922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_filipino.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_filipino.wnry
Size 36KB
SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
MD5 08b9e69b57e4c9b966664f8e1c27ab09
SHA1 2da1025bbbfb3cd308070765fc0893a48e5a85fa
SHA512 966b5ed68be6b5ccd46e0de1fa868cfe5432d9bf82e1e2f6eb99b2aef3c92f88d96f4f4eec5e16381b9c6db80a68071e7124ca1474d664bdd77e1817ec600cb4
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdi2MG2AGsi6p07i/eo75Y3kmA31dv61QyR:Sw3BHSWjHdGG2Axa7iGZrS14N
TLSH
T105F247A81041175AD29313D5FF19F0083B2BF91969E084D876EFC7BE657FDACE222912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_finnish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_finnish.wnry
Size 37KB
SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
MD5 35c2f97eea8819b1caebd23fee732d8f
SHA1 e354d1cc43d6a39d9732adea5d3b0f57284255d2
SHA512 908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2oG2l1glOmeo75Y3kmA31dv61QyB:Shef3jHdMG2l1AO3ZrS14l
TLSH
T1D50355A800421799D2A313D4EF1AF0483B2BF51955E494E471EBC7BA63BFDACF123952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_french.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_french.wnry
Size 37KB
SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
MD5 4e57113a6bf6b88fdd32782a4a381274
SHA1 0fccbc91f0f94453d91670c6794f71348711061d
SHA512 4f1918a12269c654d44e9d394bc209ef0bc32242be8833a2fba437b879125177e149f56f2fb0c302330dec328139b34982c04b3fefb045612b6cc9f83ec85aa9
SSDEEP 384:SheftipUENLFsPzy3EFHjHdtW2IG2sjqMeo75Y3kmA31dv61Qyg:Shef3jHd0G2smJZrS14M
TLSH
T12B0331A800421359D2E323D4EF1AF0483B2BF51955E484E875EFC7BA677F9ACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_german.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_german.wnry
Size 36KB
SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
MD5 3d59bbb5553fe03a89f817819540f469
SHA1 26781d4b06ff704800b463d0f1fca3afd923a9fe
SHA512 95719ae80589f71209bb3cb953276538040e7111b994d757b0a24283aefe27aadbbe9eef3f1f823ce4cabc1090946d4a2a558607ac6cac6faca5971529b34dac
SSDEEP 384:SheftipUENLFsPzy3EFHjHdN26G2VSA1Ieo75Y3kmA31dv61QyU:Shef3jHdfG2oe1ZrS14w
TLSH
T1D6F255A804461359D39323D4FB1AF0483B2BF51955E484E871EFC3BE667FDACE522922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_greek.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_greek.wnry
Size 47KB
SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
MD5 fb4e8718fea95bb7479727fde80cb424
SHA1 1088c7653cba385fe994e9ae34a6595898f20aeb
SHA512 24db377af1569e4e2b2ebccec42564cea95a30f1ff43bcaf25a692f99567e027bcef4aacef008ec5f64ea2eef0c04be88d2b30bcadabb3919b5f45a6633940cb
SSDEEP 384:SheftipUENLFsPzy3EFHjHdc2oG2WWDFFG5BwKeo75Y3kmA31dv61QyM:Shef3jHdoG2NHG5BwLZrS14Q
TLSH
T10823776408031646C15223FD9B96F4892A26F40D07FC50D5669BC3BBA7BF9BAF163863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_indonesian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_indonesian.wnry
Size 36KB
SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
MD5 3788f91c694dfc48e12417ce93356b0f
SHA1 eb3b87f7f654b604daf3484da9e02ca6c4ea98b7
SHA512 b7dd9e6dc7c2d023ff958caf132f0544c76fae3b2d8e49753257676cc541735807b4befdf483bcae94c2dcde3c878c783b4a89dca0fecbc78f5bbf7c356f35cd
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdY2oG2pq32eo75Y3kmA31dv61Qys:Sw3BHSWjHdUG2pq3nZrS14I
TLSH
T1ADF255A80045175AD29322D9FF19F0083B2BF91969F484D875EFC3BD617FDACE512922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_italian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_italian.wnry
Size 36KB
SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
MD5 30a200f78498990095b36f574b6e8690
SHA1 c4b1b3c087bd12b063e98bca464cd05f3f7b7882
SHA512 c0da2aae82c397f6943a0a7b838f60eeef8f57192c5f498f2ecf05db824cfeb6d6ca830bf3715da7ee400aa8362bd64dc835298f3f0085ae7a744e6e6c690511
SSDEEP 384:SheftipUENLFsPzy3EFHjHdR2AG2c/EnByeo75Y3kmA31dv61Qy9:Shef3jHdJG2cQZrS14R
TLSH
T1E0F254A800425359D29323D4FB1AF0083B2BF51955E484E875EFC3BE667FDACF522962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_japanese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_japanese.wnry
Size 79KB
SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
MD5 b77e1221f7ecd0b5d696cb66cda1609e
SHA1 51eb7a254a33d05edf188ded653005dc82de8a46
SHA512 f435fd67954787e6b87460db026759410fbd25b2f6ea758118749c113a50192446861a114358443a129be817020b50f21d27b1ebd3d22c7be62082e8b45223fc
SSDEEP 384:SXZ0j2cKKwd1lksPzy3EFHjHdI2MG275rQeo75Y3kmA31dv61Qyr:SXZ0qbjHd4G2RNZrS14P
TLSH
T12583B0A908122255D2A553BCBA12F08C5E6BF006B5F88556B17BC1BFC3BEC79C365F81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_korean.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_korean.wnry
Size 89KB
SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
MD5 6735cb43fe44832b061eeb3f5956b099
SHA1 d636daf64d524f81367ea92fdafa3726c909bee1
SHA512 60272801909dbba21578b22c49f6b0ba8cd0070f116476ff35b3ac8347b987790e4cc0334724244c4b13415a246e77a577230029e4561ae6f04a598c3f536c7e
SSDEEP 768:Shef3jHdUG2NQcbxfSVZiG9jvi3//ZVrMQr7pEKCHSI2DsY78piTDtTa6BxzBwdY:SheiaDq
TLSH
T1A19355AC48238391E2A2A7CCD966F4CC6E27F04071FC0A9466A7D27B537FC0DF166995
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_latvian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_latvian.wnry
Size 40KB
SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
MD5 c33afb4ecc04ee1bcc6975bea49abe40
SHA1 fbea4f170507cde02b839527ef50b7ec74b4821f
SHA512 0d435f0836f61a5ff55b78c02fa47b191e5807a79d8a6e991f3115743df2141b3db42ba8bdad9ad259e12f5800828e9e72d7c94a6a5259312a447d669b03ec44
SSDEEP 384:SheftipUENLFsPzy3EFHjHdcqH24G2ZN1EDCv3Apb0WD5gYV/S4L3rnzdeo75Y3f:Shef3jHdcMG2NpZrS14F
TLSH
T1A50330A842431395D2931B9CEB19F4087A2BF50816FC94D472DFC2B9637F9ADF12391A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_norwegian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_norwegian.wnry
Size 36KB
SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
MD5 ff70cc7c00951084175d12128ce02399
SHA1 75ad3b1ad4fb14813882d88e952208c648f1fd18
SHA512 f01df3256d49325e5ec49fd265aa3f176020c8ffec60eb1d828c75a3fa18ff8634e1de824d77dfdd833768acff1f547303104620c70066a2708654a07ef22e19
SSDEEP 384:SheftipUENLFsPzy3EFHjHdy2MG2D7mgwroXeo75Y3kmA31dv61Qy5:Shef3jHdGG23KrDZrS14N
TLSH
T114F223A800421359D39323D5EF1AF0483B2BF91955E484E871EBC7BE667FDACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_polish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_polish.wnry
Size 38KB
SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
MD5 e79d7f2833a9c2e2553c7fe04a1b63f4
SHA1 3d9f56d2381b8fe16042aa7c4feb1b33f2baebff
SHA512 e0159c753491cac7606a7250f332e87bc6b14876bc7a1cf5625fa56ab4f09c485f7b231dd52e4ff0f5f3c29862afb1124c0efd0741613eb97a83cbe2668af5de
SSDEEP 384:SheftipUENLFsPzy3EFHjHdD2SG2gA8w8OJ6868jy8/8w8m8T848f8y858l8j8yv:Shef3jHdxG2KhuZrS14G
TLSH
T1FF031EA90042A255D29313D4EB19F40A3E2BF50C56FD84D871EFC2B963BF9ADF132952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_portuguese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_portuguese.wnry
Size 37KB
SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
MD5 fa948f7d8dfb21ceddd6794f2d56b44f
SHA1 ca915fbe020caa88dd776d89632d7866f660fc7a
SHA512 0d211bfb0ae953081dca00cd07f8c908c174fd6c47a8001fadc614203f0e55d9fbb7fa9b87c735d57101341ab36af443918ee00737ed4c19ace0a2b85497f41a
SSDEEP 384:SheftipUENLFsPzy3EFHjHdy2QG2xgk5eo75Y3kmA31dv61QyV:Shef3jHdCG2EZrS14p
TLSH
T1A10342A804421359D29323D4EF1AF0483B2BF51955E884E871EFC7B963BFDACF522952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_romanian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_romanian.wnry
Size 50KB
SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
MD5 313e0ececd24f4fa1504118a11bc7986
SHA1 e1b9ae804c7fb1d27f39db18dc0647bb04e75e9d
SHA512 c7500363c61baf8b77fce796d750f8f5e6886ff0a10f81c3240ea3ad4e5f101b597490dea8ab6bd9193457d35d8fd579fce1b88a1c8d85ebe96c66d909630730
SSDEEP 768:Shef3jHdXG2Cz2/vBAOZsQO0cLfnF/Zhcz7sDsYZBB/0gBjL+IU/hbhMVDtsR49P:ShehlrGR1m4dx9mjVyAvg7ouDT
TLSH
T1D53326ED08036344E3A253D9EE25F09AAD2AF45852FD44D171ABC1BA237FD6DF072852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_russian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_russian.wnry
Size 46KB
SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
MD5 452615db2336d60af7e2057481e4cab5
SHA1 442e31f6556b3d7de6eb85fbac3d2957b7f5eac6
SHA512 7613dc329abe7a3f32164c9a6b660f209a84b774ab9c008bf6503c76255b30ea9a743a6dc49a8de8df0bcb9aea5a33f7408ba27848d9562583ff51991910911f
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2qG2aUGs0K6lyZqmfGGHRblldORZeo75Y3kmA31L:Shef3jHdeG2lGsDOcZxbP7ZrS14K
TLSH
T1A923BB654812B245C25313A8FB1BF40A662AF41D86FC5084719BC3BB6BBF97EB173427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_slovak.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_slovak.wnry
Size 40KB
SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
MD5 c911aba4ab1da6c28cf86338ab2ab6cc
SHA1 fee0fd58b8efe76077620d8abc7500dbfef7c5b0
SHA512 3491ed285a091a123a1a6d61aafbb8d5621ccc9e045a237a2f9c2cf6049e7420eb96ef30fdcea856b50454436e2ec468770f8d585752d73fafd676c4ef5e800a
SSDEEP 384:SheftipUENLFsPzy3EFHjHd4Yb2YG2gNZ8a8zV/8j8U8l8x838Z8Q808m8d8T8hw:Shef3jHdZvG23AZrS14f
TLSH
T13D030FA90043A259D29313D8AF19F4092E1AF50C16FC94D472DFC2BA67BF9ADF133952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_spanish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_spanish.wnry
Size 36KB
SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
MD5 8d61648d34cba8ae9d1e2a219019add1
SHA1 2091e42fc17a0cc2f235650f7aad87abf8ba22c2
SHA512 68489c33ba89edfe2e3aebaacf8ef848d2ea88dcbef9609c258662605e02d12cfa4ffdc1d266fc5878488e296d2848b2cb0bbd45f1e86ef959bab6162d284079
SSDEEP 384:SheftipUENLFsPzy3EFHjHdf24G2/ezV6YQUdZYlujeMQ9RXmhRweo75Y3kmA31S:Shef3jHdrG2fuhZrS14T
TLSH
T1C8F253B804421759D39313D8EB1AF0483B2BF51955E4C4E871EFC7BA627FDACE122962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_swedish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_swedish.wnry
Size 37KB
SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
MD5 c7a19984eb9f37198652eaf2fd1ee25c
SHA1 06eafed025cf8c4d76966bf382ab0c5e1bd6a0ae
SHA512 43dd159f9c2eac147cbff1dda83f6a83dd0c59d2d7acac35ba8b407a04ec9a1110a6a8737535d060d100ede1cb75078cf742c383948c9d4037ef459d150f6020
SSDEEP 384:SheftipUENLFsPzy3EFHjHdb24G2ZKLVdDeo75Y3kmA31dv61QyE:Shef3jHd/G2w6ZrS14w
TLSH
T12F0343A800421359D2E323D4EF1AF0483B2BF51955E884E875DBC7B967BF9ACF123952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_turkish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_turkish.wnry
Size 41KB
SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
MD5 531ba6b1a5460fc9446946f91cc8c94b
SHA1 cc56978681bd546fd82d87926b5d9905c92a5803
SHA512 ef25c3cf4343df85954114f59933c7cc8107266c8bcac3b5ea7718eb74dbee8ca8a02da39057e6ef26b64f1dfccd720dd3bf473f5ae340ba56941e87d6b796c9
SSDEEP 384:SheftipUENLFsPzy3EFHjHds42WG2mzGu/eo75Y3kmA31dv61QyZ:Shef3jHdsiG2moZrS149
TLSH
T1831300A8004B125DD253139CEB1AF448661BF5C816FC94E432DBC2B963BF9EEF623552
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_vietnamese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_vietnamese.wnry
Size 91KB
SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
MD5 8419be28a0dcec3f55823620922b00fa
SHA1 2e4791f9cdfca8abf345d606f313d22b36c46b92
SHA512 8fca77e54480aea3c0c7a705263ed8fb83c58974f5f0f62f12cc97c8e0506ba2cdb59b70e59e9a6c44dd7cde6adeeec35b494d31a6a146ff5ba7006136ab9386
SSDEEP 384:SheftipUENLFsPzy3EFHjHdW2YG22cViQj3KiG8dpcH8iEriG8E8O83Jz52sxG8h:Shef3jHdWG2+oPZrS14i
TLSH
T189932AAD46031385E2D5A7CDD97AF0EC9D15E48831FE46D125ABC4BA436FC1AF0B2E81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

r.wnry

Path C:\Users\Admin\AppData\Local\Temp\r.wnry
Size 864B
SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
MD5 3e0020fc529b1c2a061016dd2469ba96
SHA1 c3a91c22b63f6fe709e7c29cafb29a2ee83e6ade
SHA512 5ca3c134201ed39d96d72911c0498bae6f98701513fd7f1dc8512819b673f0ea580510fa94ed9413ccc73da18b39903772a7cbfa3478176181cee68c896e14cf
TLSH
T1D111EF6EAE1D32506BF24462397DE55BE602415F236A02B2B9978274137C1BF16EB0E8
MD5 SHA1 SHA512 TLSH

Submit Download

s.wnry

Path C:\Users\Admin\AppData\Local\Temp\s.wnry
Size 2.9MB
SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
MD5 ad4c9de7c8c40813f200ba1c2fa33083
SHA1 d1af27518d455d432b62d73c6a1497d032f6120e
SHA512 115733d08e5f1a514808a20b070db7ff453fd149865f49c04365a8c6502fa1e5c3a31da3e21f688ab040f583cf1224a544aea9708ffab21405dde1c57f98e617
SSDEEP 49152:zUx4db9A1iRdHAHZXaTnCshuTnSQYUB/UZfCg2clOQin2h37l2Jh9iiRKpbXUSH:z/b96AdHA5XaTJvQYUBBgRlJi+rlliRy
TLSH
T1EDE5336A3718BCA0BF2652311BA232CB2C3D166DE65CC311B795E598AF93F4DD5201B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

t.wnry

Path C:\Users\Admin\AppData\Local\Temp\t.wnry
Size 64KB
SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
MD5 5dcaac857e695a65f5c3ef1441a73a8f
SHA1 7b10aaeee05e7a1efb43d9f837e9356ad55c07dd
SHA512 06eb5e49d19b71a99770d1b11a5bb64a54bf3352f36e39a153469e54205075c203b08128dc2317259db206ab5323bdd93aaa252a066f57fb5c52ff28deedb5e2
SSDEEP 1536:am+vLII5ygV8/tuH+P9zxqDKvARpmKiRMkTERU:a9LAg4tXPTEKvADmFgRU
TLSH
T1DF5302930E80FC8E175E42E3F65084BC2561CDD23AEDA69587254C15F73A2EC754CE78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskdl.exe

Path C:\Users\Admin\AppData\Local\Temp\taskdl.exe
Size 20KB
SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
MD5 4fef5e34143e646dbf9907c4374276f5
SHA1 47a9ad4125b6bd7c55e4e7da251e23f089407b8f
SHA512 4550dd1787deb353ebd28363dd2cdccca861f6a5d9358120fa6aa23baa478b2a9eb43cef5e3f6426f708a0753491710ac05483fac4a046c26bec4234122434d5
SSDEEP 96:Udocv5e0e1wWtaLYjJN0yDGgI2u9+w5eOIMviS0jPtboyn15EWBwwWwT:6oL0edtJN7qvAZM6S0jP1oynkWBwwWg
TLSH
T1C1927F0E2E6701A3F6541EB087D652E99FBD6C233AE7B2BFDB62900005E010D54E1EF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskse.exe

Path C:\Users\Admin\AppData\Local\Temp\taskse.exe
Size 20KB
SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
MD5 8495400f199ac77853c53b5a3f278f3e
SHA1 be5d6279874da315e3080b06083757aad9b32c23
SHA512 0669c524a295a049fa4629b26f89788b2a74e1840bcdc50e093a0bd40830dd1279c9597937301c0072db6ece70adee4ace67c3c8a4fb2db6deafd8f1e887abe4
SSDEEP 96:UjpvOHheaCDCNIOgTegoddPtboyX7cvp0EWy1HlWwr:UjVWEam7ofP1oyX7olWUHlW0
TLSH
T12792050E1E6B05A3F2950D32D7E212C65FFCAC2776A3A5BFCF12460814E150E94E4EB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

u.wnry

Path C:\Users\Admin\AppData\Local\Temp\u.wnry
Size 240KB
SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
MD5 7bf2b57f2a205768755c07f238fb32cc
SHA1 45356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA512 91a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9
SSDEEP 3072:Rmrhd5U1eigWcR+uiUg6p4FLlG4tlL8z+mmCeHFZjoHEo3m:REd5+IZiZhLlG4AimmCo
TLSH
T19534D5669DD3912DF3DB25788000DB7CB8A76E1095321F7BB684F8EC28367E4CA6511E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertWrite.doc.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\AssertWrite.doc.WNCRY
Size 352KB
SHA256 62ad14f422e7b2b21a16ef7a04434542ec00d3fa1391132293484671e3cb390f
MD5 fbd9441022c5bed099da2b3d39d1b2f2
SHA1 50ce0a511446ed071e6a3ca16d70c8e22698bd41
SHA512 b04d1f76ab7917f59825dee88d55b33ea1b226bb1adb958407223f19d0ce7f2142fce7b5ccd43f24c62f631bd69d6c41f0415cad8c4d6bfc07f5f859c30a33d6
SSDEEP 6144:ubGnNAKVgqsfUd85cR3qGPq+AM7mn7UEdQQCAvxAiSn7Po8qzdMLS:u6Ncq9hquyM7U77dbCOPSn7PIL
TLSH
T16374239658DC74A0D4ECF423CBEBC0B4E26D6F3F61D5298A19916138FD768963388D38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompletePush.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\CompletePush.jpeg.WNCRY
Size 326KB
SHA256 6d3bd6880138f0f06e3eca7d38383fe1798ca24d262e2837d55a87b1a979d882
MD5 77b509e56895063f2021ba5660084c86
SHA1 001a7f122af7eaefbe35ffe3f36ca01518d4a324
SHA512 c10b989cf560888a27a6a5180f83c3e98ed08fc80488f44d308abcb9414f297b4094ae3e54811465d087424529981d32660125dbea341af609e2f63eacd07c29
SSDEEP 6144:e4F2JSDQoAcOtUBDqJx+hjJ8irS4+YmVVcn21zpkYDHeW1X2VNx:e4FaSkoAcM+Aq8aoV+n2J3euX2Vr
TLSH
T10A6423252103DECC5BE5ADC4D3471658752FBCCAE20B6D79B94FAA16BF2042AA07C153
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertStop.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\ConvertStop.wma.WNCRY
Size 249KB
SHA256 1eb4d2549db17e640c998f35e5941b47224010420ffd28d2ff10898d34a83122
MD5 2356c221a5037f33f6a9ae693c666f37
SHA1 01875057f30de76b8df33d1e6d1cfd2b8d1fca2a
SHA512 ca7faea9330bc4f6b37bfc3d68d7e3f2c340107b338f597bd6e8596ec23c6f2844ce8855d8ae7144e88a8b4ea2bc0cc8e79fe026380902878b6610508f0ef3a5
SSDEEP 6144:69htDuJOJS2hMSAn/NyiKOpt0KT0fVsj0KJ01HO:kaSs/NNDB0fVs9Jr
TLSH
T141442328BBC31ED3ED74669551481427691FA09438E1B93B4A4FF32C07B87BA63C5DD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugConvert.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\DebugConvert.zip.WNCRY
Size 416KB
SHA256 671aa4be8591fe9ad237aa769113e93e757a97ada2dc9e25ade74b137e274ea8
MD5 7e13089c2a36fc8e4681052caa10787f
SHA1 2af5369b8883d0f41446d072429d6b3c368ec14d
SHA512 1f506905c3049b517a4b7b7d7a677ef4c922904d0f29b32ea3b35ae3cb911aec6afde824c4d80e8d9f80456c5d5a6ae54406257edc07e5e7a38b27eec04c65be
SSDEEP 12288:CjJRDL63z1/zzM3ioUIWodcflVFxiV8ABcYld:CjJR363z1/zzGioUIWoy9JYld
TLSH
T1AF9423DE7E8D1B335E3BB895CE6B07E113814C27598552ECD1B9F9402ABEE4304B8682
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeStart.vb.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\InitializeStart.vb.WNCRY
Size 543KB
SHA256 722a84efc5616c8890800f2761ee9ebb6b897372b9debafa9775f2b193ed0898
MD5 86a2c7685da63abf4c0700cf674c28bd
SHA1 bf4c261ef4a2d9b57e1bb60686097840069deb36
SHA512 419c80007fe60c0a0f0a9910a95355484a0aea314578a068cc38e9485e17ec310dc6ea3383bf7dcfbb398be055fa88b18a198d3d1eff3cac09279959430ec4e6
SSDEEP 12288:3x/8qnXeSGuhljYW+YZfrz/XslWMZChpXTXYUn8nIch7aR6Iz8uHfeaRbved:BruuzagffXsklhpjofnIch2MIzXGaRq
TLSH
T18CC433B58BD8DAED4FB6DC0821836EB25B271D3EC197EDB05A094903E1E33D47160E96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitUnregister.asp.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\LimitUnregister.asp.WNCRY
Size 659KB
SHA256 b24c84a267a714a6f2df04604eb6ef19fb6ee78059040119115b750045090cd4
MD5 19396e9b6e3d27dedf7e541cf854002c
SHA1 f84b855ff212afe64e00f7c70a8db12ef7aef743
SHA512 38e502ce87239e88bdeb55a889c5be3336707a6a272f992c763dd89d47d37635ceffe41731aac1b10ffcd5b3dfbac374bc2daa6517f9306600060f50939ee07d
SSDEEP 12288:4WdUPFG5EwunhHOGwT9eTQdlQVvpej4oWri7s1vCjS7qpwofMK/UEk:4WdUa9unhHU9eTAq645riaajSlMMAdk
TLSH
T18DE4332BEE125BC2C8AEC6C05E595FCE39CAEF7F75F386660512C0D50A932E7A44C491
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureUnregister.xlsb.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\MeasureUnregister.xlsb.WNCRY
Size 505KB
SHA256 f099c9ef00eda1a591e4788da11cafc987ad8b416b63cbe2232831305479f953
MD5 dbf58f5aca9ca58b11036ac6b410616a
SHA1 13d275479e951e6e8556dc4a1b4bf5b73aeb4a56
SHA512 4eed4f9f692289e097be526db065eef78322ed494cb665472fa07f4717437b3a03b32ebb39ca0a4686b2e5a61311b084061336c6415fc3143c116f4ac943c978
SSDEEP 12288:hwNB881dKKuxVUYz8d5g6+w/seDUqMLG6LylQXBqGCoVq:hwLHdKbRae6+svjMvWQ5CP
TLSH
T11FB4234C6D814C8A45CB10832FB6A4E3F2BB947C1DF8E4A8A7C368FD75C71BE4269059
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizeApprove.vsdx.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\OptimizeApprove.vsdx.WNCRY
Size 364KB
SHA256 20a16c0defa3a73ebdf9d51b5ab7aa5490c6cd94a271c47bf62f5ff31982a3b3
MD5 7e155f3207ed922232339b7aa26b9d65
SHA1 69d68031a190ab31f68131ee438f01e4ae0749a6
SHA512 1d06326ce5789e4b1c7975f2eee7e45393fecd88486c90d30d4c7aecd074f39a5818aa0646a7302f22b19f18ca2f10c8c7a270e9466dea3295acc04df79b394f
SSDEEP 6144:QtIFD0SA9oD8JYx83eJgTyphHiQ2SkVGahf5BsO8vjeFuJijasmPJi3agJ/kEBzQ:QtIFDQ9oYK8uJgephHFrkVGahBmCQJXt
TLSH
T1BF84233E409D77709C769F442983BF121D8641C6828B22657E1A2BA4AD33D8B4BD7BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OutRename.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\OutRename.rtf.WNCRY
Size 441KB
SHA256 c8b581bdbd369eebad40b8453b999f49603650d13290f35d5488917d75fb8682
MD5 d58c51efdd4219a89728227a5abbf666
SHA1 0daaf8df7aa5321fa9046c1f3af9598edf13012c
SHA512 2500d6a00f887b588d814f0677086a90101abc3cd27617e9d44f4e45d3f01aa979ac7b54c8641793376ff3ba6a35d262ab8407b4242f25531339b9cfb4eac2cc
SSDEEP 12288:QiPp3Xr7YGpQqG1uhZRFRQgq2An797daygzqn:db7YZqG1uhjXDfATasn
TLSH
T171A4230DA1C5F2DDB5F6D270A1A17EDE4096E1B9E61A311B004E1370E62E2D45BE83FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeOpen.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompareSave\ResizeOpen.avi.WNCRY
Size 467KB
SHA256 ed9ba27659a87b5c7fb89691989a252f096bc313f2dbe0dcb0e03c8d331f04d6
MD5 63738a58a64bc30e225ea2559c753ac4
SHA1 360f4d1b18a9984a721eaacbb6dee91952f62188
SHA512 32fce8600c59e92c9f2ed930962244a8313e988d7fcefaeb36bd95bd53fafbb6c079b9ef02f8f4c08d77e94e79f3f84e96dbfaf5d1e94f7fd4548d75c9281cac
SSDEEP 6144:ZieweMnAAyQt9wLaLM8rfa40YWctZtfGAb41MAb4NoNzjPGtOQd9jxGw3VRX6+LB:cpXtWOVrNnFAbPfQfHDX6+LpQClRm3cH
TLSH
T1FCA423AFE92DC67D0920A89774FD208D94DD435D8261330FF86457352FA69C1AA3CEE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckpointStart.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteRead\CheckpointStart.mov.WNCRY
Size 1.2MB
SHA256 f4776441035e421960e174e84cb1c626c504a668490baa75dcc8aa8ea31eb595
MD5 fedcfe4e6af78ce9e845ce51b14e5342
SHA1 fd3a484392e6e8884a4f09bd8b93c6eaafa0bc47
SHA512 2282afa87f14ca1e3e561e6f310df0e339c5eb265b7d09905e60b1a26615fcd47daa21276cd54b65383f0719a594a99a4c760ae1e0d03630cd4875cf4644cda6
SSDEEP 24576:vHMrl8StJIzniC+0Vmd1+IpsGFYDTkegDzyRBIpRUOpNztfyvEsJ4qzJ:krl8StaniCCKU+DtyZRHpJtyvEsJ4ql
TLSH
T1A4553329AD432318A6FD4A643A7F382CB199B459C0F4B42E5FCC33E315EF644A11D7A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableConvert.vb.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteRead\EnableConvert.vb.WNCRY
Size 715KB
SHA256 5e4e29cf5817ecc15d5e1b1b2ee7e00b78ee3ccc72b5e40af07d6a00b03809cc
MD5 1e3834c04da5dc6d576a3ed9812d8a6d
SHA1 70fa21c1d5e88dbf4c405a23f478edb7cf205105
SHA512 f7cc71189ca5bc5f1b2d7b6e73ee51b2089e638f2f64942c9f7a16988d77ddd28f9be75f413f73847c6ed325f89ac25c2f5fc522b67ba99dbba781d63494953e
SSDEEP 12288:lO8j8pqFtRJqPHcnLkeAX8TfZVnpxyM7tydh3Ndjxxx5t3IdpA8RfkUX:lO8jv6PHUwQTLnCogLNTH5t4/S8
TLSH
T1B1F423755ACF587FE6592EA92F104131648047C66A69CB1932CA0EFF4CFEED19C9240E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountConvertTo.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteRead\MountConvertTo.ps1.WNCRY
Size 605KB
SHA256 23993bdd41df91cef363662efc0d35f436219d1700d3389033df42bb934efd24
MD5 4985daae849fbd59e8feb419edde7b33
SHA1 f47fbe00eee6c1560236d5f86d02dc33fc29f259
SHA512 b7ec28bbfe436c253117e22b5a024356a2d1b8c7cc909ac98c2a39ae65eca28d15a886dd0e055ef7cf04108a38c71ec2cfd6c3da59467242bbd56d23aaf68d8e
SSDEEP 12288:OUuVd2vpcDstADCA40/DPkTRdXqcTNiJjfRp4LCvk+IAxSs:OUuVd2vksrNdXXTNev4Qk+IAP
TLSH
T189D423B179576ECE950F853C44044ECED8A5EBE60C0F05A5BCC3AF294BB2F6760C9986
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectRequest.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteRead\ProtectRequest.mpeg.WNCRY
Size 1.6MB
SHA256 879084c346083756fcad556362c5f7b3e8c3ab5a384b55ba480230b055011d29
MD5 3bde7baff1832e9a415738ed76e8b535
SHA1 19c1cdead77a3e327ce055af3d08262293c2fa54
SHA512 ff3d4da88b35460df2ef960db838e180ebebc67ed1e40c887f0aa3d89979e92853cdc3eea7b21daa543713edf49c25ff8451a2eb7569a9eb2ec30cf85f7e75ff
SSDEEP 24576:3FNs/xKUkgaO1YFAWWvTR38wujHOW2DnALXp0KczO56R9R5MooHc4wSdX11MIOD0:3BkWU38nu07p0KP56RJnoH7Jdl10DWiW
TLSH
T16A75330367C3CB0ACE67593D2F2DF947908DBE232068E5344B49A9BA5D2DD340DA4DB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchOpen.pptm.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteRead\WatchOpen.pptm.WNCRY
Size 1.3MB
SHA256 f2aeef7c13bc682cd135e39a97c773e77d42d5f5c5267771fdf99a04aa930363
MD5 3978f659171accf2169e423fca2322c3
SHA1 de37b114299a745ff23c344e5375d003c936c0c2
SHA512 d2b952b95d008821023f077700e5e41a6d1db3866110e83c49388c64bd6669b3ba8c134b3ecd028d4653f472012fb60e74d5bc23b44071a6e7ae6705adbaf9a5
SSDEEP 24576:ooP3tk9l6eJy8TsZL6JBPNNdiJZRi3P5Swp8raIv3dwsIT8SiliaTbjIQl92535:Ni9QD+2L6PD/5EaIv3dCSlHjI29u35
TLSH
T1C855335D1C408F331EAD40F5CEBAA154D2B5D447F321926B4B1A206D8A094CDFAF6BBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertRename.dot.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\AssertRename.dot.WNCRY
Size 261KB
SHA256 88d87d65f432a2bb2e350b9ccf7a1dba39b43fdc63aade398c17603e49c7a658
MD5 195a531e45c57b0d3065c22d6ce695c8
SHA1 7b0b94a0e69a7c6cc3de5ab132440227364505b3
SHA512 c08b6a3cd65609d21ae48a0f672a1b15e85d6acf951247d9e412315a5e7b0617108808bac701cb67cd540c164cacac2423473e45e368bd06e4757cc5ea65294b
SSDEEP 6144:y9XEmkjT0RaUWsScktD5hCEjlI/kLB6rJ0rUNPk5:K0UReD6Ejak16rsms5
TLSH
T134442366F757939451F0EC822A48E7103CE1CD644081ECF64AE4AB19DAB24C6F6F49BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockRevoke.cmd.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\BlockRevoke.cmd.WNCRY
Size 475KB
SHA256 8ef9e07535fd07da8ff6f5f496bb5e96f7adc0921d2c8534aec3c77ac049d277
MD5 ea2c8b8132dbaa70bcc423b8e4e9b93c
SHA1 1450f0456a5bd3054a0477025daea64d05583d51
SHA512 7295cc95174cc36542875c276b217c529ee46a9d82f03cdcef6a7a6b94481668553cd879f786c06bc7d137df2fb9881210210b1f6c1ea8ecc30c74c7d36ef62e
SSDEEP 12288:hr6fJl3ojPuixlLNVIeeiSwn8ifaeG1ebMPFX3xSG/x:Mfcbuykejap1GoFX3x
TLSH
T1E8A423B159A7CE850D9266C48284F32CD1BDDB5920D8703F95C0EA4E84D23FAD3947E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompareExit.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\CompareExit.gif.WNCRY
Size 274KB
SHA256 e20203b9194567710ebc5c041d7abaf5982e4adf6dc0a07813c94a503c1ed477
MD5 4ffd7285b399350100d2a62719d71f90
SHA1 bdb28d569887ecb9ffa31f1c06fc85e8b6c8466f
SHA512 4bd2c5987e46e9fcc200136ad871fb3e6b56562d8546205c8c09674821d570a584ec3109e5a543531663bfdf2e8f2cd48ded5a17a8dec996c20b439f91c366ac
SSDEEP 6144:O7laabKEHkxf5W3wpLhfcxJVwHouaVIi1xu9+r5RtP3bBS349Cidt:O7ljZHkxf5cwRhkxJSHouaVIYxu4rf3r
TLSH
T1BE54238FA25C96075F9F160ACA86403D21D9B160BDDEEC5DEFC1FC2F58202E6653213A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportAssert.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\ExportAssert.docx.WNCRY
Size 287KB
SHA256 10d19b8bf95c1a4dfc89920c975a41a44f4e89c6ca3a08cfd24e280fe0a2aede
MD5 a1edc2212cb4322c05aeebc6ab989ae1
SHA1 36ec2ddccf4b35daa8d653f241b6a8da79d7b611
SHA512 b1f1834c19f1bb8c974ce7093ac8de919161301fe4a9eb7a443afbe286c01dc9bf4bca45c0e415c8755c3a95db087fc716b019b2daa92e1f619288ffabe8a418
SSDEEP 6144:SHh7wAZ/DssdzI80anSFg4Yb82TSNcyDczgst:SuAZQ80aRDgC
TLSH
T1555423438B80331789D4965E9682864F14EB21B07EBBCB340BAD50F8C5B6B357EBD781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportFind.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\ImportFind.png.WNCRY
Size 608KB
SHA256 e236441d585761d0e5e9038242450c0a5ff7af18b1e448b916686b8030c489d4
MD5 7a3cba2442423a22062a0aef18fffb43
SHA1 04ec24d0ecf18ec1196df3648a084de5d7d61937
SHA512 39dfd17a3958451697e5db1b984321d436c62a189d8bea38effa2071c20c53ec8c94de645f5b340c74b0ccb87eca097ca4ec8034e9c7fbc0f67a75a580553b71
SSDEEP 12288:rdtpwuGHCtFyx6ev6tGW+BlQJRRLqFSIjugxflMnQzQEggB39/z/lj:rdEu2DB2TsFSEynQ3B31/t
TLSH
T152D42343CAEC38BE9DAF67C776488D33D72030AD9C5A65327165B119A927AF08091DCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MoveRestore.xltm.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\MoveRestore.xltm.WNCRY
Size 515KB
SHA256 1addf7eea9bc0617ef459564808e54ecb6323bb750652fcca48bba91316c406a
MD5 471902021f1084c5969d27d359680fcc
SHA1 9e0a6696be060fb5cd13012878eec8d58663c440
SHA512 3ae4eb28b57dbc9af8774ba9e1a4ae8cf5a012031c89bae31d5e54de65423a71410381b87ba95c53c0fbc124e083b4a1819260997a60a37012161dd760019020
SSDEEP 12288:6vVNI92EslA/sTZ6X1Op7W3cbkP7et4xvsjqKJC0wVFTyO:6vTIcEQA/sTZ6XAhWS4xUjHJC1VFh
TLSH
T1CAB423A53435F0AEC3DF1A6F6B4C3AE9A2A74FFD01C8AFEB6B8D4A105165580D1B004D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingComplete.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\PingComplete.mp4.WNCRY
Size 528KB
SHA256 ca212044d33a95632cd60413e9cfb286b116a2d1c4839ff62ed58b1d286a8e29
MD5 3d658031f3014e2bed1b6d1d7dd2e7b7
SHA1 47a025682a33ac4ae179e126a536fbbf54305b1e
SHA512 a65825b6bded84fb7557700e51efa390a92aadce7ad062e4dfbf4a28212c964e3b4c2a9986de4886bcac8f7dde04cd5226bcecf0052703c33d1c7b9e06647b14
SSDEEP 12288:CsjlE4PETbUduvKmFJjsa5XKLCi5+xUgfeqca1h7K:CsjlUbUdCxJn5aLfs+Ceqcav7K
TLSH
T172B423D8349EFB2162B50BAE73A620CC1D51C381BCBEC469C2D85AE2C751D790D3A34B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectOut.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\ProtectOut.jpeg.WNCRY
Size 555KB
SHA256 67367428128fd132983e9fa5c96561b5008c06ff6f8ec8f2502a575fb9f5e5b4
MD5 21802ad06fcc79ce656b2a75d40182a3
SHA1 b5e7b7d93b1d65fcbd63ec348f4f4722789ac107
SHA512 21cbe8991ab48a247a04a364183ff1c1bc70784fc0edd282a7822437d1bfdab49672858f76241aca2690cc1afbf799a826d315077f735d33772eefdc77564304
SSDEEP 12288:z+Cf4p2aI84NdX5YBvvo+Qm7R2o+AaFmrWhYSP1422ROR:z/r3d6no+QS2qaoWhYe4lOR
TLSH
T19CC423BD05EEAC881932733E999818CB9D871D9DD5EF7804A2320159C0A777F39F09B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchPush.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\SearchPush.docx.WNCRY
Size 247KB
SHA256 a329e29ac03220a6a386f0a3738698fd7d2fbebba375a27b956eef081dbbb527
MD5 abe1f6b57cc587f300d5aae55d59e56e
SHA1 9311d7b2348cda0091e032f54de6e2963c3e3b1d
SHA512 7dbcea2d428e2fe16f0f097e10a0efa6e9ca70d2d42769c9aa09e8950e86d8ead35ba990e80ec3000afd083e071813ef1c6fea5eedeb2221f1b96842bf952294
SSDEEP 6144:w7dFhFy5o1q8mrUzoAZEXkjStEErCioOTOaU:UhFyN8mglZEXXEErCiN6l
TLSH
T1B8442302F4FDEC192B742B22D6A7342EFB3F2DCD8452211AB2EA50719F889C945944FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipJoin.pdf.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\SkipJoin.pdf.WNCRY
Size 301KB
SHA256 ba02eaccff1e9707c8858be7618a80b97a3593fb74e90720a44d3adda6ce7087
MD5 3d5fb3a3c240806939f04621e49b9612
SHA1 f8a81cc98ab3ddbae81850faf3f8716e47b7f04f
SHA512 10736a6bea9e9b931ac77d2457c13a454b6c4432d219d6fb9686d95a3fde67bc7539d24cdffe7fd10060709672a3576de9eadffb59b20973476c463e8e03a590
SSDEEP 6144:5AG7vTLkvfN+Z5XjGl5uni3u+nmduUTqlmvvJeSvCcdu1cD2:5AaKN+DGlQnkN6uUr51vN5D2
TLSH
T1E06423ED8D2B153B254C96380E7CF34C32D136F189752322C71899721A1FDE61BB6A4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StopJoin.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\StopJoin.txt.WNCRY
Size 582KB
SHA256 78abc3bedb6102cacd18be18def1114f855d3988cb51f3ba31d0e53b671e5ebb
MD5 20ea33b25f11ef818792f3f36cd1bba1
SHA1 d67441dd46b198867601e2587dd71d06c2c82b5e
SHA512 8640c6d11abfb5be9b3a67974cec416c23d6692f69366fff1109b23a17e911d62a698c3e4afc913aa66e5e8a745e582dc6d1d300b5e41e762391925c40fa40d3
SSDEEP 12288:FQNupDknhLsTl/DTUyUJHUNvb6hfaUWjVyFYqWBNRFQU0U+/tD/qG7UgrX3P:FTpc2Tl/00Nv4tWjEi3mT/tDpIWHP
TLSH
T1EAC423620CB0965F25936F8695E060C688DD2E930E6F6F9590974A2FB07AF815EF31E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TestSearch.xltm.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\TestSearch.xltm.WNCRY
Size 501KB
SHA256 60eb61e85fd5bdb281195cab676403a6c22295378b9a9259863ed5f9270996de
MD5 ccbb627b7ee2da072d9c3c6e0956664c
SHA1 e7995b7454adaead1b882202209ea03af3bbbeda
SHA512 c6a7f60c90d360a1046bde0fb306008c2c360b66868de7fb7a6b4c126cd3ee35ce3d7516d5ca4bd2eb4c199319ac0db41d1f122bd7dbf80c1d49d3d515cacfd5
SSDEEP 12288:XCL+y/70v+XbzFEMolucFI+nLgQV07nJsSR8u2D:Xq+y/70vkbpE/lPFncCYsvuI
TLSH
T190B423D7552E6DA9C1FC0FC6CF6215A8D1563D4F42C16FDEF41982A638A942BE40C0EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectInstall.7z.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\UnprotectInstall.7z.WNCRY
Size 421KB
SHA256 2b4aaffbe6d8c0967abed14babef9873a2e545d608fc304acaa2ffdf683984b5
MD5 9a55572591e6ee294546479c42ab74fe
SHA1 dfbe61134359bab575f42e951061691d3290d5ae
SHA512 f1d5bb77ca63a2b6fdb56e5ae91f61574c265e4da2c123fb3950b4f92eabe43b1006f03c1655ea2d1eb98e76e1359efde960ef78082c92df62b1145ad1c7c2ef
SSDEEP 12288:0ypxV82FITQbomze7Hl1CR9rGguPCH/9yGTczoW7:pM4ITQboHcG5Kf9yWcB7
TLSH
T1A294239B586F10BFE9D4BDB6F57A8B2CC019E59BAFED0103406E067104B04ADAE5DF80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterHide.doc.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\UnregisterHide.doc.WNCRY
Size 568KB
SHA256 1ff28dfffcbbfb77ec1d47a0d2ea33ecc50c1c691e259278021d93bd8bffae95
MD5 eebc9f55ab15f0250f31ed97e14439a8
SHA1 06ee31f4ff3fe2671ce1671931ccd0bb9aaead5c
SHA512 7d10cd83f6730e1e1fb9cb8d54e2a107ec51c0f3ab0f0e34c33df3a35868a6dca2ec83061bd19cd12754fde94600846531a3c69c9a17f2327cecb409bed06183
SSDEEP 12288:GGDZe1YbvSHQk7HP6tKVEQ3qjuGE4J2cocRjIPtJ4l97ZM1Al4VpbT:GGtsYbKtHyt8EQ/Gq8RjIPc97Z9UT
TLSH
T112C4234B623C52BD01DBC78D2A2AD471BFC8B5D2415C6E68E75C6F94A6520C3B262B82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateEnable.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\DebugRegister\UpdateEnable.jpeg.WNCRY
Size 354KB
SHA256 5773c0bbe720454b5c95a79caee767a9ca9c46391912d7486bed5786fc589cd2
MD5 d7490b5cad8668bb37f5d2256561777d
SHA1 b54ff23c8945de71717b9f6306e543ba2964d335
SHA512 54375295dd69a9b659bede6de3976b10d470cd53d5839071a77051b7285c6d7a7b0f1d88dda6e011077f4f230ff1e40cc501e0df8fa4e7985572956f3fd5ddb2
SSDEEP 6144:kIRhu+gGLTzQPELTh7iJ6vWO/UQ0vUJElTJVadbtTUCYkPegAjkLQ0Qe:XLujIYsLy6vz0bLadbGgegAYDB
TLSH
T1EE74230D79470D9EB23B17C3D84382BB365F9B923F786869E19BF49322283C29701671
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmRequest.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\ConfirmRequest.docm.WNCRY
Size 603KB
SHA256 723d0ed5c100c9b7948894a5b1407e3899a4f1dc54cf012bc58a25931e692d57
MD5 dde3f5e8f33d8ecff39bff37967565d1
SHA1 f9f63453645f481a9ed3f8f2a1ca7e5aa8c76082
SHA512 899f9492afa791d5f798ced02c0aedcc60abd20f81fefbbf0fe12687883ea42580d8e91d74490ea259ec9e8fcfbcf492f174c08125677de66b4b691065038b60
SSDEEP 12288:JciuuHLV0k8mBspKhyx/0TB9+X/UJhk4kTdUBhQykTPZHQ2:qVqZL8mWpKh79+X/UJhk45HkTPZHQ2
TLSH
T1C0D43334FA702FF5B395F1F9951C20A79DC8A416AE3DD12648D2E2819387C297C61FAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectCopy.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\ConnectCopy.zip.WNCRY
Size 518KB
SHA256 86fedb446036f6d19a3d15d0dbb5cd7a436e9cca8446d625506ffb8bf61f8371
MD5 80c2de55851c005916a4907384d728c7
SHA1 86ea9bbde536193cf25124a8ffed357960f82edc
SHA512 df2551e1d2b7e90c8bd7497b5faf7c61fd4e42676888d1add5dd4a8852f88bc3f83f9ceaa25226b2f17f5ba4ffbaca625708179cec539ff818d6003ddf8cb99d
SSDEEP 12288:+soPmQrdIa1Bwe9HjcUzOsucIRJ/LdsbKk+Miqa:+DPmu2WHj7zOzVJ/5sWJzqa
TLSH
T102B4234C0886C264AAC714C671FC4FB7A4A0FACF5B8B4A645CBCA73867ED55C79024ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectOut.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\ConnectOut.tiff.WNCRY
Size 398KB
SHA256 bbe8fd5c622f8eb5f9dab55aad085bb704d9e2f8f0ac04d9c9d8f492423058d7
MD5 bc33a3e3b12c59b774bba2b0fa61de00
SHA1 c86a4176dac9beee8f501b831160055cb30aa2e8
SHA512 fed69849eb0de70b721ac01bf02c0369a319d5afadb19582b76c610672d1978e3991d80291fa34792a6bb5a2403b6ec33a648b17f1ea86806974787bbc70b81d
SSDEEP 6144:sxd/DBq8W+SXLtmzJZP8q0/+ysjND9rRgxWZfpAFBb67q6JA+3XbCusIsoTbGlIR:srDBdzJFLByQNpuoTAy7q/ebCoT9w3O
TLSH
T1A984232333560AF988EB6BD16132078BAF9E50FC63B7B145615291CAF04FFC46E56A0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitSearch.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\LimitSearch.png.WNCRY
Size 542KB
SHA256 b0a3a9d6398b718fed00f0c9cfca5621541b141eef35722edfa45f2ee59b9741
MD5 96a9ff2114b6d9764565d291961353c9
SHA1 e48aff2a532753158f45cd0e9f315ae50ba5c77e
SHA512 49fbddcb772bec8127c1a529837c0b035c97a4bc101a49eb4867a6f3c6b6e976b80baa45bd3f3e96bf69b884d890994f60bc7f67eac93dabd1be6e8f01d3436d
SSDEEP 12288:HUw3lxJpQ4J+izZeW27pwLYFJH1BZACxx/dSMUkImzj1jeJ6Xq:HUGxJpQv6eW21HPHXyCxxVSMUNmzjpe1
TLSH
T143C423394008D22EAF1CBADDB92847418ABD2A39703D7127AB4CDB4DC1FA5EAF51055F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MoveSave.php.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\MoveSave.php.WNCRY
Size 663KB
SHA256 19dbc7263f2d80289af98d24b51296fbe5cdea9be80e034e6bc877222cc409af
MD5 673071d4a6046671dd3acd719c61dd04
SHA1 728ce1894dc179921e929d54247c6370fdd701dd
SHA512 974f83fe4f1f5d68649b0081cf7706049430a04efbdda417fc3537d23eb7718e408ba416ca8476fd89bc53995e599b1c57d473856456b4cb37a892846b60bcf9
SSDEEP 12288:E4byfn2URpUIA+rr4ghr0lKlVxOGXcI1fFqxUpo2e4D7Wd0hxjb:RxTErthsJGX7Nqx12e4fWkVb
TLSH
T174E4333FC9C64130AB47E62FF9F48ADAB50894A1E8FC17DC34255A4DE6A29F054B1069
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushInvoke.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\PushInvoke.jpeg.WNCRY
Size 265KB
SHA256 ace19760ef99430853e22037022bba73e5f2e325acc5f55ba12b6d477579778b
MD5 6e00b2948ad1a424e525bdea8c1d126c
SHA1 c29f79db62a02110fe7150d98344a6e28cd34bbf
SHA512 08de1166b52e62413c66cbad6ce566e4162b9a8c04a329f2de9fea511fbb4702780cfb979d9ada0c940b4067556e1377bf71053fb334dd6cc0c1fae3c366723e
SSDEEP 6144:uJQIXQf7mpKzRD/56bjYyhzZFxJFlRpc2v/xiMXruiRYjrCrZMpT+233SL:A9XtpKzRDRKB1fc2BzrRwrIMpTLSL
TLSH
T11D44233B2E6B65B55A576E3FD2D301B67D50A509E8FD015C232CFB022B38A119E8E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterMeasure.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\RegisterMeasure.mp3.WNCRY
Size 301KB
SHA256 16dc40437d1cce2bbc834b80ef789de22c74ee64d64b78d877183bc3a3820a36
MD5 f55cc4bd87846f300c90f60dde4435bd
SHA1 603add39d23042c2a6fa17543d120b9c2b4766f6
SHA512 b9a056742505b8a0143e3ab2a2fc940dcc6d47f18bddc61268193492223059a62c6423c1120e6a01be5122f968ac8e5c42b1bae5cfcc8a39b540842b96646180
SSDEEP 6144:faxgv7q7Ls00JEHfYDh+zXHI9JWjsB8IwltZ0JjR4mOzmrtOz3+1Iiq:CBLB02fYOHIPmxPL2JjumOzMjTq
TLSH
T1396423EFAD44645F34E3206C8F965152C6749EB816A41A0D8748FFABBC97C32BE27241
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameUnblock.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\RenameUnblock.rtf.WNCRY
Size 554KB
SHA256 a9b2e0bdb41f9b8daac14ba638b2a51c79456eaa5d6d9f5d15ebc4fd820eb3b7
MD5 8d0f42f67c72de6146a1ce67cf0ae0e4
SHA1 0549b82b7fe2cef3d8449572d4725ae6b94f4b9d
SHA512 67a1818161370f816ef5021fdaf14abef110314f7b09b90a9e0d6b343472e80000e514c65f76b36e62826dfb87d701f0b4cbb4908d0cd63ce3b14018bc5b93c5
SSDEEP 12288:TUslfZuy6qVA5VSiWhDnJP+ORbdSQicRUppC2oTwdXlim56ah:T2ym5I7mChS6OpUcvimDh
TLSH
T1A5C4239C9437464A39683E624E4FC722108AFB9906BF514A2D867F527331C7FD2F984E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetPush.ods.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\ResetPush.ods.WNCRY
Size 337KB
SHA256 3042ee4311c6692173ceee7e367494d9af14185c7b21e7a2ed540e1c803114f4
MD5 ced3ee1b0dbb067316cd9688f982d248
SHA1 38433115e7148fe31682f231a951e890fcb3f217
SHA512 c1d2464e38032aa92dde2eb2a7593ebaede81c52cd2844469337fecdc56ea1a5d4aec54f67adb4ba59ef56acb52ecfaff7f93c16183b44743edea28d298c25c9
SSDEEP 6144:bomgLFrfNGI3vEBoiVWSDvxiu1IJ6BsxtsgkU+AXWdwlS252tFZhaeIhacndJNkS:k5L9fGg+vn1IJ6et74Yqwl15Ww7acG9w
TLSH
T1DD7423989F80A2CAEAF5DB933C50331498DD522F8C1D75C949B6EA3D5037251ECBE228
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartPing.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\RestartPing.zip.WNCRY
Size 325KB
SHA256 776a5f80acdd1f0b7b8afef71b080226f5f768dfcedecc06d14533bb522122ff
MD5 30fcf85dbe044da0c55eb7753be0f90e
SHA1 01af40e7c2b1dd202f057095db9f7e737a4bcd03
SHA512 f1ded3f050e51ff7f57672a7c7b8cc249b2e4f153a38d05b2f162839a1b0157d812f12138310d73f05e821b130d9e63e971a3dec1a9d1f0c7e965afdbb7a1985
SSDEEP 6144:5u181F/ZGmPWZrreCiFAsQklr0jVS+CLMUq5pQHfTX2Dchyx:5ugZGmOZOClsZlrwoMXpUKHx
TLSH
T11F64231A547EA51E4768EAF153248B2BFA5EF7A2EB06C9CCD56BF063D46011D308CCE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetSearch.ppt.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\SetSearch.ppt.WNCRY
Size 615KB
SHA256 657529e3a9dbb4f63fe9e20a1c8b08593f5b44033bc7782bfe0b8cda7a894bbc
MD5 6d44aae6910810f6a2c10491e44e7659
SHA1 e1c2b13de37f95f6183f58f805506933f27cb728
SHA512 5d067ddee0f5cbad669861c1535a76c9c554f2e34de9e30f8598c54412186d450d1b3b89e4a54e7b17f292d370db692e4d6eb41a17c11800ecb04597d5c30f4a
SSDEEP 12288:WOWu89tVtzy/oBiSiYJH97ENCpCKUHnqbuWa6X079uBTv:WNze/VSi+i4aHqbgxmT
TLSH
T111D4238AD62148A9E6D67FC6B2CC140449E5E2EE5582C4FADF6D07FCC1ECFA025805B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepMove.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\StepMove.wmv.WNCRY
Size 289KB
SHA256 29a2b95743c63f7b04d1d59701df4a3359e62bfae6d9f69071f044925b8681b8
MD5 dfcce26909f763a7a1af9939471b51d3
SHA1 349cbf91f076944e831272c74074fe3ce46edd3b
SHA512 484da1080d36536383bf391788f0b4209a43155adeba4a48c7eed157a398bd3c324fc337ecbe4c2ed58065e929e69512166b5de8842551b5ab1e87ddb832efa1
SSDEEP 6144:4jIH0etoNqjnqxbEBkd+BDFvoaDWIz6z08aveAnuvmJuZH9Q0jcmr9n3Jumbu:4jIH0eMqwIBkgB9gaWwamJmr7ueu
TLSH
T19A5423339A47CBE32A77B20252FF2358FE09851B96583DA8444E3A1B750793231466EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TestEnable.raw.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\TestEnable.raw.WNCRY
Size 349KB
SHA256 a79054fc40280a43cbc4a7f7be5319d71815b5f226ec2428248c084af1084859
MD5 5fdcf5e5f921ab919b2a56bdf493fd38
SHA1 875e846622c837e9e554279a0a8665e72d1afb0e
SHA512 41dc6ddf7daff4b4db7573ea4af5009671a77282a538c9c4e0fb1314c280fd254694ae63b2757207e22c4c3bfa981f4b6549b87fa94fbf8d1c26470eb4d5d12f
SSDEEP 6144:XF5TZ6iUs4x8+MpeOI1qTEar+2+caJpswJqyp80gIAiIH0CduUtnC0NUw:XFp4q4bMGsr+2XaJph5p80vZCvC0yw
TLSH
T1807423E25A1DFA47EFF022948911BB3574DA5E21EFE64B9943B3B461D19E02207F0873
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterSync.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\UnregisterSync.jpeg.WNCRY
Size 566KB
SHA256 13d004424b142044202ffdd2e6568b076764e68575c02dd31c7326a4c174ece1
MD5 ca6b08f0ea4374993b870e20c5ef6b1b
SHA1 d8e539ab4a21fe7f9c81b63c6b7778516f356bd6
SHA512 c03b3d445750ac69ecdf14f47ba24c5bd1250181f650e55ed7ce04823daf4942ad136b6dece279eb7ecc914bbd43ebb626d3a95aa559a0127a4bbcf3d7c377ed
SSDEEP 12288:cVI6KNcyoTShuKaVK8czBsN8JIjXc737a5RHgmo5tP6+:ce6ryo+180ILc737a7Hcti+
TLSH
T105C423E1F7A3CE8011A8C9F97DF67735B626166CBA159E2299307C0C3C8133A953D693
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitClose.pptx.WNCRY

Path C:\Users\Admin\AppData\Roaming\EnableSet\WaitClose.pptx.WNCRY
Size 904KB
SHA256 97ab50d85cf5dd36e8f616c95ab100ba60081dfe0d1184f034f2b792ad9b7eaa
MD5 104c6abec82a599da87ad71019012547
SHA1 5bb454d8c91030fdd879c1e91a364fa1ebaeb0a3
SHA512 10230b3d9b48c23f552e2e33fe4b8ed374ee6f7d3fcddbd4ea7d2f1acb2ef285811c5cf5e15b1e702878c270a02c8f12c81701766b4b29ba373cfdd42b9e3f4a
SSDEEP 24576:9lRrlaY8flafrcMinSHqMDdtBSvQueROu:PRYBYrcMLTBto4/4u
TLSH
T15D153396560DDDEAFDA5F2382C0B9C26D3E63011079F18F2BB611B35EEDE0892B56C41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugResolve.pot.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\DebugResolve.pot.WNCRY
Size 316KB
SHA256 dcafc7c8cf1268bff43e0cf4789d6d799299a0655487e4e81145abb57726d57c
MD5 afe4d26de4d7c81314b6ec89444d81d9
SHA1 0cdbd5770f5cb126fbc97a02d08c872937d6600f
SHA512 6762379760e89d717ca5df26ada23e91a9bd8b27a23bfe72b7a945201b8f9fac6c2f2825d76853301aa8bf658ae21e96dcc426b324f71fa865e7e6b9b5e2b2c8
SSDEEP 6144:b4eUULEfPZ7ZcMwXEsYnXbECG+gBc6ipCj4bynPl8EsE7nSrzjf0+oAx:GUw0MQC2xbjiaPlTln+nf03O
TLSH
T1916423B371CCA8D55808860F5B1A4C6906AB20BCA7F4DBEE6F153CE02A1D715CC676B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditDebug.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\EditDebug.zip.WNCRY
Size 219KB
SHA256 1b7b13bac01937ff1d1597238cf4550c451655ce048133f6fe04720cbe7d7464
MD5 cf51d2c200e91f31fe67afa195bce326
SHA1 435f5725052d8e064e928fd05d68f0775ae6edfb
SHA512 743565fd3b80a153ec5b0520f23f53631353e1b28ce9a52fa33451b73fead51bfff0c035540b7b7458b53d0b04b6a29d5359ef33fdf563ddcda019cc8b9bff37
SSDEEP 6144:Cz85VJOjVLpYlmYMesSTLV5xgTgdZxp3ay:CzW/iVLpwmYMesSvfhdZnKy
TLSH
T14C241218D611E97D911FEFC82E0CCFC06CC3BCB28F1599EAC679264AB58D514B2DC1A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushLimit.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\PushLimit.rtf.WNCRY
Size 180KB
SHA256 ed9bfa8772e79e456fb8a4b8227145702c9dd69481e20bb2765bf24520a17092
MD5 9290bf401fcee3c9e94df12cf8cd5b90
SHA1 39da29494f547353b46e78cf4e295b84a853325b
SHA512 33cce3b7b19c1abb27be727f8181fac2012efa4aba1204b38542dbdf19ce2b34c1708bb502d3e0d92fcb62c6a58a253e966d62e478eeb6c4f2957a30455e4144
SSDEEP 3072:l2ldI/nUFyk8aDrqLgXnres2rNchYSo1CFlSYouYTx915eB7zdBSe98zSdy2:lgdYApz3qLGnql+y91CAYGTx915eFd/t
TLSH
T1A80412A89486D431D90FC4E8B4289359DBFBE173198B863791C50A63D97D1C0EE8ED8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushPop.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\PushPop.mov.WNCRY
Size 209KB
SHA256 f53b0864ade25c1e2914cc662baedf3d7f3f3d2a29307f696b6507ce3c5b9e02
MD5 0745fa0329b547947abe39fc2bd8a7a1
SHA1 6353583108c04f578d6ee912fbfe0109ca6e1a70
SHA512 369018782758d88b26573f16e5e0fa7bb2a2934963df24271b71a8fb9fd074347529df85c7f983d1aa3cac67d4d54188ceb697cc938a7a6b8e02d411d7245ab2
SSDEEP 3072:RVHnmfLraUk2ovisNYAyjM0x7PoDbmPquosnC4xELrdo2sJ9jwpy/udCXaoC2R/4:RVY9roqsNzyibcCkJ9v/usJZRx5Q591j
TLSH
T1552422E8911DC79FF3D731500BD76E6ED608312B2D9C9030291B8C5DD966E67EAF8098
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StopSubmit.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\StopSubmit.png.WNCRY
Size 385KB
SHA256 c107484efc4db06274c05a92b4fb71eed9244e661b80ba63a0e59fcc6eb1dbb3
MD5 e0dbd34f98df737ed322579e20b34cbf
SHA1 ea328070bba5948a2e30028829b47a96340cf4c7
SHA512 e7f30bfab2dc7c46122b933f91e699a89b7575e1de83d4dfc7e86099166c6866a7681047921231464a56e917c49a12a6ff0edc7c8d9cd08e02194593dfa5edfa
SSDEEP 12288:HZ+iB3yfT9A3M7HTn+YcsO5/+X7+QmLAX8PH:HAiB3yfT9Ao+bsa4XJ8PH
TLSH
T1AB84231163D4C8F06A2C4E49DF6C2664B669E3391E5C258780EE87CADB5A213FF3F815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceApprove.php.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\TraceApprove.php.WNCRY
Size 307KB
SHA256 199442cd089d607cb860ca791215a5e08e3ab2f6cabfd2390b0108567bd9ab6f
MD5 82c2ef0f4616560690451235ab01622e
SHA1 5afe3fb14adc5454d03bf664e65535d0784da284
SHA512 e8fd68d9446bad4e61270f2e3a4025a9d852b0bac79dc36a1833829a3b000238f06218e4ade1e5979913127e3d01c3938f73c018662465e5513b6302c8a881ef
SSDEEP 6144:qfgLO1R+z3rDvAAtpfzxtMxfEK63uAyrLMV3O5eCk+FSf:4gLm0zP9pfz7yfEKDMVO0+FSf
TLSH
T1B264231E1FB6977409AC8C5D40B58F8BFE2510272635B60D0D1D27EBB4C3AD9AA33927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockConfirm.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\UnblockConfirm.wmv.WNCRY
Size 297KB
SHA256 ec4cbba4fa26297498773c3d72b84f53cccbf7667cf20f1a373adc31741bb35f
MD5 f4c919a39ae812ef78e3c553ddac5412
SHA1 b0e6dd93a935c4937e8adc1805bf2c3955269691
SHA512 e9d8df9e7f2968b5362300d4ee3f76f8034cedc12c116938262fe9995ad6fdadd8f7a26f719bbc2599b75108f596b885e3b36edccc7dd2df4f6e4f8c1a5fa750
SSDEEP 6144:xv++Av8He1GiEY9ilEvNN3rk1z6aH/eIzUgXcRp0NxjFDJ0B3BdmYzLztz9F+xoK:xv++Av+e13EYMlEvTg1lUgopiZDm3dmX
TLSH
T15D5423C62BBBBAF220A78221D68D50A5DE09D4810FCC5A84464D65C7EEBBB1D44DC737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallResume.jpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\UninstallResume.jpg.WNCRY
Size 190KB
SHA256 e5fb3d62bfeb152c0211a6d5beafe2778c6f162953185969286f4cb881ae7165
MD5 d7cf55048d933ed44b0006d633e8eb4f
SHA1 b07a68db1904a55989968761e403153cb7d11be3
SHA512 a9221ae206ffbf44fc9c4c76057ef1229a88eb00fe2634afe1e3277229438e9ffbce98119742770500315ec815fcea30f1278a9847e4fb1d08920c94d4e29611
SSDEEP 3072:M6yEhkULq37idwS5grFP9Gyzr/8qCG1JHk+IuqZGsoKBzPkQRCmCKu4jHoXu6/i:M69kULq3edwS5WFP7H8qs/XoKBLkQDC4
TLSH
T19114136CBFF859F85718FA179FD9F10968F092A6E28E130320194A399C6470D0E7967F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectEdit.dotx.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\UnprotectEdit.dotx.WNCRY
Size 346KB
SHA256 a112757131a9dea7ef5eca8e6fd2e32d3f3beef8d7c033d7f0748a5d8566d4cf
MD5 927daa316f37c12b43a1dd379832a19c
SHA1 15749e159bda9a67957309eb8602a61216f5cfbd
SHA512 1bd931d731a4c5d5d147a163c6c1d5eab8205bfd038b8dd58cffdcb2693f88ca0f1f2812bed104820503aba6ee77b008c10a84c7b2471197bba3abb5555abbd1
SSDEEP 6144:5LaRUcD5KvPK64kS2+XSPAYcwzMqc90SxWlgaDb9IrrgLXJKod/izni7kxMTby:5LoUcD5K3JdBg4lKHMKSKzQkaTby
TLSH
T17B7423BBD15733B72B9A9C53EB476847886369729D18A319B914F743C080286FE2ED4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishSwitch.odt.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\UnpublishSwitch.odt.WNCRY
Size 287KB
SHA256 adfa71d5e91395b2356a98b4c06d7468451af187a3243115fa6ce8b41ad736d2
MD5 0cd7ce590f1179a93f414c9e5c184d0d
SHA1 df2d78de4bb4bf61ec1268ca8afa751300368d07
SHA512 c9d72c7a096328c7a817153c7cbf9dfa1019aab24787b6b95c43e7887f21626dbd98efa9db1e50e1936967516ce7e034f12ee98c19b9bcdc5e0b8da0a26ed037
SSDEEP 6144:KAAxYWP/sA8loMIzGX54RlNmrTY/DUL/S4Z/p1AhrnusTQ:tAV/p8lDPX54RbmrT6O3/1inxQ
TLSH
T1FD5423B0194E535969024845ED8F02D03F5D02B376FEDC2719A1EAC2F6DDBA7226A1CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterInstall.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\HideStep\UnregisterInstall.rtf.WNCRY
Size 161KB
SHA256 0e09d2b84a67aaff7673d5bb4cafe0358cf15388700f811a4639be13a429bc0d
MD5 a57b9f60cffc84d98368dd6ffcc1d44a
SHA1 4121eb8263aac13a55aeec33b66c37d35f577ab4
SHA512 80446bb933183042b112df05f2b3d3ee8db0ef4a9d15a2d659270e1201d0becc8d2c54739a1b279b5a0b799745b60da64d8c7fd59c8d3c2f3147650217fa01ba
SSDEEP 3072:zGPTvf5JET3u6GsW6wlZzCVh2QDikgemuah9UGfFO0BAWLMfcbjDnIY94ifgc3FJ:zG7hJJG1gZahGkBmuURAWIfcbfndpfTr
TLSH
T142F3139A783A533BDCC653B4EBD8454060573D0AAB613C59F2A6D6C210687B4F0F1E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckpointInitialize.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\CheckpointInitialize.mpeg.WNCRY
Size 204KB
SHA256 3af1bcc04b1d2c065a972b2e9deb158e28d1c09bc074203c335fabc4aa45582f
MD5 5cec230cec0e558fbb99e4c92aa1995c
SHA1 51d4baf5108d5a9e6adc1415d12e09248a81b9dd
SHA512 0013be34e9786dc3a3361265731fad1c326cfaa14ca0f9cd3c9afc0f7fc1335db28ec808bd6f2ce07053f49da927cae0f1c790451902ec5bab323bc2a564cc3c
SSDEEP 3072:GVN3IA9jwdIfcyLV025IyDST5yk93oX5lF0c+SwJ0jFcEPe62Go4MFVI2R8jSqnZ:Gj4A9UWh5NJf0crZ5eVI2Rhun/h
TLSH
T1EC142341E65CA820E4BDA56CB49D14DFB241249A78B9484DD3BD3ADFB820CF5734EAC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyDisconnect.xlsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\CopyDisconnect.xlsm.WNCRY
Size 120KB
SHA256 b173c771a921552fc21423404e52e3fe07278b6f3756ce394e001d231d3f1696
MD5 d6ac79865fc8cbfb7b7773c620570b0a
SHA1 6a448453d8863185ba6787b6ad15c8cda0c9656c
SHA512 5f52c738b842b0e9885106a75301f675debffbdc7ffc400cb66c8d8fe98e0b3461fc45f9c239e736c2bc0a04154ccdb10db62120bddd41f7f9b75c86589d38ba
SSDEEP 3072:r60nEFcK2T1RXFcl2enXxn2UfghWFvtgDEdQt/C3fpzbj3:rbqDg1RXK2enNZ4EvyEmQv5bj3
TLSH
T104C312A446389BB45470DB09B7DED053224DBD736047EDB494FDA8121A8C87BA70B8F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableMeasure.ods.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\DisableMeasure.ods.WNCRY
Size 114KB
SHA256 db2453bbd43f339d313c9232db13e546c09709630e4a23e42ff6f4bdacba40e7
MD5 225608275349a63237247bccff70d07d
SHA1 9d552a4be9b8f2528d18386f46105a83a2749c93
SHA512 592c1e4bd270eb4562ea1023590a51189c61ae17f823806eb424d6b815dac1ccf2e1fdc2dd7cf67b272d814247a6662a446d888536d28b9397cd044acaf19009
SSDEEP 3072:NMjP0yiIa/BpUcsA6Ld8Vc1VO8aKpf5QDlrnFOquf:c32K/ycfHaKp6BnFjuf
TLSH
T1F5B3129EEDC3613417DE8956D240E799A4D8E3AC4A2004C3DCFD9ACE672C4676FCAD81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectRegister.wav.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\DisconnectRegister.wav.WNCRY
Size 192KB
SHA256 255031cf7c80d168ecb44b6889e1b3b5bccb4ccd12b21a2cd2ee9047fc29f605
MD5 91a835ee6b902fd52ef3d02f7ac89efa
SHA1 dbb920fb43e47084e9c4a1b1442393ce24a89542
SHA512 77791c818da4dbbbe363b826dbc56bc70236f1a2bdc5483e9eb48bccfb5636964f891adb419ab2eb9f31d086ddb3603e0a9d8a5c59240f0f0d3e91875e8729fd
SSDEEP 6144:7jZ5nn3+iNvoGjBYDrCqQadyIYl4v7Eke6YQ:Dnui3BYDrSaYIYl4vYke6P
TLSH
T1971423FFDCAF1A6A991BB52461EEF444C8AEB093C9421C5C0AF83ED9477B854356818C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountBackup.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\DismountBackup.wma.WNCRY
Size 132KB
SHA256 801c50e44eee71a55a97ee3584ae96dee55529c8cbb8e7d6db51c7b303f8738b
MD5 2ac44059fd680bd315a36609bf792144
SHA1 86a6dcefefbce8796956ded1be0202f40048e82e
SHA512 42ccc2161681c4382c3224465e0339d80bd3008b230c5e4e08e3d20bbe35720c49470a2f025bf3443d9338397a1d5a8f59e618c9d14319e23da18bb20a556f5b
SSDEEP 3072:THC64y7jp48/gH7cgJGKZm9oMRePqnxzN0fLU:THB4y7jp48IH7cnGgU2xkLU
TLSH
T1FAD3124FAF0F596D12C91E0050DBE1ED35F7CA4470867B612878EB219B216BD2F38E65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditFind.odt.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\EditFind.odt.WNCRY
Size 210KB
SHA256 a8e882fe318c01a43f6852d34832eb20a73e92ac9e47f3bcf48a5bdd669e0d18
MD5 2a76241bf715406c2c3bf14c94643f18
SHA1 3f2338d54930c01f88f05106eefc572090ceae4f
SHA512 06b6073079e21538c1227bdc58a91d7f7de23ae20dfd4b1df6f9747d0ce986357f635551cc31ef6328d3cfd5d24b672d3209277bac03915a555cc1fbfda1dd30
SSDEEP 6144:M2+xXYmN6He1d1RSbEyZahKaeki+jN3Ht:D+hR6He1d1RSbnXa7i+jN3t
TLSH
T10724232D293E48FA1C38E433CF320624256AB17800ED442DAAFD6B55FBD395706E57C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportAdd.xltm.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\ExportAdd.xltm.WNCRY
Size 264KB
SHA256 291d5c11db618f0bd0a6a07394514098dc58c8ec547a13c1e771b0a86bb2685d
MD5 2929f755d58b13462a9faa5cfb0c721d
SHA1 3ba0df0cf6c38ce69a4ab31554b5af3c2ba0d504
SHA512 2a43a2f6292de10090f2da3645cd2f83afeb3247dc6097c5fec808e11fc3cf130036a463f7393af7a21bf4838612cf91c15cbc3c847bb0b040716801d88dcb49
SSDEEP 6144:BJ/HcL4F3HY26O1wdmoJndNNcL6/Z1atJr+4i3mZ8a:XcclHY2f1w1J/NcW/7ah+4i3Na
TLSH
T157442388CE93DB90ED2021755EF04DC05D9F9BEA1A5DE0D0D02EB9EEAC97CC94642C6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadRedo.vb.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\ReadRedo.vb.WNCRY
Size 378KB
SHA256 9565cad74f0b45ac88de10e9433a3619bd9df67feeae47e05307c429f8de133f
MD5 82966b9ce536dd3f06a7e94c80610c79
SHA1 c1f89b08466d055c7e1a393730b092d6466b0348
SHA512 be58771cbb619a6a73b59e19eaa4dad2babc85b07f57b13fce008f0a5505db2e7c2d705b1ad9375943d8aff9b29ad86330dd959e0626a41ece8d60658ffd92d4
SSDEEP 6144:pvxJX2aMKh+Y14g++Gtfsv6JiS1mVofsCJfCZxAwLgJdod2KnJPhX3EpNfkaX1/O:xbMk+zt5JYCIxA8Ey2KJP9EpVkaFMlim
TLSH
T12B84237E12083B22AFB12BCE84417C3C3A5560D55928E08C67FE55E153ABF4DA3FD692
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveImport.pot.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\ReceiveImport.pot.WNCRY
Size 228KB
SHA256 e0149c232bb06ba53ae180cfd80e9dea8b4b50ce8244efa320e1cc836714213b
MD5 453fb85ed0883706a37c8aff37ee68e0
SHA1 bccadca1c3ac81637c91d04a884896e513bfbb82
SHA512 1ccf232488a2967b1c8cdb0fb908ede81a84e245f384f1cc8c3ae3c970ad48ac0e02958842f9782f03cd14fa1261bbbd621e137ec886d589380bea9e8ac9acb6
SSDEEP 6144:FSw+KvXGzaGqWYePd+IYNrSWAI6BvL6MiYgJ8:FSw+W2znqVYs364igJ8
TLSH
T1DF341244AD53F902BABB91DF33C149EB3402AF2364A5C46E9E8FEC3F6A0D2B45125651
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterEdit.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\RegisterEdit.iso.WNCRY
Size 138KB
SHA256 d7abeb4e70a4b0c39a73d49abf2c891dd0b715032ee60795ebd5b8702344b777
MD5 a33962afb795669a6a9cb8d674966db0
SHA1 9f5dae755f62f942372fd609e8300f1e18ab0f97
SHA512 0768821a6de19375b63fc1da049a2b6fbd2787a1fb5228d1b02bb7016e64ed804f15d0c5d912cdcf4b775bcd578fa7eaad1f96c29950fddbee6b5b7c2d4f58ea
SSDEEP 3072:809dglqbPjyggCdn117KjyDNQmdN8E4F9cDSZPK:809xLpj7Zp67cDSZi
TLSH
T1F6D323696DB4D8BB0DFD6E3ECAE680949E9432918B5B72DCE432337E72C0C60D749524
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartHide.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\RestartHide.wma.WNCRY
Size 102KB
SHA256 722c83d10e1701e2fbc3261d61143da728d8196727be3cfb909137a0055d0d26
MD5 04036663c5f1ad8e759b71cf74585c01
SHA1 c3841d7d94b94f6587767b2e4f237cfab1ea6fbb
SHA512 cd5823d92c941caf7a0a7d409149d09c3ecef302ed951db7fc8f15a207ee0aa308ba8dcbb4e3d61becd2c10fbc889b467bff44b4b2c02cb3f3bf40554ae26248
SSDEEP 1536:7Tu44cKnsi8WydzRN0z1m3QWrkUg1QOYfgUhNXfwX0SDWnva2KSjFER:7p3Wyqz1mgGkUyQ9SBDCav
TLSH
T191A312397123C5BE969C1C38F62C0FC147D52FF8A66EBDD10B8B0921ED97068D46D62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeUpdate.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\ResumeUpdate.ps1.WNCRY
Size 198KB
SHA256 51482ba818ee5cbde219d379ae4458142ef75b8a0b183ae790135ffef4355f2e
MD5 53f5e6c3580ca9b67109edcc8a236b0f
SHA1 e589f45fe6b4827b2a4b9661b92a170c3ceb27bc
SHA512 4088742e5772f605527f9db9ea3b31de10212ca1511049080b4ad13b8eaddf9a858e55bc67b3dacd5ceb82d328d9b84d2f65137b16c58efc4b31d7eff4ac42d0
SSDEEP 3072:iviLfQSS5ouNm3PBZssxfHPhvWZX8TnPOvJ20a8sasMGYHNZlYd8GefCRci:iaLIhsfBrQXq220a70tMdqji
TLSH
T13114133F07B8AFCED3A45E27DA589918C593B9402F3872481FF7745B0E4BABA5D09181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceRead.pptx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\TraceRead.pptx.WNCRY
Size 162KB
SHA256 fca0024c62d290872f445852b8052e5926e0fb9059ecbb418d52c5cce844a375
MD5 a28a477ab5860883c12f7dc444294f8a
SHA1 7296a7990cf774fafccb25358fb9fe23b4e6b77e
SHA512 69e4168d111623ac218e91ca70668a85a299ffe62591084166fa2cd5e9cbea00628688e9bb5a0ed6aaafd43f3377a60e8ab54c6ec84880d6567f8fe27853c2e3
SSDEEP 3072:9gTLKAOvOVdGr8zXpAJbKVVWbw7Is7prWrBQibROdVPjgv:9m+sGo2ar0s7MrBNROdFgv
TLSH
T1FBF312AE6AA50E907C641EBDD62CE4B7444A3FC547BDB2757CB10BC10B8DE6D22934E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockSelect.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\UnlockSelect.wmv.WNCRY
Size 96KB
SHA256 4278a61ceeadd3f59ae0d39d0d417d787dbe27ac05fd8d72d1531e09bcab535b
MD5 388f0c512822906f057b152490d73c2d
SHA1 5fd28ea0797bb70d34f767f3fa0ff7c66b700d21
SHA512 7931722edf2561e5c6e1684d8348a1931c229a5c853facee70a386e9ea048274499d7a39fc2952d993a6dd67d26d38bd3f1692ae745ebc352436ee74f4a5a488
SSDEEP 1536:Xhl8LfWUuQDqw1c3iJiKcmRKq4InJlxqMr5o+5vgbd9RabZ3fXRpBgrhgHVVX6u:87ermP4InJXr5jvwd9RaHDAgB
TLSH
T1F0A312F6784F89B098564DEB77E382B9778341C3DDAD92A2844D673D00371D3AC9292B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteCheckpoint.pptm.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\WriteCheckpoint.pptm.WNCRY
Size 156KB
SHA256 f3c126e8b28694f44b1a3376ad72cd0a43b25c26870228344e8857a7c6c29dd8
MD5 21c80026096009d46b0c4d0edb1ed8e5
SHA1 65f47463f95c4f4bd86fd0d0615ec902f88252a2
SHA512 c3b7cd169b4bc63b7969df721161afceca4800600fccbbd325ccf95dfdd06295087ff01cf14f5663fef8a44526b0481b0785de1efff30019ee0f00a36163241e
SSDEEP 3072:6dNMqM1hIOxIjIj0oRIbpAXqR+28nNsqO7/bQG1t:+GqoD5Kuaz8WBnH
TLSH
T190F3127B9D34C5627C0B5821A87E7217EBE249F8318E4CA492BA7D483B475A2C4513FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteGroup.ppsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportLimit\WriteGroup.ppsx.WNCRY
Size 186KB
SHA256 b255b6e389c43fac5f4f3f2918f3fbfb765a353ac35138bff91f820e8ec4cf13
MD5 3cf443ae5c6e69e43f53021f13babfed
SHA1 e25767285ea2607c2044f5ac8f527cc421526957
SHA512 ac237f4d756b8b8c6e313cc33e33a96c8bb233e50e033652507092f6aa7b7394eb24958d81252ae5062af4a88eef7585e0aebafc4d74987f1eaa1126a6af2dda
SSDEEP 3072:h2ziuXWTX5r6HTNisfALSTPZwWLey6VKULtwd/gElRZFWrkI3eyKkksv5074+1xe:h2mFepiAcSbZwWDctwdoElR+rkI3eyFt
TLSH
T15714133EE9711E1CBBC779EB49F24ADD99D73BF79B632109E4942D333541A08002A1E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressCopy.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\CompressCopy.odp.WNCRY
Size 531KB
SHA256 dfd4ce547f44ff63567e7255a66c00d0b856c5d1519d72ab8c7e39f5eac2a968
MD5 90f5691c0e832062573825551f0e67f8
SHA1 5cb52b67f2680beff424867e87693e60cf58ae74
SHA512 4b8636e3d77c4ffce6bc29d60eac5d7f5c959bff4bc3be5479fd3771ac7bac41aeaafd9262f420867d37cde9a398f852907f05f373096831dddd623f99f3c35c
SSDEEP 12288:EYA4V8Y97Eve+TrmcOFJqHSrjp7dk07Rn9iyYIe:EChJErDlSrjpaGYn
TLSH
T1E8C4237C5DDE92AFA8F088E0C5F642F7F24F3548AA37617BC7D985A409E32803151A97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyResize.svg.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\DenyResize.svg.WNCRY
Size 497KB
SHA256 7ccb4756432fcffe3fd38320ba7d48e67541d4dd13be9fb7cc1e9e2773baf2e7
MD5 7b001a95469133d8771306e385f6bb6e
SHA1 729a0f1182882f817dc7e0f6f96465d91688bfe3
SHA512 017c6e8e0d875fd52e44d93ad12efb880619b8775e574e561f1b8ff42825c2ef1da4f1d8acafd29ad8676cd3f878b767a3e6820bee3633cef1f0fb11292c4942
SSDEEP 12288:WdEmdFmFaFsKTbP8YoOE6/aXmstzKncmGEWHXhU6:aMssKnPxFaXmst3HxB
TLSH
T1F0B42377BDE5BF5BD0A1C0066F3D2B49292977DF2B52C873E8C26F6812C412052356BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountWait.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\DismountWait.jpeg.WNCRY
Size 396KB
SHA256 f9630233d498801987f2b5b08a6c1d309ed7b0ad87ce2ba66c7781810ddd4e07
MD5 a75c830d56c1baf07bcfd19a29225696
SHA1 cc69325fdfa788cccaee11e71098e0d4e9e52910
SHA512 292cd597c6d8b42230ad486c7c2ce103ac63913912c91de3a7774d0ac0f7679edf3d18b74f7f2da4ac925a8513ccb04c3dc5ec5fd005d4505b72e8cf1f5e59d6
SSDEEP 12288:IDlwmf4DF2XoPLwPcH4j049WfMKVRawTwBp+oZaE5g3:6wmf4oeLwPw4X9WfdQJL+oQ
TLSH
T1F48423D3568CAC930C0456783B3AA75C3648FEDB96CE5FC52B44164C42CA24B3E2B5E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterDeny.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\EnterDeny.rtf.WNCRY
Size 278KB
SHA256 2a17205f5b0518c54cf8ebdd6bc8631f6d8a3c7e67363ef926516187829ec6de
MD5 59c8df465af9d94a6ac1f35e90b5bc2c
SHA1 94414f58db999ac812656712b103d2f0e2cc0036
SHA512 a808afa665f55a0e0ede4c2fecadff82a191327176d4d3b534b322b712b236d8d28ab797dac96c21096a3cb72f7e18076ea66e7f82b23bdd69169d0de87d34c8
SSDEEP 6144:OXnRgz2khzfjraVBgHrpPKk+JlLHnvZGAocT//n8q/6FYWHlbZ28m/i:OezFhz7HLZ2HvZHR/naF5lOq
TLSH
T1CC541241DE023263BDE1BA1067368ED3F2B5D9F77C015CA983C9A37AD10A973136A258
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantClose.pptx.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\GrantClose.pptx.WNCRY
Size 615KB
SHA256 de51ac933e6b17667c228be914131a4380ed2502445c3cdfd689b2cf85f5b3db
MD5 78bf1031ce79e83132b6318745dd2bdd
SHA1 ae36c3897ed7ef036b97b2063570bd79c4e75384
SHA512 519aee70176155b56f603fe73ad6546f362c1ddb62e285a109f6b9811fdc2a26f206abb2f295f4c43a76900c782f02c8277cdca97fe2283d42a3e55649d34837
SSDEEP 12288:ZayO/Ql0pAZKgF92hsCrv8MvrPUWErH3MX42gknJG/yJjH41XAl+kWYptHcN:ZrkFg72+SrMJmgknJbEX4+kNHcN
TLSH
T1A8D423FF648468407C3DCFC97B82565AA1EBB721152652EE06A69F30F9B05578CCC33A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinPop.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\JoinPop.gif.WNCRY
Size 328KB
SHA256 762e15c0bf8e30215519e20182ed293aa3a4402a46640c54c597cdc9ea8bb4dd
MD5 404425d2bcd1c82b9d66645504db147c
SHA1 c791da008d321f05bd193cf585e53c47566040a7
SHA512 46039bcc826143dce1739f5465ac6e08e8a8d914cad0c34dcf5a5330583484ef89a2bcb24d36faa373fe0513b76dde0d071b617c2e39cfa6ba617d93b5128764
SSDEEP 6144:VS+shkWHPAnNwnNADIhb47+6zsrtAaigCDXuHp9k973d4L3+LBdtHCiYYae:BszHPA+nNbY+6ArOawXQieMdtiin
TLSH
T1A46423D23191F66CB9970DA0C3B0683C62ED717CB1EC85614093F52AEB1762B5CE26BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewConvertTo.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\NewConvertTo.mp4.WNCRY
Size 413KB
SHA256 96834fb99991bc0ecd3c7e85126002c59632b166219c9fc858a32c517eb88cfd
MD5 c064967dc35f179128b76f8b35e3bdb2
SHA1 92527f3f900775e8aa9b883730b278f349f0f823
SHA512 dea27d3335d6f5a32985a021ef9d8279cc734505a0677550e26851c22b26e4dc911e1865151e364d96979fd898e2be6f7fbd63d86ac866877140bf5df433753c
SSDEEP 12288:ly0EJBRXCduM4uLJwYO7XWW7rAqE9WYPSsuYN:ly0EZ5152WYP5uYN
TLSH
T1DE94237803B1C7F26AFDC574604CBAA0BD966872DD74A584FA583C1CBD1436F961E80E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushSave.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\PushSave.mpeg.WNCRY
Size 893KB
SHA256 af884df06728bce2d3a9b16d5331e280de1a861eedb6a6ecb3e4f4a05dfd29e1
MD5 54e3cfe355c5216efc460bba2354213f
SHA1 c5fb8c19eebd099439c0a5f612bf2677cd1c3b75
SHA512 70c5f97dc8e8f8eda5979c885c00977ea96ce391fc3a7515acd03df3e1d22489845e422e8ca0dc5bc65a3f064729c220c4605f30030f155d993a4057c2b423d6
SSDEEP 24576:3YE5ZaeAAP09tvi0xKzuMybwnn9jc3LkWGwdd:oEr5tKhxWub+9Af
TLSH
T1161523D3859E0CD51C33BBE89E0EBDABB55421229D3DE1F6DF2D29B2734849893205C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameRedo.xlsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\RenameRedo.xlsm.WNCRY
Size 514KB
SHA256 9f98781cbc7aec976ced48683be401737b06dd1661ffa95b7ad4e2e676bef9b1
MD5 92fd7b6a66eb21fad8330296d417ac5a
SHA1 fe25d230c82caa1884e8ac5f842fa806f19db2c5
SHA512 b3e6cd2ab50218f58338fbc5ae4d0466e415b659ce23a50fc6ae177d15af5480ce478da84ade349881170cc48b954e4cbb6dfa466fd3a1071d90c6ab7b5fb579
SSDEEP 12288:oA7bzXOEy8pLMJvGkHwa30Je895HfoQrIyjj+hSPBFY:3XZ48k730JNnHAGPB6
TLSH
T1DDB423393B35036042CBFAD439D82EFECD9A7DE20C5E19E6A850A053655EEB38F90519
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestoreImport.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\RestoreImport.ps1.WNCRY
Size 581KB
SHA256 e19fc5dcc93c6f71e60792a776930407d821254c5f0934d47e1a676ba0fb37d3
MD5 74fbe7ecb483606be66ac39e9afe0004
SHA1 bb0f199c856881917c79b9f8c300e19ed77bf185
SHA512 4f956944912d34ee92b5d480586c7217dd6d374bdfe3285f0487dd0df5c6f588e2caed0a0c77f32b132ac8663586a22b2d133805360b41cc7873ce1e3743a672
SSDEEP 12288:g+x4KPCWBsTeiAgZ6bk9UhI1YvDuFu9dZukxkUlv9yuEG1Y8V8An5tkA:PxfKsAe5bk9aExkxkUHya1Y8d5X
TLSH
T1F0C42364CF46C74EC7F5C16984B6F721784396D65B0CC2B2F0C6A4B49B9BA52BF09C0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallCopy.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\UninstallCopy.txt.WNCRY
Size 548KB
SHA256 e6661be3f7bc0e32a78dc498cd5b3392bcb38986529616e2245342c91077e2fb
MD5 3d359afd7d217ff972fe61ee45487544
SHA1 f0a59297297a6f0c30399401d2e6f9b0be7f08c7
SHA512 5165ceb4ae509bc1c42dd0344d7e74216ce6b5aea9fc57698a4783cce3c73d65a9867bc2c718e706a71e8d348904a48f1491a8f9a20a2f9efcbfd4441ffb0a2a
SSDEEP 12288:20DYkQSDcETuYT93I2se/Yh8eN2Ai+J6hto1CeDApwlSEWF70UL:8kIAuc9JQhV2AN0to1CjylYN
TLSH
T16FC423BE98D1DA2089CD0C2D3E3069805984E8EA889BCEC5779F4B5B55F9CF5DB0C19C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterDisable.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallRequest\UnregisterDisable.txt.WNCRY
Size 632KB
SHA256 62277bb3c02f750144a116aa0e4c99bae0be8a66e851b9440050b34fed41c0ff
MD5 34efadc6763d1ac5db7793c345baa768
SHA1 915eb5c266d314ef1d8d4a50afab71c9a3a8cfb4
SHA512 2d79e394f8030bf919fe52001c3e583efa08957ae538004bc5f5b0d09cbb2126a988ca4d147f3369fb39b0a4fe4e4110c30179715fc62bfaf3ab0045d3b3e4cc
SSDEEP 12288:acMi3trnO6GBmhWDt96AIMPcR0VtaRKdwcmSfuAC2ANzZgvLIizcAU:f3trOSY596AIn0uRAwOA2MNGsp
TLSH
T188D423918B8F57245881A51F37ED83BD999CF9ECB049BF703410BA07A78616A70CB6C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterUnblock.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\InvokeUnprotect\EnterUnblock.tiff.WNCRY
Size 2.2MB
SHA256 630c165101407fd25bbe3c416f25b841c30d16084ed470b65f2062ce8f2d7955
MD5 058070a84f6dd8d6eccf38a47a305901
SHA1 e1d2441d9fd4d8ede48d92347817b3815eb2a177
SHA512 6dc91d17c538fedd2deff0ed27d92d854e5c0b5f97f9358b5bbce66143e236712532e03e6edee8c8a6773ea3031c0b73325bd1c74768a974689f4adacd2a1729
SSDEEP 49152:JjVdPQE9f92b/YZRLuEFL6xHlFaP8oNQnE+tP55:FVdvhSBEFG9lFq8fEK55
TLSH
T1A8A5337461603B0CDEF287F902E422167A4E8F4B2F1FB819676203978F4477E55AB25B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewRepair.odt.WNCRY

Path C:\Users\Admin\AppData\Roaming\InvokeUnprotect\NewRepair.odt.WNCRY
Size 1.3MB
SHA256 c8b239546d2a41a8c0f3407e2a6c0805e48d9544b2219701c6b938add0f260da
MD5 fa563b80fa5a02a2ee6574e39e5378fe
SHA1 0a87b6378bd2e65def9e539d37c8edd003906e97
SHA512 e0e0b0af6939022dc22caf68c05c740ba3ba863d870a99bee4823b560fe7fbd7f93579d93c3ac832e64b27913a9a769b36ba3b225c965e138d4cd49461114340
SSDEEP 24576:JSkIyJtVt+NVrM35ZCiOb7QYXtOI0c0CEz7xRR9ny7gkU:JSkIHPrGCiOb7QYdp0TnvfR9y7gkU
TLSH
T18B5533AEAB64D899E768F25089AD5CF32FD8B87C130D33DD54217B1AE1D4727280076B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishDeny.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\InvokeUnprotect\PublishDeny.mpeg.WNCRY
Size 2.0MB
SHA256 60ad59ae6cd1d59967c3ad382ae010e4b5ac64ec488674d6a94ba1de99652ea6
MD5 c6408d36e383a703ea290094f923c093
SHA1 92c6030620487ec402a4bdcdb49f161818bd3792
SHA512 dc8fdfc3cf74993c27bd8c10c80d773f9169fde8edab15b77bc47eebcd9bfb9bf7b05b25e2df26c9aee732d0cdd048fea7406d6d9eebf8b0e498d08f908ab106
SSDEEP 49152:0ISEbKPmBugZ/uGcUXS1ks8czhRNeFssYGqeM0Rus3AMWC:0IgQU1gOneFssjmS3Nf
TLSH
T12CA5333E25D60F4F7C483BBECDEF4422A9AB941BAC2ED07046DE40E825E56736CB4456
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockInstall.mid.WNCRY

Path C:\Users\Admin\AppData\Roaming\InvokeUnprotect\UnblockInstall.mid.WNCRY
Size 1.4MB
SHA256 36c2b301ce8fd58ac28c2827ef2e6103d8e7235ae8352243493af926f624fe57
MD5 4778f8c2f3559df7e423c7c2280f30e5
SHA1 a6a0a1fb4930acaf8e1ef8fc5acac5d8b1ee8a42
SHA512 294df33a4d707c54eecdc4c4a9a3c3b16631d7032b40261882bfc6c66ad44177757078e2e3d681db5bc1dfc86ba064d50ee58de34288e013770d24f7b06e3c07
SSDEEP 24576:m6yKkAh1zu24pijGPyNeB9f0wn37h9BbK9r/0gE3JmqAOe29dak:mZK1R/4piKNBSm37h9K6ZsOP9dak
TLSH
T1326533661B2D5123FCC173D0B45B2C6924BBBA1E4CC290F0E5DAB2945C9E1B15FA7DB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Normal.dotm.WNCRY

Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WNCRY
Size 18KB
SHA256 29d944213afaa93426ded3a3c71edbaae4c3d56b20b84a8fb4c60c32d1a8a1ca
MD5 d82db87824f0abe7643976742af9cddf
SHA1 986de817a244fe625861c4709b180cbf6bcf3887
SHA512 9f73422b70f0ee46ec2c1175e2805838b2b9f5bae768b6ebf7fb5c532c825806217bd0cfaa3935d89140760aa9214cfbafb60ebb851f3387d401395780ade7b1
SSDEEP 384:6h0+zrWqv/OiMYTPuksIq0qIJ5/mHgefLF/kvQQ1jTcJ3b:6u+Gqv/JXTiqqg5/mH9CyRb
TLSH
T1DD82DFC79BD1EEE7A2084884D7A3331FFD33BB31ACD9AE051A7161419214B7BCD86820
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\uuwx1qmb.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WNCRY
Size 776B
SHA256 a38a9f1e625ee462781e20b7d4c69ef15b699fce415c6a5d0fead6380a5cea1c
MD5 7484d2d2c33fcbbb6e017bd60a42eb0a
SHA1 f1381354632e2e6a6bf6a5cffd5cee2742cac43b
SHA512 2bf74369d0f42c7779dedb330760f6b7cf2f149a040aac4ba8cc1570d39c1d662de48a464381dce2dd50b412f791d56a436c657457553c3d6b69eed60416aca4
TLSH
T1390120564E44FCBE8BD3597B639018B9F842C943898A774D067C15165C3DFB8857DCC4
MD5 SHA1 SHA512 TLSH

Submit Download

user.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmz31tbh.Admin\user.js.WNCRY
Size 536B
SHA256 3aebf279934e2fb5bbbdcf102cf7e873fa279308ef409a35ece4b2579541012f
MD5 76822fa36a21cb98175ef4b49993057b
SHA1 c55437bd0b9766e4917008c452f7839fd93af9f1
SHA512 e670f9f3e9d8ef3d6bb7eeab9ae0b4705774c3e18bd26427a6708bf61f4d540516b5c445701be4484522cb8aaa0df5f11a92629388bf5972d64d14a7dc6ccfea
TLSH
T10BF07541CB254710E10305E02EFD38229ADBD552717DD648BA54385A7CFDC834E67650
MD5 SHA1 SHA512 TLSH

Submit Download

cert9.db.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cert9.db.WNCRY
Size 224KB
SHA256 f06742ffb1bb27618bee5fc4d6d03c5e8f9e8e60ecb8d7c9d0178ecc587b146d
MD5 8eb0023449574a12ffd8829b0722c21e
SHA1 c1896bd6e1e79a0ade3ebab138d1b16bca758db9
SHA512 bb2690651ab626a4c02189506807f0a0d6bb4978aa8153017e246e269d7083b034a3e021ae1cb015cee968e07a80d58a7dfb5c95ee99beac162bc7a576e3abcc
SSDEEP 6144:uxlgbSPP/iR++B+TmMvdQZzwdgcvhRP5yxaiJSHE:urgbHs5mMvIeg6yxaU
TLSH
T1B72423D23C15191F2E224FF79A0DA96CC9EFE2B784B0444B5258EF7DED2934069A0F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

key4.db.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\key4.db.WNCRY
Size 288KB
SHA256 db9263da861b0dc9d13317b1d58382628f581dc5431a87c78c1d388aff1066be
MD5 49c836d6733c9846976e964e5ec3f602
SHA1 0141e6afa2355e982d8a30e2a826726f425171df
SHA512 9109b9f44149e4ab3ef8132b0a976e35f3c4c4b908b22f4a9668313eca31173014a904a47cfb1f2dd3147efb6db8fb8e5c22c901fab099ada5ca802b1e1616bc
SSDEEP 6144:/Ri2rNIeJ/bRwE+auW6S4ExIAiYhFgDVfIBkM544GLZNsY+0MJAgDcgn:/RbL/6S4ExIihFgxclS4Glk0MJPn
TLSH
T1BA542350E7748CBD3760DA0C4D2CE958AB1F690FCDEF139AAB940413DD84B96C02B6D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pkcs11.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\pkcs11.txt.WNCRY
Size 808B
SHA256 311b1c73456c20fe2349f5f6bed2d2c81860e00d47eb48297fd296d5f8879c60
MD5 ef8b5a6a3374328fe492164246a2b99f
SHA1 a0d9709584a6a39d701287829310634cc9ba2225
SHA512 996c206f9426b3192effe1e6f2f890801b487a2415fd7ff0879f31b68236bbac51c53e3871d87e192e67a917af0c5f8af14b422f57b34d7a89804c26c1a0e2e1
TLSH
T16A017562B426EC1BE13830D6D565861C059893387F60CC98124A95F2AE7525DD22CAA6
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js.WNCRY
Size 6KB
SHA256 0bed3b4425a57fcbd3aa19b7eda0985488a1943cb1b5a5989a6d12828c446146
MD5 3c1ea4b6dda09baaf3df5abaf8a8056d
SHA1 445366b9937894182e41f5603f3e162ef819d469
SHA512 500a8b6c15722ff06708916a4d5c9517db12fbab36b6121635b1416c044bdc3629df72cfd2400963bf819c8388858b91c18532c0b28d3db41750825367e1a7b0
SSDEEP 192:4pX33jxISIOwaDVdHECAMzmFG22cClqRb0:45VsWDbaYmH2hwR0
TLSH
T14CE19DC828EA57D9C02DC56A14299E7F7E8A8F331FE4C4C40A445E7A2CFF864819C31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupInitialize.dwg.WNCRY

Path C:\Users\Admin\AppData\Roaming\OpenApprove\BackupInitialize.dwg.WNCRY
Size 439KB
SHA256 180472386ef70dedb87d97410fc3ac93424ef7a527a9584caa1d6c4b10272310
MD5 46737b9624103e7738dcd691c01e8984
SHA1 1ea38deb62b8c0e6aaa771249949a76e266f4791
SHA512 aad94db8a6e75a9a502ef177fad3055ed1b59afe5c8b88ade99b724ad23c1080bd46dfd6b4aa81e3819b107972cec93209cf331873626bc94cdc7a569a52ba34
SSDEEP 12288:CbsBhT3AGo4bZu9p41yvfuy+k7nMmwnCbHMhe0iSO:CbKlAf4b2m1EffHDMm4Cbsh2J
TLSH
T150A4235EDB038D6EB1E5EB44DAE8203FF3DD7D5F94D3922082C29163A04295ADC68DC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectComplete.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\OpenApprove\DisconnectComplete.png.WNCRY
Size 504KB
SHA256 2173268f2bfaccf229509d9f0201309c446232afbdf7f87237b9e18c55bcdf66
MD5 6a6f3d6e8615c758c7bd674bb5c1a637
SHA1 6d9a3dd33847b77cc2c895743cb1171c770ea8db
SHA512 25150b63e08b445b323538358b4d84929a457fc76e7ff4a8144d575fa46834ef64c4124223d7da6eff6b828e1266f3fb76397484fa8dc76f7cbee44dd4c1d74f
SSDEEP 12288:1ykxhW6Zp/SKU6DdTecq890JNfE5VflDQr6Tkm8:1Cu/S56DtdmMXflkeTK
TLSH
T17EB423BB037EC7632270CF1012F1AB58B9C701F5B254BAAFB2695BF59080958DE8965C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallImport.potm.WNCRY

Path C:\Users\Admin\AppData\Roaming\OpenApprove\InstallImport.potm.WNCRY
Size 471KB
SHA256 330897413953536a8869c61d629f4c349f41b28c42ea510508fe3cdefea89571
MD5 9a380f051a976f0ac44b085b64d4de14
SHA1 6dc4597914f6173379e6ae9e649c179afc3e3b79
SHA512 b2caadd5c909b075d3557a0d99eeb651ae857b4f5079bc9a4cb3ef86e07e52f59031966bf71da80d2a66127509e7232cd58f32b6f26ddf406f50b8e7995e3f22
SSDEEP 12288:ALjN1T2uvizLNE0WuS044Lb1Hh/Axf51xNk:ALjH6pJSdsh6h/Q
TLSH
T124A4233D3F7998CBA0B453C4A25C1AEBCA51A681B9032FE66085F2EE5356F54343C85F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountBlock.3gp.WNCRY

Path C:\Users\Admin\AppData\Roaming\OpenApprove\MountBlock.3gp.WNCRY
Size 569KB
SHA256 623c50bbc68c4f60fb431b0d20805cb470254fe7d51906f073065b0b17b0f01a
MD5 163b084ca615c35db71391432b0cce78
SHA1 fda89795f77ee308ceda2610501b34be9a2a0820
SHA512 fa46e88964302ab2a9022fdef7371eb1cafc61dfc1aa43ab16128e1a28a996ce6ec519f2bebd6a8336ad7a9599cc9394b304e38a13b16cb33209b1a4161f382b
SSDEEP 12288:z7cBfbaei4icPRYOR1FbIZESR/NlF+d5tk3TjZFgkPaV1XifBYQVS9zs0:z72er4in+Pa/N7e5tkDIkP41SfdSZ
TLSH
T1ABC423D7B8EC8EF925403989BC8BD61932F21BC4D708D9C94955E0DE89BFA075C8E139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterDeny.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\OpenApprove\RegisterDeny.xlsx.WNCRY
Size 796KB
SHA256 b497b0e73dda741f9f8424f83709a5c85923d8499e0cd6c7364c79ef4e69e0ef
MD5 acf2a22fffa753a8ea32baeaa427d630
SHA1 d2073066d9e857913f8c18fc5bb118fc03f630f9
SHA512 73bef1487e9bc545c8050d4c713f67029b602046a50ca94819c1d0df9e17d25046e23bbc4fa849f388116da865b5b2dd014e859108ea1f8fec622db94503924d
SSDEEP 24576:2QkGUhGLN1Zr+sjMXWzUhoSJ+WyYMCi2e7qxMR3gymq:2QnRjMGzUh9+WyYD476M1g+
TLSH
T10F0523ED9032E5B2C24955ED08F44C1AB2E6FCDE82E6B54F2576A30B39C19DB63203D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterInstall.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\OpenApprove\RegisterInstall.tif.WNCRY
Size 926KB
SHA256 d506d2279d1a30682e5cecc17f8cd1a999dea472f4c8999fcab4dd67997a3d3f
MD5 df8f8f6245e045677a14ece920fe9f37
SHA1 b2f18385da1bbd8bbbd98b954470ff96a126e766
SHA512 25e30319d22aed3fd9c627ee77891dc89ef809f7bf80337813575cac923fae862c26d8721be0b7de93e2216a12c51108898cffa9074ada91a820d280fd9e9eec
SSDEEP 24576:4E6rUcxibVBqgTkCBsd6epu3ysgyMiid5QLW/WFxD/6q:n6tipBqsk606GjsgRd/cx2q
TLSH
T1471533E81436CBA58154E52CBC27FDE1CBABD7743DB5DCBC21EA8268AB04BC453C4166
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterLock.dotm.WNCRY

Path C:\Users\Admin\AppData\Roaming\OpenApprove\UnregisterLock.dotm.WNCRY
Size 666KB
SHA256 db6dd72cdfb0866678e0976c7f3e4f88cfcf6b677e929311a3eafa883a9a5b52
MD5 a8672354ec38cb3d69e4c70a5d17eedb
SHA1 84eae864b3def4f05b553681b53885ffeb89875e
SHA512 5b0255f00ac3eb44d68957226b5f779f27c45e9f19a4f7b55b72fd8deed7d23450309ec8fc4ab6dfd7d3ca1058b1a889754ca80f3926eab4e7128aa5b2b3742c
SSDEEP 12288:PC9jiyhPFrYnXt8KN9dYNrF/mnoiQim5Mfy40oW9S+qec:PsWgP+nSIdYN1ioiQim5M90ouSNJ
TLSH
T1AFE42353F40B8971C06E1ABD20F9E97AB384B9C74936383847D9E7B0AD6E53C625E04D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseTest.raw.WNCRY

Path C:\Users\Admin\AppData\Roaming\OpenApprove\UseTest.raw.WNCRY
Size 829KB
SHA256 5d0e37f610de8907200272611e8a603b985247f197661fa6c4424fb94e0169fd
MD5 d2ff74175a77799b6ee84103b597d55d
SHA1 aaba52bd709327b9ebc1b00e2280b10e5da95b4d
SHA512 8444046a746678db49c843c3c66a6381f74ac4d96000ae9a94a19ad87b25380bed1116a41b61dd581f615267fbde66b715a866cb77cf5bf2800917e6e38d7b2f
SSDEEP 24576:ZzDc+celHRuwNJKwYB/Y0ERDIan1tv93V2V8tAaKqswRtZ:ZzDVRrDK3dYtn1t13VYmnswRz
TLSH
T12905238364AB7B14373A78F942CED8D6C60E5983AF999CDBE058E0C42E490585B7C7CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveMerge.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\OptimizePop\ApproveMerge.mpg.WNCRY
Size 291KB
SHA256 ec5f73afb1bf37d943aebc6f40a72a5f7eeb27c12091bbf88d64ef98f9b58ba8
MD5 3a5baa73c9eaf285f93b6fc44a5e2424
SHA1 c9f6d55537ec36b8e9a11e77baabf97cdab326c8
SHA512 85ba7e6c527c933a41e1af0d0ae56679762f5c43342aba4d4667fce6acb166a193a48a3843bee8eb609e5a29a0dfec4a48247436ea8b6faeb68869401b08e8e3
SSDEEP 6144:DWHS5OyrW2DDdYTKN19HHnvK5wMcnVLj16ikrBF7ITsZbBlSRxSs:SH2JrW2D84HHnvpMKJpkITqO
TLSH
T18554236F258D022ABB84BBC1E9475E5D1E664760EDCBB328D3B849F25223F52025FD70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectStop.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\OptimizePop\ConnectStop.odp.WNCRY
Size 386KB
SHA256 7cc55acbe5f8018a3f1fe72f1a1156d481c55e924ac8281363ba2b4161c5545e
MD5 18d8c15b3155715aaf0f95a58d71c616
SHA1 f772e17e7972d01aaf2f29370df30411af4c3e81
SHA512 70020b1748f87632908ae6d0fec4a9c353fe36a7ddeed5c3aa9d421333296f1f622b50a62d56656a06928442a1844dcf2a6db3705de0a9e595a3026aa4ef3f02
SSDEEP 12288:GSpBDNhiKPP6aw3Dk4XmxnwQZFzJfQieINl:GSpNLiKX6/3DaZwQZgZINl
TLSH
T1808423691B454642AA8F1387A5FF1E308DC909DB3F63BD01E31FE917161A93D6CE20A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertDismount.asf.WNCRY

Path C:\Users\Admin\AppData\Roaming\OptimizePop\ConvertDismount.asf.WNCRY
Size 427KB
SHA256 ed9f6d9a56ce0da98faca12d20db0e2d37a0ea0552fb1bc552e47889303a41c9
MD5 6f127ef612ac2ffc82fc08fd1dcb3641
SHA1 ba905e8f25fd11960e5d7d8556f3b96b4ed0f422
SHA512 0c95dda45b89b3f70cb408ab52341b9065941202ba3db3acc5a030bc403df5d86fb23701355336d9d06dcedbf00498c1f8dfddfd040ffc98f5ef3a4e0e444f48
SSDEEP 6144:6TgtlnuNusQ0LwwYfll6CxkNXNU0dR3UHyge5bbz1aSElfF/kDwN7gYLiV+SqpF9:og4WY60DUte5fDEnjRLg+x1EEs7u
TLSH
T153942371B4F5A580FDA6D2C23DC81941231F19C1FEFBB42AA1AA3788854023E96D9597
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingNew.potx.WNCRY

Path C:\Users\Admin\AppData\Roaming\OptimizePop\PingNew.potx.WNCRY
Size 196KB
SHA256 2e89ebb9eda8a06eccc887de10aac4ab2cba08f447c546af7bfaebd6df0c7b77
MD5 777219d3174ca70c79044928597ee379
SHA1 bea82bfef5c068c48a1eb63c02689728f3c2e96d
SHA512 da0ce79a934a4111c443efd53feb91babd1933a8f8d7c0a0f5f7964e8e7f626a4cce21d701dbee11e2e531aa7ff6390976d10d7fcfb3eea7ef1566766576dd01
SSDEEP 6144:C7Sdf3JDpaj6eDnr9DDhVLHFiwSL6jdzL:W0fBppeDDnLliZW
TLSH
T13E1423FD82AD50FF4D149B19646320BBF0D246A3429B71FAE48EF52E134CE449FA113A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchRead.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\OptimizePop\WatchRead.avi.WNCRY
Size 440KB
SHA256 8d58e6128af32ad90a7210b92d9ca6b7a0c37f3b8f0ca4356dc769b4072065ba
MD5 efc309001c54354be9ed0e2c9741ed23
SHA1 f2692b868d36a8703b99ab9af28bd79d8ac2fc0f
SHA512 95ae0faaca8152330f83c389c95036b12e427f89120543faea764ccd893bed0e8bb470c522f204e46aa22685a68b2e9422d536b3f8c4227a72539d40bf0ee496
SSDEEP 12288:bjZvGavXcmd3xb2SYKFaquOUhlCyCwJfeBDb:blrPVd3V2wFaJOUXCiwB3
TLSH
T177A4234BCF01DDA87BF66F8FC9250A42F65B1F839A878488D94419AE201BD17779C1F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseSend.raw.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\CloseSend.raw.WNCRY
Size 265KB
SHA256 78722d27701513739b59cff4737b2659fb60fa755e193e31ea6fbae8f9453d10
MD5 22de140460d7364bd1020a748f252225
SHA1 4067c9e72e07715ac9b8507c6c49340613e94f3f
SHA512 88c0606b2e3aac4f29875ce77eb7782dc669c0ff6a7423fa76f9eb66447d84c681119b47bdd2f141d14e7f69d6d330a44be6f60be4cbf060f84b01f52c74fe58
SSDEEP 6144:AH8S90LWuk2PYejES65vvnm1KOkOcA4PHxA:C/0yuxuJnKx0fxA
TLSH
T1484423077A1D902961E7E8C1B729EFD0CBD4173EE894979BB9F1B325F98DB210682181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertImport.ppsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\ConvertImport.ppsm.WNCRY
Size 287KB
SHA256 3fe1c4a3bdb1aaeabd6b4f5e19a2a64716ba940747950c51a1262c7edb73883b
MD5 5eb8e508798b76ec7350938788bc9c05
SHA1 d08971246c973f6c5b0c22b2c2994011481610e0
SHA512 35f26d7a81001509e66794ff36e3020514abc64ede5b2aa95f66df7ad4c3652986f13627655952a5fec7b3fa20ffe92238e924fdea51503a440dd8a2fbb29e82
SSDEEP 6144:5RxB8aJhscz7dZWLNLY7/6xD2VL0GLGQMaOhq0ZzecU1z54vibz7g7:5RxB80Zz7d85EGxDEVUg0Zq8ibz7y
TLSH
T1CF5423D4D3F3A1A12E64B03CA0CE581A50DD892E0057B24CF6BCDED67D14AF69C2EA75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyDeny.bat.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\CopyDeny.bat.WNCRY
Size 475KB
SHA256 47382e7ca7b7251a1b56222e218a517e750b6b112a02da4f5c1593d358433dbf
MD5 154ce2d92116ec9283ae3f7cfd03cc63
SHA1 5a62df0cf285e5121dfbe2c7094ff6448875295d
SHA512 e12dade40b11a42d84949876d17364c0862fe01ae4887a603435ea4da07155cde9ccd7460d9821b980e154fe3ace71c75ce175e97e111ab9d89703df8ddeef12
SSDEEP 12288:Xzezdp0s7Qy40a+g1O4pYXki238fD/W0IxpcRk8i:Edp0sMnvl1LpYXkLODO0uCNi
TLSH
T15CA423B5EBB41833D3FEE14BD101077E295016ABF8903E253968C47E96B13D99B239C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugClose.bat.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\DebugClose.bat.WNCRY
Size 409KB
SHA256 6c8c65957612f091bc545027efab4804ad8e76b6e4850c67226b54f365c7a929
MD5 d1a1168139b2d53c79b3384982f62fa3
SHA1 78acee262dded5cc77d1c81746d881ae27904344
SHA512 aefd6008537de87f2619233f4f1309b9f02de3af907507feda674ab159d6ecbf5355fcd897c1d4517ee8467c1da8cb090a9b333b1c57faaeffb6b443b2828d2c
SSDEEP 12288:kzvyrmh838gTge3qmvigwyogMsqh/QmnqrmrqR4L:qKr3BvqmvcyHMVrAlI
TLSH
T101942342663CC8B2B24A2E5EB87EFC04173B26485C1B43E792EBC983D4D55E7E4F4589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinUse.7z.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\JoinUse.7z.WNCRY
Size 575KB
SHA256 26ca4a0c0f2d08e895b85a7a9ba991389c53fc159e74716efad27009de1d2430
MD5 8a4eb93dca50598fc31e7d74967f2e62
SHA1 412f52734c26ac7f8b6cb91c7a2c5d91e85f2f37
SHA512 44fd62c52101a50c2c76535e040efe643a440824f7ec0820177a7fc375ee7d31c5d7e164c337002936c4841e75c981ed794775eb93428b6f5a1c49b824a10acf
SSDEEP 12288:c6axzCphlG5rKe/b105r5EHB80P2LPva2wWWzJ0Y:cxxmvCB/b165EBHP4tPWzCY
TLSH
T17CC423C6CC47B6DF55E234DBA0A7522B47B6E94BC106A340B06858FA2CFEDD9F7444A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewAssert.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\NewAssert.mp4.WNCRY
Size 310KB
SHA256 773d60b115cb03324f7379d555fbd310ba9c7938ea6267a073ad221dc9ff39e6
MD5 17d17082c6e368c045ed3d8e05ff2db3
SHA1 83f55108387713ce7882b03915687151bc8bbf03
SHA512 7231f9cf59986b873f3913e6c2d5e5f539b34fc786fb0657d464f7b295085271c313c35ce7a0b6b8679a84fe37203a5d1631459dad2a5dc204d87ce078625753
SSDEEP 6144:GrkGJoqQBDdi4RRBh3cgBKDWTRAthYINvoNDZv41lV8rbKGmp7:GrkGJTadFa61At6INwBZA1lKrbKGi
TLSH
T153642346E80DC2A1F01AD4518D763E7E73FA14B0658FF9EB82949D1183BE6836B4EC43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OutRevoke.asp.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\OutRevoke.asp.WNCRY
Size 254KB
SHA256 d52b5d91f4e5606812e463652b3b270e5f422ed33d03f10e22ae738e65808261
MD5 7be16008c904ebf6e61875d818a1953a
SHA1 4448efe6c55ffc895cd59d63d4717d7c74fdbbeb
SHA512 32ef8b02fbd3676e17ea143e35f993fa5887bf858ddf539bb998bc2d09bd51d9d51e9d14dbe6575cc46faa8f61c1c7720497e4530c5f0bc2bf0a5ecf151efd42
SSDEEP 6144:Zk4a/3Fwcr7sPbDevTUdJ63PK7btQyhH6qHbmtqNL169+qe:ZnavFwavTUdJ6YbtQywIk6
TLSH
T145442362550BD7F335E964359B39B249130A70EC748ADE0A8F16DB4A6BC8CE449F1B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishSave.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\PublishSave.docm.WNCRY
Size 431KB
SHA256 03d67defafae0499dac05c8aeb5df6aa478e84366653b956799dff00c105ac60
MD5 0c46275690c877ad896309c5a737f78b
SHA1 1d1c1bac62a231b6c09110cd56bf6c58baf76da1
SHA512 d6a1d0bb9df810dd41d790818b39e7c37f7fe392bf47d30ec09131bc4da2efedd7048dc211b3d3d011fa7ba61b79dae430799ddc5408c8c10bfc8ac8ebe788a6
SSDEEP 12288:htM5jjYOHnmiEUhi4q1EfYTCAYRZZb7Zg58+dBHzhxuL4gS7Q:uYOHmi7o4nn/3ZW5rsSk
TLSH
T19094231DB79CC666D5590F9B2F6803F83CB6468E73C2109813B81E356087CDA6E5D3A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveUnpublish.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\ReceiveUnpublish.zip.WNCRY
Size 442KB
SHA256 f2601c276134fa4487a4e8dd69b40ba4138b70009b2bf7f623e13cc1080a7ae7
MD5 a5a1628b57c2c73aa39958885317f388
SHA1 f44ba004022839466d25702f2239b1bac1623dd8
SHA512 56747de5c9c07beb3585ff17c98777a6a711152a26db3436c2a4693c206923bd0e86553c5483772453b66401d5414fb1c08402fec3191fd05f16b260e7e493c9
SSDEEP 12288:xa4iQsCUjwaISpHDDE2hfaZfhh9JSoYrNLWEdtk:FsCKwaflHzYZfH9JS3xLWEdtk
TLSH
T1A1A4230AE0ED2FD87C93F57117539620CAB4ACA3BB8A4805016DFB5C8B7DDA14B83795
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterResume.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\RegisterResume.wma.WNCRY
Size 199KB
SHA256 2ab8af2f412ae1ce1d4c3a5f33c1b3425f20f23f648eeb244bb3ae4f44a0fcd4
MD5 066e88e4ac86cf5c8d9c9beb2a22fb57
SHA1 f226450fd67ffc8216fdd6e9523fe09a61c86f85
SHA512 abc82e4a0f98480e368b84e0cecff78250458416cc3d65e1b9b7c1e4d74cc92819dc32abfc3a414b76cc3ea8a623e7dd40e85892cf7abe2b3084352deffaf6f0
SSDEEP 6144:Ebx6JGiZN3t6zsLqg3Y5r6uSKgAZ6SAVSSdz:26F9A8qgoYS6Syz
TLSH
T1991412D173B4281F35BED6EB96171007A47A146142201BD284BF98490D3DEADEEAF82E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveSwitch.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\SaveSwitch.xlsx.WNCRY
Size 553KB
SHA256 81a4e0794e0fbfd317567d1fc5cb3e9b981900cdf6ec6fa052ebfa93e8098541
MD5 78710131cd2a8837113d87529c274977
SHA1 382fae8cf50d7c987387235455feef5dae32c405
SHA512 5fa2d627046a381a961792cdacaa9fd71b4dedfc3475bac6f0f19653cf432579194751479243832dce81aaab3b452609d248a1f511f0b1dc532faec234e6f2b8
SSDEEP 12288:2aMtfDAHUaI7Ma/Ko6gmbhk1CP6baiE6wR2VokWBJcZ0ZcaPg:wt7Os9ij69agU2YBJcZ02aPg
TLSH
T1BFC4331C191339C8B32872E8A12AED13871B77D3BDED39A370A1E6569B351D4D6F0C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchRegister.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\SearchRegister.mov.WNCRY
Size 785KB
SHA256 dac92012043a0ddfb8eb9fa06b8a9750bd18d6b9a1efd56d2346c4c5427e5375
MD5 c4f53a04f487bfcf3064351932305528
SHA1 8c9ddf1ea3574cdb18ff2441528e12c2e04b2e90
SHA512 deb2a042d61f8ac46204ff6d4224276e2f51027646ba7f65277fa00474de20e685ddc73c9e9ba3fb3e73cd6946309c55720066b67a139dba2a5c821054e05574
SSDEEP 24576:EiXEC9mwwxRovnpjkZBPSGJBhq1bGK9koq:EiXEftoNcBK4Bk1qNoq
TLSH
T1620523DA8D3A23E7EF90E8754092D5903061EDD0711E9CA740682B73664B2F4B8D6FF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepGroup.asp.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\StepGroup.asp.WNCRY
Size 232KB
SHA256 1939a42e593827a92e575a8eda24c559b1b636f48fc931eace2616b8612c8c7f
MD5 f9b9976b97ae6abb221bfcfe40501792
SHA1 98a069b69b56c5d32954d4d78964f310d30a846a
SHA512 718a89657f6ed8b7d6d6809b428dc7bea2bf74b761561b5de0f15e7781d5545aedbd3e9c2a9250d27332d41b283b3469117c72f61ae29d327d984aefc8025c40
SSDEEP 6144:nrcBG0Zx5VnYlm/mMBLRt4kCPU7iB4X0Fog:nrcU+O8/vdtPCMiBk0N
TLSH
T18D342352E608A46A01EDF0E07E6AA336FDD18197F93A2DC05C11F7EB9634138B6175F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseGet.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\PopSwitch\UseGet.mpeg.WNCRY
Size 343KB
SHA256 f2a9ff279e2fd5c150974655ff0ea5c27c99a80dde13ea095166f8412da92a35
MD5 d67de0896b250eec78237020981aab84
SHA1 80e9fc09e1986d43a7637e93c51215e84edd1150
SHA512 fd4ba61fc2947c5d60daaed07c197ec1f94f652195897433c9111efdf693fbc13e043621cee018ee01734e184ee464265961b34cd5e627cadd13ac6909546336
SSDEEP 6144:3oj/jrdMmBP6yPjh30qTjn6RkjDcUn2qxc2zWEgmGOJOT/pAfU2kTSyy3oDjb68:4LB7hnTr6Rg6Hrm1lxou8
TLSH
T19D7423DC7F27E3EAB1BD402353B5D4C89A06561C3984C848D92A3BCB2A4684A3C75FF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectSearch.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\ProtectSearch.png.WNCRY
Size 455KB
SHA256 01b0115121dcbe0dd3a41e9fa67e8d2ed856558dd02dd7aae5b90ba61bfb4094
MD5 bfb6f134ba659f935ede9558db420569
SHA1 9217be0a2a0e1138efbc5d9e5ca834870b47b16c
SHA512 4226984aa794404e3b6216a1f9f0ab46eddb49210914a1a82410d371e3f19696759df42fdf60025fc2ab27913b874c5df00f1e17ccee85e3c7e020a03b2057b2
SSDEEP 12288:onp+8AYFSd8ThFqnXVn/ylU79qQI7Z8Hl+JY6lFAyM:IwCS8TyXxyeFKo0FbAD
TLSH
T175A42341C51B0D11FE2406FAA6036A8B74C67F6AB27677EE837B7A0B42400077D5DF66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadStart.vsdx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ReadStart.vsdx.WNCRY
Size 512KB
SHA256 e667115dcd842dc26c6b554a97621aa69ca1c7530304ceff33c7ec5b846196d0
MD5 e64d6d9ea68e83ae09d02c84fb336ed4
SHA1 19aa3a524037c9d0fc29aafda3be0ac5c6ceb40e
SHA512 a26b2683374265405e3790b63ae8a4aca66f669be0fa0a591d419ed4a376b831b13d77e504a33679b8fb3957a773fbfdf1f59a5c90c0ec0d3db0cf2b4388bd7c
SSDEEP 12288:aMsax2DS0HO77jlpIYjT3QTcrfCxRQUv5DbYB4kqK:apaxEOL9XgTmC3QsBK
TLSH
T17DB42336756CF55AF6C2DFAADB5AD602908071A3DC6308EF29EBE4F849D2014BE58241
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveSplit.doc.WNCRY

Path C:\Users\Admin\AppData\Roaming\RemoveSplit.doc.WNCRY
Size 682KB
SHA256 99b6e71a2847a5f39c5f4926e043960fa72a5323c1ddbd854bf2e1089201786e
MD5 84fe62f203c14aab18ccaa8d13e43605
SHA1 39979ca0e376f3d46624bdde747f590e0cb810e1
SHA512 1f03d0915405fc352b2c3294954daeb7bad71e583376206c663612cbc108d63a9b50ab80d76f51c0e57451da0a2d5808cbdf13bd3b0b8167510abec4e13eaf67
SSDEEP 12288:wu2erwJ2gaUcKCe4oIt1Sv1uDpxPIk8/W5pI3WaRnhOYcM2PRrgABUelUNVS4Lv:wKngaUUt1+uDpi/apLYs7ME8A9lU79Lv
TLSH
T13DE42311FC856F0DF8CA235B351693D1932DEFAA88AF4A82901E7E9046374C6C5F5A1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeEnable.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ResizeEnable.xlsx.WNCRY
Size 1.3MB
SHA256 9af532f8aa9b0aba21dbfa3f2d26661d79b2aa9a93c7acb0256b67ce066ca40c
MD5 bf3b902752f6decb7420f1ef40dc566e
SHA1 155a77ccfa2e9f86c240aae6a207ab05f943500a
SHA512 808014780bcf5a73096411ebae2761c2539b9d058dec5670564ee2b0076d476c06c10be8e8936e8550d59a7de262eb1030e47b06eeff4f13a2be64f2855a341e
SSDEEP 24576:yRfLzjc5OLL1QlbYHzg9/SrFdU0bDIzxCwzhYghF11xx2XYz:8vK0Wl0Te/SrFdhYzxVzt7bUo
TLSH
T1BA553349533B888355A868B3466BA220473767D5FB3A46D225C1EF12CFCBB9C1CB419F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetRemove.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreAdd\GetRemove.js.WNCRY
Size 928KB
SHA256 86440c7997a95ececcdd565ac93f814e28b0d5a8a5b1996a1e4a1c6144720f8b
MD5 df17db2e9e789429320bd0dd9b80e491
SHA1 a2d3c41d0ec04f57073eefe49f4b9004881711e3
SHA512 df594225085a82c4a71e99e58fdab1c2d883d62cdc58162546b80d2ec0bcec908c2107bd4645d65b3f1a9013d39bfe543c60f1cd2ac3d7e690da840bc5380e60
SSDEEP 24576:utECIeNuGfs5TWuhmnGKlLH9zGSzZ71Ve/yc34MEx6wsxHukOvO:+DkToZlLdCSRe6mEsZUO
TLSH
T127153307C8EC153D81136EC7296752843F03826F5D5DBB96AA0EDAB832321DEFF11696
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupMount.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreAdd\GroupMount.mpeg.WNCRY
Size 832KB
SHA256 6be9f536acfae287bb89ce775ccbb81f5cb2a0dd85ed61413d1feba34a87360a
MD5 169ce4faf6dd410d0a0eeafbe1bf15ce
SHA1 859b630ada2d698bd1ef2ff541da47b4950691ce
SHA512 0fd4bf187d8d0f8398f1e265faf836a19d0819f878586f8cc3f56dc69185b37a2cbc3241d3952216c451ef4be7fa0807c5d80d14c33ef5d684d72f6a23ec9f74
SSDEEP 24576:CEQZEkdXRlcJZfVr8Y6a6i/hb5XI5ea/E6x4w://kdXvoZD6a6YqMo4w
TLSH
T1590523BFE58E8DC17048C605A7816DF0FA925EA59D3834FF1848E20AEDD90079BF95D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LockNew.ppsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreAdd\LockNew.ppsm.WNCRY
Size 480KB
SHA256 4e36ad29cb386cf5491d23debe29f36c1185066f8d0b33ac60ad8558a71c479b
MD5 94c3ae7487251d4da911b128f1135d00
SHA1 8146dcc8bfbe54a64ccfc42ad7a051c6f369d708
SHA512 fa72a9d591c17071857ed7af27ba26943a8176a1f88744cbf093d46b52b58dc4f61842681a1bb334fe72d514d19c3c6552c0f2616dc82cfd413c6e1ee857de73
SSDEEP 12288:biVlGhJWmuF6fCH5SI+Oj42SJxLYshWQ5W7Lh2RJpI:WVlcAmsf4hL3hr5It2RXI
TLSH
T1A1A4230566A3DFA37F4C1D85DEE319C2692B64F44C98DB21698A6F8F84F8B313311897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingTest.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreAdd\PingTest.png.WNCRY
Size 640KB
SHA256 f6fc095e66ab43041f34eece7796a81da44fefb867d193203e5b66b7cf134a16
MD5 df6fc0bff7e41b25f1d28e77ea359b10
SHA1 d5d6af5776a421d6e36e73131fd1a5ebbeb7c233
SHA512 36fb08db9cd0747a5e08f534407d07a87b8a59c954c9316fafe798042533d9d6afb04d876f4c4d502b89ea86b80151cc754ffab0bb8219013dd4a403a49de9eb
SSDEEP 12288:BXPsskbuq60xjp2+329e5v6pCYEVv2myqqpy2GXrUaYd3:tPauq6JVp0v2mybpDsUaYB
TLSH
T1E7D4230111FF9584DF6CA0458FADBD262F4ADE188E7B6E73114123172A4387EA86F17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolvePush.m3u.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreAdd\ResolvePush.m3u.WNCRY
Size 960KB
SHA256 a50a3793ace2567c2c3c4ac5a21c1fcfc5cd60982c36d1ef4fdf9019a00ff6c2
MD5 b3726a6e47df92fd9acdf3fe61f88fbf
SHA1 efe57f622a56d4a78dbca59f6ec3176285e06a17
SHA512 56cdac9f425242d5bc235eb07a5f29d6ac4fb9cb4dd7d5a59803c840507e54b0f5ae2f0316d9143562bc0392f854c6768f32bda83fc887d1c8f70af573694081
SSDEEP 24576:dbeIbt93yZVThWC+9CJgP5r7kFRNazwlzopx7ERTsG:15J9yt+9+oN7kvgzE8pdEOG
TLSH
T1C02533C0E49C7F55DC9273BEF79242201B95CB338256E37826389C4AE85342E396FD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolveStop.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreAdd\ResolveStop.docm.WNCRY
Size 800KB
SHA256 4eab0f4f1ac7d48d567aea26abd7d0785767292bccb073bf5dcf2588902db9cf
MD5 2473c0a1435b6331a5eaf63cb8c4e55b
SHA1 9ec6dba9f5ef84e89960d9b0faa62479c844a112
SHA512 0f148d2e9f60b35bdc7b67e57c92eb2d4326554ae123a3c1193be5bc71934dfb1372930bdd97d4c7494917c87c91f7112a481ad41e114f94db20e31bd72ebdce
SSDEEP 12288:lNEzRiQ+kYod8LI3iaITcpoPaVc7SWih+BLBWxdDO8/kjnoTTeJl6klm1Y:lHNdCyJTeAaVcGlhCBWXDJMnKsflkY
TLSH
T16B0523759EED5EC7826A939894C1B841E23A6EC5EE2CC8EE71D142521EBECC45DCC133
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipMount.cmd.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreAdd\SkipMount.cmd.WNCRY
Size 672KB
SHA256 26748e1a9521f3512ae07983cfb3752dd8d8a478decc0147ebd548e9dae80d19
MD5 20124644a600f9dd9d289ca3822c3c9d
SHA1 1cfe85bb469940c3d6ab50628d49985e2a3562f7
SHA512 f8ad1de0926d31b1c6a5acd75f1269cd1130442a15795f2c0281d0d02adbd930d3e0054a4465df819e42d0cb36838aa937cf7b6f901f4a50412fa0419b5ee867
SSDEEP 12288:1q7xCrStvWQ41wWxeNgAdVbkDJQy+JpTBp/QKr+cPGax7qgDyuY+e:g7craeQPQeNxdlfy+phj2ax7lDbQ
TLSH
T11FE4235D87220D41F89A831AC9E3E0E312BF2917E0B969941EF7BD5EE41930C706FAD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StopSave.ods.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreAdd\StopSave.ods.WNCRY
Size 992KB
SHA256 6599f302a5f47767d1f654480226f50ee0923dde94c6c9f105b6227eca897dd6
MD5 9dfab104eaa70beb7d88fdd8161f58f5
SHA1 70fec261404c4add10e2293f2972d98da6ffadc0
SHA512 e057ac3e140d0e72c27e5817b0b34ad2b4ff2e4f7feae2ef0ea1f42ae08ee64448df49a7bccdaa9d0b3daeab6ffccfb8c53b9eaf8ceafb576c090db388885a4b
SSDEEP 24576:b3IA4cs8qwr0Mv3VbrlCVVAIZWtfEHLPIi/2o9dy:+L8qU93lCVogLgi/2oTy
TLSH
T1392533295E813AEE8E79F4840B7FD67271A4B64D03CFCD19394FF348CB4A65A4A53280
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishClose.sql.WNCRY

Path C:\Users\Admin\AppData\Roaming\SetGroup\PublishClose.sql.WNCRY
Size 825KB
SHA256 fe668d6b466378b6d5a5117c1d503bbaa85bc2cca9eb741f635844dd52d3161a
MD5 a8162172face5c67a9d302da51be335b
SHA1 05ddb9114acf34e0838ee5b6739012340afe8ca4
SHA512 a23bfc8d51522f6437b12a74866d4b2e648241f5a30b9d8eb8e32c38e7b390be62f6848fa1ae7b438e501adc4790877d560c23260d8938acb15249ef662c7247
SSDEEP 24576:O+A0wAvnKFRK4K+TiZHSAy9Ur3P5amGtNKN5BkG:tw0KWN+TeSA33P5yAX
TLSH
T1730533041C3F36D98C8A19CA460E948B741727AC22C67C7CE6EF8DD8F31AE979D58517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectPop.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\SetGroup\SelectPop.tiff.WNCRY
Size 1.2MB
SHA256 bf56dbd7b52073eec64fe76877bb6b203748b806d0502050868bac13be246021
MD5 313bdbbaffdc23575d87756d8bf94af7
SHA1 ed550a0bd20c62c3a78cf97fe8d2b521411a4956
SHA512 92a4bb80ec3b8c32c6308c70cb79d3b73ebb0641cf30a909c0bce92e89255fc568863855798aa2db289e019cb51e89f7f98d72e6258c191f196c7e37a00ce457
SSDEEP 24576:OC3whSv72wRx8Ol99bae/Zw6k8DItNSh8Mum5opoQh6aE636s:OCghST2wTpntaeBw6k8eNOaEopT/X3V
TLSH
T19B45333AD311EAF1208117A801BEAC2135A37338189D6C5C1167ADE57E52356AFBFF6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitBlock.pps.WNCRY

Path C:\Users\Admin\AppData\Roaming\SetGroup\SplitBlock.pps.WNCRY
Size 1.4MB
SHA256 2d5f2bcd9246c1300fa1f567147e118b19fde39590939f283918fa18fd0c4b51
MD5 389e13f591ddece6a3c13e10317d4c69
SHA1 b21cd8edcf1dc1a5448c6ee74c313b5a575c870b
SHA512 4b578e05b48ef22e8ee056917e0f74212caa6f469334eb018ab76ea89af10d2cb46634e523f68e47544b9145c2b69e9760366a41e433e0e438885cb93cf4e161
SSDEEP 24576:JAfrmygGYMsR+NY29QOungEqU+qMVqD8mWhrgmtwBvWxidcr+qxQD5R4IX2qshgf:JSiyzvc+Nb9LunzqRqMVQ8mQb+vTdcrs
TLSH
T1566533C9976370C90FE6AC05C26F6BA16CD663F8B78E50622234742D9CEE4744CEB598
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitConvertTo.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SetGroup\WaitConvertTo.mpg.WNCRY
Size 1.5MB
SHA256 0caee3d874c98b89def1ab66b068d952b34da88263373eb225736ce259d540d3
MD5 01d7c6d9cc1eb1f14cc3bf2e45c48c1e
SHA1 b903d07712b8da4070aa24d6d42905a73f693841
SHA512 c76d1fa2374c4dd0b90db212ff8f8d2c418d064ac54bcdb10afcea9488220c515b90e4307284e67bb11f545a2ddc5aaea9525dee4fe57d6ccf3e0f16735215b2
SSDEEP 49152:mOjBX9+NozhxRtxsOwXNQW7dcLj0b9jyjQXPLNbWRh:pjJ9+NGhXtxsOwdn8jA9jyjMPxCRh
TLSH
T19475338B51ECD041FABC79FB57F31730162536C420D9A701852FFEACDECA65A92B2816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompareConvertFrom.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\CompareConvertFrom.tiff.WNCRY
Size 317KB
SHA256 c46944589d1865779465168bc07371c03dbca1ae20926169e7968fd9c037be9d
MD5 3167441a33bebca18758854a10ab77e2
SHA1 942838985526477657d5da6794f2f2b47e2a8299
SHA512 ed1b26ca7d85180277a9692ccc7da1ee3af79b0b13e64c83efec8b4c3f9cfe8bc9865cf83443c473584f57548c0a5bf910c05c954f8a4083a0aff2dff159d25c
SSDEEP 6144:1vDqU9fOonxvl2IKrQNQP5qJF0DaGQMGwS1oLi1z6TdEKbSkSQrr3SylRK1Ii:1vDqU9fOy2trQAqJsafoyz6GOOy/2T
TLSH
T16F6423FE4EA70F73DC5E105A25B0972B3AA8145CCCE44A7E0ECA782F243D5516670CB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmShow.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\ConfirmShow.jpeg.WNCRY
Size 536KB
SHA256 443452703d920c79d52db07ab82d870b3750f4a27f7680a436013118e8e5ff02
MD5 e8117f58d5d37bd8b85a765418165e31
SHA1 36430e5294bffa6e5b9d4f58fda5065740662328
SHA512 53c09d0ba231715bd373011cc9a0296ed4a5dec39de1c344d5244e35dc20e68b1defb0f8250d1d6bc934bf7e0bc4b68493b09019e206db8399121ef82cdbb484
SSDEEP 12288:cKuhjkEai3eBJ517VJ1xpnA5cIFdKOULrx98OT7btuX9y:cKuhjdai3a31Jxe5csUBr93tuM
TLSH
T1ACC4230B8DAA2D61BB1C42ED50EAF40CC62D5C6FB55160EE3453489BA61CF4C4887FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromRead.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\ConvertFromRead.rtf.WNCRY
Size 427KB
SHA256 e376ae5858adee09741ac7f4100de939ed344bbdfd3b894bf452850fc614a120
MD5 f43fd5a5c690e36d25e375c478a93881
SHA1 7cd4f797b6007cca703959eac5f3c0103d66be45
SHA512 34d770cc55c8e1f1602d84ac90f963a1b752f4b2beecbf824caeb5e41463ebb527a10bef24cea4926c7139f9a38394b620be32e342edaeedb4efd0e89782b9ae
SSDEEP 12288:Rnm+lobfZry9A2nhM3oxtxVATj1p3oNNoH2kSuW:Rnm+lAInhqsbEYN2H2kDW
TLSH
T1049423E0A14A19DBF966B417EBF7E961CF1A405DC83E430184B7C835D39225DA68B33B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugEnable.ppsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\DebugEnable.ppsm.WNCRY
Size 298KB
SHA256 ba50eed37648b7215e7e4485321910dcdae6f62c7e55d04daf944f6d3cfe782a
MD5 be387f75f9fed5ac498423a116b2fa57
SHA1 c653633953b96d7edbbb10b9239c0f20afdbdd62
SHA512 cd793f42356f9e9500121ba3237cee779137f69a96b4974bb3451d9edcf2855602d84e7d54f33fa45fdfa1c9f83219be85a35398a0c9102038e05dbe3aa9a81e
SSDEEP 6144:dlpf4bKwY7D/wVf8SuvBWm/vGDFMJRe6NL7Oejdfwiacjk:XgKJwVBuvBHHG5CjE
TLSH
T1165423979D46CF80078B99AB4DBA38C866DFCCC610D3BEC6D63A4738451D3A885D4E4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditOpen.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\EditOpen.wmv.WNCRY
Size 238KB
SHA256 cba8d6e61aeec746cffa55f74aabfad372751b2512926483b004477e24cc5629
MD5 56c06137f7d3902a4eb497878d2d9840
SHA1 9959fa6398a9ba2c1cd2520ad9e9224e179bf2d9
SHA512 7f853e72e60fb229b8a140e6683cbe73aa3c1595476929382189cbd24807d4e9ce681ad1be82c0717c476096d3d5e2f5174dbe1d6c0218c23b18483a973d0f07
SSDEEP 6144:/VzbWQeoQaV25lYEPheniK4o8jVneCOJPzzEm7:FqQefgbkha4BnetJfP
TLSH
T101342338F8EFD1A4A47F3BB45D4BEF500D5675D479B54A8B9290B0A427CB83A1E8024F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditTest.dot.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\EditTest.dot.WNCRY
Size 347KB
SHA256 fb8fbdbe557945e1a4d77f67e9b5ba17ef5ae7d7ad3b63b18bd1bf6e45d691de
MD5 17a6d85da773f12edcb225f7450e0a8f
SHA1 bf54a5593c030fa8054b21f781ffc984f6411eec
SHA512 cc6d5b7d700c1eaa2bd2610cb1cb72cf39342dafa294d5e3c1d8c5fad16c916db3f49ebc333676708248c3abfdf338e4bebdec0b0be736258ed5a61bbb13ddce
SSDEEP 6144:FxlIkAMdxL+vbrmY4LVjV4EKnQ+Mh7+dRoq+wAdr6u+dAzbhgHZSfaz6oQIz:LlIe7euY4Lv4EKnQz7+dWqCdu23hg5nv
TLSH
T17C7423A820543E694DCA1C3CA650CB77FD6ECD3AE5985CD0E9B462D1AF78C01CE3D629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableRequest.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\EnableRequest.iso.WNCRY
Size 516KB
SHA256 6a2cfbbf6ad98a3c81680f1c43f53666cbe6b2c5fef349a2ed5c7d72c443d2c2
MD5 434749186ed7e65a1ce7fc41f5a45c7c
SHA1 c5f30760f00c29da9535632c7396aed36aadb35e
SHA512 2b562f717714203e8814a2771cdd8f722bd467c4d88f8fb3017364e2691a08252c7099fb75fb98e2e52f14c662b8d3104ea3727651e22a4ddb5c51f4b23f9879
SSDEEP 12288:+4el6oR5bXcEd+cz7yDFgbXg1ecovj2Q5zM6mQSWNWJuY1Swax6:+xFz+cvXg1Z+n5zvmQtQVSZ6
TLSH
T184B423E9ADF654462DE08C6813CB49D792143F638461F90376A5E8E7333279DBA2E31C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeLimit.xlsb.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\InvokeLimit.xlsb.WNCRY
Size 367KB
SHA256 59bb0a433ec68a53f668f565b1b8bb7c95c1c69f81619d517194a95f1e9d8a62
MD5 000a4cc40f86cfe2d5422bd022802271
SHA1 f9b333fe1b535719d6cd61c67737d76490951f98
SHA512 84d0c297c0e719eb67169fea220db09c4e74df5bb8989ca16b11193f2e93c5146ae262e5df1232f12c69bcc352418a449e4ff79bb12bdc67c41a06b97acdf6a5
SSDEEP 6144:AOCamDe222/yBnml8xGYIIlwKGPcEIy5EGcW8xislBvRktcnJBzy8bnC2NdrIut4:Olt/cnml8xGYIowKmn4XxFvRkCfOIC2k
TLSH
T1F084230AD3D926BCD66FD26F473F195A4FF462341C0F3686BA8D04D1A5118F2AA6C8D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountSubmit.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\MountSubmit.docm.WNCRY
Size 476KB
SHA256 f03a40bb937ad2d48ce9e0d5045ba06e85603b9f706724bdb5438cc98dd53589
MD5 3106eea0a9d091496eb54f72f02c140c
SHA1 03e1e996aa3347a2f9690354087df5db281f56a1
SHA512 7908916fc75cb17deda08c1dca10299ffb4757dd505122ea6310c91f726925a2a8d10671ab52f1d6c10a387dff007495caeb475b9367b4a0b5a7e7e0e5b65169
SSDEEP 6144:8B4NtUY9MTmGDlEmrImvVCV3MF9y7leX+ayYz4QPqO3Oi2nNox5LK1gLnwfYoWFW:I4N9ctVCV8FwimO4QyO3OW4O9r1Xs
TLSH
T16EA423A85E879CD6262E24630D066B23F7196689128584C3DEFF1E416FB36B721B3D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushMerge.pdf.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\PushMerge.pdf.WNCRY
Size 407KB
SHA256 ffb5ffa347a4e5ef952bf6d007df92cced452db2e3e30bbe7078de1cb16401c7
MD5 8d9b3eec8e06925c066e9a4284f89b36
SHA1 f013b2028419fb68403225b8e3f54322c11485cb
SHA512 2427a01e93528005c917a7195d220fde4a8cb3431c7e2812b2e458d4884aafa6e2bdb332927431dae95fddaacbf7cee6e8612bf327497cb2546da33737bd82f7
SSDEEP 12288:FcfZDfTjTB2b9yLOU2XrFKjDEX39A5iWOl+4pik:F82wOnkjQX39SiXUEp
TLSH
T1D59423CF3E7B5D1C4071B51EBCEA7C89D60CB8D4EE21B35603765B8651A02CA3A81ED6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadStop.asf.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\ReadStop.asf.WNCRY
Size 377KB
SHA256 c21d2b9d596de7411595f4f19b1114138bcd1768a60a09de2bbc0326438c4276
MD5 09334d719a108e9138e7d0a57fe4c49b
SHA1 76a0bc02997cd2a470c728ad174a1edc3fc8f518
SHA512 5940b32e7d41fcff3de8f7ddc90ab9b929a2625c758623f28315ed7edd2e60a494d482bf993116519e61b2dd20a7684b59f143ddaf7cabf15428df46757c37cb
SSDEEP 6144:4k46D7lc/c9A8mnGK68DkV8RgrksOndG8VifgelkDUknuMMW7lwjulDml9JywNbS:i6D7lcU9mG6e7tOdGYH1IknuXW+uDmbY
TLSH
T1D084237EC7B913386928445A035D760878EC5CA8D73FBDB1C5617EF0B1B6AD840B42AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveDeny.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\ReceiveDeny.gif.WNCRY
Size 327KB
SHA256 a6ff93c60b5bc130ded4c55296a6183f95b182b8d6be7777371500242fde4088
MD5 816fe2fe19c2eb63d191d8f133ed5a93
SHA1 7621e7bf1506fbb574a9642867a4f85bf0c27eb6
SHA512 c9d9ad887ed4fe683e963e1cf951da0071ebc674ee4643afbaf4085cea342d585c6f495413a8398b67563b0663bc16cd208d0f2218ee58ce5d01a7a7f2274fa7
SSDEEP 6144:T+MeUKQlCc1c+XoGghe/efjYj8nieXiSLXc5GwSOp7xsa9PPXSTWRPQridY:ZlC/aoG/YC8nieXDLXpQDlXSC4Wu
TLSH
T1336423C5A4B8687AC867530C5CFC3E9D20A65312709FA9EB4147F07847BDB4AA3A3D71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoUnblock.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\RedoUnblock.odp.WNCRY
Size 417KB
SHA256 78e4550c961c51fdb1fbb88589b11c978b7256fb83a73515d18683174ff68596
MD5 69648e193d05f59996eaf3eb1f7694c0
SHA1 a425d493cf154caa7a7c525c7016c9aeb5373672
SHA512 4582aa0a7603030a7ba412265d86a6a11ecf2fa16a104f13c2308ccdb6255024345097fb146a60d6a9f00f500ab219abf5621dcfb0f591c23f6845fcb22f6932
SSDEEP 6144:XFV8+CbCETVjyUmc+UUMhdbbegXu6EtQ9WLf8BM15ePrs9zRAWjJ5UzSDLqJzxme:VV8qEtpqURNyt8WLkMTPqWgWDYNme
TLSH
T12D9423B9706D2E36A47A288CE7EBD18980F01C3F87F5507997AA4FE474D1B2C86507B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetPublish.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\ResetPublish.tif.WNCRY
Size 258KB
SHA256 5051f3ee41f2e23ed68db518e8e3709a1ab71f2d302ec6cd257bdbbd31e6f5b2
MD5 c910237884c9045b382fc1bd14c3981f
SHA1 43225b847f36c065a7eb9ae6063d0becfaba470a
SHA512 4a680759b7c783d5c0373cff5e8aaa8ac3ef083cc8211e94be768a60b1c2c4411dd5471f662cb3290240a8817ec836670c1bd9c13beabea60c5bd08efd420366
SSDEEP 6144:m5AGW9J2/vuRkZ4u6xfESpbCPfoTtKy0Xk:qYJ0WRkZ1GfGPfEEy0Xk
TLSH
T1A244234E6E3C595E8B174C2AFED431FF6159F272C1D0A29FD609C7E6D8A00E12065B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowInvoke.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\ShowInvoke.iso.WNCRY
Size 288KB
SHA256 c2af1ab278d8eed35983bdfdf7ef7f262532f8a59218cc60b8d99c24255bfc6e
MD5 39d04fdc7e416411808746ed593b0e24
SHA1 f766f6b86b2a43e9e322396f73f24176ef7fe329
SHA512 cd79705365831ad300d2954094c9af8e0c149197df9b45d992faecc556e5b9be708d4c500e6ac18ee4aeb43939fff237e785bc4cfebe2eca75e21891beddc632
SSDEEP 6144:3OFkmj3NlRC8rxLtdFpumGNmAj/ezlzKdpmv1a6Q:3ODj3o2LDLGNmm/epKTmc6Q
TLSH
T1235423166360889763A2319BDDD84429DBF143B80747EE52BCF813610B74B9E0BBE65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitPing.bat.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\SplitPing.bat.WNCRY
Size 387KB
SHA256 1e3950c84bb50a3ad9af7075a4781b1955facd66ed914ed77c6c0f5c3bf0e81b
MD5 880b4bf45ef60eec670d972273723848
SHA1 9e8a5bc1fb0bd3bf44233583c95f405259b5d55a
SHA512 4b5d2d9e24f06da9603c2bdd4e1f68a111b1d6b499b73256211c27b7c1043508066e23207b0444cc215c70decaa9872f8040233b804330854ec5a3492db96722
SSDEEP 6144:fS4CHf1RoivfX4P58NiUhteePaDi0+yHim1aK0Pjyb9m6dY4f0vww1HHpeGzqi:xoRV3E58wUhtC+yyKig4cY4MbVHs67
TLSH
T1058423D98709562DA12F35AF8C17C72DDB21B72FA15226CBBDF64DA3884CE54140CA3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterSkip.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipJoin\UnregisterSkip.rtf.WNCRY
Size 337KB
SHA256 d9183bdbefb6cd7b2bec9865eadbcc8a376c221c061025d7cdff379081ec2099
MD5 238091870bb6bc1a39c29f5ba80f45d8
SHA1 0d2d4d59a6972cd3e0e251447813d3fcbde95e1b
SHA512 90c6b115d1326420b14f8898b76eab84165c305792c13f67bfc457f84a6b657728b19fba6563d788d3f7ecb2d0b8cfd5bf351bbba3e359b660d0f0b080b84f6e
SSDEEP 6144:nKZHTMFL0z8JQtcrcKjy5uYM1s/BnxTLjEuM+uPJ0H846ueRJIuQ2Jpr6ayHwZTO:EgFL0oJvzjvQNsV+suH84S06Xr6aDTO
TLSH
T1DC7423CC7E4976CE2C37008A8686628DDC2DD6BF4994FB72E0935B00D8D47F94638DA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockRemove.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\BlockRemove.tif.WNCRY
Size 684KB
SHA256 e1a4f9b1535f86f9c0df52e528b6ede9a8c7c1ce7f514bffa729d06a26862215
MD5 eb2aca9d415b450d4da0bdf4da0dd814
SHA1 1e13ab385032dbc58755898845c3b95c2d43427d
SHA512 17e023cfe769ed87867cd7ac28629dc566e9e05d2c2e13ec7f8c1d17c32ce46bb4ba98bc04ac93973e32a225fb5ece5e2924ba4dc6191b2b321292f6859badd3
SSDEEP 12288:AQW0V/nDQXPj5LRQYPBT+uPeEB+sliUyvXXUqbo/wpDstMJ9ix1jIQhvIO:AF01MlLRQYPku2EB+sl1yvXXUqbsmJZE
TLSH
T15AE42324C239AFDAC90A31E9AF11FD69AADD910F06769CF6631999034D27B0104DCFBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountOpen.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\DismountOpen.mp4.WNCRY
Size 720KB
SHA256 75f0e988f387e36de3c92780cc6da26ec430f04675dc8163fe8e6ad6e8e7c7f1
MD5 b45447ae414dc1a717e4b16de968d0b8
SHA1 3778dd14865e28b809228124980e11c23327842d
SHA512 1d0cc66dbfdff3a05025459a70e4e7847e859cbac2ed093107321b74bcb4397f51ab36b16db6df57dfb3f333ed0495b98ce26190f686945a1fac546b14470ec6
SSDEEP 12288:qF8sxMEazWPfALmO2td62l/i/2WZ6MULk7o7TPcl0T89/noj:s8sxMEaS42C6/i/8lLYokl0GPY
TLSH
T116F4234CBF8C94B015320DFD8FF9622C6136FD821AAAF50B419DC116CDC3696C9399AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableRequest.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\EnableRequest.txt.WNCRY
Size 342KB
SHA256 fb220f693b1b8bc73af6875378cf69f252d171658030893a49c683d30625567f
MD5 cf8d341a827a9c480ee02be8849e6202
SHA1 0db43abd9c8777c8521e8cbdadb3c864d0e98b09
SHA512 6a093342d98724de59b7d127d8df7ed4226d89bfe8dc480c1e9c00d056d7e52d9e5fc16c06e166b941ac1dac262df137deb56a106ec4e61e1f6775c243d837b2
SSDEEP 6144:jbnsFGG96/ZQ1JJS56ImndkyRD/0GlcbLiVUYIxpkO7:3sFGVZQ1SaRD/4iyYcpJ7
TLSH
T1257423335185887348476EE7C201FADA4AB27F6CDD3773D91A06DDA5E20AB5C25CE8C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportSuspend.vsdx.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\ImportSuspend.vsdx.WNCRY
Size 792KB
SHA256 301656b4ff7599ec823915c833cc316ea1760daabc34b05bf3c52e6a3acc1138
MD5 0e0f7c1c46809fa1b9d8af7313a3c3e7
SHA1 8da37f3bc567c9db567297320df55c608748242c
SHA512 599b3636dfa34b10ab82b9ac5f497803da0b0d63993eede7e2e7daf051a116777914f23f3466e42744e3e1c1d74b7640ca857e88d2add1c61c692c9258116159
SSDEEP 12288:S18h8uIS1ZcsWzK7y2Z/E81llv9cwISA0SsM3ZDAfkoKXdJaLApejLJqS8lEZ3Zc:SqtnMslv9cwIS6Au6sQVqJlE7WB
TLSH
T1200533A3E36878249663E731CE9972FF3903967B0651E40294CB6F5FCA076C5CA10AF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeStep.xlt.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\InitializeStep.xlt.WNCRY
Size 558KB
SHA256 26eddb4126eeb350e66c55d3c2dfa20f69e07e23c31a61eabab061f3912fba77
MD5 163f597ff6bd043c64d678ed8d2e4976
SHA1 8ee1da94056b27759dc4979c3f75cf22206a7b7e
SHA512 822cd0e051c6f622b6145ea8277f42c72f014e911e2e0f6f128854790112e6105be1deca754b3fb25f6080a5527ec2f42d86ddc3b26c2c175bb71eadb5c6bb9c
SSDEEP 12288:uAqYsrKPTIYQbIP2gXgQnDNewqthIuaMIg87jefA121y5NFXF8:dqLrK0YAIqQnDwNAfgwx2c5NFV8
TLSH
T1EDC4230520B770B9D9E37E7D4AA9DB21D783EF69B03C06404F0EB1D4B7A59BE14AC984
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureExport.ppt.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\MeasureExport.ppt.WNCRY
Size 468KB
SHA256 901a2a726a5994c8a1a975afc7b3593ad2e22150a1b921ea90445274c5407464
MD5 d85c613b9e82f40d23d294430a7d72a8
SHA1 8e67d5a790c6f0b21c847bc03318e48a411be3d6
SHA512 5540e4e32d8e4a0b338e6515d2cc1a02c8a93c02166d23ed0fbf1eaabad97ee8f17f7953bf370acf7e6d553ee21dfbdc34a745c9c8a109e2918818a1dffb21bd
SSDEEP 12288:GrvzZRJNHmb1vgf0GFSMm+lVGBptGPr2EjFp5ai:GHrJNHmb7Y3JgtOr2EEi
TLSH
T1BAA42372919F68AB1979838E5DEBDE2CDC74708E0174950B6CF1F846DF63852F20AC84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MoveDisable.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\MoveDisable.wmv.WNCRY
Size 324KB
SHA256 f6ac61dc839dff6a6f3584471e3e3597bb4142ac5bee81588879ef975458d49f
MD5 65bd67269f117b0c289c71ac0a658303
SHA1 e3216fb171fccd005acc3d6ccf6e7b5a0a3a0e85
SHA512 0174ddcc232b142af69c0f408314c545e003dec5b6bff2188de8019e1b418c04eb88d467527e2a070abbb11787a365a791cfb600edf4a23e57e0d3aac8f6f832
SSDEEP 6144:VxVswZfNPlXdLrXMQVXwZxSwzB2DsG774yopItN2GX3T9q:11HLoQ5wwNDs07pKItN2G4
TLSH
T1FB6423B0485FF1362275FD4685AA08446C04C8E1D196DDBEFAC4A2939C46CD2B6BCFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MovePop.ppt.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\MovePop.ppt.WNCRY
Size 594KB
SHA256 cf157a6b1b3813b8ac32b6d20d0aaec41f98556c761f767573f0ae09c1eef4ab
MD5 fa5076f4f996cd0751575a65eb0e8173
SHA1 105a4585d32828a7aad9f072427bda62724c8138
SHA512 850222dd51f0ad124ac8af549c055be3a151150196934be643d0d4ec7f43e4ea3b70ee1cebbf5f0d34700ae5acda6609933c948896a7ff3c2ce3615eea2a3320
SSDEEP 12288:rTszhytjoEfMX8pmSMpoWryseatBa9Ez8eVe868JRFKmMildg8el:rw8t8X81M2iLekBa9EIec94RXMilezl
TLSH
T1BED42397CB5EA9A925DAC29ED6C38AC11D4F8B5C3CEA07F8144351A4918DD3E84E03F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewSubmit.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\NewSubmit.txt.WNCRY
Size 360KB
SHA256 71b081d3ab41edc3fe5ece157923a4b99a78fa2a5aab458c58242a8c0ccedd86
MD5 de541a49b81168d8894cc97dc4fda7b6
SHA1 5cdd4635033e48bec9d6f9f3923511d04b60e6ae
SHA512 b6cae22646e0c2c71049ce50dbde6e7263f29b458b56eb38be08769d5a2b37431303947f38667edcc361c42601261468028016df8da2f118e4bf18b56a5290fc
SSDEEP 6144:nyoCRvBtvWrT4bBaZsNSaYiA387+pNzulfGcKJw6UKcK0KgYGqjl:qR7mkFaZkYiKXD8f1SUKpqGjl
TLSH
T1517423736B9B7F7A70E254C5485568C27AE19F441F8A28C4E20ED472B78BCB471ED232
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OutMove.mid.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\OutMove.mid.WNCRY
Size 432KB
SHA256 05a3df4f576d15fe5badd002e10175d826d1dec31b962bf573ca85b3edc9ae63
MD5 d3199973b934693ed664bd27ea25a2e8
SHA1 94743c3b8b673c4f971a44895ee797af6a571a12
SHA512 962755334d43ca1f5d2e28bf234b760ba51386ebae44bd64b027a1e506e58cca342899cc8593a80ca92ef83c7b665e5970758dfe8d535c41f8b417ac6236bd84
SSDEEP 12288:eF6VNVO9T4vHR+DvkirTzCPSJ3PHtPhJE0jZIPu:eEV30DvkirTzCm3PHphJE0jZh
TLSH
T19594236813204ECDF4D69628972DCF8D2D017355BFACAE73A8223DEF534C25179AA4D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchPing.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\SwitchPing.mpg.WNCRY
Size 378KB
SHA256 777372ca65fee61e23d94d018b7480b51e8dd6708aa90a1c1c80440dac5948b7
MD5 684cac77cf59f2f9a0384fa9d3e904fb
SHA1 90dd5bde4c6915b8b9f89fd26a56b5e7573dd368
SHA512 b1341230fa70bc922453dee52a8c5a06ce3e9e1966fc0cbd73ffdfe99f69f8f099a95c83a24ce08d1c3b85f320fe4497185a40e8a316b33ccc94db8ef9342f5f
SSDEEP 6144:hwCXoGn8AH0RtKt5fCm69M9nJYsfvzL1Sdz5jWhh4p1Cqsf41kiMzNdKRRFz2kYC:6goGnfURtKthC7aQKlSdzEhCwrfekiIY
TLSH
T1F684231A61C41B9974E32093D39AC32D447B6FE4E0193EDBA8AA93C7FDC1D5673509C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishCheckpoint.csv.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\UnpublishCheckpoint.csv.WNCRY
Size 828KB
SHA256 a256e494116cb4b8d9b28e5067006c6bf618808f8a304a669c565865f81f6356
MD5 804e6b8570150e2af164eb7e0202a75e
SHA1 6238988c036d655cc574b529ff5f317740fec8be
SHA512 9e6b7d1d0dd350fd826ec08905641a6d8b4dd57e1149ab65c78d0ae70e27ad2c82bb392c65c77a4c2b93350184e9b69440e1d27314e511d6bf9d447c61532ae5
SSDEEP 24576:irV3/V2WlDTuCEnpqkOQ9Wwtn3ijIH6WAp:irx/VP3BQcwlijIaWAp
TLSH
T15705330FABE0C1697B766E36D9B19FC86FE35D41AE144D8FA16780459CB0C2C349278B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateOptimize.pdf.WNCRY

Path C:\Users\Admin\AppData\Roaming\TraceCheckpoint\UpdateOptimize.pdf.WNCRY
Size 522KB
SHA256 e4c5e843696beddd72a162eb15ba897489657e86cecb69d34914f9d69893043c
MD5 4c35ae3b9e709b0c4655c633b5419114
SHA1 c10418d1e4cabf059fd11d8d98173b4dae120b6e
SHA512 584ad7bfc72b2b284fa0027a6e7350f98c19205220b35fef7594ef63fedd1df9e026c03f80dff6602df83835785a7ab84ef88e32c9c12aed5826a1dd947f895f
SSDEEP 12288:/NIpn7Hm4dzSGlGKopW5QWJMSjtVXnlkRiv6ZkE7bhwpCNtIoDxW:/mpn7RY5DWnbDXVy6E7FwgNt3Y
TLSH
T1BEB4233C52FCB905C648FE025C8F716B16B2598A32592A3DD58CB7DB653EC3D0D02AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseGrant.ppsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\CloseGrant.ppsx.WNCRY
Size 553KB
SHA256 7265b003d8185bfc7dff3c333b0a133e9f5605824517bf7cd1ed8d85f52a63fb
MD5 2ce98911c3a3a3c7a5f6706fecde7661
SHA1 9e96748f34847bbf787fb44ce2ad57e6656ee39f
SHA512 26870b6174efcd772d71c935da201881147a358e791d36c45b010821d1811cad01ef901b00d388cc2ed9f464600ac1c66c7042bc701e3381bbe724d09ec3ada0
SSDEEP 12288:OgjMdCHfnwdRSkQSoWswCFpgTHozX1BBBaGVVSEQRy7YKz:TAyKRZIWswE0IZBKuz
TLSH
T17EC4235FABDE6062753A1B08BF9188CB5D4EF62B1989C71019F9EE738C529C014C46FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewSuspend.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\NewSuspend.mpg.WNCRY
Size 322KB
SHA256 48e516fe745cfb6bb337673de3547e62ba7937425c23f1155230b40e5a70a1af
MD5 45307e86524838bd3c26b162a57b91f8
SHA1 f6ed2328d9b08860da2b5a9a653246efca54c4e7
SHA512 8a412e87f4bffe6a74ef262aad270b953e1b4421ae0077eef6551d46c93682f41d5cfcd68c5f29774a2e2d02592d805b84126f1143e4c0ab0daa0ea997ce2f12
SSDEEP 6144:ZbYWHOYpho/OzWhCKugOBxmc0gT1f30706NpIygGxywM0yaPy/5n+qKDqNdci:7aOzrVV1f3f6RgZwM0Rq/3KDqNdci
TLSH
T125642315E33E366358F06177D18BDF499D50A92F8882078DC167BF5588A9EAACC1382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizeUse.sql.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\OptimizeUse.sql.WNCRY
Size 529KB
SHA256 0648dc3870570f83637051473c0ba2b3944d7d8ea9bf477369dd6e2fe28fdc8f
MD5 1329dc8d7e1629c2a484ad2fc7c5809c
SHA1 6b052a70ce44199045ce6a25202b426d47b256ad
SHA512 88a2ab9a2779f1b05437d526f8ab6b95fadd81f6209345f1f606396ea05428fbc3e918309ebcb21925ed3e48011714f7bdc56334546e793d933be454a916cd58
SSDEEP 12288:bssla40BdYGnH8wWeuIGYBgfgFOKMrel6pKbnxlFYUR:Xa4kdDcwW2BgfFKMrm/F5R
TLSH
T1CDB42352B57C397A512D171EA01F16F72AA3A7BEF12BE1AD45EF0212449FCA3D06C234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushExport.xlsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\PushExport.xlsm.WNCRY
Size 460KB
SHA256 c1ecd8c9cbd867bf7e6690ab4d7c046166a40de40b1d4feb78e4add0c661e079
MD5 1cfdaad8d8afc914df4cf19c49e7eb67
SHA1 46e6d312b47ff361dd2f40bd3472e864ca2aa3ca
SHA512 d8d6421ef8ff0e4f320e5947c0512747096e4dfdfb15068812cb91e9ac3fa46c9e03e898123cc846b5f864ba6fa219ac12c431039f0779882f1c8d27285652c5
SSDEEP 12288:/m/W2N1LltJaV2E2arJa0ikLOPt6Vs8iQS0r:/OWSLP0bnrHOPt6VshEr
TLSH
T152A423E928523F44C691B107D22A21E1025FFD817F6197E0F1FA19BEAC7C27D663A60D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairGet.vbs.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\RepairGet.vbs.WNCRY
Size 253KB
SHA256 73d04ee9b319c584dc6a342920403937609604f0837d4a605d57b75ecd5279c7
MD5 77b2eebf29564580740e30e6902fb864
SHA1 946e121791d753eaf03dc808672b9d75ca10fab7
SHA512 db105ab7ed8973fc9c0c8bda56e08d4a0475be2c67cd7fa487fd98aacb7d11deee360f59f2ca3476c610b86dec11591b021c2b7b5929476a632903b3bcd5db43
SSDEEP 6144:cIPkQQ82JwKqvJeOsnNd15wJCP9v/6eSCMChY+ZWxS/7Hl:c0kQ92anJeO2oG9v1WCXZWw/7F
TLSH
T1594423AC30861C1FF5BE50FB583575A7C611F214A88E9C01ADBDEC5D9548C8EAEAB063
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitWrite.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\SplitWrite.bmp.WNCRY
Size 403KB
SHA256 faf83a06cdf0c4c33f459ba9bca25a8e8dee230ef40e78f7580d255fcc408c2e
MD5 5600c6d3ae4e87cb44ff841eba61b761
SHA1 60505ba82b964a9b3d7f11ce15f31bf57658a5d6
SHA512 1be64fceb2b75302716fa1a892a6a63a59b6105fdda95b9f57e417f612322e665951416ed4957cab6afc9fd46316a7c5397a0e6845f9c779ae16ee60d0453fbb
SSDEEP 12288:2aKg2dJAhtSvQmvNSrZrr9/3nIOxXwdgN:zKh/AGvZFSrZrr9fIOxJN
TLSH
T107942360AD6A22E4234FF923BC3B58915B1D801CBCCBD40ED63196B713A729D379F958
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartOpen.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\StartOpen.mp4.WNCRY
Size 345KB
SHA256 c449d3d0a8af14af3807a6a93a7c5a26bcf25423d18b55c79b89db79c620a034
MD5 1e06176c89b603dd97cf38b3c2449ef4
SHA1 d83d48804a3b4f2854e7237412a9301227d07ce2
SHA512 838bcc689f0b1e576027127a379c6d62742c853df9d2a1af12db8592748e7661a5435e379ba5c4f0b41521b7e5c1620a05485068dd6585cbb7b3eb7a383e4c0b
SSDEEP 6144:yG7n89OY5SHiJGBufxmWSosinKeWVfEkp2Rd6L52Eiwb9:yGUr5GBySoJnY+C5d
TLSH
T1F77423E67441251BDB60D4EA2D84329B0F45331E2F1B8D6B9B00227F9E7D659B0783EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncPush.pps.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\SyncPush.pps.WNCRY
Size 483KB
SHA256 f5b7e6c415d6256704a4de6c64a1dfe47a34af5153c44a7d97543332f7db0cad
MD5 7c0f2421c241369d4f8e03dd45cb1fbe
SHA1 5df8633dcb66d83e1ab25a96a57a694c2c591248
SHA512 db0c01d5249f87b2d4599b06d5c92c5a358d02d0c1244d10e7fa99d2d87f0179803a94d489c1851eba804e8ecf2826fc60ed13d86734e08f68b4cdb28b3e46ee
SSDEEP 12288:pXCyiaictBLgLV5fHPDHqJeGhZ1IjQf9iT06fz:pCstNgLnnDKsMjI0I06L
TLSH
T1FDB4234FD440B5E7176C92DBC89680AE942E38B1038BA4B4EAC7E7CE592434B7E1CD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceWrite.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\TraceWrite.rtf.WNCRY
Size 518KB
SHA256 e88d114430144d2650bd4ba7e4fc861677a11eae28e0362b0fb1e722a1476c73
MD5 bc1e6e995dc2415baf863b6dbe052239
SHA1 12483c6fa6e7d3ab453214549e7eec0d7535854d
SHA512 76415fcf69d7a6c8eba057a5d817aaceb081029ba9cd1de381ee3d4d8d5a58287e7297c6f61531c384b7f638454833147fece40a2f267618bfefdda11e572ffb
SSDEEP 12288:U56Ijat1kbf7KiSkyAQztAM+N4yQcUSPNEwYoc0:UAnkrmiSp+NYcDu50
TLSH
T1F6B433F20C05AEE03AC33CD58248BDA652BE5F93CA840DDF4B86775876A1ED1B50B476
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoCompress.vsd.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\UndoCompress.vsd.WNCRY
Size 771KB
SHA256 90f056ca55d9d330c33079c0bcdda285f8921141e570a31e5251c09b86125d35
MD5 1ed47a73f82c9eb41f79e70e511e80a6
SHA1 ab3d6f37623d49d43528e36238663bab6281dfdf
SHA512 6d25c66f76ba6f29c3fa0b871bb2e2a370abb6b672b2097c2f097d46a782b6ece5252e09fcac853187c781b70d1a1a2500668df53da0cfbb8f95bf3d74a434f5
SSDEEP 12288:h8iQm8U+fdFh3us6r9FL5yqcKQZmuaDTFEV3hGgvXDH1DeaY2IR5xisG:h8l+od7ecKQwoHH1DSrisG
TLSH
T1C0F423322DF839880C16D603664D4E4A7D464789ECE7BB3DB5B136B93E116C7887CB68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectPop.rar.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\UnprotectPop.rar.WNCRY
Size 311KB
SHA256 7a43c4d0de4889ac28356147ae316b1b9c73eb0fbcbb2258f469ab8ca8054cf6
MD5 1fd6455699b2ca1a82e1768ffcaaabbd
SHA1 6b124c59fdec10334a18ab6c96e016b3f6c54b64
SHA512 efc70b2ccd556fc5ca9f2250f638340c5faa713bf5b798575f2f827781905395cb3ebdc38e812b2bacd80c21af6d6782dffc3b58e0a06998c00dc4139f84ac62
SSDEEP 6144:20xoKJU9R3shCgWtQBLgAVs0x6hZ6esSttlifYtTSXGMb7va6E5pukapwssiO9Tk:B+9jROs0uZ6PSyMSXBb7vSLuXpwniSFi
TLSH
T1CB642320E2869D8B7B747EA989ED395A09B07D63E635500483D537AF00C3B7876FB85C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchDisconnect.raw.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\WatchDisconnect.raw.WNCRY
Size 207KB
SHA256 61a0cb17ea7b44276395323fbf280a65be8f971a8a23fc6a1b98859a8bbb8527
MD5 d85a1ac8b4f307796075a49dae290a6c
SHA1 c6ad1b40fb734884acee5f80ea278eb5bd8d1f38
SHA512 18d36f834a55a0d18c577f996686ef5d5e274d02b5d291989082fc6a10d07b28dccadf65fd5c6eda280eaaefa3f81656f15748a204c2f0387ce102d665e69f31
SSDEEP 6144:95+5CpTDQdH6Xi53pNCUST+w2RH2CmeeaM4lfn4cZQrwi:z+cqrp/6cO0Pf4c+ci
TLSH
T15B2423DD443CDC6ADBE95296FE278F483D6E014687D332A202316E5601D3F46772CAAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchOptimize.dotm.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\WatchOptimize.dotm.WNCRY
Size 288KB
SHA256 8307a17dde65c2026ce9ae8edac9f06d887206e80ecc3b7b3b2a309bddbef577
MD5 83dc77119f501c9d68bbe79cbb42895e
SHA1 737c3ca1e6d706c2c354733aa1a0b47dc4418054
SHA512 55f921db8f979d26953637da28fbd30c2a3230a01e08313d7911b113ff64734f904eac3ae6c56f697bda9d95e4daba0359a31671baebaabd579baa5a71f70ac2
SSDEEP 6144:odiBElpoFtGwrlRp+UoahPaoJ5iMEF4agmKpS+icExZ3p:odiBEl+F0ARp1r5c+agmKecSZZ
TLSH
T1A15423C2AB24DD851D5AB383F96CDB8D3624A5FC29298C5863D23462A4F6E51CD30FD2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteWatch.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnblockRevoke\WriteWatch.mp3.WNCRY
Size 230KB
SHA256 ddab636f06071e85bf7f3db622538e5430a36d8f3193877b2565bcec7b288295
MD5 eecba919415fc33d27b6f6e917d7c72c
SHA1 278a7463b387ee7c1c441c06cfdb63568b339883
SHA512 87e7bc12b26d1f108c267b55b5688bfbb87b9e3789acd4cf8420f422ef77bbd66fd6ca09676b0ae213749e63c0e4ab5c78be0e6e51128500f4765fc64326c290
SSDEEP 3072:zdg36M+KA008InR1o0dR36O5pGn2bH/XRbVB03k+hjVdU1ROFsxp0Ukve+/x7qdL:z269KlxuF36O5nFqk+hjw1RGsxx+EA0
TLSH
T1BB3423305736753AA607FD0F144006E8AC93D4E3D599B4E65A129F9F34AC1C1EF88ABB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseSync.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRegister\CloseSync.tiff.WNCRY
Size 341KB
SHA256 b382de3e4a811a5511582e32e1e8c6b3e3b9206da079c75844b09f7866c88d95
MD5 69c7c2a58dd95535ee609a70f614704d
SHA1 98ac134217fc95ac39fe235c5a1d91da9bf722d1
SHA512 729eadeb83c87b56144eaaa49a38aa07f9dda774ef0531d7d59295daba234bc6a61fa79d65f864b92f9ac16e8530944b9a01e62d32e31015e0bd8b4286182161
SSDEEP 6144:lntO+rNZq3sSb2Dute7BTqpQ1+c9LAwSQmz9oFfLcbpiMB4px:lntO+42im1tApcY9i6+
TLSH
T15574232FAC4D9C50C14F4BA7DB1F2D90F06C5EA8453B538D9A24AE4EF113E498FE2964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinPush.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRegister\JoinPush.rtf.WNCRY
Size 455KB
SHA256 a8f1da9bac8d55acc5d9ceefc96efff7c8f3aef6e1afd634be0018ae3654d130
MD5 eb2bb694e765cb6d36953f61f8c3d9d2
SHA1 746042a45053aee878e425745a8bbf9bfc5c0138
SHA512 1d9e26f60e6c5fe000ddb465d67c0b3630722d03278101b2e755a2996e600959b0e26f589efa14605b94b03286605878da9ac9a3e1ed3a2a91237139c3115586
SSDEEP 12288:RmwIuq8y9JXLpKHGFkA7JKUWs144fdY9Ur9+b9UrMioq:5BSL7pmGFkAVKUWYdY9Ugb9Uwi7
TLSH
T151A423F6D8A04DD07169CA8A9D173A7E3481E060D5D439FDD039AF8184B23EEEBC6139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenSet.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRegister\OpenSet.zip.WNCRY
Size 910KB
SHA256 03a718fa0514de18694c034f8b87d51e101d74f29941dc203310dd3c931fa758
MD5 bf530b19db8e4fdab59a1d639bac80d6
SHA1 7b276f7b49a5c8405d4090b3dcefd858c6d64040
SHA512 68b156539ac82998c0fa95e6191ea2eb4a71aaf12f479ffdb8dc845bd41309fea43992fccbc78b89b7184203e5a45859f504bb578a0286ddf3f8f6ad89ec79e7
SSDEEP 24576:BrWIE1FlRVBXMQaqM/M2U3K4iQeqJEnAW34zrh3WXX:By91FlRVFc/23+QeqJEnL34fZsX
TLSH
T1561533B1C6359D506BC1BA903492BCD7616A1F064A7B874BA12FFE9FF255002BBE8701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallNew.bat.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRegister\UninstallNew.bat.WNCRY
Size 626KB
SHA256 a579e7138f49e5921788d453b40712e3df6a7a83440d96df3218b9d0794719c4
MD5 5680cd923f9749bc06b0ce15dc08bd27
SHA1 96a71a3694584dd229ab45daae5cb3a76fcb0c5d
SHA512 70ee04c12505d5ac2464a4dbc5a7a24e3265eba5b448267efdf43bf9d5a774750ac8c43f7dce9222c11c25878fd874d9c3f70b1fc98efdd1f028174502bbcadb
SSDEEP 12288:t7umTI2fx0OUwX5SsYbg8j7EPsF0y/HvL1LhECDZrCHl:t7FirwUs98j77Gy/JLhEoFMl
TLSH
T179D423A3D1D456841844BFD97FD598AA196F0ECA327AC1F8DAA1DF461850230F05C6FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddResize.dot.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\AddResize.dot.WNCRY
Size 255KB
SHA256 6dece42d31ef722ed6e102105946a220e74a0703eb57e2a547872d36dfb6346d
MD5 9530a1be1375e7d52491bdcfc0f99e3a
SHA1 2c1ec606c8e0837431aa0a8ae78653c8b9a1414f
SHA512 f5aefd2d27db47b8f1cd7bc9597bc60a232b9ee54232a6f563bc428dd0f2dcd2d7652c66c721aa4e89ddf81e7a766851d64a51f1087147398d5a550c44066cb0
SSDEEP 6144:SEYLwh9NyEAXuv/xKLwXpYhJ4ij7O/05F27/DthKt6:SZL89NyEcuvUJhJH7S0XUDtYg
TLSH
T1BE44238AAA11FD019A2FFF913A7F8110593E112E5E455D0F7B6681D006E43AA87FC86F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyInstall.ppsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\DenyInstall.ppsx.WNCRY
Size 191KB
SHA256 b5377ec74685f7bfab8a0115591884c0de0df52b9de5ab2d63c2dc0861bf04d5
MD5 339f24d55ac1ed2c3b31b25b4442860e
SHA1 512704138ad7c86b89e4799ad8499c774425121a
SHA512 004e203641b66a0233d99b0d6392e70672f6b1b8ce9a8018d7b5b1dc5366bb996c48a98275303cb45101c37797a8df888550639f9a4bc65556e2553c8a85e0f7
SSDEEP 3072:SGzW7dSI2LJKxnHelDUUxH1Q4HYy9A5ggMB+k3N+p0RE60gCOsqhJ+XohTPSiLa:SGzkSHsn+lDzHq44y94MB+x0j0Nqh+o+
TLSH
T114142341FD8E8DAD53D670BA06D0AC1F44E6AA20FD1908C0490DBA55B67F751E623EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallResume.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\InstallResume.zip.WNCRY
Size 159KB
SHA256 ce529dc6498cf04a834b835e151d2940fb89eed1a537b16fe2a5670241eb049d
MD5 67f8f74b32c7018228ccca29a4626e2d
SHA1 2d7c96fb089102350aa71356593044d0d17cda20
SHA512 a6e5cccbd0526345ba3544021dd061397ec4b8b1aaf469cb60cceb0954eddff7359ba7a8cba28b67750cc1f53d39559bd12fa72db527887090957226b512b32d
SSDEEP 3072:9sr/sVaJ2M/n2xJEua4cOIUfBfIc7E9cUmBxrOYYRj0gkpSMm:9cF2M+HfIEBwB9p+rOYmIgp
TLSH
T18FF31261EAD40DA41EDE493BE892E9292755D3A51C43C1D6FF3BC492F30865FA832CC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeAssert.odt.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\MergeAssert.odt.WNCRY
Size 271KB
SHA256 5b159625e0f103f061961f40a95b4549edee8cb4913fcaebc2540f67319d6cdc
MD5 e8d1c69a00bf66b67717b76a95235296
SHA1 4e31fe01e46c3047821c5cc3019677d546e35f3a
SHA512 6c636a109cc65c254376467355a538b4df5672bf236078db94259e740f6972d2d36160851cfa4131ee2a339dac9dc0ef60e17ebc89a1cceaf05c3c6c9b8f7e02
SSDEEP 6144:AXPOGDFEd0oVB9u+QJTCo+mAkkTI9HU9BmP9yiUebdS/T4iMu:wOGpa0oVBGJJnyTI9qBMmbTMu
TLSH
T136442364FBBF690C4BB2241520B0A6974DECE38DF286C076947923C876591B4FDD8B19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MoveResume.asp.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\MoveResume.asp.WNCRY
Size 342KB
SHA256 47aee6121184cb8afd8bc9b2a492a49d5c6358103028a3a3277e7db079868883
MD5 653514286e9b4852771ac84f64af69b3
SHA1 2a3adb1f127cc263b522f45c40e476f47c3dd2ec
SHA512 cd3c64c6b36f09f7378360880c19eadf87d79c87c4fca13bf7380418e817db574a4f5b11093516eadcfcfd373ede20d0819bb4f167f084e23318e91a785bbffc
SSDEEP 6144:wGdGgLKu7zIuWXwf52rYN9CTmcmaH1V3UNBEYPoUyPsuKPmxSWZ5Zhak:8gLKShWXYMYWNXH1ejEQoSuKedZ5yk
TLSH
T139742342CB7706BBB870B9FF17F475A1611A89DA1F04A5384A1F32BCBDA5CD30946B48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushResize.ppt.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\PushResize.ppt.WNCRY
Size 167KB
SHA256 85a2924f1aa5763f10ca085451618a0a1a1761e7db50fc4a52a878e1843dc506
MD5 591533da1e31bba0dcf6fb09cd924c9c
SHA1 def6d39925ede5f48d51c3e42384a9701a1e614d
SHA512 5d647cb17c09a23b5dd264859c627664512a64b9e5d0f493670ae60b6b04a45dc47341cdb2236e28dd28faf10f6e2d2e07424c7bc35be0f918af3b93d3ed0757
SSDEEP 3072:66XZ+l7lf/GsHG7V1n3HfR6XHCnarl/pIgMsSv7hb4E0oD9flcdYAv5:7XZ6lf/xYb3HfU3CausSjqojWYy5
TLSH
T1F9F323F6F8AFDCDAD3388390A379C96C9D3B36B512D910543173AAAD0826B0D445EB53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveTest.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\RemoveTest.xlsx.WNCRY
Size 279KB
SHA256 43a5e7b9fbe9601b942ddc4ab5747f6d2197d3dfef8baa2b22e2c8667ee5c8ae
MD5 48207f165c6ea452045b9dcbe3773473
SHA1 6fb9a189996a2830672e8c921bf63c1ee747ee58
SHA512 6c6ea288706b9a1c76312c6dd2911934ffb66646b788ec8d92274f8f20e2f241d95e450cf0d3b337676c270882aaf65097e91333531a4d3b9adb2e643476300e
SSDEEP 6144:0cprAYMnMKTC1oihPwFHBcR/DRewge1m4z37QWE7+Yhh:0cprAYQMKe1oikh+bRewVz379E6Yhh
TLSH
T1A3542309F41B3726A261A34196288F710C6B7B78C485340C5DAE0662DD712FB6FF3FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveUnblock.vsd.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\RemoveUnblock.vsd.WNCRY
Size 231KB
SHA256 7135c2f517c7181bd4d816f56c9075f4d684eadd8c0b324d77c79eb7aa63d1a3
MD5 cc18ac90243b1a1bd04401a7f948af31
SHA1 fb0b9c3f7f37e98d95f7d64835d2e547632bb998
SHA512 7c73c15496d507b04b82a24c224fee4b181737d85a80e4af233994350793dc2c7be9932925582809b878fa2e88dff43b14c3fefb05b9c20aa9115127df2ab80e
SSDEEP 6144:uZOhKroeZvOYKiR8q3HSgWGZDoSu03Oly0WC:mrSYKO8kNxj+c0R
TLSH
T1F034233F308A95CD2BFAD67B8C5AE3CC229DE971C4DD766AA50572133426385F0709D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeJoin.dwg.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnlockRegister\ResizeJoin.dwg.WNCRY
Size 310KB
SHA256 b1d32a82eb0cffdd16c30d4b304ce5fdafa6a1ab84e18615d89bda4e3500c4fc
MD5 4372973015f99e0cf11dd5ad25ebc1cf
SHA1 d67eb3d7a3d39b87794d4420dc974e80b5275ab6
SHA512 3ce88750bd711f68dd67ad0c1d6d718a2ba85f4a44ac95b4c2905788b8c9888b5f586cc2e7dad5b9057ecc64bd9409d854f4c2dc8b55392e6441c369b0edf224
SSDEEP 6144:FqIUrA77q84qJ0wEnuQxo9ffcBvtSf30rFaO6ZPHX1hmfUx8Sjcp/ULqk5M:4n07q8l03n3ofctQ0rYbXvcpcLqkW
TLSH
T15D6423C524ADBB354AF7450653F2B059701DBEDF4F2C5CA90C37AB2EAE4EC8AC4214A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterHide.dotx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnregisterHide.dotx.WNCRY
Size 569KB
SHA256 5c25ac3c8c83b9942f3f20b29990d4f3758b86a232ca518637d8383445b00619
MD5 3ee3badb5cfd898011d8908bc04b703b
SHA1 1351023819a4eba1927a44f03aa35753706f85d8
SHA512 87f2e70971df5d726c151499c2f7a88a7dad16031c0098597bc0725ff3cb4c7367b041258f9e5be54cd4401bde95fcaf673f683f7704973de1bf061a9c15c2b3
SSDEEP 12288:4UlkuFbrbvvgZoRVRbSEMn2wMDjH4NGX4wCwhmzzqXxQhoHpCW:1kuF3bvvTxan2wMP2GXLvh0zq6hS
TLSH
T1E3C42325B555FFA32D0C126BDFE1E91902ED20CCECF899E2168874D707E9222A7ED54C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseNew.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UseNew.xlsx.WNCRY
Size 910KB
SHA256 e23f34d529634d3c948066782d2cbfb33655915f1d556c6d2b78f2cb4b9b65d2
MD5 d38281a69dcadcbb88687f944c7f3185
SHA1 0c62818a3714c4693665ac5b45af5330f5a6edd0
SHA512 0ac5d3245629d644a9dcd373c463ecc0e7230735ef836323ec43a71878dda5ca025f8614bb38799871be947f232ea95b2ac0a73299c30aae76043731ec66db09
SSDEEP 24576:V1t8POTjUTB/tYxQ6L19kpJCj1T58J0vBlGmx:W9B/tYW6L19kChTpvBlh
TLSH
T146153371B33553C8B39FAED0501A7233AC50BE71F3E1952E9ACD09D1CA2F289B95D1A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmExport.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\ConfirmExport.docx.WNCRY
Size 418KB
SHA256 e37264837fb2455e7fd5d923b6334af3892cd8e8411455adfcdef72ddb035000
MD5 f0c796565d50fc4b8f5e82af5f845fb9
SHA1 21f61e58f73869891bbe0d4246f4702202d25a4a
SHA512 3c06ce9c294d3ee03dc127dfb005164bb7892461421102dc41b68485a565914dd185137c95d0b9669360f13accfd61feb0f9c0071fdb1d393440c6c6a3274f8c
SSDEEP 6144:R7vXt7ziJgbspwViSfFqckYdEp1BCAH9+53XCMxPu3+wbduQ9rs7qiz2SA7:RrXFapUSYdE1UCiPu3LdF9rMS/7
TLSH
T1999423F2CCC4C43B93C48D96D4E2F2F960BE2B9588224F95536E5C09E3256F71AB3265
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugPublish.jpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\DebugPublish.jpg.WNCRY
Size 142KB
SHA256 ca04d45cd74c3f6c5136ef03eb703ae751ac9d26568d6cf5635dc62edaceb77d
MD5 8e4d4ee60595308886339160ecd5bfcd
SHA1 170582496a6760fd70484de08ed6f3497057d84b
SHA512 81c77b1e3a056fbd2d826943a396835dcb09c70044abcaf8ee06fe44cbc04c7d77b8765d8200ee3d609c250cbc4ace3a81d1cd055f0d046a5376a8367536f2c8
SSDEEP 3072:MBe6PIvKUdRa1VjgXqsPMSCduyHXVAIkAVHKR8OGLTdxNYgw:mlIyUO/jgasp8UARKR8DLTdxNHw
TLSH
T1E4E302108BE2D09BD65AC6316A15C46E43B458E4BF3FD14410BF86992DBEF21B6362E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenySuspend.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\DenySuspend.txt.WNCRY
Size 204KB
SHA256 04318ba830b2cddaa714304eb4c826d5f573604db6f5d3909ab21c990e99be41
MD5 0c44083bf493b70f24f3ab6227ae0a3e
SHA1 0a2abdc3e78433d20ecc798e6c5b321ced5ed226
SHA512 a99da5cfb54879a56ffcf048ed8844f739cc0a1d4225033919e8ae3cbf6b9869ee307efb7cc37a83d310eb3a47945a2af4bc2d3be0a39ea93ed06cb010a9813e
SSDEEP 6144:GbAaaEC8kTy58Lui4OAjvnbDWaYI8akeXG95:Gz1C8YQKuzDWaH8akeXE
TLSH
T17324134CD3473549DD9B671F81715CCA9FA8FE6693058D0473BE20232F0A6631A2BFA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupExport.csv.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\GroupExport.csv.WNCRY
Size 106KB
SHA256 a9808f1c46a2df409e8a4e5d5ae725a6ffb30c01163fcd8b6fc20e5916590cfb
MD5 c14f5ae1d579881cefcd5402dc94d037
SHA1 c93eaa4e6821261e55ae9c5a11d8a8f23dac18c5
SHA512 0ee1d12701bfb298a9d024790af8156c2ba597ae86670cf7e0e546ba0914fca03184c5749c1493b9b1836ed81db6e16a10ad2ebc4e97cd861a06f487d16deceb
SSDEEP 3072:TqjN+t1UPG5VWc+hZQW7VPr9evyFpIBrSO21:TqjNZPOCx7VPQvy8BrSz
TLSH
T1ADB312989766B81B3E8D2AF4123EB199F516F70F221C98273E8706186D1C7CBE0CCD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeDismount.xltm.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\MergeDismount.xltm.WNCRY
Size 178KB
SHA256 6ff1cb753c4fcada720d524c85f8d0309fd46655567247b41f328cc524495041
MD5 9c09cabfec62ff5eaa6a20b19161e7d0
SHA1 6a54e504aa9a1e2018c2b617c2e12a4b788bb3ec
SHA512 b4d03fe2fab2d5e753ccfecde54436a07cf6fcc7d331adcdf7fd32eb6c2cf539b0ca7fa865141b9ac916e307b491809862bb12b851845eefadacfac055912545
SSDEEP 3072:ke5F3j2F40mEmm25SWS7Ag+/0NUtc4fdlJLoEXs:FFT64pEmt5SWaA5fGn
TLSH
T1AD0423A8419AC3CCE511E6E19F5E776866850E1BE572CC6B6FAB94F04C0C078758293B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolveStep.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\ResolveStep.zip.WNCRY
Size 275KB
SHA256 2d98435e33664eebfbd24420d61800bbe191fdb61841f6619f815bea292bf29c
MD5 1365449946790df692cb4043975bdfa3
SHA1 1370a4145b6c39b286bc7bc21f59d9c4b3ae77cd
SHA512 cf610127535c5b12048f76ed19226a502b02fcb6d7fc8dc7033a4e9dcfb61474603f7d0d6843302769436cc7f669df1ae038fb6b371bd146134a409239f6af43
SSDEEP 6144:/J+8Oj0qx08wrVK5V2Hp0gk4gMdn+lzVu/0L8IbaM/lonyjhs:hMAqiK54J0gDgMdnEzIcL8I+Mton4s
TLSH
T11E5423147DF50C5A33ACFEEB0ACCEFE3B0646904B7097426BA71C05B6436926881C5CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepUpdate.csv.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\StepUpdate.csv.WNCRY
Size 115KB
SHA256 59bedfa00879a6b73c5d73a5ee4d45c00c6d66cf59c776085311443f1073cb7f
MD5 5944e266f48fad16a26602509bca0885
SHA1 f12083299caef024eccc40907b86dd786958a8fc
SHA512 c86cd3e68dab0e2700f94e7b19757d10245e18ad55fdbc79065d97e152899077df52e62e35715614afa2e5e52a572485fc0b6001e4c94ae307af6a28fa3b9029
SSDEEP 3072:9ihMvs4czyp0yTmN+CNOyLyLPN3HhtzKclKoGIf0ggr:9ihkDczf8jCULPN3BJPlKHY0ggr
TLSH
T115C323DE23E909329192EE80FDB22FF39FFB4A55518856DBE44B1951879334D2B014B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchConvertTo.rar.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\SwitchConvertTo.rar.WNCRY
Size 258KB
SHA256 8872b4f636a78af6e2ba03fc9738c4dbec1085db3dd234bc60bcddb38d485e03
MD5 c523dc3da32dd8b6588d554c8515d854
SHA1 7bbc53e46c0e5bfb819b01acd5d787c9d97c5926
SHA512 8264e1ea64e6d6f9c1017ab5495c6ec6aeb28ba4fa291c13c5c4a0f7d62a4200cdb8e3af5bf6b9dff2fb7bff1999aed7b9d771ce81ccac0a20043b4cf4ac6a19
SSDEEP 6144:Zg/AD00JnGth4wsTsPTYXk5k0CjkHHgEwNrSdZd:Zg/U00ompsPTYm/CjknlG8d
TLSH
T1FF442336D34F3900EE17249672D8BC2D97E4472A747A8CF564EC252CBA6CF0B4963A53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockConvertTo.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\WaitConfirm\UnblockConvertTo.docm.WNCRY
Size 240KB
SHA256 d220ca828c5230d855798a6ca549dfb35eef5438213df44c67f12078c91d6dca
MD5 00636d63dabaecc9b08461f805e79c51
SHA1 91753d0f0652ad83f27a031a3908efbbe9af72ec
SHA512 88894332ecc43bbdb6bd88f7de8530b55efd9b2a3fc9ab0188cc331c713dfb49b4c03eb81954167c36e823eee550224bbf6e5c22236b821a20ab7d9a7c15e060
SSDEEP 6144:sjwkDl0bWCoR5eP5tR6v3R1FE+Tba0HZdQr:s0khxCtR6v3R1++i0HjY
TLSH
T184342375BB46AA404A3AF88D01811E84F78E172F4D8C992A8E47358D7B3DECD44E477D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockDebug.vb.WNCRY

Path C:\Users\Admin\Desktop\BlockDebug.vb.WNCRY
Size 615KB
SHA256 743f92640920ab71ba3f708f991f553b651d575efa7a14c86c5f49773ea12a98
MD5 7f4687004ff16191e3422242a739d4f3
SHA1 93d03f24e4e26942203a6ebe2816184e73d3cc9a
SHA512 b8aa1389f355e64eef070a42f7abac135cdfabf2205904b66c3f4b6c280b15386c51a1ffaa0aa379b10fcbb69de9f1614383f86c2d8a9eea626efc06619143f5
SSDEEP 12288:TELuElUh/fWiSnHEJj6cFRESKEtcXhaPRbr0pEjOi39KcBW6HtC6:TEXlUAHEJOcOxMFr0pqacB1A6
TLSH
T1C7D4238B07ED9841A18AA4FA1DD59C0DC95F5E296B7FFAE213B05102501C52FCF60BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseConvertTo.dot.WNCRY

Path C:\Users\Admin\Desktop\CloseConvertTo.dot.WNCRY
Size 453KB
SHA256 a191ea930c5cdda5b2fbfcb254ba51184c97abd1a7d7783d0541253034e1aedf
MD5 892788782901e38decbfd65797201d1e
SHA1 f1a69de3560863dace303b4828bf1162f52077bb
SHA512 2cbe1aefd1434002a3e3a7c5797731545725638e269c75eca35834fb23a21d1a28d279ee19f34997caa312498eadeff81607724edd3fd5a7a15915fdf86c9030
SSDEEP 12288:Ais/mGtM+06Rzw3sp7+BRsDpvDTjEeaGSIrQC:hEZK+053sd+8DtDflrQC
TLSH
T120A42371D6F569A952E2133BD42D05703C19FBEC90F803744CED912AF62AC6E075A2AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromSwitch.gif.WNCRY

Path C:\Users\Admin\Desktop\ConvertFromSwitch.gif.WNCRY
Size 592KB
SHA256 85f6b7456319c9c56b0263e4ae7f4de99550e34d475f25463901278402f28388
MD5 31ed2c8c248e5e0850d0db98f0c50e6f
SHA1 f405621ff01b101d1b4bc1546498a613ff2520fe
SHA512 3ef59a4f149ebd17a0f77a3949b7555be8758d9904caca639d03f95e92a37b0b88b4d73ab53671c430eb9f73c6f75fc6fb0dd5fcb15102d31fd9cd85bc290234
SSDEEP 12288:m4J57bkt91Zrli+mhekGXooFWcfQGYbYtvWjAEN2GEqzTjWd0:zHPkt3Zrli+mYkGYUfzYbDj1fTjWd0
TLSH
T187D423ACE623746043F7FFDD7A4D7980B1E0EA4373F6F6EA6011483C5AB1958A12C916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatLimit.mov.WNCRY

Path C:\Users\Admin\Desktop\FormatLimit.mov.WNCRY
Size 1.0MB
SHA256 58f3466c974be74e031b8ffc48db7bff30e75eb188ff715eb52643280ddd0edf
MD5 8ce518c0d2fa61f6a12be5f976d8a314
SHA1 9b104ff31c7e8b9cf92c6f22a635812d9ad40c43
SHA512 766b1ec412daab0cbc7ebf9b3ae0bb19ae8e753174b6ada9d85a1d300e1d0940f40e927d58c879add87b18ded1855ecc81bcc2f9fc1cea0fe818f951e3c0e8bd
SSDEEP 24576:2crdh7DF4n6MR2zP1sjLwTysWu8TMe8lIwvEszwi8M2j7sOxhFAkn:2crdBFjMR2MLwTMu84e5w8sEiUj4OBtn
TLSH
T18F35332CE92C43AB700E538729E498FDDD9B6773D297101C498C73C224EAF16A39D697
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallRepair.xlsx.WNCRY

Path C:\Users\Admin\Desktop\InstallRepair.xlsx.WNCRY
Size 14KB
SHA256 577289355ab890c6a417fd740c6bc962e1d9a2b83d8a9125e1324dd29745d4c8
MD5 677c08d729186fdb01b7d4f60ab37ffd
SHA1 8df7ab4db50f5e5ac530d9f3478a78b23cc3d6d7
SHA512 12849718844e8df3862c8b15c0f55f6e30dd279cf683021340b33eaf42b59d7a55efd239f3c7e71d4509cdb24d95115dbf79dbf329e26de1cd32de96c04e4a03
SSDEEP 384:5kG7aqRNq+mdMjAqaCZD57V9zjEDpwWcnBwZG6g:55TLqvdMkqaOFp9PvB7j
TLSH
T18E62B004F37590E1C78ED35571A10EB10B5D3F65C8FE8D3B72AA28A0F9D984F444EA55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveExport.wma.WNCRY

Path C:\Users\Admin\Desktop\ReceiveExport.wma.WNCRY
Size 569KB
SHA256 d61258708c51525ff528dceeba76d799978a7fd169067b1a21b45c6de3f01a14
MD5 0394bde6578b946053fe50eacff68d4b
SHA1 f579d693524ffbde881619f8d6bf1ea3b2f6b5af
SHA512 2f6aa2217e4835341c2407ce0d1b2cfc0fc2ab923a66403ccfe8170ca893fdbd97b48e990edac8e18979c29f8feb34a125dc578949bf963caecdfbb2a90cdf61
SSDEEP 12288:rtXCDSSiRqz5n0wnZS0BR0nScY3WSIy0PswL+hYo+LafGpYpodkDW9fT:rtSDSFRmVZS6efy09LIYGxpwT
TLSH
T1F9C423A4388555B28B2921AA941E76D697E91F4FD27072F0BC71EF138762740ECB70E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchInstall.asf.WNCRY

Path C:\Users\Admin\Desktop\SearchInstall.asf.WNCRY
Size 383KB
SHA256 6f6c75520aeba839b399b9769d920db46ce2bb99b0f9ff1c1ddbcb7b6ad77cc2
MD5 c8eb0cfc02f3e66307d28bc9ee0dec87
SHA1 1160e4404711cccb62f52bcf5baf95ceb5612583
SHA512 1ee591d4176d8f301f27f98d36753ea39daccc57772d7e7c0653c40b87ffc3a66684f8364b2a341d5216f7a77c1b41b8fce70e078583aa4c9886b65aeff4c5b9
SSDEEP 6144:7uUJC6C0QWfQjod7nK5g6O9IdWInortA1uSMTK6InYvSdTS/3iZLCU/SEo:71Crljod/6O9IMEoy1vMOnYoS/3idCg4
TLSH
T1F88423D20B4C7EDDB2458BDF63884D8951223604F533B005E6BB7986C5B7A828BDBB0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowInstall.zip.WNCRY

Path C:\Users\Admin\Desktop\ShowInstall.zip.WNCRY
Size 360KB
SHA256 4a944a04cbe55389b3a94a6a1c01956cf4c4852d002bb372128c27e38ded14e1
MD5 77e97789a7f8087306d138a37d1dfbfc
SHA1 8307f3424e15f7ca11ed9b0c180bfea565a7f145
SHA512 be2945204ff2b18c9aa148f0f081bffba37135d0b209dad751b0584361368fe6ed03432106ff4c76db852aeab57e2cc961a90b43580fda8de9b741c2d779b9a6
SSDEEP 6144:Ufu0oa0VDslWi0wMxCim/0SW8TsdT9FEiIzU7PcLWzFGH10UA44tJpTFubE:ku04VMuwtBMSW8TsdDEi4U7PaBf4t
TLSH
T14C74235601C028883A25FEB03D5454D64E6B97A20E5E1931DB8F2F70ADC53EA9D3F3B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupInstall.dotx.WNCRY

Path C:\Users\Admin\Documents\BackupInstall.dotx.WNCRY
Size 719KB
SHA256 70bae697da51c74d23fed94764d56db0b0e7b0123a0f4ced024eaad41cc22c98
MD5 950363c44aec5a74a675db2e751363b5
SHA1 81519480de08051b12c465ec8fa903b22c552538
SHA512 993e30d87c1a860694d0baeddf50e1e84f75226b36b6607802ebffc0735954bbc8fe680f0ddb7b3cc4f5fb54ff3d388957cc2aaedd2735e8e13b21c645329ee6
SSDEEP 12288:Pp+9Kf/wJ/GZDp3MJYC8Ao4kRiMMb+Uu2Z0nllvvYnF4XleF9EB+IF:Pg9KnwJeNCJY5Ao4pDWnlBvDleFHw
TLSH
T116F43358738AFE8AC68239854740E51DC91DC41FE98B8B0B6C1586185C1FFBE4AF6F64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyStop.xlsx.WNCRY

Path C:\Users\Admin\Documents\CopyStop.xlsx.WNCRY
Size 12KB
SHA256 57f80e66ec177501c227a2a04bc9db030894f10929c766f4bfb804b76318659d
MD5 7e54bc87ca08f7eaadae85b9773dcbab
SHA1 e1df7fb439c5ab3f9984f7f1f837c7dd31be1ddf
SHA512 b5f673b2c4186fd53cb77b42d2caf5732303c6fcad07d9cbab7e3509330febb10fa947c1e0793023cf5a03f9333526733d60f645c7740fd54912bec4cae2f985
SSDEEP 384:XobJVIG83LcLe2OooD84fJZUmzUwn5gbtn8mP:XobgG5yTPx5Zn5SbP
TLSH
T12C42CFE43F21408FD0F86417B28D4666CA7E0A761F379604AAE811FB2E48E049BDCB17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugCheckpoint.dotm.WNCRY

Path C:\Users\Admin\Documents\DebugCheckpoint.dotm.WNCRY
Size 421KB
SHA256 9e89ebc6db59d3eef701d423fc141e3fb1420a6141be6dc0324a0c1d48a184c7
MD5 edcb1a14af782c236a3e6a606c324829
SHA1 8a391e55822b1c93407847fe7a3e61716d56dcdd
SHA512 2bf64be25409e392e925b8c8dc053bba60eee4eac58d8949cea6764f5c92315a5d5f4d1f314405651ceb820303749dbd350ba38668bc109b249103cd941dfdec
SSDEEP 12288:lMImzagXqfsOOhgS2qBqXVhgjccYr5yczv41A7:l1mz60OOh3JBqXVO1YrIczr
TLSH
T1509423F78964742B4925C46CB4DB2650D035BE2A3FBB6C9906F04604BB02D7E8FD52AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinImport.ppsm.WNCRY

Path C:\Users\Admin\Documents\JoinImport.ppsm.WNCRY
Size 769KB
SHA256 1cbdc6f257c8a1a71c853db2178d96cc849d97ae954f1a00994b06d88f1c04b5
MD5 e3843cc7c37e3c0f90a31d88ba7a62ea
SHA1 67b4aa71c9e44802a28d5615a7ccf3c714de8f08
SHA512 f87d533ac6a288cbc6203079b6ec0150db1cedae8e62de073e60780fc08715bb138e46efab9868506bb40384006cd55a1c073511c3c6a339933c66116511b4d0
SSDEEP 12288:9R0I3y1AdmURulx82/oEpmAMRP4DRF4XWwmRErtsQ28genzc+eRpJIbdw1SKlCiq:D0xUtiGP4DHKn5gUzDeRTM64i2V
TLSH
T19FF423267311341F2EEA1BE61BA4C25DC219B39644D3B2638DE591ED8E7F76F00A7630
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitSuspend.ppsx.WNCRY

Path C:\Users\Admin\Documents\LimitSuspend.ppsx.WNCRY
Size 521KB
SHA256 66edcbc94f9e6c9e2c0bd52c44bde19eb5e47de1425da69a3faab8827bdb7a0b
MD5 73f581957e1dcd6a18b778856e79acb0
SHA1 34f218c87edc04f2ee04b9a901dc6760c52a9e34
SHA512 963e33edc9909491aaad5b37ccb6c775f8d91f6be8a940c90c43400ffa2e790fb5ea06da904dbadd14dbcda76af362bceab0d1a3e761ab4fff5225464be688ed
SSDEEP 12288:IogE179HTQ1M9+ZgfpJMJnKsn/0rkEv6CRrYLzAgAJ9aPVMj:fhHuM9ZcJX/+vfrYIgAJ9wM
TLSH
T146B4239F51B16A103E29AEACA40EBEFDF0F56E491F49490C71741C311812EE62D7D8EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeAdd.docx.WNCRY

Path C:\Users\Admin\Documents\MergeAdd.docx.WNCRY
Size 13KB
SHA256 b82c22af8ef60fa1aaa743ff78cd97bb4665653eb4f8d0d8c723efa53ce9a9c1
MD5 2d7d2962ac0cc8e8c27c02cbbf88930d
SHA1 bd686a02837d1fb34a2b7d314922d73df012728b
SHA512 bba905ee8bfca68cff7b134d16e13d62088a4423ddd061c490708df4611008a5ba9a0d6dfdfa932d34cc10ee2b31b562f69081a775b66c11fe32cf68a37ebcd1
SSDEEP 192:XjuiC+/YFUFgUQuAUOSBQPCdYQETVnLhLqSOVxwRtHUi2gEGdsEL7NUc9sgvLy:TjYaqxGyjLqSm+0bgES7tsg2
TLSH
T1D152C0E3655B6CBBC7FC88BFB9F6D01182750D7F8E9227B268115D027666300C6285F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Open Notebook.onetoc2.WNCRY

Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WNCRY
Size 6KB
SHA256 dd8ca1cdfe336ed680fedc8f86cd638519d4464d4b9c35e3780f1caf64571adb
MD5 4bd3caf84b2bbf1d1e714e52a045c6e1
SHA1 97ceee1d07c59be3a03ef57b794cd60657aac3ae
SHA512 cc15fa5ebf964d575f2657101db8487241ed1a466f3b66a9cad31c2be4f4a9fe754557422ee75c32db1320fe1723270853a0153935164017ab55f5a03f02ac2f
SSDEEP 192:dWQZKenUg8r0xSsOlw6zXhmXg8fOwM18er7uyux:oSKeUjh/26ThsfZMvCyux
TLSH
T170D19E3C38755339DFAD1998AF4971204371BA74E616CDB1E02E4C630A26EB74901BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Outlook Data File - slipfujydb.pst.WNCRY

Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - slipfujydb.pst.WNCRY
Size 265KB
SHA256 d8accc42314a1cfadc3aa47c8d9d33b19509dfd07f3dae346d0c6b784138c62b
MD5 07e2b5b38be9c9a5110451380608ba56
SHA1 829a2461f16c1e66f8bacb4ad1ccd00992b6aac9
SHA512 e7d0cfc3fe4d5948309d0f5d647384eaa64f160811b526c50a3c94286cd76a4f61f5d7d242f944ab3756252f48964921f8db5e07fcca421d6f31cdf20b7e0007
SSDEEP 6144:SRMOegvkwZesWdD8yQT676/FBmYJS50UET3pD7coVc43iN78Jf1vta:SR4Kkme/FFU+66m2aThLOts1I
TLSH
T1E84423005DB30A5B7D73928C2F552B749C35D4FA1F86F8019BC26CFE6CCA5845369AA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopEnable.csv.WNCRY

Path C:\Users\Admin\Documents\PopEnable.csv.WNCRY
Size 1.1MB
SHA256 6c402e469587c621a8d663068c6b7a8a35eedd225c39f1b93e5d7720ed5214fa
MD5 c35911b9c3124f68f7efbd45f9f0fbf7
SHA1 75d5aa067702f5151e5d72b4d08d7a585e34179b
SHA512 c56c484f12319eceff04a6a8c0cbdd594a3e751cb2624d9dcd6c9f748c4f50834b467f4ead1b02229991a054281b29b8fe66f334e3ef39c1d0a677c1decb0913
SSDEEP 24576:+Ctoe585Vi+gUa71HOztDRdX0g20fpUCHkxcCtxI1eKod3:+kC5w+LaxHOxDRVdfpLmSod3
TLSH
T1BA35330DC716211F98DFA4A369D239D4EE3ED7D1D5B0A4D46E86ABC700CE86AF047B84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadCopy.xlsm.WNCRY

Path C:\Users\Admin\Documents\ReadCopy.xlsm.WNCRY
Size 620KB
SHA256 77f0061be25588929a974c5c6578c511fb962866b5174f1dbbfa661eee1200db
MD5 6089a8fc68e0563ec074c53fcacd2282
SHA1 c544f4e0f5aefdcd205f9787f61c26e91e278220
SHA512 a1de372718464f7cfbe8c2e40140d6848d8597fa9f56d75a908adefff2650a03d0ac591c640b520b2ec9f856afa400d0713b1e5cb1601f7c05f7e809f60d3174
SSDEEP 12288:7MKMEfknVPHmU9os9bTMXA/3xeMCOz6MFH9i5xJge9fW2oU/u:7xpfk5ysiYBeBOzjzibJbJoU/u
TLSH
T1FBD423A5FFAB783144F9080B0D2893C5EB710A8C77D84761B2DBF7866A0760397A574B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestSend.xlsx.WNCRY

Path C:\Users\Admin\Documents\RequestSend.xlsx.WNCRY
Size 10KB
SHA256 413746be34be0aeae55def8f90dcbeb642a594611cada86f9c9a4dc2f8d394a9
MD5 dbecda8a9ce9540f37d4ef003d247135
SHA1 55723522420e6eee888c9d2f25ae2a6bda4cb89c
SHA512 1257fcb18ed60678047dd7aa56f3a56557df721a8961e9f0f2a43a16c44ca6dd13b671e39fa9d62d8174b4c3f123ce9790048540ac3adfd02ba672c7b47207f4
SSDEEP 192:XN+DKXO+08JCsWJdZmUyzPjPinm954wj4znM+o0py2rI6JHPrU1zhJF+TWcStTgN:XAeXOJyWJdZmUyXPJ54wczMwpFrIk2zq
TLSH
T19822BF126695318CD93877D770E7E29637C04E46A262A705BD22837AD88E6366BC1C21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeEnable.xlsm.WNCRY

Path C:\Users\Admin\Documents\ResizeEnable.xlsm.WNCRY
Size 1.1MB
SHA256 7345bbce30fcc0c0af4b934766dda3d0bb6e215e4ee897523e374b30d8cf5185
MD5 6f7d3c6a6e452719aae146f28cd7d25d
SHA1 1679c20385a4da7b5b1f44c96ed1ed5e11898855
SHA512 12f2ffc5201392a6516152a62dde161c0b6ee9457e65ac39e9c4bb8e1580cebf20790e4e66edc41e21581158f0f441a4ddd1e80abd4e5e679e8eed016264bc77
SSDEEP 24576:s2ICeF1BQXvAJbHM3DRRdnhwo4v68eReLB2uPe/9/ihlMfkagF48:FiQXoVUDNqo4y8eC23V/ihlMfkagF48
TLSH
T1DD45334A900DE7121928273F94EC6D497D41A50B17F026F5E95A9E32ABFC3AC8D2CC7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartTest.txt.WNCRY

Path C:\Users\Admin\Documents\RestartTest.txt.WNCRY
Size 1.0MB
SHA256 4920760c2f067cc88a7e76b3865d17ba28f37dcc12b27e5a02a7d0ebfb740e0a
MD5 33b9dda9ff5265269f4d05ad5f2bdc91
SHA1 68ee493ec40738d7496c0d167f5978b8b407c500
SHA512 cf38b9f9b024b9b6e823feca0d59f4ded6a59ac1b9b2089d5ec681c6cbe3c66e686632691df95a8a487c0530a3df91f9673df141d92da98475972617ea9e5a60
SSDEEP 24576:ENOHE1y7NMTUvGSlgyVcml2mkHluceutOYA3GLi6+:EkHEo5d+Slf27HwXutOXL5
TLSH
T1F53533E0880425A0DDE1F6395051A90C2EE95C9C68358AFCFF6B15894EE4DDC03BEDBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoDisconnect.odt.WNCRY

Path C:\Users\Admin\Documents\UndoDisconnect.odt.WNCRY
Size 1017KB
SHA256 51303ddda3f38e0f1bbe0c0b8e43e9766d4d1126ab46a6944cbab140694f86c2
MD5 0338c07c436a456f4c5c808080a2e0b5
SHA1 ccfd5b716898c72be066b707e2850e658f723825
SHA512 3e6270e003f13f85f57115aa3d8fa3500801ee0b666acd436bad3ae03bd3c8998959f11d63fcdc84b712c5fccb5d98f44ddfff4932afbcdee868cdf53183f41e
SSDEEP 24576:9oQuLJtz7OqFgOaXmZ/1EsjWOOsIBD46fbTdf/Sb030RfGmSgU:9E1DaMIOOrBZN3SC8fcr
TLSH
T1CD2533F28FD34945C27DED68119CACC430AB9794EB206120D43D9269DEF5BB2B7DA21C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateProtect.pdf.WNCRY

Path C:\Users\Admin\Documents\UpdateProtect.pdf.WNCRY
Size 1.6MB
SHA256 f2303430d7dbaa3aeca6d5e47ea21fd2d8b56401b6f94a42616a5d6c94871af0
MD5 14040276da9d62c0f324b0259c14c8ba
SHA1 5b5373ebd6b6c47db5905b440a4c98eea13a5104
SHA512 278fefc2ef3429f4453ff9d51d5d67d9ab120b23413d80950d0a157571f4069081ab0f6ad7f70d40b51797ab12386d2ea7a583520e51cb0e0390feb772abefe5
SSDEEP 49152:Ka4rbQm3EGt6zjomCfJSQD6fHcKkkaEGQQpahAPgAdTQ:8rbQ6t6P1WND0BYiQpayu
TLSH
T19F75334B647A52FD8BC882C5884E2345026C741DA73AEC6CCBD3A674BB7BF876601F45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteDisable.docx.WNCRY

Path C:\Users\Admin\Documents\WriteDisable.docx.WNCRY
Size 20KB
SHA256 8100ce2f37596536373ce49f78a4a198d0d9457a53dea7e9359fc038c2f99395
MD5 cfe09419b3db5240868b4a218b2e6ac6
SHA1 c2901779c7c92a7c293296dbadf1f79f4ad1f116
SHA512 3ca199bfaa4819427f91d1b762ed530a0b8e2bd7712a5a283c374616982d3f72b1a8b97a5b7617c7e8d7eff1da620c55e988a9bf68c97d451668a03ad98b83af
SSDEEP 384:bONzkgRM6IogajzBOTsHF1OQiKwuF1+R/dnYq5Up7avTyh/bBzx91z31f7sr:+ZtkajlOAH/iKwYMlbG7qTy1b9R5s
TLSH
T1DA92E082AC130C2954B9FED71B11601A4183EF0977518C7532F8B78EBBED747AA3B949
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectSend.rtf.WNCRYT

Path C:\Users\Admin\Downloads\DisconnectSend.rtf.WNCRYT
Size 647KB
SHA256 dce599bd076fa62ab218efdbf708e583c99537eadb6ec5e97d4544ad6cd54c71
MD5 eeb4c5f96c080cc1436530715824cd89
SHA1 6e9f52d4068825eb2761b7b28acf379473fcd278
SHA512 214cf4b731efd1cd28108406364153b7149ffb4600e0cd7dbb8ce64ef3e4615b5f7ce388bbbafb76a48636484f5e824c0785a8a161ebd16f6564b208a1fbb437
SSDEEP 12288:UIvTpAe1sl1yBwKOmMugRRN/djy3PIc1US1ul+OR0CnTrOb1FgT9e1f:Uk10yBw7mMuSBm51uFR5TqpST9gf
TLSH
T1F0E433F2B2ECD834A59E58AD1A645C0403DEDD253438AED4D738786477290DFC61BBE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditMerge.txt.WNCRYT

Path C:\Users\Admin\Downloads\EditMerge.txt.WNCRYT
Size 546KB
SHA256 fa0492d4a6f409273eb759bc5d95a1f491cc573d6f8a25e33f45904893af3cc9
MD5 21619f4333ce6b151b7e2aea2840d3a3
SHA1 77445f582829464374fd08af93e0ca56614c13eb
SHA512 99792041966d8a6cee8078630de75ca43caafacb6bc6beaa80467ba22e60089fb70e0de94bd2c0daead48d7805879b835b8a32152e962bd94f4cbce107cba118
SSDEEP 12288:G5j5vXTzwX2uCiTQjDeCxmM0mPt9ROTrBUJ2qniFpHdmQmAFcGRiC:G5j5vDDureDomPtDOTeJ2qiF1dqAFcGb
TLSH
T1D0C423D97A98E0ADB48F7D021C4D24F4C737950B02E242A37A17A295FC5BEDBCD2A15C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitInvoke.xlsx.WNCRYT

Path C:\Users\Admin\Downloads\ExitInvoke.xlsx.WNCRYT
Size 901KB
SHA256 376e813e53605662101b0f67e730e1cefa25a8586ef33b657fa0f3c1102155cc
MD5 ae72b5e6244b299c6fb8626f583a6f73
SHA1 11d0550d7ec61c78763b4684978a6980c413ac31
SHA512 59e3309b96156bc6b617f22f013ad42b7b40c7dff8dacf0c008364ad67119286dfdca25fd29de13817428a37691daf37e2f6d05524ef50268802fdeb5f3af0b5
SSDEEP 24576:U6zgTTPWOikSFR9luXP8nRsADp6Pr6dy1J5L9:xzUT+kGrl3XwGdy1PL9
TLSH
T14F1533361CE37892C1DC01569AB6F6483CF89BC40CD687BF9B366509E6BDB439A4C4B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectSync.ppsx.WNCRY

Path C:\Users\Admin\Music\DisconnectSync.ppsx.WNCRY
Size 605KB
SHA256 2261ede57ddab9e36206589c7fb6eccbc4b01f9caeb9cbe7136ced8c530e3989
MD5 ac6df514b3fb8c1f15291aedac62c6a1
SHA1 551a42c082b989d7c9e400e1159d041ea8e10409
SHA512 f8018f773d8cf8f15d2bf81b0190212c091e9106c9e8133d507e3bbfbdd7d9ed3f28eeb278257302741f6b2fe7326c898cdb9604a6b05b2589e28fa4e1262957
SSDEEP 12288:Db4KqKMHuT5O6ikBLBlFaIThGpNKjCicQWkHm6z1mA:P4KqevwwhKFic4m6z1B
TLSH
T11ED433993AEC4FA0C9A5C3C36010AF5F95581AD68C508DDDE3CACA86D61279FF17243B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableDisconnect.docx.WNCRY

Path C:\Users\Admin\Music\EnableDisconnect.docx.WNCRY
Size 494KB
SHA256 a88dc68f5cbbfb5e6830d061fdc551596f112d4531d318bc8eb94ef963a5502b
MD5 3e8f4168eeeee9460a46e81abbf2274d
SHA1 d0f2de453f1a3edbceaaab146dd2b2bad6d9b702
SHA512 c0044211f9caba34c01e5ec7f8c4953ee0fa09072764bc715e45de774abcde15308ef6b05e099016889a3ad6e54304c0bd1d00dfa3da77aa53f376be4b915a32
SSDEEP 12288:vbRWU8PJX2Wa7ofQBQQZ6nCR581Y4LE5XptAnDtEb0Q+Se/UY:vbRWUbxUgj6nCR5ClIXp6DWb0Qq
TLSH
T188B4238F244C7815242C82660470E7F1F4CE1A8AD21A57CDA5DD3CFD4086BE5E6BBA5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizeRepair.ps1.WNCRY

Path C:\Users\Admin\Music\OptimizeRepair.ps1.WNCRY
Size 669KB
SHA256 547bf0a220200ee6ff31dc8a38fddcabf0ac4d2c4215fee32708907ed4c0f3b3
MD5 5345cb5070adb62a6c5431ce50429485
SHA1 23f7d00f03faa9049a2e4e7f286cf96558887384
SHA512 7a95d8cc6ba3690a20c099a11448bb7820ba6f03b2950293d9671fa7ae2ed2c27215aab4a7f77f08830d02dc1ec273ce777bc8f317f3be7ad018c36a8cab5bac
SSDEEP 12288:WhBBGp+2UvCUq6qp90YHVBwL+eUO+HWb6/i2KORH/Lh/M/HOe3:2ltk6ETQL+N2bOLRH/LMOe3
TLSH
T122E433BEC16496F9F35393EB43B89E4D4E08A724167F8212F9C5949470697DCC84B83E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishEnter.mpeg.WNCRY

Path C:\Users\Admin\Music\PublishEnter.mpeg.WNCRY
Size 382KB
SHA256 7aec4d3976855c758beb0e47dea0f2047044ff21d6afbbe32d9c0558a0408725
MD5 ba7b2c68e21b0e45c0ce3a9b2842f93e
SHA1 a3d2bc10dbbf33f2f54b12d0246c3d7512387ebf
SHA512 b4cbb9b5ce3c93f647d40c5455e89a1f6fddc7e12755a53b9281b432147df565b73596c13d882ac64f339a8754044695c09c0f7637cdace89cfafaf5c2e8d62b
SSDEEP 6144:aLgnlyZuQ3Q5wKdNv0t5ZWvxsvrI8cwKK2BOACGjFhT7uIz4LRFl5rIlyFLGe9:aLgnlyZuN5Nd5GIJszhV9EhT7jz0l5EY
TLSH
T1B8842392BE5A52A87D61FC786901837B715808F5EE80DA5287EF4C6E803A8F43C5F5F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveInvoke.docx.WNCRY

Path C:\Users\Admin\Music\ReceiveInvoke.docx.WNCRY
Size 255KB
SHA256 364742f43ba3274946906f68857f7cd6dd4479fba967c425c9b96fe23b2812d9
MD5 07e2f031cb932c5d24d70bc7009ac905
SHA1 e799ec93875d21528cb15b303fae83e0887f12e4
SHA512 427e2b3471bbd26c6028f1e7f3205b68fdf5e8d5d8d5b5780bcddf8d5782ade13fe2140890792942a68e17e5ba544d1ab02cf1d3793aaf2c4f69386f9053d0bb
SSDEEP 6144:wEne85/eYlBoQ3/0Ax5Ui8+6IZd7GVOMNHJNrGPh4nCivF:DV/eYEQJe96d6gMNHJNaPhsC4F
TLSH
T17A44234D7D3C23C668518FE55C2A502A88AFE8ED4D4084CD2F9B66874466C0EF3DE5AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestFind.svg.WNCRY

Path C:\Users\Admin\Music\RequestFind.svg.WNCRY
Size 557KB
SHA256 bd2200d6e85c138e04f1eadfd91ceb38d2eee949da7b0f25c66976c54f9348d6
MD5 484cff74188ecca3361309c4e351aa6c
SHA1 45247089d69531aa0a52824dda4accd635c6fb73
SHA512 e9775b41f2eee8b89e96e57a29a3291feae64f907519c73c3fea0bfd6d902a3a774b9392ae2a3a358369e4e1148a408634b393ce17bd7a8e184ca451a8d49c82
SSDEEP 12288:DCBnLbYDjDPC52S+BmxcvbzzX0rQgz5j2sKaWy0YaHnZfPmYuB0:DswDjDPg8wSnzXBi5j2sjF0NH9PPuC
TLSH
T1B3C423E6EA4C420D5B94ADFCACBA1A72D210B11B1711A01497476FCCC17B3B627B2F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeRename.7z.WNCRY

Path C:\Users\Admin\Music\ResizeRename.7z.WNCRY
Size 653KB
SHA256 b75d92611ddd8ce666cd90eedc707ddecaf94942c0e3ff09ad77e73a2243f63a
MD5 a815bf93c06fda4260dcf491d896daad
SHA1 1441e4bad57e0cf62d46356b13e74253aadbdb87
SHA512 d16f322e4d5f41a4570195d1491fbedaf307e53a34952258e95ef55981663b37837bd3bce8b076da7ee0e2e021c18c636339b665d0168c6b691c51f9fcf8161d
SSDEEP 12288:Km/lE1UrGDZshM0BgHOLc1tb5SAv0zJDSKoqXVDV4MXcDn05yCYVP:ZkUrG18B615SAyJDSYXoT2yCyP
TLSH
T1CBE4239B4C05281D7631C16C86FAF3BD9B93766FA2749019AB8BE0F9D0C461FC65C6C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeRepair.docx.WNCRY

Path C:\Users\Admin\Music\RevokeRepair.docx.WNCRY
Size 366KB
SHA256 35869c9d7b5c3aa74207b6bdb36acfb90856f98d9f580a256ce429ea4d4c06cc
MD5 8ebdf1f278bb388b3fa39f3e251038d0
SHA1 224b274c2add018b31c7aa080190d81cae002d27
SHA512 0fdb48784dde472fd802b62db64c3199bcb59d885dabd0bdbe209283c74c951722320bc132a421126bbbe8c56bd8aa856bef15c4c03e2bd30bf073ed40474c3a
SSDEEP 6144:B9ZAnMwAwXm+oDnjhhWBlkD6PSYMZLRGYTH6U8+ED7nl/aw2UWucsVRzC9XpYtQQ:ZAMwAwozjnWBq/PRTHm+EPnJE3lsVREY
TLSH
T10F84236CD42C309FA5814E2689943359F8BEB39CFE1E072A7E8AF5D17D3352480D71A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchBlock.asf.WNCRY

Path C:\Users\Admin\Music\SearchBlock.asf.WNCRY
Size 414KB
SHA256 fb19aac41d10bfaca6404de1cc85b01773f0cbef0892141e5524f6fdc0e11519
MD5 994276c39e992ad1922b6f12ace37413
SHA1 4053ed9c2208ffb91ec41a9209a7551be44241e4
SHA512 10bb8f4d3c2ccdad3f41278092e5febff16c0f532a3adf49807852252e9d1f0e9f3bca32296c4fb0d57f571b98f0cfff207fbe5c17313ef55bcbb328c74571c0
SSDEEP 6144:w2iPIlk/tTtvq++QHMWBZu7+7Em0R/KoJzblytV8Z2wuO3310H4LLRuRrssQKOL:BiPIC/jvqHQHM6ZopRuo3U4fRupssL2
TLSH
T162942388AFFFC4429C0FC4F6FDB93688AE7F016161B3B20495A724F88D9569A15512F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchShow.tiff.WNCRY

Path C:\Users\Admin\Music\SearchShow.tiff.WNCRY
Size 302KB
SHA256 d18ad764025ccb81796f4470d066601e9eb91dbb239b2732e27a6746b4fd421e
MD5 c1201c6dfb9ce79f0456ad831a8a6675
SHA1 654907ac1e2898b84b7e2b61544a9370b3346951
SHA512 cc6a5761916d3eda1d83245dd2f537008d2c7799727b943f56d06db2c3b30c16782f212cfc167f5c720cec8a4d2ded68cacc0f83b6e7b223f13a99554cf20ac4
SSDEEP 6144:UsuoAo9OR+Mk+q7D4jkBP0RCHPd0URqWn7HcOCmjt4R+yBGfe3v75Zmwk7V3:UpoK1HqX4jkBP04HPd0U0Wn7H9Cwo+yG
TLSH
T12C6423772029CFE66AC0F8204ED6320B6D637C3986BD1D5147BB8A546C6E60C9CE279D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendSave.jpeg.WNCRY

Path C:\Users\Admin\Music\SuspendSave.jpeg.WNCRY
Size 541KB
SHA256 184b96e51ef966eb1ed80cef37950d734ac8bfec0d6fe5e20444dcece77e9214
MD5 6c122f6e770a87a1b6ba0be6af4a3dac
SHA1 480ddcc0ef0498f1fffc8da7896f808729aeb107
SHA512 354decbd5ed224dd31f3039f1a4c6d5e2bbb20fc80c30eef2d5ac80877772a30f6b1955c305a3867999ec4624b1042bbd8408df583ead478e1def2134de0dfba
SSDEEP 12288:sw6zg3sKSwcMvENMvP/nPSFLNhYyRdVFoC+Z2qA9whIqcl:s5YsJXNU/SJYyf3Z7ZWO9l
TLSH
T12AC42337109ADFD361BAA0A72FD52618BE05D1B050D345D93F43CA86CFD4C99D22B2EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterClose.wma.WNCRY

Path C:\Users\Admin\Music\UnregisterClose.wma.WNCRY
Size 621KB
SHA256 4646d88b98f04de8dd03f8e860ad8fb8891fe88b51b72aaf37ab9df792eea1d9
MD5 b9727fe4148deb85fd0b6d517521f35a
SHA1 ef29647e0cf1e1e9fe0aa2aaaf97bb5ec9b51027
SHA512 9771d3b2d3a4fe40c8de49238dbe4cb246e11d95a590797b847a1300b8bc8a2cb6837c4b5bee41761df8d56a41b9af8b2340b1281243f8d3eac9b5464b1a53cc
SSDEEP 12288:7WKolva2zCgLDqJBAViSjajaipCIqnQrHorJFk6nfYRH:7WKoDVLDq/AVnULqnQrH6ZgV
TLSH
T109D4330A227B1C8ABFD5FD915E94CB30F00990C887CDAB5A4F22AADF3A15155D73718B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockSearch.svg.WNCRY

Path C:\Users\Admin\Pictures\BlockSearch.svg.WNCRY
Size 450KB
SHA256 613501fbdc50fe29376159ab67d08d443f623aa22a916c2c7028e03b6b5f4218
MD5 7f5b538cfae647ea91f0a01e21f196c4
SHA1 fea21aa13e5baea879f31aec5c9f64193ff0a033
SHA512 f2b2447b0d665ef374677aa135a7bbbf111cc7b464bbf77bfa5477fa623c783c3dbd8fd025d64763b79a6b0093ddf35df763e256b68d592c5b53613e5bf10837
SSDEEP 12288:5U/OpezEA8W+3Dciq4qOCUGD+gZz/dOpoa:5uYzDG4qOCnVd/dOea
TLSH
T1AEA4233172EDFACB5E09635B422C45254E70D246CADB4B6C06F253ADEC591CBFBA024B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockSync.jpeg.WNCRY

Path C:\Users\Admin\Pictures\BlockSync.jpeg.WNCRY
Size 675KB
SHA256 8fbde193eaf78ebb35ddbb036e44bca8219c6e59e3a986fc3a81f065e496d37a
MD5 3a76edf4ad9f4bd4fb45377e7be0c68e
SHA1 7fda4719397ff85ea62512ffe7baa06b79338334
SHA512 f990e6a4345f478819bcd518993fce6541924aad20d366f23aca4144d1ae258b83f4d027d2336ca8fd0dcc5dd745f31f6583cd48420ab7b7f784a87de57328ef
SSDEEP 12288:qxvw3hFF+GPnu+QqVJK7ryR6bAb2ioWGcYfNene7x9UO0DDV0EmeaH18Ef:qxvwpVJK7ryR6bAb2iJYZl95Pj
TLSH
T18AE4236B72C07AF554A99B73D5D6B7051FB63248CEA831E3CE8425731C388B394287A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableConvert.tif.WNCRY

Path C:\Users\Admin\Pictures\EnableConvert.tif.WNCRY
Size 315KB
SHA256 60e195ffc842b99c5748dcb60a9d45276dcd1362ce5099e80ae25c8696667663
MD5 98cc3c6c31f2cce37799d62e3d170b6e
SHA1 9bfc7771c8c640aaf67f9f5d467997ca29beb82b
SHA512 3eb604f2171270d9d2dbe3e46e6d1e8681f3dab2cbe285cfe135ac0ba2cdacdb416a12bdb309a8239654500dd3a373cdcefb1d5b63dc771d3050f504abdfbb31
SSDEEP 6144:/i5ENtpTrYlYQELWyIuCsK8pc2APW9Op002xz:aCpMlGLWyITK2xj002V
TLSH
T1916423C11C755C431F125032764DF3E628C866E4C795C8F481BBBAA4393D8F8AE76AE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FindWatch.bmp.WNCRY

Path C:\Users\Admin\Pictures\FindWatch.bmp.WNCRY
Size 690KB
SHA256 0bda5dc2862c2fe0e96132cf71ade2594928a24c016b0d264079010a67b58019
MD5 dee1296721431c0e6a6153ee70ce9f5b
SHA1 1a6de0c11883a324afbe0ff4d35b65a16838d94e
SHA512 7d6415203175c547c0a835ebd303560c8c20636ea8c2b6b4cdc5bad8ae5e5ad2543750d6d7d44f528ff6e8e9011cb0aadece0bc45e862e22f19ad885dac191a8
SSDEEP 12288:u9coNCly+84li7DtMMtr3aarXVb1NIh7iXL2Kut4tZP+XX6cPUJYP6:u97Cvli7DTtr9xohOXZuit6fUJYC
TLSH
T1D0E4232B4083221E435C8F66E3EB1AC1638178EF0BF8B2A0355D8B6F6D216557658D9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetExit.tif.WNCRY

Path C:\Users\Admin\Pictures\GetExit.tif.WNCRY
Size 375KB
SHA256 c8e6cb6c8fe078054d45117de4f90fb8e042045080fb7b3781fc0e253fd0f266
MD5 947d6e5161ed19850cda032f1aa05f3c
SHA1 a46699d86454cc0e9ce9a7a2a10083025b60c0bb
SHA512 ebde10618c72902bf22b696af8c5a2e869996b35f48b4b0d1cde07b158b904218e28a4c70d105d10d62dea783ad7257a3ff00d2471cf6593181314a8fc824506
SSDEEP 6144:9D3BCodBcyBZsRCbDl27RVoAK08vHFcTaGHUOyX5deaE8aVyxgJ4ArQagN:530odi+Z+CbDUNiAKDHih0hJdpE8aVyf
TLSH
T1BE84236C6E3D25A4F6F0EA7ED791424F06EF9FFEE7280AEA450E05851A0F58905EDD00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeSave.svg.WNCRY

Path C:\Users\Admin\Pictures\InvokeSave.svg.WNCRY
Size 525KB
SHA256 18212e67c9a6381151605dbe638a074419aeefda8662e399bb37fff2f0b2cee1
MD5 84cdec8e589757956cb139d216a95aa4
SHA1 6e531d437de93a9e2560ad3041d73837f64265d5
SHA512 31b0e6489818e7f5fa82d3945ef5618213f1b55c5511ad06665c4e7c3cfd2d35e724d9756085f5d92178542e640137c79f4126d4baa9059a898e6afe686a058f
SSDEEP 12288:XXQmDMP+R3SMSqA1Mt6bR1QzC8pPhqrWipjFDSdPEmUuvLrAVMnQuL:XXxdtSMrqc61BDrTZDMvOMQ4
TLSH
T130B42309396BBA5400C4860DCC968BCFCE7CA64A1BB7934CB6E9BDCD5D6520E0271E5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitSubmit.raw.WNCRY

Path C:\Users\Admin\Pictures\LimitSubmit.raw.WNCRY
Size 600KB
SHA256 1be5fe65860a6df37cb9a6400bbe199b25f951ace157b0acfd2cc3cbc7a41d98
MD5 592c62e47e9d8e81d2a4f12c803cb4b5
SHA1 5fac1e8d34b545d4239c1a5261dfc6d9e94d7617
SHA512 8200a0905060bb556feac559415b57f2387cc07ff2e61ae8631be1d2e03c02b1682696b544e570bc216b5836ca9ed5ea6fffeb4fc022d9a64e09b68e7d821ac0
SSDEEP 12288:EvgxuYQrCQ+nN4YELer2G7jOtPWvp2raAa5q/lZmT3gAkN6tnw4TbmSMjdRBM:GuzQGnEL83jvEraA4Yn2UkHTjMb+
TLSH
T1E9D433BF7822BAE75BBDB766F15C8F3EA0851A25FAD00028D409B2E54733E150B12D57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameReset.tif.WNCRY

Path C:\Users\Admin\Pictures\RenameReset.tif.WNCRY
Size 270KB
SHA256 b2068662668a4672d7d2e159bd25d3be270cb41b00655264b40c4272973b9ea3
MD5 8d304e690aabfea616e69c2be9e51bd6
SHA1 4b825a43b0124c31c4dea765c26bd1f1541157ce
SHA512 37b645f4506b6713df35393d278402d4319d28319372a510b69dc420d8b77c5b295ae5beb5ee5efb7157037f9b772f360eaf9e74e9386476a50ca8c3a0ce1f72
SSDEEP 6144:qa1bmplckRH8IW/kG2inaMrIDyITSmelqxe0:r1bmpyccIWrpaM3QEl8
TLSH
T158442381B5D8856544088D7AF52BBB8ACA3A1BBCF573E7C7C492EE17CFCC44385548A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolveWrite.bmp.WNCRY

Path C:\Users\Admin\Pictures\ResolveWrite.bmp.WNCRY
Size 480KB
SHA256 c5b78beb63cc39da7f3c1182e58a32475db9d37d711b6496a2d9ec38bec51f8e
MD5 fdc35f577a16a17592949154634bfe2c
SHA1 fde0c91dd58eb996bcc112743ea65046069fadda
SHA512 c569941d284c51fee48098919ea469328441d8377eae242d353c552425f9896570971b9bc24289e70199bf8cd78d1bcd9061c60acee6ab2b72f421795f0174dd
SSDEEP 12288:RkRQPdRznmPMQNciSq6o6UEyYGctaKO/D3Vqx:CeRLUn96CEyNckLVQ
TLSH
T152A423B26E2DDD5ABA12DB9CC893F315F95F7AB11E3180C3C7E0512B1E067A5482614F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeRequest.tiff.WNCRY

Path C:\Users\Admin\Pictures\RevokeRequest.tiff.WNCRY
Size 615KB
SHA256 dc7f6c03940c90b88e8fa264761b3b3acac6940de2b09fe00b75c634052d440a
MD5 79674bb319a0d855ca6407694b17f457
SHA1 2bdbebbb0fa6a4864f8a01b60e698f41203c6de2
SHA512 22d4016ec6a06200d4080b0b7dc262c9dec9188f275d5813ff215b1be1a424325599fa5677927a1fc4f4d9925c213340e1d5d112bb76d15cfecd57d65a000168
SSDEEP 12288:fmSyJDtb8IC1GktkIUyQf9PiT0VksWPV/eqJH0+/8EpjJv/5P01TZfC:f3yJBb8GktkInQfpixXVRJHZ/8ERJHq0
TLSH
T146D4230C0D743916D4EB1EBACD9D71A84DFFF1AC2307A09EC99D4B5E912269214BBD8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveRequest.tif.WNCRY

Path C:\Users\Admin\Pictures\SaveRequest.tif.WNCRY
Size 555KB
SHA256 6abb40cc90821f98041aeb89f8e11498d7b1f4b12928b0830225b55a38e09c95
MD5 8e5bf8898fd4274eb2c646ce3a3baf0b
SHA1 44c51bab9372ce389aaa032f9589baf67e94aca8
SHA512 48a16b9ec31f992cd67e14b1fef1288009e7d4ff49ab73735db39af611eeeac5104a21fe06631ff3a77b4854f1ea0f2ba59c768224ee5c24ad492efb912e2565
SSDEEP 12288:CrPDonZmy28Bv1/AyZNHMAT57i7laPC2wQZguMVX5MMWka:YL6A89jQv24VX5Fra
TLSH
T162C4236425405775C930718D8BBA75F00B7BFED6823BE58E5422B71396089DF31D2BE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetTrace.tiff.WNCRY

Path C:\Users\Admin\Pictures\SetTrace.tiff.WNCRY
Size 405KB
SHA256 05f6589ed2ee472e11eb7c2d6f59e1a525161e82b0d66996c58f2fe8fa897df6
MD5 97eb376e81242add8e03a259e9c90045
SHA1 0dcd899befa07b3f9ca6c0fddb3819fb04037ab0
SHA512 65de1148553dbcfc8661799c9e9aa44adbd8d62313ebdc3a38d332b43bc1f911d2f57fb0136af0c77fd8811eadcccdea54e93ba2692b87675ad465b4d04317dd
SSDEEP 6144:oxrQTyqYzgQu5XK28PC6n44OAsMO7yLs0Z/xm6TikGm/iR2RnR5R6UPYZ:WUTypz5H30A2GvYLaR5Fq
TLSH
T17D9423D0C1E3937DBE4A0098184B29F02C16EDC62659A831BE5C7CC5627DC2EAA77DDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitCompress.gif.WNCRY

Path C:\Users\Admin\Pictures\SplitCompress.gif.WNCRY
Size 540KB
SHA256 ca193c6412f3a759915865789dccdef71189ed73d0b09ae60dcb9ccbfdc77bcd
MD5 adc6a740c0fa84222310eaed06676f91
SHA1 db3b0aba40427432e39fcc7728136973cf4f4efc
SHA512 bfaf7acb5968812d1ca747bb73cd27108217eb9e9e1ee4c02577a9c53b5cf6e49782eb900b968b6c108aa823ec459ef02ce8c6a854601b56507518f0550f7d5f
SSDEEP 12288:thkQKAA2cCx2/axf9r9fnN5ck/2Gtfmnx+EUiIbDS/Xa94B4zL2:gQKt2cRE9fnN5coV2g7XW/XaZL2
TLSH
T1D2C423E1A1E05F606A58A340CEEA8F90107FC9758EC4A935DD17D322C3F944EBF5E856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteResize.raw.WNCRY

Path C:\Users\Admin\Pictures\WriteResize.raw.WNCRY
Size 420KB
SHA256 12ea4185c42ed0691e45284c2d10cd68afea669a78f260a58672927dcad3ee1a
MD5 94a81a81234f39f568bd89a9ecd90976
SHA1 69e11019074513a7ea072e45965a6c655be3c530
SHA512 d6ee8fd3ba58a26a6f48e8af3ea8fca5e2b5d1b03318fdc7822b65fec6dca9e3ff50341d62959aae7814382febfe21508cd56a1df50bb2d207bb0dc43c192975
SSDEEP 12288:WgI4UpWkkvY1CQTJRWg7Q7HZyaZ0Fw1DTfu:SvppEY84RWgU7HtZDBTfu
TLSH
T1289423E6D231C7B96FD1E6D9038FB0A29CC4165691408BFFEE4220525EE706B1712EF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aEqYmHqC.jpg.WNCRY

Path C:\Users\Admin\Pictures\aEqYmHqC.jpg.WNCRY
Size 25KB
SHA256 e13922a4be89555539284e9599c7a9ccfa7559c091f03d4ef989587c0865dce9
MD5 ae46e6f384a38c4b3b4f9e4369bcd62a
SHA1 4b185ec0eba2d014a293b1f7e1ac33aaae51634a
SHA512 150ce8cdd8ff6f3dd8c70d837c1f97e1bf75dbddad637a42488babfed617bd26d8fee0bc0a6ad0df53049f25316a48c0f6c7a2c855e2c3392d2197f4301e0503
SSDEEP 384:S8muluaW6aulqlnTBVIDleKS8a3/SRxVzcaFbErbIaTjhz8Wzkdz4Btcd3xpwEY+:ST+uoUbV2S8mquztclwE2nUdwgqNL6
TLSH
T19DC2E13BF5C526CE5511ADE04502B9E5D6EB4D3891108C8370FDEA7A8BC5B693E30077
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2160-2147-0x00000000003E0000-0x00000000006DE000-memory.dmp

Download

memory/2160-2149-0x0000000073FB0000-0x0000000074032000-memory.dmp

Download

memory/2160-2148-0x00000000003E0000-0x00000000006DE000-memory.dmp

Download

memory/2160-2152-0x0000000073CE0000-0x0000000073D62000-memory.dmp

Download

memory/2160-2153-0x0000000073CB0000-0x0000000073CD2000-memory.dmp

Download

memory/2160-2154-0x0000000073C30000-0x0000000073CA7000-memory.dmp

Download

memory/2160-2151-0x0000000073D70000-0x0000000073F8C000-memory.dmp

Download

memory/2160-2150-0x0000000073F90000-0x0000000073FAC000-memory.dmp

Download

memory/2160-2145-0x0000000073CE0000-0x0000000073D62000-memory.dmp

Download

memory/2160-2144-0x0000000073D70000-0x0000000073F8C000-memory.dmp

Download

memory/2160-2146-0x0000000073CB0000-0x0000000073CD2000-memory.dmp

Download

memory/2160-2143-0x0000000073FB0000-0x0000000074032000-memory.dmp

Download

memory/3640-39-0x0000000010000000-0x0000000010010000-memory.dmp

Download

memory/5768-2133-0x0000000073F60000-0x0000000073FE2000-memory.dmp

Download

memory/5768-2135-0x0000000073CB0000-0x0000000073D32000-memory.dmp

Download

memory/5768-2134-0x0000000073D40000-0x0000000073F5C000-memory.dmp

Download

memory/5768-2136-0x0000000073C30000-0x0000000073CA7000-memory.dmp

Download

memory/5768-2130-0x00000000003E0000-0x00000000006DE000-memory.dmp

Download

memory/5768-2132-0x0000000073FF0000-0x0000000074012000-memory.dmp

Download

memory/5768-2117-0x0000000073D40000-0x0000000073F5C000-memory.dmp

Download

memory/5768-2131-0x0000000074020000-0x000000007403C000-memory.dmp

Download

memory/5768-2116-0x0000000073F60000-0x0000000073FE2000-memory.dmp

Download

memory/5768-2118-0x0000000073CB0000-0x0000000073D32000-memory.dmp

Download

memory/5768-2119-0x0000000073FF0000-0x0000000074012000-memory.dmp

Download

memory/5768-2120-0x00000000003E0000-0x00000000006DE000-memory.dmp

Download