Overview

overview

10

Static

static

3

muestra1.exe

windows10-2004-x64

10

Analysis

  • user interaction
    yes
  • max time kernel
    298s
  • max time network
    278s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/10/2026, 19:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    muestra1.exe
  • Size 3.4MB
  • Sample261009-ym3dlaszgx
  • SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutionwannacryimpactpersistenceprivilege_escalationransomwarespywarestealersuricataworm

Malware Config

Extracted

Path

  • wannacry

Ransom Note
  • Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �
Wallets

  • 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn

Signatures

  • Family: Wannacry

    WannaCry is a ransomware cryptoworm.

    ransomwarewormwannacry
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomwaredefense_evasionimpactexecution
  • Creates a file in the Startup directory 1 TTPs 2 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation
  • Executes dropped EXE 32 IoCs
  • Loads dropped DLL 13 IoCs
  • Modifies file permissions 1 TTPs 1 IoCs
    discovery
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound 2 IoCs

    Network activity triggered a Suricata alert

    suricata
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
    defense_evasion
  • Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
    execution
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 4 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 25 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry key 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs
  • Suspicious use of WriteProcessMemory 59 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Views/modifies file attributes 1 TTPs 2 IoCs
    defense_evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\muestra1.exe
    "C:\Users\Admin\AppData\Local\Temp\muestra1.exe"
    1⤵
    • Creates a file in the Startup directory
    • Sets desktop wallpaper using registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4156
    • C:\Windows\SysWOW64\attrib.exe
      attrib +h .
      2⤵
      • System Location Discovery: System Language Discovery
      • Views/modifies file attributes
      PID:1828
    • C:\Windows\SysWOW64\icacls.exe
      icacls . /grant Everyone:F /T /C /Q
      2⤵
      • Modifies file permissions
      • System Location Discovery: System Language Discovery
      PID:2112
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:224
    • C:\Windows\SysWOW64\cmd.exe
      C:\Windows\system32\cmd.exe /c 241851791575799.bat
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2440
      • C:\Windows\SysWOW64\cscript.exe
        cscript.exe //nologo m.vbs
        3⤵
        • Executes a VBScript file via the Windows Script Host.
        • System Location Discovery: System Language Discovery
        PID:904
    • C:\Windows\SysWOW64\attrib.exe
      attrib +h +s F:\$RECYCLE
      2⤵
      • System Location Discovery: System Language Discovery
      • Views/modifies file attributes
      PID:2352
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected] co
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:7148
      • C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
        TaskData\Tor\taskhsvc.exe
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:3248
      • C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
        TaskData\Tor\taskhsvc.exe
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:5528
    • C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c start /b @[email protected] vs
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:7160
      • C:\Users\Admin\AppData\Local\Temp\@[email protected]
        @[email protected] vs
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:5632
        • C:\Windows\SysWOW64\cmd.exe
          cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
          4⤵
          • Executes a command shell one-liner
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4384
          • C:\Windows\SysWOW64\Wbem\WMIC.exe
            wmic shadowcopy delete
            5⤵
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Suspicious use of AdjustPrivilegeToken
            PID:4148
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:6216
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      PID:6244
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • Sets desktop wallpaper using registry
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:6256
    • C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "wyhglbkupvw281" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:6268
      • C:\Windows\SysWOW64\reg.exe
        reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "wyhglbkupvw281" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
        3⤵
        • Adds Run key to start application
        • System Location Discovery: System Language Discovery
        • Modifies registry key
        PID:6356
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:2352
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:1340
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:3488
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:7012
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:7000
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:5024
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:5280
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:4332
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:5168
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:5684
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:2024
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:2516
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:3560
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:7060
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:7064
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:5860
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:5884
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:1356
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:1880
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:7124
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:5716
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      PID:6784
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:6724
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:6112
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5252
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4004
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff8f624c728,0x7ff8f624c734,0x7ff8f624c740
      2⤵
        PID:3516
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1880,i,12341773016961936620,18095222805508912477,262144 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1996 /prefetch:2
        2⤵
          PID:4916
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1656,i,8824931869997093889,18141766782973973609,524288 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2316 /prefetch:3
          2⤵
          • System Time Discovery
          PID:4324
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2444,i,7969774883846197003,7045709269796237131,524288 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2460 /prefetch:8
          2⤵
            PID:2496
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,8132652587059825972,344083037399588211,2097152 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3264 /prefetch:1
            2⤵
              PID:4736
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3524,i,3560255379975585675,2144272864962996868,2097152 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3484 /prefetch:1
              2⤵
                PID:4716
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4600,i,11514819083184146547,10652450077532692737,2097152 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4292 /prefetch:1
                2⤵
                  PID:6152
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4760,i,12630683398372083215,3716890401196337336,524288 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4732 /prefetch:8
                  2⤵
                    PID:6368
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4900,i,13288570931288073091,13345636187998405311,524288 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4888 /prefetch:8
                    2⤵
                      PID:6288
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5300,i,8018008052337398241,15248270305008016159,524288 --field-trial-handle=2000,i,8350572562421097154,16092348245107689900,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5304 /prefetch:8
                      2⤵
                        PID:5520
                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                      1⤵
                        PID:3740
                      • C:\Windows\system32\svchost.exe
                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                        1⤵
                          PID:5796
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                          1⤵
                            PID:1348

                          Network

                                MITRE ATT&CK Enterprise v16

                                Reconnaissance

                                Resource Development

                                Initial Access

                                Execution

                                Command and Scripting Interpreter

                                2
                                T1059

                                Visual Basic

                                1
                                T1059.005

                                Windows Command Shell

                                1
                                T1059.003

                                Windows Management Instrumentation

                                1
                                T1047

                                Persistence

                                Boot or Logon Autostart Execution

                                2
                                T1547

                                Registry Run Keys / Startup Folder

                                2
                                T1547.001

                                Privilege Escalation

                                Boot or Logon Autostart Execution

                                2
                                T1547

                                Registry Run Keys / Startup Folder

                                2
                                T1547.001

                                Defense Evasion

                                File and Directory Permissions Modification

                                2
                                T1222

                                Windows File and Directory Permissions Modification

                                1
                                T1222.001

                                Hide Artifacts

                                1
                                T1564

                                Hidden Files and Directories

                                1
                                T1564.001

                                Indicator Removal

                                1
                                T1070

                                File Deletion

                                1
                                T1070.004

                                Modify Registry

                                3
                                T1112

                                Credential Access

                                Credentials from Password Stores

                                1
                                T1555

                                Credentials from Web Browsers

                                1
                                T1555.003

                                Unsecured Credentials

                                1
                                T1552

                                Credentials In Files

                                1
                                T1552.001

                                Discovery

                                Browser Information Discovery

                                1
                                T1217

                                Query Registry

                                2
                                T1012

                                System Information Discovery

                                3
                                T1082

                                System Location Discovery

                                1
                                T1614

                                System Language Discovery

                                1
                                T1614.001

                                System Network Configuration Discovery

                                1
                                T1016

                                System Time Discovery

                                1
                                T1124

                                Lateral Movement

                                Collection

                                Data from Local System

                                1
                                T1005

                                Command and Control

                                Exfiltration

                                Impact

                                Defacement

                                1
                                T1491

                                Inhibit System Recovery

                                1
                                T1490

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                OfficeIntegrator.ps1.WNCRY
                                • Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WNCRY
                                • Size 5KB
                                • SHA256 5361161789dcc145e6a4456c46659f4a27362500fb833ef462af9c966ff00bd7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                stream.x64.en-us.db.WNCRY
                                • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\85B50A76-7B3C-4BF5-B25F-818857571598\en-us.16\stream.x64.en-us.db.WNCRY
                                • Size 438KB
                                • SHA256 2953cbe7823a230e96fc5a4c21a6444f86ce48b5456630ba89bc52e362ebab01
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                stream.x64.x-none.db.WNCRY
                                • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\85B50A76-7B3C-4BF5-B25F-818857571598\x-none.16\stream.x64.x-none.db.WNCRY
                                • Size 1.8MB
                                • SHA256 2f0fd9696b69271a0b97b65e006e5311cce5a455491f4632b76fa8b16f594923
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                background.png.WNCRY
                                • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WNCRY
                                • Size 126KB
                                • SHA256 3346d9c8223cd2fe9e67b837b4ad980f318765786b3099568fd0db6c25fd447f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                device.png.WNCRY
                                • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WNCRY
                                • Size 43KB
                                • SHA256 d269d8c359a3f9b8e310f5eee107a421125d9f5b84e6c2e8171cf42aad22cd47
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                overlay.png.WNCRY
                                • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WNCRY
                                • Size 28KB
                                • SHA256 6afcd0e18d93b0691cc03943f7806e500fb43163930d339a004f12898818046c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                superbar.png.WNCRY
                                • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WNCRY
                                • Size 38KB
                                • SHA256 cd8835cc8fa8a1433c25096329ce398a7c9ebee26a88c8cf867a8eb655cd4626
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                background.png.WNCRY
                                • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WNCRY
                                • Size 126KB
                                • SHA256 0d02a86aae97589237cf102ce8ae747b605a2bb3da4a3415b39f10862deb3f3e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                watermark.png.WNCRY
                                • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WNCRY
                                • Size 28KB
                                • SHA256 446397d0c9a4aa504f41bce513865e9dfb56eb8983dde48ce030afba46a041c1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EventStore.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WNCRY
                                • Size 52KB
                                • SHA256 682b5704ca5c388aa4a570fd2a18fb1b46ed1cc2d410aa3c3188bc463a047240
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EventStore.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WNCRY
                                • Size 32KB
                                • SHA256 be1fecbdbdc9a778401224970b2cbfc85e81431fc45c26b19ae84a40ab52ec73
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EventStore.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WNCRY
                                • Size 20KB
                                • SHA256 75d10561ff85daece66e96ddc36cd19f1a88838efd08a5d8e58bb1a00f0ed6d6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                osver.txt.WNCRY
                                • Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WNCRY
                                • Size 296B
                                • SHA256 622ee1c48ae00af8d11780918d054a989a6c4918676f900fa2fdb6f248d05393
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                qmgr.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WNCRY
                                • Size 768KB
                                • SHA256 ed6253a2de666801ed03dfcbcebfbe1dac45ffe3ea7ccb523caf8ae27348102f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Windows.edb.WNCRY
                                • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb.WNCRY
                                • Size 8.0MB
                                • SHA256 a69dede343dcfb8febb47ca44ad8e210b791f6040b15bfddabb8658eec9a809f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SmsInterceptStore.db.WNCRY
                                • Path C:\ProgramData\Microsoft\SmsRouter\MessageStore\SmsInterceptStore.db.WNCRY
                                • Size 192KB
                                • SHA256 df92508644112b380af8a70324ddfe54bf50c7ffa3495ddc390beda2d7002d49
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RegisterInboxTemplates.ps1.WNCRY
                                • Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WNCRY
                                • Size 904B
                                • SHA256 a3ab69045e1fe6f82315487c0cf90645479a838b158baaa08a6f13f19ef91265
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                guest.bmp.WNCRY
                                • Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WNCRY
                                • Size 588KB
                                • SHA256 f0a765b9fd4ab8972b4347870494929ac472399b676630d5f4f6802aabd26e9b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                guest.png.WNCRY
                                • Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WNCRY
                                • Size 6KB
                                • SHA256 28dfb04c2e832e31c8a480353731dbbf44541463d4869e5c7294da78229aff1c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                user-192.png.WNCRY
                                • Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WNCRY
                                • Size 2KB
                                • SHA256 594709e4c42c7b65590968a7bc9f6e6aca3fbc4dc7017fb304cc9b311022a1e2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                user-32.png.WNCRY
                                • Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WNCRY
                                • Size 728B
                                • SHA256 f71dabdc08c0d8d09b69613877a3d071a0f3c4ccc96fe891862916b8e4adca8b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                user-40.png.WNCRY
                                • Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WNCRY
                                • Size 808B
                                • SHA256 700301e73479e1cc056013b881f1a1d64c97893ac520d2f8a4be78cdc062e676
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                user-48.png.WNCRY
                                • Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WNCRY
                                • Size 904B
                                • SHA256 122a6b7e815da912af0e0cdfa7d554edfdd965b5ca3a4d869cf32e6a1d48bc00
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                user.bmp.WNCRY
                                • Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WNCRY
                                • Size 588KB
                                • SHA256 66a0eb37822ce2ab71729ac79fd6fb0a1a2772db7efa4bbce23259de0faacead
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                user.png.WNCRY
                                • Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WNCRY
                                • Size 6KB
                                • SHA256 7c34f11b3646332b60296fb45a07210cdcf8c44866c82c13743c9d46ca9d70d3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WelcomeFax.tif.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\de-DE\WelcomeFax.tif.WNCRY
                                • Size 99KB
                                • SHA256 12e17754deb42773113dc9150e822b5c2ae4a31f9f3760f3911a2a11bd7c8698
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WelcomeFax.tif.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US\WelcomeFax.tif.WNCRY
                                • Size 87KB
                                • SHA256 c75d95eec8447bbef6a60ecceec05eed565fadaac6cc22d1358617e64bbc8736
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WelcomeFax.tif.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\es-ES\WelcomeFax.tif.WNCRY
                                • Size 94KB
                                • SHA256 ecf871187f8d8d18784ec49eb3e10150ae39aa627efb83ebc8eb680c8938ba04
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WelcomeFax.tif.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\fr-FR\WelcomeFax.tif.WNCRY
                                • Size 101KB
                                • SHA256 4fcb61612bd8a10871771f473773355101e60c2153b397a41aae6c85b5beed75
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WelcomeFax.tif.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\it-IT\WelcomeFax.tif.WNCRY
                                • Size 92KB
                                • SHA256 d94cc20df6ccb0f050104a2a3e43ae7de2de1d987bc8eb9594fdbeed28ad89ed
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WelcomeFax.tif.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\ja-JP\WelcomeFax.tif.WNCRY
                                • Size 77KB
                                • SHA256 ddb8da9a2190beb20f3cca90b97cc27a30c57c94e419009a88aaadbbc8750977
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WelcomeFax.tif.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\uk-UA\WelcomeFax.tif.WNCRY
                                • Size 105KB
                                • SHA256 e8a6ba85d768e707d11e12735d8c113ed662bbe73b49503576d8605c6a7bb985
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WelcomeScan.jpg.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows NT\MSScan\WelcomeScan.jpg.WNCRY
                                • Size 504KB
                                • SHA256 156dff9474c5a7f2dba4be2152fbba8833ecab216cdd4203b8f2e4d4a7709c4f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                cversions.2.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WNCRY
                                • Size 16KB
                                • SHA256 5dba64a412ef9fcfb6498b239d190c43407013df1b48e1aee05f4c2c9d238832
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                {307E85F3-6D9D-446D-9012-E2967AA400E6}.2.ver0x0000000000000001.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows\Caches\{307E85F3-6D9D-446D-9012-E2967AA400E6}.2.ver0x0000000000000001.db.WNCRY
                                • Size 1KB
                                • SHA256 1ffd619351d87a92d0757f5763a9c98918116cca028cbc9832d8786923b76d31
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db.WNCRY
                                • Size 289KB
                                • SHA256 1e19e1dbb8fa9a72d7af88494bff5dd21f57f08e0c99d32938562b9033739e45
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
                                • Size 289KB
                                • SHA256 c04f13bc70bc27dc98f256e4296b299fd2c1a2d3ea72cddd2d2e36bc3c928e49
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                {DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
                                • Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
                                • Size 623KB
                                • SHA256 6914a5b8ea6123efdc9a21fa0f8340703a3ffc7ed17c399c10a079cbf1e0a83f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ActivitiesCache.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WNCRY
                                • Size 1.0MB
                                • SHA256 25f44bb0afd8da951aab14bc0e39de25c599584e323214180528f9b4e0250e74
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                4d2d9cc7-2cc0-4b5c-9ee5-c30a43a48a31.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4d2d9cc7-2cc0-4b5c-9ee5-c30a43a48a31.tmp
                                • Size 130KB
                                • SHA256 36733385fea8e64dafd51421ca9c0b264601a67e4acc256485182459d095a31f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                7d2bf207-add5-4d51-a0d8-e20a803ec196.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7d2bf207-add5-4d51-a0d8-e20a803ec196.tmp
                                • Size 267KB
                                • SHA256 e1b07e90797216e9b18b34f520443ae34c92580821186d29f7cd67b0e3de785b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                • Size 40B
                                • SHA256 6425e306544eada3397086f82b6fd7cdb8aefeec7d1cb40f10889682c6dcdca2
                                • MD5 SHA1 SHA512
                                Submit Download

                                1d767c72-b34c-4a2b-99bf-b2ae4b3b8a73.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1d767c72-b34c-4a2b-99bf-b2ae4b3b8a73.tmp
                                • Size 16KB
                                • SHA256 3e9945b44b362a87cc23cc410efc1f4350643276f9d3adba4f43ae3e2dbaa0b0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                4c210377-6786-4a4e-a5ec-63aae484146e.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\4c210377-6786-4a4e-a5ec-63aae484146e.tmp
                                • Size 414B
                                • SHA256 e3782bfed7b0688b39160c56c98cb5b6137ec8d995d30761017248740935e313
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                80f0c2a0-5121-4377-87c2-be4d7ee277c8.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\80f0c2a0-5121-4377-87c2-be4d7ee277c8.tmp
                                • Size 12KB
                                • SHA256 96b820ff0b31fc2ec7b902bbc471eeaf11ac0d2f66a2ac4fb297e5f91c2e8501
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WNCRY
                                • Size 5KB
                                • SHA256 1bf3e16b79751d832602faeb2131b6d23865882f8862df03756b38c5a06eb9be
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                offscreendocument_main.js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WNCRY
                                • Size 130KB
                                • SHA256 ad1f40d440b7fe2b681bd68ea9c065f32ddec9d6a88c29acea2661c557961a56
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                page_embed_script.js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WNCRY
                                • Size 632B
                                • SHA256 70c2c9d68a98544362f43c74297da829d271d1e00e3bf93d3ff5322db388f59f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                service_worker_bin_prod.js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WNCRY
                                • Size 136KB
                                • SHA256 7b8804c27192a0d693a643244cc112dba860243e540953963b5209291e76b97c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                craw_background.js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js.WNCRY
                                • Size 532KB
                                • SHA256 0ed1c2677a8ef790d1a1d82113e4ec404c204c05befd79c4c3e08a239edd5cf0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                craw_window.js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_window.js.WNCRY
                                • Size 255KB
                                • SHA256 e4cdf321456889cb00b25f176c3bb9fe3f25518f5d7560617b45979c7b61af5e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                flapper.gif.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\flapper.gif.WNCRY
                                • Size 68KB
                                • SHA256 c02034b27053c6fb116e68b048fc8b13ea9871abb4839cd9f44b27425283aa1b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                icon_128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\icon_128.png.WNCRY
                                • Size 4KB
                                • SHA256 cd20e463d82772ba246642299b6ff28abffb6a41f72f1b32074dd26ac225320e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                icon_16.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\icon_16.png.WNCRY
                                • Size 872B
                                • SHA256 7f73b424a2adcb59a93310b1101add98e9d81b43b615c548017dff515fe0dfa1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                topbar_floating_button.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button.png.WNCRY
                                • Size 440B
                                • SHA256 d1b1fa578058fb3dfcc50cea45bdd6e70d60c9a908a71f469a6af78661ccfa10
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                topbar_floating_button_close.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_close.png.WNCRY
                                • Size 536B
                                • SHA256 e637e463ac217bb43742feba858919d98b3c72d3e2edc0590a84f7ab2c442e57
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                topbar_floating_button_hover.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_hover.png.WNCRY
                                • Size 440B
                                • SHA256 54d0af1af87002d79c2160117be927a49c4551996fe425e24be64ddb8afd8296
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                topbar_floating_button_maximize.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_maximize.png.WNCRY
                                • Size 456B
                                • SHA256 971acf1e0e960af2ce7a95bdac9d5fce79350d84446ae07edf270079b2ba6a5c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                topbar_floating_button_pressed.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_pressed.png.WNCRY
                                • Size 440B
                                • SHA256 849dfdb92f5a9abcbfe1ab0cce573a5c2fdfbb9df0acfc11688563a9db8c4ffc
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                b5e867f7-b8e6-4004-93dd-be12efea3855.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b5e867f7-b8e6-4004-93dd-be12efea3855.tmp
                                • Size 2B
                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                • MD5 SHA1 SHA512
                                Submit Download

                                fce6ccf4-9e7e-441a-a038-2dd49b8a483f.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\fce6ccf4-9e7e-441a-a038-2dd49b8a483f.tmp
                                • Size 519B
                                • SHA256 2f797011191382a18faa4b7ad7116b4b4b7edad4480b41c82f5d13289e345cf1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                fdfc5c9e-ea53-462a-9d82-607e8f0f3ad3.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\fdfc5c9e-ea53-462a-9d82-607e8f0f3ad3.tmp
                                • Size 3KB
                                • SHA256 353d90451eb04f06fc2fa38ae8e92c8cbb6c9394f84654af7be9465fd2097817
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\128.png.WNCRY
                                • Size 8KB
                                • SHA256 dd865d54a778d48a0c24342dea504089ca6f7826b05f791f82f1854b0519d375
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                192.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\192.png.WNCRY
                                • Size 5KB
                                • SHA256 6a8cb88a07ba6818504fbed9216d24d0ef2c22645a2974b73713c95ee20b6c58
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                256.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\256.png.WNCRY
                                • Size 20KB
                                • SHA256 88e77fecdfe9b44314045c4202ace2d1aaf54435cbb0d2df15def088647e8172
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                32.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\32.png.WNCRY
                                • Size 2KB
                                • SHA256 f8db0bfd61e28a768b72e7516f59ada720cf1db72ba69eece8b6dc1cabd6a81b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                48.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\48.png.WNCRY
                                • Size 3KB
                                • SHA256 4149727dca363b60e49a2eba4b179d7787c61337045780fcff8161cdb982e606
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                64.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\64.png.WNCRY
                                • Size 4KB
                                • SHA256 cfb4778fb64feebd66861665ea2939dd52e8c74c39e4602f9fe2af1e465ca07b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                96.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\96.png.WNCRY
                                • Size 6KB
                                • SHA256 273e97724333401319a05a32c2964ae8748486f4e5a3b51673674cbd369b0cfa
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\128.png.WNCRY
                                • Size 10KB
                                • SHA256 ec869797892135860ea4d29cf0e3af59f80cae13db766561535826a7664320aa
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                192.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\192.png.WNCRY
                                • Size 7KB
                                • SHA256 8610780215a4e2ada3da8b9d754bbbd06f93cad882dcd634163af11902c813f5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                256.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\256.png.WNCRY
                                • Size 26KB
                                • SHA256 ea3a592fa91d8b364c75145db3355d28efd57a83a9e517448cbda7b5e89e884c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                32.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\32.png.WNCRY
                                • Size 1KB
                                • SHA256 5e100a6f67d1e2fb66f3edec5431ed0899ec8616b32fb031e89004a577ff8ce4
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                48.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\48.png.WNCRY
                                • Size 2KB
                                • SHA256 c28336907d7238d8afb6c77964476e176f9ccafae1adbce673c6f637a8f34f5e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                64.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\64.png.WNCRY
                                • Size 4KB
                                • SHA256 5df87adb59cbc400b36886a0748e2af70a8650086c589ed616a36ad936b68695
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                96.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\96.png.WNCRY
                                • Size 7KB
                                • SHA256 2b32ea68ecd8736cb9f628a1b05cdad8e1f186d9d735504078140cb52c701809
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\128.png.WNCRY
                                • Size 2KB
                                • SHA256 388f57fb62e2f7cfe3176298c80128e47c5e6164e8f4b67f502151ad57f14c08
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                192.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\192.png.WNCRY
                                • Size 1KB
                                • SHA256 98c52b975783030ec735e13e518d478f042a83c7a1efb233d08b773924478c95
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                256.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\256.png.WNCRY
                                • Size 5KB
                                • SHA256 968cd683aec8172bde54623e82d1cda98ebaaca5e5ec66f01432f73bdfddb54f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                32.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\32.png.WNCRY
                                • Size 1KB
                                • SHA256 12a3c0564943fc115ab3708e9a278c727a1d6cc48a3283c5dbd2282877fd292b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                48.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\48.png.WNCRY
                                • Size 1KB
                                • SHA256 fd14d22299e44758f44ae055e868e689a64b2d8960e68d60edeaa2e671a93984
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                64.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\64.png.WNCRY
                                • Size 1KB
                                • SHA256 efa62cd702db8da5271ba4d119cffccb4a3c503ca3d480f50eb4065f3ba31bbc
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                96.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\96.png.WNCRY
                                • Size 2KB
                                • SHA256 b6ca48cf94611af2197ec55467b617ff20c35fbb18f2ecd83a6fe3b3b1023725
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\128.png.WNCRY
                                • Size 5KB
                                • SHA256 de32d4eb68df6fbc85d8121f8ecfa1b3043c5e78db0e9d5fc5012fc2e57b31b0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                192.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\192.png.WNCRY
                                • Size 3KB
                                • SHA256 51f1be8fa99fba7965fc0924127e274ff0b7f3f431bec9e1a29fee830801c68a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                256.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\256.png.WNCRY
                                • Size 13KB
                                • SHA256 83d1eab716d9d1d375e7df98e4dcf64316c66c439964ddda0ab5b1ad7f9012e0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                32.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\32.png.WNCRY
                                • Size 1KB
                                • SHA256 0512c4229fcee0f43b22c5a8f634b86cfb7f8110773168e795d2e4d5030f9388
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                48.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\48.png.WNCRY
                                • Size 2KB
                                • SHA256 002c501815a5d3ca00d120d44e5fba3c9e2861a8b2929b91c76dc10edaaef29c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                64.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\64.png.WNCRY
                                • Size 3KB
                                • SHA256 6404b831a0db1b41c66723908834368b5b74621a2950b6a6f56b6925f4699d38
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                96.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\96.png.WNCRY
                                • Size 4KB
                                • SHA256 65f1634affd1924a9c07f937b4b2a50f0d565453c80b9fa4df1ffedc19d618cd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\128.png.WNCRY
                                • Size 2KB
                                • SHA256 21ef7dd2c215d4023978a7a004e01aac5d5a654fdf7d737a4817b17c01d150a2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                192.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\192.png.WNCRY
                                • Size 1KB
                                • SHA256 e7c3f6c284321f50a75cc5c528e88b9772c80ce4f3a9c65e93e64d88640fac54
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                256.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\256.png.WNCRY
                                • Size 4KB
                                • SHA256 65732e8956afe4c9fcc95ee5fad0a4402af6f3dca1c26d55dcff972bf5050e9c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                32.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\32.png.WNCRY
                                • Size 1KB
                                • SHA256 816b1b926bf9a682244ebe09fa570b8cafe7be8b9ebc092d58cdcfc70818d1e1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                48.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\48.png.WNCRY
                                • Size 1KB
                                • SHA256 06ad6a02d9c84f1b7372a67c62c179393d4cb2e61ef7a7f14926640d9dd81c2e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                64.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\64.png.WNCRY
                                • Size 1KB
                                • SHA256 31c52e9d1a25c9da11d5ab75bbe83e00b1950e9254092ff359a5e77d15b1764f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                96.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\96.png.WNCRY
                                • Size 1KB
                                • SHA256 3829b0d790a5723415f925a27efb7f1858a78ce9604612a20e12cc69d8b4ec99
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\128.png.WNCRY
                                • Size 3KB
                                • SHA256 e0977d3fca39a778f41d1f62a1c8228dde3abbe4822ed61612689a15f10dd4c9
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                192.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\192.png.WNCRY
                                • Size 2KB
                                • SHA256 18401af58d448518d1743e651817fb175aed7b94310070164fc8ba983497c301
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                256.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\256.png.WNCRY
                                • Size 6KB
                                • SHA256 57b45856e2c4a05e0bc9b2c7e26f6a99b9cd43f8e91fa41795445a6afdd0a1d8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                32.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\32.png.WNCRY
                                • Size 1KB
                                • SHA256 073e4b2e3d34827acc36ff92d14b1ef93445e54fe0a01121756db3d55657b93b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                48.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\48.png.WNCRY
                                • Size 2KB
                                • SHA256 3f4026ac01ece0b270bf5993baae93b89d393a5252820c187ee1c00febb31664
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                64.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\64.png.WNCRY
                                • Size 2KB
                                • SHA256 d02a3277c355c88f6adca8c98b7d8f62e5060287f58f0c7f46cb3fd34ee1c429
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                96.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\96.png.WNCRY
                                • Size 2KB
                                • SHA256 4c8acd00abb30f96360f5e4cf5428f78a61621db4c0795794724786993ab1642
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                128.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\128.png.WNCRY
                                • Size 2KB
                                • SHA256 141fc29982169aaf7ef6ab5e7a4e3cac2543c3e58e15f6aade0070643d229ec2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                192.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\192.png.WNCRY
                                • Size 1KB
                                • SHA256 522506999f1e4cd1be11de863c492fbdcd1985fd41f520bf148af39568162b4a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                256.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\256.png.WNCRY
                                • Size 4KB
                                • SHA256 4f5975d2b55e657b810b97adedf0a35d891a5433242abf7a5fbd35382e2a5752
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                32.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\32.png.WNCRY
                                • Size 1KB
                                • SHA256 78262e52401ddbe74b25acfca989f667fa46a09d3f9783fc41e4d0af8743b786
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                48.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\48.png.WNCRY
                                • Size 1KB
                                • SHA256 53a382ee2bcad6ce4148d88ea8e4322783087b1389570d1fb6ad22cb168f72e1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                64.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\64.png.WNCRY
                                • Size 1KB
                                • SHA256 2ca5c4f42fa9ad0e02bafe48223c69203c3b735e987256e013f4601e73293e4d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                96.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\96.png.WNCRY
                                • Size 1KB
                                • SHA256 b7ed6b6e2645e75df582fe7286da3922f87e5be7b53e378ac430e8970c6bcfa8
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ebdfaad0-16ba-4427-8234-4ea6c819edd1.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ebdfaad0-16ba-4427-8234-4ea6c819edd1.tmp
                                • Size 6B
                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                • MD5 SHA1 SHA512
                                Submit Download

                                heavy_ad_intervention_opt_out.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
                                • Size 16KB
                                • SHA256 1f43696cb065930c6eae176de16e643c968ceafe9ad806af6e1c2df679b71356
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                data_1
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
                                • Size 264KB
                                • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                bda0f5c8-2b03-4cba-8f92-66f03813b511.tmp
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\bda0f5c8-2b03-4cba-8f92-66f03813b511.tmp
                                • Size 267KB
                                • SHA256 e2a0157ee4700c830fa7336fcc99a4b3af668d6df8c2e2f3cc9d1759d3e1d657
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                first_party_sets.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db.WNCRY
                                • Size 48KB
                                • SHA256 0ec6634d2c21f3bb0577621c0b83436a6d7b6b2ed40c723ce2ba3075c3755d5e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                IconCache.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\IconCache.db.WNCRY
                                • Size 11KB
                                • SHA256 e3e64f3bbc29b53f82ce3fb32a45e86a7709904dcd2eb5df743ffa36e4edddd8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EdgeEDropSQLite.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WNCRY
                                • Size 32KB
                                • SHA256 42a54aefd715583c68b8a521d7749459c1a10d80ec08c681d565783948443615
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EdgeHubAppUsageSQLite.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WNCRY
                                • Size 32KB
                                • SHA256 e3d8e440867a7cbeed0a979b08042f0ea47132e7a41a35af55c283d168662134
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                index.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WNCRY
                                • Size 664B
                                • SHA256 8f6dc41e212dac4501cfe913b200dd1af3a0c13cb7f0d748c20a60837644d96f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                heavy_ad_intervention_opt_out.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
                                • Size 16KB
                                • SHA256 cc5bcd8f19fdc5ed00a2aa266af123859b4d8ffe7df2789564fb660e2df5eb4a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                load_statistics.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WNCRY
                                • Size 104KB
                                • SHA256 da83bd3ee0deb2b4df7fb6b5d813bcdbbbf7cb2d0987af033bac2d6defa24100
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                brndlog.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.WNCRY
                                • Size 6KB
                                • SHA256 4fa1decd52100e18ae266c5d024931d1e28f950fcbfb90571a9a1963b6f66196
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                mip.policies.sqlite3.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WNCRY
                                • Size 36KB
                                • SHA256 147f11c06e27b10ead8b51442a83a1354bd2a50324e8fdf0773c3f45a77672c5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                excel.exe.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WNCRY
                                • Size 24KB
                                • SHA256 ebc2625f14f10fa942b0c0075a77929dea0becd68e1d977702799c60204df6ef
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                officeclicktorun.exe.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WNCRY
                                • Size 40KB
                                • SHA256 58f2433835e7189d7ce005db280c374ab68cc036052a05f1d2c5828fd1336f7e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                olicenseheartbeat.exe.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\olicenseheartbeat.exe.db.WNCRY
                                • Size 24KB
                                • SHA256 5770eabc921b9984cf56c31446d346bbb6bd8bbd1e95386eff22630a3a85e3c4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                onenote.exe.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WNCRY
                                • Size 24KB
                                • SHA256 242fa988b6f1ce08791de91abe64f6b5fec8bf9da4659865d332cb6654c6c1e3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                outlook.exe.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db.WNCRY
                                • Size 4KB
                                • SHA256 5811c8f4267e479bdc48fefd154a9ad5d92da8444040bad45804a79d3deb5de0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                winword.exe.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WNCRY
                                • Size 24KB
                                • SHA256 1b8dbfe64e4c16cf69df05665c825ce84e64923cba634546ec514d1f418b6e3b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppBlue.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WNCRY
                                • Size 5KB
                                • SHA256 00c5e67795f714543b6ed5aecf1bf745a1e6fb2aacd45c099a8ed15b51b2d2b7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppErrorBlue.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WNCRY
                                • Size 7KB
                                • SHA256 37f036b5502bb63395169dd63ec0aece3de7e7bc5b356aab3eaf8efc5d52545c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppErrorWhite.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WNCRY
                                • Size 8KB
                                • SHA256 9b2b3cd1f93f6ee7faa232272a3a94dca56e3de1bb4345bdec52361c7d6fbcd9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppWhite.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WNCRY
                                • Size 3KB
                                • SHA256 7987b3574bd8a75e6cd9caf38ca8de40205785a1a92942e9004188d9f8eebb92
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                AutoPlayOptIn.gif.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WNCRY
                                • Size 374KB
                                • SHA256 fa7719c334bf31add41881a8da1dd945e6617ec1893d3647e26d12a080667a08
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AutoPlayOptIn.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WNCRY
                                • Size 10KB
                                • SHA256 61a330522514fdb2b819487b6e9359cf36b902dbe01e9263fc7f69b9e2f5cf15
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CollectSyncLogs.bat.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WNCRY
                                • Size 6KB
                                • SHA256 fe7dc89fed285bf73445326c1a550e7af8b642c8c7bc61b33fbc674052ac25d1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ElevatedAppBlue.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WNCRY
                                • Size 7KB
                                • SHA256 f7408a56f1e951336ec3150e5ab0bbb96990c364bc47d0b703694152092c46fd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ElevatedAppWhite.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WNCRY
                                • Size 5KB
                                • SHA256 b390724f7f0e93fb75649dcbbf5cdc9e9a2267f41532bc835eaa9479dc1eb3d1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Error.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WNCRY
                                • Size 7KB
                                • SHA256 417988faf8053a589f6bcc20cb099b7551f4d81f7c4acb2c4d89ca9f2e09403f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                KFMHeroToast.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WNCRY
                                • Size 15KB
                                • SHA256 2d1bd4d5510098e2d5f6c9cf9bc5ed08e6a346b806ad2158f60790fcafd9bc20
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                KFMLockedFileToast.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WNCRY
                                • Size 10KB
                                • SHA256 8ee9703c6b2d1a1c2c47492456871faa40b3e2675e1377bf2ed12cfa133de008
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                KFMScanExclusionToast.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WNCRY
                                • Size 10KB
                                • SHA256 a395d6ba729913ffca486c7c335d9d8de134de47441f2cc331ba48a86dd4440b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                OneDriveLogo.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WNCRY
                                • Size 4KB
                                • SHA256 8e6fcef7a1f2cfcb0a68c5ab0de7da1770fdc5577114582616f20324b6528d29
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                QuotaCritical.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WNCRY
                                • Size 8KB
                                • SHA256 10679655562ebce9342ed58dbcdee21f25b4d191da98173068996f9a400dd58d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                QuotaError.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WNCRY
                                • Size 9KB
                                • SHA256 c0698d99428c5b46fd3f0e56e43b7735db1c961d7c6fc49dd33d0d8f58d122a0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                QuotaNearing.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WNCRY
                                • Size 7KB
                                • SHA256 cdaf8275be881a063483bb0c760cd01127418755310431bb47779777f9a1d890
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ScreenshotOptIn.gif.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WNCRY
                                • Size 238KB
                                • SHA256 140d8dabae54eaa039f77789a052b59c2dc2615c46c36f442c5bb1a1003b95cc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ThirdPartyNotices.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WNCRY
                                • Size 48KB
                                • SHA256 c4511ed9b3d82dc755af0c24b3566a5ae359bd6bc168fa04020b257fdad0b899
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Warning.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WNCRY
                                • Size 2KB
                                • SHA256 e57b8f3a5423f2dc86dd53313cb0e2951afb7ea96394b713296141981eb44185
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                alertIcon.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WNCRY
                                • Size 1000B
                                • SHA256 a15a025a31f5ab7ac50e265f5c6c705cc122915cf82aafa3f6be4ec92953bc02
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                acmDismissIcon.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WNCRY
                                • Size 2KB
                                • SHA256 a1e31ac7a6b2b9dff5db847bfa137012137157743b0bd9cc8e8808821400096d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                blurrect.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WNCRY
                                • Size 1KB
                                • SHA256 8ddce8840ab09bd35c41700cf8fa06c109ab46b8354616f520a55e184d505e17
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                checkmark_finished.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WNCRY
                                • Size 504B
                                • SHA256 f5c9812b98d20ef1290938bfc58a5d2c2333e034e46ace039c31cdb6b3c3f741
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                checkmark_hovered.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WNCRY
                                • Size 680B
                                • SHA256 4abde59ab2845de9dd1120f36246e9715312eea4b7f0de5d4ccd4b2daf2a0b20
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                checkmark_in_progress.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WNCRY
                                • Size 680B
                                • SHA256 8c804e85d02d53e8e6797f84d9250287fce2c0ad8839b856ba1f925956dced68
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                checkmark_selected.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WNCRY
                                • Size 680B
                                • SHA256 9fd368883b1e4eef510a054e2d564a0eabfe7fdebf0288e70b8f93e69097621b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                chevron.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WNCRY
                                • Size 584B
                                • SHA256 840c8cc25bcbc4f9c8d2a8d3ddf470597eff755eece477a43449297b038bf670
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                chevronUp.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WNCRY
                                • Size 552B
                                • SHA256 6ede1c56d4ef3d53696d04b2a6b819f2fa16e1a48aa9696cabc7ba4894644053
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                cloud.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WNCRY
                                • Size 1KB
                                • SHA256 4bdda2e169c2b698591fdd178fa7ceb8ec637b2510e4a4737ef011a4ffd29925
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                done_graphic.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WNCRY
                                • Size 15KB
                                • SHA256 a70b84b425921a7d96eca101092910d9770d594db66c35863f54347463c7e23b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                errorIcon.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WNCRY
                                • Size 1KB
                                • SHA256 535f89ecbea702c66b514f2e0f7cd2767a0d8e3f39b73b2acdccda0d48e163f6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                folderIcon.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WNCRY
                                • Size 1KB
                                • SHA256 20f56c0aa60e942e9e81be31b2c2fa9318832e1f9f5d29e2dd9ad4095d9115de
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                folder_image_desktop.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WNCRY
                                • Size 2KB
                                • SHA256 59c5b67ce45fd2faa1556ab27fa5509c935b852dda2307e35ed28e2662c0ba11
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                folder_image_documents.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WNCRY
                                • Size 10KB
                                • SHA256 aba9dfec3d76b35357ad20cfa96bf50a6c6caeb1398d052437fe6ef036e4e2ce
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                folder_image_pictures.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WNCRY
                                • Size 7KB
                                • SHA256 377d4f23d3f83d0be9f0e55b2e681b8e3c00acb475e11fa8692205c0c5ba436e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                globeIcon.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WNCRY
                                • Size 2KB
                                • SHA256 553a11f7dadf8ded364ea59f9cdc5e33575e1f4c7564c3ef592334526c97a8c9
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iceBucket.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WNCRY
                                • Size 6KB
                                • SHA256 bd68db2dd35fc84470af58300dbd4bae83026dd620c2e03fc129ff643e168160
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                infoIcon.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WNCRY
                                • Size 1KB
                                • SHA256 db161d89b50a12b3e41aa02339acf2dbce8f2eb86c2b0f2606ed438d35921631
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                kfm_folders_image.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WNCRY
                                • Size 20KB
                                • SHA256 ffcd95e37263aedf7c5c64ac9549730d199c5558d5b36cf66ea07a29d0417c44
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                loading.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WNCRY
                                • Size 1000B
                                • SHA256 fe041f624d28f3521436c69a0094ab23e75b4acd25ace30eb6f521434569d8d2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                loading_spinner.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WNCRY
                                • Size 712B
                                • SHA256 40a296ac7c34a09fd8d418e003bd036571201d7e10e8057b4e7ee5b3c584919a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                onDemandFiles.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WNCRY
                                • Size 7KB
                                • SHA256 1476f07a467567a2c50e8a5112baf9618512c41894f2d1a0277782f225bef3c0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                onDemandFilesDehydrate.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WNCRY
                                • Size 9KB
                                • SHA256 431fddbd4d6be6f576a0e152e09e5ae9773c1db6ae17badd4d45a0bffe9058fd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                onDemandSelectiveSync.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WNCRY
                                • Size 2KB
                                • SHA256 fc66806b4f9796964555e785c2682ee3eaa4941139968078f32d854fd9a7b75e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                overflowIcon.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WNCRY
                                • Size 1KB
                                • SHA256 b0ef75000375ffd92915f38d79ee32dde2e2ceb86f5e1210d21f3507c0e4793d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                overflowIconLarge.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WNCRY
                                • Size 1KB
                                • SHA256 7989be4b59e4419f5f81f78973ca9cc5d4bb4022c67edc4c0dd05b53bff18372
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                partiallyFreezing.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WNCRY
                                • Size 4KB
                                • SHA256 d9552dc295675958d544df2918163e0b48c84f7121c3017cb9d292758652c1fe
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                paused.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WNCRY
                                • Size 600B
                                • SHA256 25b5f72d9fd9bd6abaac1fc2587600d9ec1ffbf5dbf455fa7cfba603f36ef0db
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                premiumIcon.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WNCRY
                                • Size 664B
                                • SHA256 1c880a38e1c557b03783dab82dbaef58e54bfd9ac9eb100d58aa35b2f0613ba6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                recycleBin.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WNCRY
                                • Size 3KB
                                • SHA256 6aa43c70a52bb764ebbce9504e60872048dd4474ea53e7732ae3a65ef305b5e1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                shield_icon.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WNCRY
                                • Size 1KB
                                • SHA256 8be14cb5323b3977e12bc3fdab8c95e4b1d314103aac927650e65c1599fda888
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                signIn.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WNCRY
                                • Size 10KB
                                • SHA256 fbca71fd24423a45297a2ded878542910c5a18590c8a058cf2cd7b4d012ce442
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                stackedIceCubes.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WNCRY
                                • Size 4KB
                                • SHA256 710f593d8b134200297a89597d2374d51baf7502f37a1e70682290f14ee40e4d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                warning-symbol_grey.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WNCRY
                                • Size 536B
                                • SHA256 57f7c0a563625dd19bd8bea98ada04e748e0f67bb2f1574e2cc8b47367f4332a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                waterGlass.svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WNCRY
                                • Size 2KB
                                • SHA256 686e2bb07cde53f8c207c29d86c1ce165e3d37b093b9ac67346d7f25afc53b04
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-black_scale-100.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WNCRY
                                • Size 936B
                                • SHA256 5ca92dd1f4bad690863df8c223ef01b2d214e39877ff453a4e49affa2db870c1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-black_scale-125.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WNCRY
                                • Size 1KB
                                • SHA256 c4e074a0429c39ad69ac8780340698314eb6abafd8373ade262d19d00eed2843
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-black_scale-150.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WNCRY
                                • Size 1KB
                                • SHA256 de103ee927a334c0495167a0ac3cf8ffb91ac2dbfde8720e336bca073ab51441
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-black_scale-200.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WNCRY
                                • Size 1KB
                                • SHA256 bb86d5875bd3e228a8c6e8a4cd7cd75a985879178bc1fe6cf8516aeca1a385c4
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-black_scale-400.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WNCRY
                                • Size 3KB
                                • SHA256 f1d5caafb45b35b8ba4c61f3bf614d9471b6def49eb64d7e01a89cffa288359c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-white_scale-100.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WNCRY
                                • Size 952B
                                • SHA256 2752500d4047ca0060180d321452315be54e32cca9e3c6bf5829d5cd01b5f33e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-white_scale-125.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WNCRY
                                • Size 1KB
                                • SHA256 6cbd622574fdc49e16e440198c244d30fca8a799e368e6e501fd306f701f88f9
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-white_scale-150.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WNCRY
                                • Size 1KB
                                • SHA256 f0134428efc4f1560300b919aaeed3933820de5b2e8c687cb70497f6a37f27d0
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-white_scale-200.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WNCRY
                                • Size 1KB
                                • SHA256 b3f9c7d827b83d4e36e80ff7b711c262b4797d7895d35e375db5d16364cda2f8
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.contrast-white_scale-400.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WNCRY
                                • Size 3KB
                                • SHA256 6bedb8b4240eb685cf57e105b07c100e415cdfff14f85e3b3c2a9694139b6c74
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.scale-100.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WNCRY
                                • Size 936B
                                • SHA256 c7b98e63e88c8d033de10f78336e960d207ed2f51c250c850ca03ff4444c9096
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.scale-125.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WNCRY
                                • Size 1KB
                                • SHA256 fe12ed634c8ac622b7668be74dc2cf7444c1e4f1e01024ef9dcaf8e646c10bd6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.scale-150.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WNCRY
                                • Size 1KB
                                • SHA256 a83743599e3b130659a70e78e1f62de2da727bbd1865db211ee7d9703a12ee2a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.scale-200.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WNCRY
                                • Size 1KB
                                • SHA256 130c5a72dbe083cfa259e7c14cf44fa1d33ded57d02b8cfcbba2dc0a125e5fe1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveMedTile.scale-400.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WNCRY
                                • Size 3KB
                                • SHA256 80078663ad6a48dbd638fd9399720c55be371a115657582f78759e1b6c136026
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
                                • Size 696B
                                • SHA256 1e04e2a7f11ac3950535274ab7fbf93ca14c987b0c47fe186f922cfc350926d6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
                                • Size 808B
                                • SHA256 dbf0471627dc301b800ef6ea5268502119f61b24aba80e2644e8272361503084
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
                                • Size 872B
                                • SHA256 197009e0404685229bcabbcd74db1a3ad216799dcbe2759a49545772554dfb34
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
                                • Size 1KB
                                • SHA256 8b198eadc88c6e4673659d3f875b575730b6172d83aebaf635f7ee5504087d76
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
                                • Size 1KB
                                • SHA256 95735611127504819f03959fa81301cda2219bcf83a3f337bf19e0da2725f692
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
                                • Size 696B
                                • SHA256 83fd18ebf1033811acfa0a148c8cd68c04e0457999134a416bc7cfe1ab1fb1f2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
                                • Size 824B
                                • SHA256 de615f0e709feb89eba68a21365cab77228c7bfe3c067e2e0e1cdc8ad3c9ba46
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
                                • Size 888B
                                • SHA256 d5263399ea15037b512884209668f5b750a69871d8be5c86918148ff2e09feb5
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
                                • Size 1KB
                                • SHA256 27ae31785d701d14a9106ebf9c94293b71f642403ee82bbaaaa8946c64a0fb01
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
                                • Size 2KB
                                • SHA256 bd5cfa3a2e3cdadac26d98bf6b5e54ff109b0e360efdb7e2d860b503a63246ee
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.scale-100.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WNCRY
                                • Size 696B
                                • SHA256 4c93020fe14ddf5f1c2ae5886610e536f2622ee84410ad284433f00e53926465
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.scale-125.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WNCRY
                                • Size 808B
                                • SHA256 111d57b646296bdd9c2b721ab23695e301759942ca1f3c6b991f793c43a19bee
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.scale-150.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WNCRY
                                • Size 872B
                                • SHA256 ea2fafa2e55add55e864c81400015d9e55da51bad0e0850cc3c08401f3c48f4c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.scale-200.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WNCRY
                                • Size 1KB
                                • SHA256 5b47007583a353a61c1b3a54d215e7e6f5d37d789b54b841a7493c03bcc8d65a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                OneDriveSmallTile.scale-400.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WNCRY
                                • Size 1KB
                                • SHA256 e57b1729a7dbb00b07cdbf17e096985ce727a5facbd8cd7d0ff1b0b0a55b7094
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                cversions.1.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WNCRY
                                • Size 16KB
                                • SHA256 bac6537366c7a55a57d26c04571b420ace7b288f83ebce3d5c7ec7641dc2cee9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                cversions.3.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WNCRY
                                • Size 16KB
                                • SHA256 334c9e4a7655412cb106dc69fb40f38c400e5279629eae14619a586b06d34ca6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                {03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
                                • Size 414KB
                                • SHA256 160ec16fb0c0d18c38fd40826b4c20b051a63b5c02a59f8e052234fa02e1bc3c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                {3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001e.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001e.db.WNCRY
                                • Size 93KB
                                • SHA256 55dfb211be2874a11164579ad4a90138d78e5da4ac731382022d4705c3de51a3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WNCRY
                                • Size 83KB
                                • SHA256 0debfb05d20cd3e3a0d7b4c2c3794fffaafa76119a1fe3577a460d0553961c43
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db.WNCRY
                                • Size 85KB
                                • SHA256 e5d82071eee94192d246f79bfcc3061fc31aaa11f941117cc0f2b67e9e5ab15b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                iconcache_1280.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WNCRY
                                • Size 312B
                                • SHA256 126ef6a04a0a202719c883e63fdd7d8b32593a6043f1bcbe16716b20b2f8f39d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_16.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WNCRY
                                • Size 1.0MB
                                • SHA256 8162724f6c7f36a96480f88c32218c9447987d32fffa7ceb3a7097e57525d19b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                iconcache_1920.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WNCRY
                                • Size 312B
                                • SHA256 c34df44d5583dd3b011fb0bf317918edae0d485f07c6dc2d6a41fde628112da3
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_256.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WNCRY
                                • Size 3.0MB
                                • SHA256 a4bbfa9199eb3546b5328431fb3d1dded8f9d40108b11dc919fb9e0004ba0344
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                iconcache_2560.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WNCRY
                                • Size 312B
                                • SHA256 113f45d996a403b0cac86d6eb644eb7d4cfed02a0f51b71219659238e815f585
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_32.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WNCRY
                                • Size 1.0MB
                                • SHA256 83732f9b1decfcc419299a60e739de8e24aa9ed53ea849c6ba7d05d2c0cdae66
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                iconcache_48.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WNCRY
                                • Size 2.0MB
                                • SHA256 5cf693a1a4c7f8a85a207a7c07b0c712c84d2ef5590d821eff466031e37d8add
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                iconcache_768.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WNCRY
                                • Size 312B
                                • SHA256 8d401820662af67836c91c8e78da12a1a8183c9b718e2f9c177ee3527c386a6d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_96.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WNCRY
                                • Size 312B
                                • SHA256 f518e8cf5214f566aeb46af5d894ca803b67a2f0f4b8cab498483578c798c29d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_custom_stream.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WNCRY
                                • Size 312B
                                • SHA256 65f4cebc6ad82b99c61c9b759a57d3899eebf996662917fec2798c24f3b778f5
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_exif.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WNCRY
                                • Size 312B
                                • SHA256 d9fee103510b4c4dc386039eedaffae10c86d6a5608e1e491d940a415e478af9
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_idx.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WNCRY
                                • Size 28KB
                                • SHA256 8af431d6a51e7390be984396ae6edaa48eb501039b11d7ba89a78785cb201c8c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                iconcache_sr.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WNCRY
                                • Size 312B
                                • SHA256 06730b6df668e35fd84cbb016cf877260b29473bb81c692b6e0e66a4a72f6464
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_wide.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WNCRY
                                • Size 312B
                                • SHA256 4aebbfd2eabf1e7aed7af588093cfb18f6bc989f8e8248f981303a317181042d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                iconcache_wide_alternate.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WNCRY
                                • Size 312B
                                • SHA256 4eff1e4bc676ab27db3eb09816212369cfb87075063aa20e227a21699874d2ac
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_1280.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WNCRY
                                • Size 312B
                                • SHA256 86afdf10ef487fb31fa4f5275aea8d817a7e028ac8ffce713c8fc1cd2604d4a9
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_16.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WNCRY
                                • Size 1.0MB
                                • SHA256 b81caa510389712648270d5656dcd1a0b75752c97bb81c2ff80aea0c8004edb5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                thumbcache_1920.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WNCRY
                                • Size 312B
                                • SHA256 e7ee9d2966b0f61410a3343b4e2994103976815a3800b3c44f0341499d161737
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_256.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WNCRY
                                • Size 1.0MB
                                • SHA256 c6764aeb95ad571a28b54420863af06e1b03d823bd6b6c7ef47a4be042aff909
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                thumbcache_2560.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WNCRY
                                • Size 312B
                                • SHA256 152afcc58b3faac3661faa7f292e931411a40e3d1a8910522806391a1ba904cc
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_32.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WNCRY
                                • Size 1.0MB
                                • SHA256 070798067440e34a9999c27b8e2bacf11d4c759d0ab512c20d8dee9207b0df65
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                thumbcache_48.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WNCRY
                                • Size 312B
                                • SHA256 8c6c9df2536b0b84ec797e722382ad7c270e5cc4c04183a7e15e2d2a79a38489
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_768.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WNCRY
                                • Size 312B
                                • SHA256 be7f054c433a98f35340a4b9eb02e606ee9f4ad5987878d4c2b74e73b7c22f9a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_96.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WNCRY
                                • Size 4.0MB
                                • SHA256 6047561fb565b5b06a4fb930fc2712a0fa5c5cd52fb2a6a8c32e8993c99c400d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                thumbcache_custom_stream.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WNCRY
                                • Size 312B
                                • SHA256 0a392ded528136177fa0b9a35b3d90638c9d23c51c09948eefeaea350ddae981
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_exif.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WNCRY
                                • Size 312B
                                • SHA256 184df7772ecad2a80f4a3a685d0792a1ce7c1d9eae58d1f3c1b6f6268ca84407
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_idx.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WNCRY
                                • Size 14KB
                                • SHA256 297a9a87357c3d6c131905affba0b928e9a4819013757ef01995b01dda3db4ec
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                thumbcache_sr.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WNCRY
                                • Size 312B
                                • SHA256 c721e4a0fcd93b39e59e3096b47085ecb848a844dd86c1517a2f78ce82bb7074
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_wide.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WNCRY
                                • Size 312B
                                • SHA256 3ee04983c20e269efe9d43b7e0f938e5dd49a9aef1f9e5b43e87f3971c30ba38
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                thumbcache_wide_alternate.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WNCRY
                                • Size 312B
                                • SHA256 b650f3329e2f69ad3c0a9076892d258000280a50bb3154d7b03ccb66a24397a2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                login_v2_en_O6ZAt4gw2p3brUAcUCTgow2[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0OIDP0T3\login_v2_en_O6ZAt4gw2p3brUAcUCTgow2[1].js.WNCRY
                                • Size 960KB
                                • SHA256 b6c8afbca2abd16664a73279f3ae87d2f941f3c77793025270dcb8b7779a1973
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                fabric-chunk_vendors_E7vUDAv61iVCiyoz3ABkzQ2[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\85D7AFSJ\fabric-chunk_vendors_E7vUDAv61iVCiyoz3ABkzQ2[1].js.WNCRY
                                • Size 551KB
                                • SHA256 e534841f364d6ae016397fcf0b29f7ff284af4bccf6f6857c6152370036dad8f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                legacy-polyfill_N8Ga2ha8NZXKE88suhqTHA2[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\85D7AFSJ\legacy-polyfill_N8Ga2ha8NZXKE88suhqTHA2[1].js.WNCRY
                                • Size 135KB
                                • SHA256 1e09356cb0ac021e32e8468b0aaca04e24b8fa7b2b987b64ec87056a37b87366
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                {8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\85D7AFSJ\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
                                • Size 6KB
                                • SHA256 ee8dce77b6e186e02f387d56826b63a356b23a80755624f4f0b64d1efcab437e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AAehyQC[1].svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8FXVQJ29\AAehyQC[1].svg.WNCRY
                                • Size 3KB
                                • SHA256 09450abd919debdf802d26516e7b5b484062c40fc56a43c6b20ee4873ec660ce
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                oneds-analytics-js_v2_500d8f6d3f9acd0d4b4a[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8FXVQJ29\oneds-analytics-js_v2_500d8f6d3f9acd0d4b4a[1].js.WNCRY
                                • Size 86KB
                                • SHA256 39f125ac6c0fa1ff726a32f72aecdb9b135764050e5508f90e88567fbf6e6698
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                microsoft_logo_ee5c8d9fb6248c938fd0[1].svg.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\EFFG4FKD\microsoft_logo_ee5c8d9fb6248c938fd0[1].svg.WNCRY
                                • Size 3KB
                                • SHA256 ccafcf0db02a4803c0bdc9bf755e06e13a08e8b3943fca8ec954893fb26f7730
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                wpndatabase.db.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WNCRY
                                • Size 1.0MB
                                • SHA256 2b7918b3ac271d59c4260300d313a1f72a65e860a10e41d5372e19b971d3aec0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                squaretile.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\squaretile.png.WNCRY
                                • Size 2KB
                                • SHA256 18f247fcd5fe0c2af51d78fa8ae559469c1e51ed6dc2a669c36ef18763729fe5
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                tinytile.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\tinytile.png.WNCRY
                                • Size 1KB
                                • SHA256 ed54f829bedcd6cee52c61b94a126ee5b0ec97565461cea6b612641f4cf05ac2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                squaretile.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\squaretile.png.WNCRY
                                • Size 2KB
                                • SHA256 49bb63393f71f70e9cf18ad6319cfac6e7856273decc128afda2b026c50aa854
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                tinytile.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\tinytile.png.WNCRY
                                • Size 1KB
                                • SHA256 25aecabfcb12447458c13e0376598fbeed1d74ac702486aba26aafa3d77cebaa
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                squaretile.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png.WNCRY
                                • Size 1KB
                                • SHA256 24109c537f687d4edbe13c2f2de3c40f68fca1869ce0091bc7c773e0c39680d3
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                tinytile.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png.WNCRY
                                • Size 1KB
                                • SHA256 960b685b574541a39df41281049e63faadd9da3f46d0d8babb8bc8318f77c64e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                squaretile.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png.WNCRY
                                • Size 1KB
                                • SHA256 14ad1e9417104ea9004f37b02f036c6e61ed3d7c5d2e47ddf31b8e18fe994103
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                tinytile.png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png.WNCRY
                                • Size 1KB
                                • SHA256 6ed93db2ec30922deec0242202cf060c97ee420319da33258e9dcb8f5ccbfd08
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                odc_homepagebigarrow_ltr-060c245a73[1].png.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\TBH40GNY\odc_homepagebigarrow_ltr-060c245a73[1].png.WNCRY
                                • Size 5KB
                                • SHA256 f64c2ef3c2e472b2abd77b9589345d588391ec4e25a261b59c949b35d6c9c8c6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                53dEtUrhAV5kBHY-GXbgbWghcig.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\53dEtUrhAV5kBHY-GXbgbWghcig.br[1].js.WNCRY
                                • Size 2KB
                                • SHA256 1fefbc399f2a6c2bd6c4b88029b1fa9084c75bb45140f3924391dd37fec14a6c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                5_Qy3kN7CMDIuIz_gxIKYIiSlE0.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\5_Qy3kN7CMDIuIz_gxIKYIiSlE0.br[1].js.WNCRY
                                • Size 63KB
                                • SHA256 aca5a922e3f270ceda802eb8432b1af762efc67429358d0ff7b2397d2cca46ed
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                6Y5Lpywr0GtWwZp2QTDQ9BU5hkM.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\6Y5Lpywr0GtWwZp2QTDQ9BU5hkM.br[1].js.WNCRY
                                • Size 87KB
                                • SHA256 8de547fe6a110806285854449ff0ab17f3ca79e2c884a9914272f53a9cc3342a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                75Izh7HFgy6cSu9rdaZkYjp-stc.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\75Izh7HFgy6cSu9rdaZkYjp-stc.br[1].js.WNCRY
                                • Size 9KB
                                • SHA256 0eb400480b02f3d9f9145ea2334dc8b5b8480bee3fd0a217d93d95883fd69f44
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                BssPvDdoj1C9GPJrc4ePK4br97g.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\BssPvDdoj1C9GPJrc4ePK4br97g.br[1].js.WNCRY
                                • Size 96KB
                                • SHA256 4139f8d4c4a99bc4ef7be0c2441a8a95c12bd273d34458d09c523f983aa75bde
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                IBajuVOUJVU3NlyWM2Txlietv6o.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\IBajuVOUJVU3NlyWM2Txlietv6o.br[1].js.WNCRY
                                • Size 349KB
                                • SHA256 6fa5c4bde013354665ce82cab6173ab39c8e776083feb29f56a81c660b23ea18
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                KiGbwlvCr6mDT2PTMkGTGMX8P-w.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\KiGbwlvCr6mDT2PTMkGTGMX8P-w.br[1].js.WNCRY
                                • Size 42KB
                                • SHA256 72117ed1a2a4b91525c7df966d5a9d747f03105ca47f67e757605acde945c75a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MxeJyjNgl4Wpe6lwn5kHkr4_-94[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\MxeJyjNgl4Wpe6lwn5kHkr4_-94[1].js.WNCRY
                                • Size 1KB
                                • SHA256 bc9e9b9bbb90d7b818f4d1defe2bc7b337ca8d7f3c17155c1ab72911d3c6d188
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                RGMlHpHvBtpIoimRoi_VK90-Hv0.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\RGMlHpHvBtpIoimRoi_VK90-Hv0.br[1].js.WNCRY
                                • Size 469KB
                                • SHA256 80474afc0ed4f39f0eb66048f7621188b71f8dcf2c64d2fdaffaa8635ac7326c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                S2z4mgWinRePGA60pm9jypzjvgk.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\S2z4mgWinRePGA60pm9jypzjvgk.br[1].js.WNCRY
                                • Size 163KB
                                • SHA256 c89c5be3fc0b9a65978fa30c722b2724e6c6efff70bff151098540a5bebe9f01
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                XDGzKmz1XMmydyUdsLjQWSxd8yE.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\XDGzKmz1XMmydyUdsLjQWSxd8yE.br[1].js.WNCRY
                                • Size 42KB
                                • SHA256 294692ffe1d5dea937d97facc554649ce1657f69a6e9f9d3d5bdacf6777fd5da
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                _BnB-s6taBN8V2dSpgLpRUHcruc.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\_BnB-s6taBN8V2dSpgLpRUHcruc.br[1].js.WNCRY
                                • Size 64KB
                                • SHA256 1e7dd312efc639d154932511cf99bb2dd8b6d36974ce605d5711d454b1b30f70
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                iNPskXPmYT28qkQXzLg4o1yEVKs.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\iNPskXPmYT28qkQXzLg4o1yEVKs.br[1].js.WNCRY
                                • Size 543KB
                                • SHA256 042d74f94602484fa9f5109fe580e5169cc7c5cda39f06252f534cf41354ec2f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                kKDH_Zwhs7fhB09C7rXcLKAhJEE.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\kKDH_Zwhs7fhB09C7rXcLKAhJEE.br[1].js.WNCRY
                                • Size 100KB
                                • SHA256 290b29469d52d71ba327fa22311f7225a7a210c3375438a9bac472a16e51c63d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                nqCMVneqreK-vgoiiO8O6mngB9E.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\nqCMVneqreK-vgoiiO8O6mngB9E.br[1].js.WNCRY
                                • Size 135KB
                                • SHA256 0cef123452d66fd0bdc15b8aaf3fa83c6786dc6facc79b17caa7ad7a2d057ae6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                sGpYN-m0KMWCBkdAq1ExBhpfbbU.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\sGpYN-m0KMWCBkdAq1ExBhpfbbU.br[1].js.WNCRY
                                • Size 2.3MB
                                • SHA256 5e2f13a9b13fa3017af5305408d705f76878e8b4ea39ce6dc2fe75df88cf7ffb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                tgVYEgDzrpTeICVaaRca7RC5Qpo.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\RCY0YJOB\3\tgVYEgDzrpTeICVaaRca7RC5Qpo.br[1].js.WNCRY
                                • Size 1KB
                                • SHA256 d265e7256ffb0ca3c673363aaf53b587d213d2a8036397c84e89412886553940
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ANzUnPnVY0oL0XWxs0RLJxjJLUo.br[1].js.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\FLDPBWSU\ANzUnPnVY0oL0XWxs0RLJxjJLUo.br[1].js.WNCRY
                                • Size 20KB
                                • SHA256 096fd6cfa519db1fcba5948168ef2a2ac8bb2464e2480183fe380cac75bf11e7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                0.0.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{11918d85-432f-4918-83df-1d1e9303b082}\0.0.filtertrie.intermediate.txt.WNCRY
                                • Size 31KB
                                • SHA256 c8db15e2585246384eec8c3d4c252ef2752e52f741a9920064e910407c375309
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                0.1.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{11918d85-432f-4918-83df-1d1e9303b082}\0.1.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 ef7f4637349b498a0c8e1f3fed563dfd034a8711d68b3c9068f16876a0805e14
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                0.2.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{11918d85-432f-4918-83df-1d1e9303b082}\0.2.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 4f9a6ac7cd81dbbfd4bffe0772a17e6521c9b92f91a8e158cf5f899356624c53
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                0.0.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{427ab366-8ce0-43af-beb0-0af6897ab406}\0.0.filtertrie.intermediate.txt.WNCRY
                                • Size 30KB
                                • SHA256 61041665e6b672d2061081f7fd71a1aa383d1225e122a322723886ffa057ec0f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                0.1.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{427ab366-8ce0-43af-beb0-0af6897ab406}\0.1.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 b5eba99fb66201bdf80becd95d594942fdbcc14c64787bc4fc9b0ea7e003820c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                0.2.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{427ab366-8ce0-43af-beb0-0af6897ab406}\0.2.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 99746404c84d636f2900d4a4d4af8a3a865473e492442b27e75466fe695283dd
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                0.0.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{afe05067-6fae-44bb-813f-91af55017e6c}\0.0.filtertrie.intermediate.txt.WNCRY
                                • Size 30KB
                                • SHA256 2db2a3febaa97e7e8a7020a8a1471ab695af2bd02e31e2b16b1f3048306273ff
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                0.1.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{afe05067-6fae-44bb-813f-91af55017e6c}\0.1.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 e907fb4a284c8064ae43accbc8f3eac24854c857088e8cb1347821f7d2607bbb
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                0.2.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{afe05067-6fae-44bb-813f-91af55017e6c}\0.2.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 31612dac4bb68575451d709024b73770d42e69b9097e5a515ad6cfcfc72d6e28
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                appsconversions.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{1bc79c14-bd88-49e2-87db-fa0f59312e0e}\appsconversions.txt.WNCRY
                                • Size 1.4MB
                                • SHA256 b282c547cb1c438c1bbdad0acc62eae50c4f337753c2068ec0643c90965ae507
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                appsglobals.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{1bc79c14-bd88-49e2-87db-fa0f59312e0e}\appsglobals.txt.WNCRY
                                • Size 343KB
                                • SHA256 7a94cf66a9daa21130b765dde630f6f29a6eff88b62bfe8d698a392fb23496ba
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                appssynonyms.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{1bc79c14-bd88-49e2-87db-fa0f59312e0e}\appssynonyms.txt.WNCRY
                                • Size 238KB
                                • SHA256 d7aca8b4c9ca20b9e2737b3af87f341c07c89068e025d0a1513d58a962e5c6db
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                settingsconversions.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{1bc79c14-bd88-49e2-87db-fa0f59312e0e}\settingsconversions.txt.WNCRY
                                • Size 520KB
                                • SHA256 24828b4dd0af564f2554d2bb969bba97fa340dfc3749e40fd2594993639f62e8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                settingsglobals.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{1bc79c14-bd88-49e2-87db-fa0f59312e0e}\settingsglobals.txt.WNCRY
                                • Size 43KB
                                • SHA256 6a5f2f04485ac948ac0d1df052820124b829f44a1c6ffea32a95a5dbabd72030
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                settingssynonyms.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{1bc79c14-bd88-49e2-87db-fa0f59312e0e}\settingssynonyms.txt.WNCRY
                                • Size 101KB
                                • SHA256 3a3374784a9db888802771cec9f8b88ff9a5f2db5efaea087b2e2e47933758b7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                0.0.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{2dec06a5-5015-4cd7-9fea-558650c08256}\0.0.filtertrie.intermediate.txt.WNCRY
                                • Size 204KB
                                • SHA256 4e2a7c76ebfe85bf06d68d9c27f7cd6688101655a7eac18dc7413b962c6e2055
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                0.1.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{2dec06a5-5015-4cd7-9fea-558650c08256}\0.1.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 1c21ac4b90f64c855e208d8724412e0e5edb64206d3272169e8cb11bc7e6b776
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                0.2.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{2dec06a5-5015-4cd7-9fea-558650c08256}\0.2.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 b5477b06cdf197787ee7500310e1f80c050f154f9bae89009de8a1e72e84f35d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                0.0.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{7398b96b-f69e-4406-9252-022dfded8239}\0.0.filtertrie.intermediate.txt.WNCRY
                                • Size 204KB
                                • SHA256 9568e6e30fab1b1d4528f634d879b21bdfaaddb89c452e6db907805cb33cff53
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                0.1.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{7398b96b-f69e-4406-9252-022dfded8239}\0.1.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 1d818caf0d3b872d05fc523c9b020b42d4a23820ed71d463b747c16249aa94bb
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                0.2.filtertrie.intermediate.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{7398b96b-f69e-4406-9252-022dfded8239}\0.2.filtertrie.intermediate.txt.WNCRY
                                • Size 296B
                                • SHA256 7d78110aa4b7526dc4188cdc4e38e38173e85dde55f54fb031c84a809a3f67ed
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                AppCache134336127327765466.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336127327765466.txt.WNCRY
                                • Size 76KB
                                • SHA256 8caa15a5a288c8a68c6ffd2958fabade0dc0ea33f907b9d3204f222220455a4c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336128002214103.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336128002214103.txt.WNCRY
                                • Size 77KB
                                • SHA256 2d5ccd941f23302428c65018bdcee48625701c409a3bc62b65abce400c80de0a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336128727248682.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336128727248682.txt.WNCRY
                                • Size 77KB
                                • SHA256 4710a0eec038782af52c23468cf2607c5b2d46e29a2a2253358327ede2af0e9d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336129232477313.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129232477313.txt.WNCRY
                                • Size 59KB
                                • SHA256 7c90f7aa57df2d2fad805d25ce83ac59dd7315837ddfd334a735928a470adbdb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336129238277574.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129238277574.txt.WNCRY
                                • Size 57KB
                                • SHA256 d4d4e597d04ebdec679d167909ba2e2ec17d49376e60fa1966d84997a6a24e36
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336129248756404.txt.WNCRYT
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129248756404.txt.WNCRYT
                                • Size 56KB
                                • SHA256 7b2a1457775cde3eaa3549fa901a06eb119eea6522d52e1d178ae3314249c83e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336129290845082.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129290845082.txt.WNCRY
                                • Size 51KB
                                • SHA256 6f2db27023b0668a988a49cd9dfe58f1451eb8c24b7477b6a9a0056b3b440e21
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336129298167340.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129298167340.txt.WNCRY
                                • Size 51KB
                                • SHA256 4b2e163fa424099a8c606c53865e61fa433290c510b5d24b9265ab506b1cc607
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336129306712779.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129306712779.txt.WNCRY
                                • Size 50KB
                                • SHA256 06fb9c5b0b643ff454e3f4221e4f818e1d2bf59b0e96088f521037058364028b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336129467137559.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129467137559.txt.WNCRY
                                • Size 47KB
                                • SHA256 7f66a04f0956d6da3d13fd3de13f09e11afb10f5d5a5dcdd737e8599192a1e2e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336130303100894.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130303100894.txt.WNCRY
                                • Size 47KB
                                • SHA256 84ca49cd70a453d83e1c6bf50ce9b72bacf0e9743d563d2749d1fc10bf7cbce7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336136007854664.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336136007854664.txt.WNCRY
                                • Size 48KB
                                • SHA256 9790e54eb16aec8ed2ccf56561ea4d60d3b370c42210b4dd61052be43125b0b9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336136392702272.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336136392702272.txt.WNCRY
                                • Size 49KB
                                • SHA256 2be1480363c216ada27d8614f722310ec7b0131eeedd51c4b0919cc80c0ffc54
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336136693845026.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336136693845026.txt.WNCRY
                                • Size 53KB
                                • SHA256 060d4a3fe4b088152951035a01e5215e8461f494db0e96431752ad73934c48ba
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336137496186558.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336137496186558.txt.WNCRY
                                • Size 64KB
                                • SHA256 c446a68872e9d6986b04ba2ef30bda4069fcabebc1fb1770c545e89f6f3aea77
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336137896816081.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336137896816081.txt.WNCRY
                                • Size 64KB
                                • SHA256 24e385e5482ca7d4d6f5c1dd2577dca18f9c67a6e20f8e3a67d2d2eee343bbf9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336138094864258.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138094864258.txt.WNCRY
                                • Size 65KB
                                • SHA256 37ea88ba91b128047c202a34a261c2cdd8bb54314f99b97021656c42bf3936ce
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336138394612484.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138394612484.txt.WNCRY
                                • Size 65KB
                                • SHA256 ee5298d66788f2ade025fec0fcaadbf3df672a03c32bd6a51e9066197b721d56
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336139485466229.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139485466229.txt.WNCRY
                                • Size 67KB
                                • SHA256 825d3c7928a90b6b4bd49c9726a9ff905268da719face9df7e6f48061a358a05
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336139785141741.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139785141741.txt.WNCRY
                                • Size 73KB
                                • SHA256 4f4a31953c90f441b651bd5928f33c62adc20f14c1e654c1927e966a18dbb807
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336140057748119.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140057748119.txt.WNCRY
                                • Size 81KB
                                • SHA256 8bacb2df536739ff777d8dfce9aebe727c65e0ed1dc703ab028343c1cb8010e1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336140086949333.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140086949333.txt.WNCRY
                                • Size 81KB
                                • SHA256 99b54b9c4097776486eed83d98984170a1a78b43aa982302cc846ce55c6e03b8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336140443570983.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140443570983.txt.WNCRY
                                • Size 82KB
                                • SHA256 686a4c76b7cd5d44616ac2e93e24de50725e6cb5d6b0c49b55785f128bda6e40
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336140733999752.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140733999752.txt.WNCRY
                                • Size 83KB
                                • SHA256 dc640c26210bf703b1e2fa7310e8457c5026e4a406b6f683f598d08591aa8f11
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336141034147922.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141034147922.txt.WNCRY
                                • Size 84KB
                                • SHA256 c24ef4fc67388464d0e0c8fe6b2e0a30fc4df915e4250121dd3079aca4179a81
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336142216654064.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336142216654064.txt.WNCRY
                                • Size 84KB
                                • SHA256 0655907041c2dfdf660129d60c46e0890c48131efc97f7986469332b55101671
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AppCache134336155640477766.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336155640477766.txt.WNCRY
                                • Size 84KB
                                • SHA256 8aca4325648337760cb153dea63b0ef2519a74b493109f1b9c1c1fbc40489934
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SettingsCache.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt.WNCRY
                                • Size 670KB
                                • SHA256 4c4fab62caafd32c1eb781f0fa01b5798df9c4685f5a73e6ab70a751817347f6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                00000000.res
                                • Path C:\Users\Admin\AppData\Local\Temp\00000000.res
                                • Size 136B
                                • SHA256 1b39b42a3b9bc723e44f8135db857731b221bded4e27d830d31d476a05ec563b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                210.WNCRYT
                                • Path C:\Users\Admin\AppData\Local\Temp\210.WNCRYT
                                • Size 24KB
                                • SHA256 5f72c11fd2fa88d8b8bfae1214551f8d5ee07b8895df824fa717ebbcec118a6c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                241851791575799.bat
                                • Path C:\Users\Admin\AppData\Local\Temp\241851791575799.bat
                                • Size 340B
                                • SHA256 4e25c23aa5babc853889d3e1e79bb01ca7650837b250314a8d50f2e2c4b6730f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                573.WNCRYT
                                • Path C:\Users\Admin\AppData\Local\Temp\573.WNCRYT
                                • Size 5B
                                • SHA256 8e1e6a3d56796a245d0c7b0849548932fee803bbdb03f6e289495830e017f14c
                                • MD5 SHA1 SHA512
                                Submit Download

                                574.WNCRYT
                                • Path C:\Users\Admin\AppData\Local\Temp\574.WNCRYT
                                • Size 5B
                                • SHA256 d65b6a3bf11a27a1ced1f7e98082246e40cf01289fd47fe4a5ed46c221f2f73f
                                • MD5 SHA1 SHA512
                                Submit Download

                                66.WNCRYT
                                • Path C:\Users\Admin\AppData\Local\Temp\66.WNCRYT
                                • Size 50KB
                                • SHA256 85b5497ea5289dc5f4eb4124b7bff20281d7887a0d63e5ed4e4d61a86dee57c7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                76.WNCRYT
                                • Path C:\Users\Admin\AppData\Local\Temp\76.WNCRYT
                                • Size 64KB
                                • SHA256 2b458c48dd20870bb817ae588b91d422cfa27e4610175348e98cdabf7dbfe76e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                80.WNCRYT
                                • Path C:\Users\Admin\AppData\Local\Temp\80.WNCRYT
                                • Size 81KB
                                • SHA256 4da5dafb34890e8ef2982eaf3ad9180a91863b3f87aae9b2642268e0dcc60a73
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                @[email protected]
                                • Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
                                • Size 933B
                                • SHA256 0e5ece918132a2b1a190906e74becb8e4ced36eec9f9d1c70f5da72ac4c6b92a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                @[email protected]
                                • Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
                                • Size 1KB
                                • SHA256 8a7922883879f5b5df50e8e4c28a8122cfca46134c1f85bf72bb78e8647b0c82
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                LIBEAY32.dll
                                • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\LIBEAY32.dll
                                • Size 3.0MB
                                • SHA256 58be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SSLEAY32.dll
                                • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\SSLEAY32.dll
                                • Size 694KB
                                • SHA256 bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                libevent-2-0-5.dll
                                • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libevent-2-0-5.dll
                                • Size 702KB
                                • SHA256 77a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                libgcc_s_sjlj-1.dll
                                • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libgcc_s_sjlj-1.dll
                                • Size 510KB
                                • SHA256 9aeccf88253d4557a90793e22414868053caaab325842c0d7acb0365e88cd53b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                libssp-0.dll
                                • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libssp-0.dll
                                • Size 90KB
                                • SHA256 f28caebe9bc6aa5a72635acb4f0e24500494e306d8e8b2279e7930981281683f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                taskhsvc.exe
                                • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
                                • Size 3.0MB
                                • SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                zlib1.dll
                                • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\zlib1.dll
                                • Size 105KB
                                • SHA256 66d653397cbb2dbb397eb8421218e2c126b359a3b0decc0f31e297df099e1383
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                b.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\b.wnry
                                • Size 1.4MB
                                • SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                c.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\c.wnry
                                • Size 780B
                                • SHA256 5260199272254628526f159cb6babd3a3f29d720aeabddf635921271ce44e3e8
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                c.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\c.wnry
                                • Size 780B
                                • SHA256 079ce1041cbffe18ff62a2b4a33711eda40f680d0b1d3b551db47e39a6390b21
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                m.vbs
                                • Path C:\Users\Admin\AppData\Local\Temp\m.vbs
                                • Size 219B
                                • SHA256 7fbdc49f4b4ba21949eca0b16c534b4882da97e94e5ca131cec1629e60439dfa
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                m_bulgarian.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_bulgarian.wnry
                                • Size 46KB
                                • SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_chinese (simplified).wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (simplified).wnry
                                • Size 53KB
                                • SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_chinese (traditional).wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (traditional).wnry
                                • Size 77KB
                                • SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_croatian.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_croatian.wnry
                                • Size 38KB
                                • SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_czech.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_czech.wnry
                                • Size 39KB
                                • SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_danish.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_danish.wnry
                                • Size 36KB
                                • SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_dutch.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_dutch.wnry
                                • Size 36KB
                                • SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_english.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_english.wnry
                                • Size 36KB
                                • SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_filipino.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_filipino.wnry
                                • Size 36KB
                                • SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_finnish.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_finnish.wnry
                                • Size 37KB
                                • SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_french.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_french.wnry
                                • Size 37KB
                                • SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_german.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_german.wnry
                                • Size 36KB
                                • SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_greek.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_greek.wnry
                                • Size 47KB
                                • SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_indonesian.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_indonesian.wnry
                                • Size 36KB
                                • SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_italian.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_italian.wnry
                                • Size 36KB
                                • SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_japanese.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_japanese.wnry
                                • Size 79KB
                                • SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_korean.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_korean.wnry
                                • Size 89KB
                                • SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_latvian.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_latvian.wnry
                                • Size 40KB
                                • SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_norwegian.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_norwegian.wnry
                                • Size 36KB
                                • SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_polish.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_polish.wnry
                                • Size 38KB
                                • SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_portuguese.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_portuguese.wnry
                                • Size 37KB
                                • SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_romanian.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_romanian.wnry
                                • Size 50KB
                                • SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_russian.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_russian.wnry
                                • Size 46KB
                                • SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_slovak.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_slovak.wnry
                                • Size 40KB
                                • SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_spanish.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_spanish.wnry
                                • Size 36KB
                                • SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_swedish.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_swedish.wnry
                                • Size 37KB
                                • SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_turkish.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_turkish.wnry
                                • Size 41KB
                                • SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                m_vietnamese.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\msg\m_vietnamese.wnry
                                • Size 91KB
                                • SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                r.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\r.wnry
                                • Size 864B
                                • SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                s.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\s.wnry
                                • Size 2.9MB
                                • SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                t.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\t.wnry
                                • Size 64KB
                                • SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                taskdl.exe
                                • Path C:\Users\Admin\AppData\Local\Temp\taskdl.exe
                                • Size 20KB
                                • SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                taskse.exe
                                • Path C:\Users\Admin\AppData\Local\Temp\taskse.exe
                                • Size 20KB
                                • SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                u.wnry
                                • Path C:\Users\Admin\AppData\Local\Temp\u.wnry
                                • Size 240KB
                                • SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CheckpointJoin.dotx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ApproveClose\CheckpointJoin.dotx.WNCRY
                                • Size 836KB
                                • SHA256 61418c4ca9a79a53215ce08a5efe5ddf89df49ad8d3ec914cbd414c9a0f517de
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GrantAssert.pptm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ApproveClose\GrantAssert.pptm.WNCRY
                                • Size 912KB
                                • SHA256 531e02fa88c699be3e6e185a0f830c44515e3dd1352bbafcc1411736e8ca6485
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InvokeConvert.csv.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ApproveClose\InvokeConvert.csv.WNCRY
                                • Size 1.3MB
                                • SHA256 219732683771ee8a28a751093c4d54ecb8dcb6fef5dafb590496ffdb613f2127
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                PushRedo.xls.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ApproveClose\PushRedo.xls.WNCRY
                                • Size 1.5MB
                                • SHA256 1bd87edbe870405d263f034eae4fa5c6f96f09bee305eaa348d250fd6a7146b2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ReadAdd.bat.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ApproveClose\ReadAdd.bat.WNCRY
                                • Size 988KB
                                • SHA256 938213a0cc6ebe41a359bf4d6986ae316911eaf2bb94e7e516382d6acad9686e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WriteResume.raw.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ApproveClose\WriteResume.raw.WNCRY
                                • Size 1.4MB
                                • SHA256 1a0ad1d2c31db8290618f7c0688eb2d2972f239d21f73fe8ce804d244f870ba4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConvertFromApprove.vbs.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\ConvertFromApprove.vbs.WNCRY
                                • Size 612KB
                                • SHA256 405b9ecdcb17e7608b9f06e0ca0c2a63fb9c5e8da792186c68fc2c8b45dbf4e5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CopyPublish.jpg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\CopyPublish.jpg.WNCRY
                                • Size 576KB
                                • SHA256 73c61e24b88c3620ceb149e8c971de5a1568ecfcc3ed1c1677c7a52f7366326a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DisableRemove.mpeg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\DisableRemove.mpeg.WNCRY
                                • Size 756KB
                                • SHA256 d84f9041f5f60c0996a588067c3b82d8531b901a573bbd726e5ae3c4a2f98f3e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DisconnectFind.bmp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\DisconnectFind.bmp.WNCRY
                                • Size 828KB
                                • SHA256 8b1ca1104e8bf8647ab8b4561f4c50962e4c4e173ff3ca13414a4d963e5cb1c8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ProtectSwitch.mid.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\ProtectSwitch.mid.WNCRY
                                • Size 450KB
                                • SHA256 b8fa80af31c190cea1a23cacc91573cedbdd9ce29203587ab8ba071fd08999ab
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RegisterRepair.bmp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\RegisterRepair.bmp.WNCRY
                                • Size 810KB
                                • SHA256 4c5fa566184c3cdc3012947b5686b0533bdb6f2377849ac3e899defb8d9147de
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RenameConvert.bat.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\RenameConvert.bat.WNCRY
                                • Size 504KB
                                • SHA256 788735035917c655a0a1a51f3731d942f6fe8471ada0f2d5ba5c33c5fdf6ae71
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RevokeRemove.wmv.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\RevokeRemove.wmv.WNCRY
                                • Size 396KB
                                • SHA256 4bdd1299f06526a75800fd2ed3e06c6dd45e9255ab5b7629d5392d0ab1dcbfa2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SendDebug.docm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\SendDebug.docm.WNCRY
                                • Size 666KB
                                • SHA256 b4d914d841f4063eb50beab51882317697eff50d8c807f232713585cf13b27c6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                StartStop.gif.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\StartStop.gif.WNCRY
                                • Size 432KB
                                • SHA256 40ffcee7b4bc33cf901d88be0133778fa9f683eeae129e36239d49fe2e27e810
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SubmitSplit.pps.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\SubmitSplit.pps.WNCRY
                                • Size 684KB
                                • SHA256 1854c8aa278a89602aa5f215afff74238eba8f7056eff14344b7d6f0825fbff2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnregisterStep.csv.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CheckpointSend\UnregisterStep.csv.WNCRY
                                • Size 558KB
                                • SHA256 9047862a7812d1a01008214e9919b7880d4c40a3e06d99100e81869df336e3fd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CopyMove.vsd.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\CopyMove.vsd.WNCRY
                                • Size 1.3MB
                                • SHA256 c18eb80c24c8e17bb831cc8a19b30db4b1c247c3e99584b7653b4a5bf9f3ee4f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EnterSuspend.ppsm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\EnterSuspend.ppsm.WNCRY
                                • Size 608KB
                                • SHA256 786b3e7f3bb0a5583f19af557c686cafe866dfbbcf8161686ccf371bd21d29d0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CheckpointInitialize.ps1.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\FormatResize\CheckpointInitialize.ps1.WNCRY
                                • Size 225KB
                                • SHA256 b2622e23a2754f2400bb00058e7fce32d4787ec056a45bf5edefc353b66b1c76
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GrantSuspend.mov.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\FormatResize\GrantSuspend.mov.WNCRY
                                • Size 165KB
                                • SHA256 2d44b384f3f0401fa5e2c7aa324c7d8a2d75981e520638a5cf1a6ef02a2a8401
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                HideCompress.ppsx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\FormatResize\HideCompress.ppsx.WNCRY
                                • Size 100KB
                                • SHA256 46faede2c9dee1c85ef89d330ece565c8b8f41ab4d020d49ea549536f9eda400
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InvokeCheckpoint.pot.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\FormatResize\InvokeCheckpoint.pot.WNCRY
                                • Size 190KB
                                • SHA256 efb82a68b73fc0b1b99b3a18638fa53c5878d777bf296776bab8d12aed5ae6db
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                NewGroup.png.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\FormatResize\NewGroup.png.WNCRY
                                • Size 130KB
                                • SHA256 c40ec1f0c6a988310d7b6e7bc67b6f9ff7f667dc733f0474fdfa6d37d20dbf60
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RestartOpen.csv.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\FormatResize\RestartOpen.csv.WNCRY
                                • Size 120KB
                                • SHA256 9f18e56b3c260cd644d0f048b1dfb2fd49cbd3fb95285312a87a2162ade83a90
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AssertDisconnect.7z.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ImportJoin\AssertDisconnect.7z.WNCRY
                                • Size 592KB
                                • SHA256 794dfd0384645a5c3689ffe4f9a670d5c2eb4cfc93fe81396d14dec4128f1797
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DismountPush.xltx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ImportJoin\DismountPush.xltx.WNCRY
                                • Size 385KB
                                • SHA256 2e1ed880a41b75ba6757fa41f5c3590aba8a34b63b6940687d0c69a2863c7216
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EnableComplete.mp3.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ImportJoin\EnableComplete.mp3.WNCRY
                                • Size 622KB
                                • SHA256 3cd2c1ce40fa2012fe04b6b95a78762c2ab9c54ec20c74caa68c96418f9b3402
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ExpandDeny.tiff.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ImportJoin\ExpandDeny.tiff.WNCRY
                                • Size 740KB
                                • SHA256 e2228e23a1c4084b1058852848bcd39cf9731bc3e009cb9ffee567e4a096ef74
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InitializeRedo.ppsm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ImportJoin\InitializeRedo.ppsm.WNCRY
                                • Size 800KB
                                • SHA256 f2a7a1200ee3b9bc06d07f6c706975f20bcdc2b9bb5701f225769beb4daf5ce9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MoveBackup.potm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ImportJoin\MoveBackup.potm.WNCRY
                                • Size 681KB
                                • SHA256 21fe406646c1fe2f7e511ff2c2ae4a95b9bd904d856806c61eb220e984644630
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RemoveMerge.docx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ImportJoin\RemoveMerge.docx.WNCRY
                                • Size 651KB
                                • SHA256 2d9d783dcbf0902f2b35ed74ea4543dc6837d24fcdc1fb9e54cdda6f577d02f9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResolveUnregister.tiff.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ImportJoin\ResolveUnregister.tiff.WNCRY
                                • Size 711KB
                                • SHA256 c4f521a069ef20a1baa01840004cdc403390a8c4f86597febad212ff0c075fd5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                TM01840907[[fn=Equations]].dotx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM01840907[[fn=Equations]].dotx.WNCRY
                                • Size 50KB
                                • SHA256 7c36da5999dff29e689a0b96b1953e7e8bcf93c3d5a4983f16bdaa213664fe54
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.WNCRY
                                • Size 46KB
                                • SHA256 43647bfb2d4dd2274048b0a0106b8c0f6f07d85c89709b7e5f52e71e8cb25db0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                TM03998158[[fn=Element]].dotx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998158[[fn=Element]].dotx.WNCRY
                                • Size 33KB
                                • SHA256 3004b90adfba7cf92d4fdbbeff2ef333f9a01a113e5462c6c5fd2666d541be0e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                TM03998159[[fn=Insight]].dotx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998159[[fn=Insight]].dotx.WNCRY
                                • Size 3.3MB
                                • SHA256 43af79d4c8a8a9ef93e0f06f77ad18d4298da66a8a12e45c130ffe13e9817dea
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Normal.dotm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WNCRY
                                • Size 18KB
                                • SHA256 2df934401cd71c928eb464e39b0056e371188523515b9401d32cf9f15af45c2a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CachedImage_1920_1080_POS4.jpg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\CachedFiles\CachedImage_1920_1080_POS4.jpg.WNCRY
                                • Size 76KB
                                • SHA256 d1adadb3587ba7631e5fabffc2d6c104534ffbe42360ba8374a0b7fa4ff86a09
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                prefs.js.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\l7e0ajjr.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WNCRY
                                • Size 776B
                                • SHA256 fe41265a5862daa1d8d0c01fb8e968b3accf6b276f1c1460ace0cc761233ef09
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                user.js.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vomumrot.Admin\user.js.WNCRY
                                • Size 536B
                                • SHA256 e6c0401bc30a99c36b88a4cc8fa68d414336473708c18675c5690250649f4c50
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                cert9.db.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\cert9.db.WNCRY
                                • Size 224KB
                                • SHA256 02696728ec1ccbf6b1c663a3f74034498d712e2f01299c561e775214d7090ab6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                key4.db.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\key4.db.WNCRY
                                • Size 288KB
                                • SHA256 602ea03093ed6e2631f3afe8377c4553aa1f899c649af238302646d1d71f1b44
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                pkcs11.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\pkcs11.txt.WNCRY
                                • Size 808B
                                • SHA256 1e9f60c5ec3f10e2883af896109b9d5c851efae6e090e84dbce360b9491bce04
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                prefs.js.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\y8u24m4i.default-release\prefs.js.WNCRY
                                • Size 7KB
                                • SHA256 f8f3aae384af338b56f56ed75bac33660ac2d36bcee124e6bc481fac608964b4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CopyFind.mpg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\NewGet\CopyFind.mpg.WNCRY
                                • Size 1.2MB
                                • SHA256 a343c4a8bf9492db0c77e4236a30378ce262082e3b5c7f75d24541d9b0c7e907
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EnterStep.zip.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\NewGet\EnterStep.zip.WNCRY
                                • Size 2.6MB
                                • SHA256 be6127b9ff74e290603bd78678e2205c06d78bf5be708364f8b0543582d60495
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MeasureUnprotect.odt.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\NewGet\MeasureUnprotect.odt.WNCRY
                                • Size 893KB
                                • SHA256 6540fa3f6321db6eb1364b27e1597adefe8670ef8a5ab3f38c14c875a2093288
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MoveOut.potm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\NewGet\MoveOut.potm.WNCRY
                                • Size 1.5MB
                                • SHA256 d3c8c5459b8ae7a3bd4e83797474ce8d98389b2e744afbc7ca8af75bcc764316
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SubmitCopy.bmp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\NewGet\SubmitCopy.bmp.WNCRY
                                • Size 1.6MB
                                • SHA256 fdda896584688732b8077898a13d9a52fce3f7d3b0cba78589bfde1e6ae27268
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ApproveDismount.zip.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\ApproveDismount.zip.WNCRY
                                • Size 200KB
                                • SHA256 dfaf83fa749ccaeb5c061d26bfe71953e262c8294a225b21286b3fc60a36f3b8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ClearConvert.txt.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\ClearConvert.txt.WNCRY
                                • Size 153KB
                                • SHA256 5fca2d7d56bb322c48dbd4101db2f4875dda9461c8ced8403cc5f21c2feacd7f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CompressDeny.xltm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\CompressDeny.xltm.WNCRY
                                • Size 158KB
                                • SHA256 a36d7ca36551f34ab9f5c149a552ed7a9703558ea54375dafea6ef0fddf9eeb2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConfirmComplete.wma.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\ConfirmComplete.wma.WNCRY
                                • Size 144KB
                                • SHA256 f3ab7d6b997bf33f5990add477c789c86e0ee193cbc12cc0b5b41444d20c533c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConnectSend.xlsm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\ConnectSend.xlsm.WNCRY
                                • Size 106KB
                                • SHA256 8248bda3abb9765334eace1dc50bc54cc5c19132918b7c8b27c657dfb8d12d23
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConvertFind.tif.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\ConvertFind.tif.WNCRY
                                • Size 191KB
                                • SHA256 08403a64c61f41a475e3f56e8a3e1393f14d6f3265ac1b6b8b391988bf4faf9d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GroupSuspend.asf.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\GroupSuspend.asf.WNCRY
                                • Size 111KB
                                • SHA256 93d9ab8f90c93cc2a059be8844069cc92c07e6d96fef5dc742f31d606651ab08
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ImportSend.js.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\ImportSend.js.WNCRY
                                • Size 162KB
                                • SHA256 5423a7f95f9557e6c43e09957ef84935c5ea84b5e385a9fe7e6166faa64e8947
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                LimitRepair.3g2.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\LimitRepair.3g2.WNCRY
                                • Size 125KB
                                • SHA256 987c4b12201cc948a5c6e4c44b1db72c1887fd8a79de0a1df2897d4fe6b33434
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MeasureLock.bmp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\MeasureLock.bmp.WNCRY
                                • Size 129KB
                                • SHA256 82a2dacde033bfc1b1f4d4c34aaf6848075dc88059bb2e486fd7bdb21bba701f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                OpenSync.docx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\OpenSync.docx.WNCRY
                                • Size 261KB
                                • SHA256 610243feb553eb6999d96e493c26d662425139ae317d6f317bbe9c8d74895f20
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                OptimizeConvertFrom.asf.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\OptimizeConvertFrom.asf.WNCRY
                                • Size 101KB
                                • SHA256 0ad40e1986df84a802bb7ec3adc36b4358258a85519f7cb56749b64d5b8eeeef
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RepairMove.tif.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\RepairMove.tif.WNCRY
                                • Size 242KB
                                • SHA256 15bf0c233d2bd578b0f0b0ed1a39c7f817867a506b97378e2190bc726b84c697
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RestartOptimize.vsdx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\RestartOptimize.vsdx.WNCRY
                                • Size 120KB
                                • SHA256 5522fde7909eb8dc69a74c7c858b99b9e75f65f94c40d54611ba78086edbf65b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SetProtect.mp4.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\SetProtect.mp4.WNCRY
                                • Size 233KB
                                • SHA256 a19d6a3efe1eb74034e76f5e651ac484c22dd3f09dd0c6a98cec575f0ea00cc4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                TraceWatch.vb.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\TraceWatch.vb.WNCRY
                                • Size 205KB
                                • SHA256 1e5f80ad6c818a7d40b2c54cd62e2d6b9a821f2b2f068dcf6502a238760aa11d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnblockTest.asf.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\UnblockTest.asf.WNCRY
                                • Size 148KB
                                • SHA256 435c4f1f9f25dfb3b7bedfcfc742b9f6ca635aa0234b5fe1dd5b19c87a6e0e09
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UseRepair.gif.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\PublishFind\UseRepair.gif.WNCRY
                                • Size 186KB
                                • SHA256 4a2970be543dba80549c51f53c22c7a9ceff8cd0bb401f30820a6072caaf242b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ApproveSuspend.rtf.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\ApproveSuspend.rtf.WNCRY
                                • Size 198KB
                                • SHA256 5a4fa13638cc84d8b2b8aed65a61d8f3ac7addfd785ddec65e8ac0d53d3eb827
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                BackupAdd.ods.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\BackupAdd.ods.WNCRY
                                • Size 220KB
                                • SHA256 60757c98387dfc502863f5e3395927b6474938e59bcc9c3fd2f1825b9f82e547
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CloseRemove.wma.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\CloseRemove.wma.WNCRY
                                • Size 149KB
                                • SHA256 ec342cf6d990ccf5db453e9dbe2a728cf04fa3b1651b90ce5030e780cc8639d6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConfirmInvoke.potx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\ConfirmInvoke.potx.WNCRY
                                • Size 142KB
                                • SHA256 4ac980ad85d715725734fede83314b6330f6354585ad55906a53b69a767cef55
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DenyPush.vb.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\DenyPush.vb.WNCRY
                                • Size 333KB
                                • SHA256 8171709d9aeaa954991d4a13476aa56f39a4a14d5c3fc95faa12e2ef6d827c64
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                FormatStep.jpg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\FormatStep.jpg.WNCRY
                                • Size 191KB
                                • SHA256 a0e125891f1ea93448a32a4fe9cd52bd0c79b51c242fe95516017d399651a0a2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                HideRedo.tiff.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\HideRedo.tiff.WNCRY
                                • Size 531KB
                                • SHA256 d35b00e84351d4815340a76741938985741badc43441b32aa0a0642f5851e641
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InvokeWatch.docm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\InvokeWatch.docm.WNCRY
                                • Size 347KB
                                • SHA256 61b8413098844aa00759b11d35b1dfb0f703c6d11d697d81be453a4b77732a3f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MergeJoin.mov.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\MergeJoin.mov.WNCRY
                                • Size 376KB
                                • SHA256 1272f35f19814b41c1b227aff0ab63215d9cbef04053d5f393bbc867d2cd1829
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SearchClose.bmp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\SearchClose.bmp.WNCRY
                                • Size 283KB
                                • SHA256 295498de4975dfee25c67a42b5b20ddab169e9cd8ce6d4b6aad3e70ac7f8d77a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SwitchShow.zip.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\SwitchShow.zip.WNCRY
                                • Size 227KB
                                • SHA256 49ce6ba9fb99cc530eedfd215be6e2cd6a6b29598578f9460603f9d37da46cad
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SyncLock.png.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\SyncLock.png.WNCRY
                                • Size 361KB
                                • SHA256 28d709fc26684621c9fb16066b74353aa71b9c279fa1e4c58cb202ae5aaaadc0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SyncUnregister.mpg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RedoSend\SyncUnregister.mpg.WNCRY
                                • Size 305KB
                                • SHA256 c6e615f5dd208ee01926a4893baf0d7e4c0a9f5cde7455ddff8c37c819c13af4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RequestConvert.vsd.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RequestConvert.vsd.WNCRY
                                • Size 1.5MB
                                • SHA256 cdb3187792687d4ab9ab8481c3095f358db184929dfc6564c9ffcea4c6d45c15
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResizeCompress.asp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ResizeCompress.asp.WNCRY
                                • Size 1.2MB
                                • SHA256 adfaf4304a61c25fde770bbd3476af2ec9684ea104aa1216019ef1eaadab2c8d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResolveInvoke.jpeg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\ResolveInvoke.jpeg.WNCRY
                                • Size 1.0MB
                                • SHA256 fd3f08474e4b0087b87af73e855b728facc399b5a2de7ef2bc6bfad005720829
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RestoreDismount.xlsm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RestoreDismount.xlsm.WNCRY
                                • Size 2.3MB
                                • SHA256 12f65b56756f1c80d6d3efecc9d43c3f1e82595981707c7ed820b69411823d1b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InstallReset.ods.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RevokeSync\InstallReset.ods.WNCRY
                                • Size 540KB
                                • SHA256 98180bf7f1bcbccc81baf35659cc8eb463a93de070fe24e302a2c8350f9b7683
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                JoinEnable.pptm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RevokeSync\JoinEnable.pptm.WNCRY
                                • Size 504KB
                                • SHA256 da2218b8af58f30fc5a2c5960ba32d78ada197a2b19e4e4207216af0ee526875
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MeasureSelect.jpeg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RevokeSync\MeasureSelect.jpeg.WNCRY
                                • Size 684KB
                                • SHA256 7993205182b1aee06bdc4e414caa578e79fb665a5936d60559498acd78c37753
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SwitchPop.docm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\RevokeSync\SwitchPop.docm.WNCRY
                                • Size 756KB
                                • SHA256 1ef82d2a5ffb6e5edf4900bedda980c746085ca0812039d933b21c758bb046cd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ApproveStep.wmv.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\ApproveStep.wmv.WNCRY
                                • Size 689KB
                                • SHA256 0a021268f576d8065dbcdcf23a3a68a71ffd0d7436f88aba8a7aeec5dcc7ed27
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CompressEdit.ppsm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\CompressEdit.ppsm.WNCRY
                                • Size 717KB
                                • SHA256 c8bd0d6f2a913ea5513ace2505245dac816c1ab6cdfbc6aa7ad84caec42a0807
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConvertSwitch.mp3.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\ConvertSwitch.mp3.WNCRY
                                • Size 547KB
                                • SHA256 3ee626e0503d21dbd94052ddf4d2cbc4762e46cc60a0173290469be98998b7de
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                NewAdd.mov.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\NewAdd.mov.WNCRY
                                • Size 561KB
                                • SHA256 0beb27a4c8ff57245d4e66cbdb6b590273c9033ae2a5b210d69dff898d494916
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RegisterTest.vbs.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\RegisterTest.vbs.WNCRY
                                • Size 419KB
                                • SHA256 cf76f588c46bc06644e958958c88366866cc6957c3bf24f49d86290f832b1708
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RenameReset.mov.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\RenameReset.mov.WNCRY
                                • Size 362KB
                                • SHA256 745bff3d19c99ae40be7e5c404565f2d4d1d1bb3dd161cda92229557c6e3954c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResizeClear.tif.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\ResizeClear.tif.WNCRY
                                • Size 476KB
                                • SHA256 9c38d1bdde6149ecb755d4a55a540f025c3b9c55d145187dc7499275be439e4f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResumeProtect.xltx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\ResumeProtect.xltx.WNCRY
                                • Size 533KB
                                • SHA256 ffa0bb43843584df59596522b6bf80a7ba30cf1ba482dc3232549dec7903e517
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ShowCopy.docx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\ShowCopy.docx.WNCRY
                                • Size 248KB
                                • SHA256 d751ce4277d7d1ed123a820c3ef3b5bffa96a450fe11c42731bbe51fe01cd13a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                StepShow.wav.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\StepShow.wav.WNCRY
                                • Size 618KB
                                • SHA256 6c9e0cd23b4f17e84b1be8041334003cca9c6ac9ffeb780a6ceff097f7b3e5e9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UninstallSelect.dot.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SearchStop\UninstallSelect.dot.WNCRY
                                • Size 980KB
                                • SHA256 f9287a773ed40495f28662e69ed6b2cd7bf2ca00c3e92b61678ca4b67c3e6e53
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CheckpointPop.pot.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\CheckpointPop.pot.WNCRY
                                • Size 214KB
                                • SHA256 e565cc57564fa1f51992d1a38fa4d61d65af003ae28b6f15b726b5dea9ad4f41
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ClearTest.jpg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\ClearTest.jpg.WNCRY
                                • Size 158KB
                                • SHA256 bb2de88b0cd11cd5fefb39b94e42bab1c7341b50996f4d8aa177534baf363b9a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConvertToConvertFrom.js.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\ConvertToConvertFrom.js.WNCRY
                                • Size 95KB
                                • SHA256 e3084d5de614750db093f170aed6bb06a46508a37fb6525c4eb698e171c9aaa5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CopyRestore.docm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\CopyRestore.docm.WNCRY
                                • Size 228KB
                                • SHA256 8ee470b813fb3557ef83eb679aa581be945e150c69425a7729ac05b5dfea5313
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EnableLimit.docx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\EnableLimit.docx.WNCRY
                                • Size 144KB
                                • SHA256 9d76838fe21c0873931952f191d880f2f8f4891242d834808fa47185c389b0e9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InvokeInstall.xltm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\InvokeInstall.xltm.WNCRY
                                • Size 172KB
                                • SHA256 2144afe915db0a5b326f8db5d9ca9173760cb71421bdb153901fa41671c641e5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                JoinSubmit.mp3.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\JoinSubmit.mp3.WNCRY
                                • Size 372KB
                                • SHA256 c0414ffc8ac8f0ba04569e37cff769a80c24dd97903057fa5fc37cb8ea4f21a4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                LimitGet.bmp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\LimitGet.bmp.WNCRY
                                • Size 193KB
                                • SHA256 be425a795ecd3855159082d13a003a6303ccc69fdc92cd16f16eb96521ded880
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                NewRepair.potx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\NewRepair.potx.WNCRY
                                • Size 249KB
                                • SHA256 e4b338bdf2b01d36d98af6097b4f62ace61e443fa77040e9f033ea2bc309a2fa
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResolveStart.potx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\ResolveStart.potx.WNCRY
                                • Size 116KB
                                • SHA256 54de71dea15f6514b34502d0564e3ebbb2a62e6bf5c967d853b3bec22298e8cb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResumeOptimize.mov.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\ResumeOptimize.mov.WNCRY
                                • Size 130KB
                                • SHA256 efe6980cf02b81335e8fdd91937102fe290f0c0eedd3bf2d962d47979a6abbd9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SubmitCompress.pptx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\SubmitCompress.pptx.WNCRY
                                • Size 235KB
                                • SHA256 ead869b340d5e003c798fd886bcabec88a2c276f712d769dc3b12a2232925ed0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                TraceInvoke.wav.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\SplitInvoke\TraceInvoke.wav.WNCRY
                                • Size 179KB
                                • SHA256 971c3e985794902c270f4f6a194cf50f05dc2c250889d8df55bd6ce963c4b62d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                BlockUnblock.xlsx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\BlockUnblock.xlsx.WNCRY
                                • Size 218KB
                                • SHA256 30c70b3ca4f9f3eff157b261c16d68d2c52fbca22933c6db2530aed00ffd4b8e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConnectGet.rtf.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\ConnectGet.rtf.WNCRY
                                • Size 355KB
                                • SHA256 001fd740e96d2f108ada20f391590c80903ebdf57da9736b953da56d5bc00dfe
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CopyResolve.docx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\CopyResolve.docx.WNCRY
                                • Size 273KB
                                • SHA256 53b6c97c8e109722b56843575941b2f824ab198ba03422367c9625dce8288baa
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DismountSearch.ppsx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\DismountSearch.ppsx.WNCRY
                                • Size 341KB
                                • SHA256 5cd171cca0e0455be2dff0da461bfde12c1f2d3abee650d7d1c0a9f9ca66f458
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EditRevoke.jpg.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\EditRevoke.jpg.WNCRY
                                • Size 491KB
                                • SHA256 b775f7e36953728619262674edda31be431a40bd86d3bb686718d4d68896ffda
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EnterExit.wmv.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\EnterExit.wmv.WNCRY
                                • Size 327KB
                                • SHA256 03949ba050e67575855d1e5bf4fdcb3075d3ad45f86b1ade040975b0156512cb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EnterStart.mov.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\EnterStart.mov.WNCRY
                                • Size 287KB
                                • SHA256 a6b0e0c97525497741fc9f48995e83af5357bbef19b6f599c4613f33241962bf
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                FormatExit.xlsx.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\FormatExit.xlsx.WNCRY
                                • Size 478KB
                                • SHA256 a9f66afc82eb412333ee654305a5139a3569141dc9d2403c67c15941fed00f18
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GetCopy.wma.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\GetCopy.wma.WNCRY
                                • Size 450KB
                                • SHA256 30dfe244bc79f7ddf83314f3c7c9aea2ae5cccffc759c7e1f16f648f85252b46
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                JoinFormat.avi.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\JoinFormat.avi.WNCRY
                                • Size 300KB
                                • SHA256 caae94196b5b6bb8bd23c3e4da27981402179004c60def8ae2f92e3478a9d1f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MergeImport.rtf.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\MergeImport.rtf.WNCRY
                                • Size 546KB
                                • SHA256 ed6833bc5fce839d906590e8c528faf47467bf52063fbb17e61d437e8177c058
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MoveUninstall.ppsm.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\MoveUninstall.ppsm.WNCRY
                                • Size 587KB
                                • SHA256 b4040372de327a0b43fcc4db25e2961bbb9b0f6b039cc95f9b0373e526d2c71e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SetOut.js.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\SetOut.js.WNCRY
                                • Size 532KB
                                • SHA256 7715268d78b3ce96c74d22e6908ebec1b544ff775f96e8618ef813aca1db55ac
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WatchStart.odp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\StartRevoke\WatchStart.odp.WNCRY
                                • Size 246KB
                                • SHA256 3e18e03ac55bbe2d464ba550694254a817afbb8ca471bd98096fe84d89f4d92f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UndoExport.3gp.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\UndoExport.3gp.WNCRY
                                • Size 1.1MB
                                • SHA256 d128c35aa23b5b4796d10e110765440046184f3bca9b7412b8ee9c2e5c19fac5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UpdateJoin.js.WNCRY
                                • Path C:\Users\Admin\AppData\Roaming\UpdateJoin.js.WNCRY
                                • Size 1.6MB
                                • SHA256 ffdd9c7fb2fa4efb5cd68dee97f496907ab124c91dac21e7b641f0844e036ec2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ApproveRedo.csv.WNCRY
                                • Path C:\Users\Admin\Desktop\ApproveRedo.csv.WNCRY
                                • Size 215KB
                                • SHA256 d977d9d4dd05ea818d451302f898cc1aa6a9e479c93e3f41483716154afde74a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DenySave.wma.WNCRY
                                • Path C:\Users\Admin\Desktop\DenySave.wma.WNCRY
                                • Size 137KB
                                • SHA256 f70e4d4fc5cc1a9dbaf41842f903598ec06afc85ed94f411919c591a02c2618f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DenySend.odt.WNCRY
                                • Path C:\Users\Admin\Desktop\DenySend.odt.WNCRY
                                • Size 209KB
                                • SHA256 178fd94ac2f1f7a11e20cad738631f7e4bb65602a702abe2320fcf429c385944
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DisablePush.potx.WNCRY
                                • Path C:\Users\Admin\Desktop\DisablePush.potx.WNCRY
                                • Size 183KB
                                • SHA256 2388a429da5668e42456edd0cd6d18943d2ae4b9b15afaec75588d4cad7858ee
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DisconnectExport.3gp.WNCRY
                                • Path C:\Users\Admin\Desktop\DisconnectExport.3gp.WNCRY
                                • Size 91KB
                                • SHA256 6ce34c508d3bfe279c37f97eef453db0266c6d1b8ea4a5cf1525fd2a4440b37a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                FormatBackup.asf.WNCRY
                                • Path C:\Users\Admin\Desktop\FormatBackup.asf.WNCRY
                                • Size 130KB
                                • SHA256 f6d034bcc8b51bf206a33b64df742215fab39a55091b21d0bd421d98d7b785cf
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InitializeLock.xltx.WNCRY
                                • Path C:\Users\Admin\Desktop\InitializeLock.xltx.WNCRY
                                • Size 189KB
                                • SHA256 15a7270b33d8cf190a36c139bff30bb46fdab1091a9a6ae6323cf823169de4af
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InitializeMeasure.ps1.WNCRYT
                                • Path C:\Users\Admin\Desktop\InitializeMeasure.ps1.WNCRYT
                                • Size 157KB
                                • SHA256 d2b3e809d0abd0f9e32a90bcc1834d8a47cbcd535c3bea4258e9f15d5a14e85f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InitializeRestore.docx.WNCRY
                                • Path C:\Users\Admin\Desktop\InitializeRestore.docx.WNCRY
                                • Size 16KB
                                • SHA256 606c01380a2b1bcff6afa74afb928390000584e7ccb0db0cfd9729b3d204465f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                OptimizeRedo.xls.WNCRY
                                • Path C:\Users\Admin\Desktop\OptimizeRedo.xls.WNCRY
                                • Size 111KB
                                • SHA256 68197a188faf0484b0f0e357d107e2fd22e0213b1ecaeef239c70b58934c961e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                PingNew.iso.WNCRY
                                • Path C:\Users\Admin\Desktop\PingNew.iso.WNCRY
                                • Size 254KB
                                • SHA256 bed85080d48ed60354210242ce4325dcf70917d871fe95430e417c539fe7f27c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RedoRevoke.docx.WNCRY
                                • Path C:\Users\Admin\Desktop\RedoRevoke.docx.WNCRY
                                • Size 15KB
                                • SHA256 c3748f810a0e6cb7f25119a7dd1729e73c2274b8c28114b653e2b5b35a218eee
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RemoveDeny.asf.WNCRY
                                • Path C:\Users\Admin\Desktop\RemoveDeny.asf.WNCRY
                                • Size 228KB
                                • SHA256 4c831ff90fd5d8dab6db0360e117f125ab679fed4668c4d352a6b01ea1997e18
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResizeGrant.docx.WNCRY
                                • Path C:\Users\Admin\Desktop\ResizeGrant.docx.WNCRY
                                • Size 16KB
                                • SHA256 66feee2a989ecddccb4b78bad631af210cac282b44078887ccac829356a3051e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SetEnable.ps1.WNCRY
                                • Path C:\Users\Admin\Desktop\SetEnable.ps1.WNCRY
                                • Size 359KB
                                • SHA256 721c32f4d3dd2fc1f4925e1ced1c1dc75f483dc9d9a9be0ae5be92cc54a1607c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnpublishInvoke.iso.WNCRY
                                • Path C:\Users\Admin\Desktop\UnpublishInvoke.iso.WNCRY
                                • Size 248KB
                                • SHA256 b9b3b3f4a9fab6f7693f70f57223e2b3662cc5abc0301714e04b989549beae66
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WatchGrant.docx.WNCRY
                                • Path C:\Users\Admin\Desktop\WatchGrant.docx.WNCRY
                                • Size 17KB
                                • SHA256 19eaa6aac8d557591ec8ce3c05cc81dd605c13e89a5f6c5af9390392e44d01d8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                WriteGroup.bmp.WNCRY
                                • Path C:\Users\Admin\Desktop\WriteGroup.bmp.WNCRY
                                • Size 235KB
                                • SHA256 860aa9a120c7b3e723e28ef60432c63c460536463e79e6f499ad34e3cd059324
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ApproveLock.ods.WNCRY
                                • Path C:\Users\Admin\Documents\ApproveLock.ods.WNCRY
                                • Size 555KB
                                • SHA256 238ea37f4f2bea2a8771a1cacf189ee05dcc17a599ecfd6d47a810e5da35cd9d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                BackupInvoke.xlsx.WNCRY
                                • Path C:\Users\Admin\Documents\BackupInvoke.xlsx.WNCRY
                                • Size 12KB
                                • SHA256 1d9f233ee51e5746fea96402f9b5f99e6c9f48400463ad27fa0e5f6d4c4f9289
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CompareOptimize.dotm.WNCRY
                                • Path C:\Users\Admin\Documents\CompareOptimize.dotm.WNCRY
                                • Size 540KB
                                • SHA256 7a36b7dac1bac295e9a8cc38a8a1b61a69156316d83fa2305aa3ea4de5a91f08
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                FindResolve.potx.WNCRY
                                • Path C:\Users\Admin\Documents\FindResolve.potx.WNCRY
                                • Size 705KB
                                • SHA256 36281c90627efb52357cbd294d3ce831bc7616f01cc2a8aec73a3fb3581e5c4c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                FindStep.pps.WNCRY
                                • Path C:\Users\Admin\Documents\FindStep.pps.WNCRY
                                • Size 360KB
                                • SHA256 f4a66c8cf2df739e825e639fd509d30f3ba36f041eabb8f0e4f0d11de641d718
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GrantSet.docm.WNCRY
                                • Path C:\Users\Admin\Documents\GrantSet.docm.WNCRY
                                • Size 765KB
                                • SHA256 e226d9ca7b8d7a36617f2af558ae33c35e492bc4257c10b07d4a379cf990ae10
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InitializeSync.xlsb.WNCRY
                                • Path C:\Users\Admin\Documents\InitializeSync.xlsb.WNCRY
                                • Size 615KB
                                • SHA256 12c835f611eae57d0d8ec5478710f8b9c3a1482690e69289b14339b4e2fb7649
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                InstallOpen.dotx.WNCRY
                                • Path C:\Users\Admin\Documents\InstallOpen.dotx.WNCRY
                                • Size 285KB
                                • SHA256 e09621c66953284440232600ce48540e1b15b008a9f1a56372edb440b63228f9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Open Notebook.onetoc2.WNCRY
                                • Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WNCRY
                                • Size 6KB
                                • SHA256 504572f1a5156a22b984ead3dd89b2113e88656d183013ef42722ff7704c51ff
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                OpenEdit.potm.WNCRY
                                • Path C:\Users\Admin\Documents\OpenEdit.potm.WNCRY
                                • Size 345KB
                                • SHA256 64bae53cc3aece804d9c38eb79c217754f534646731048b75ca0c05bd19bf54b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                OutUnlock.dotx.WNCRY
                                • Path C:\Users\Admin\Documents\OutUnlock.dotx.WNCRY
                                • Size 495KB
                                • SHA256 424d3d5231f094052fce4a7eecbcc10faf1fb4d7125b90acf4af848f30c82c3b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Outlook Data File - mknaxcuvqg.pst.WNCRY
                                • Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - mknaxcuvqg.pst.WNCRY
                                • Size 265KB
                                • SHA256 c46156d861a105b5e05f65e733e7ae806394f7837ecd03c0b4b80c8524037ca4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                PopTest.dot.WNCRY
                                • Path C:\Users\Admin\Documents\PopTest.dot.WNCRY
                                • Size 660KB
                                • SHA256 b3350948c719455077e5eca8d873d0c4d3d75d867c4e7da888792b636ff1fd53
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RedoPublish.doc.WNCRY
                                • Path C:\Users\Admin\Documents\RedoPublish.doc.WNCRY
                                • Size 405KB
                                • SHA256 d953996c478949aff161d486b9f8d09a4a68e575c2e983ab6d276f6100b51f9c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RegisterInvoke.pptm.WNCRY
                                • Path C:\Users\Admin\Documents\RegisterInvoke.pptm.WNCRY
                                • Size 645KB
                                • SHA256 3ba90d91bc236e5f165ec2a77b8e4e47acdb5ada200bbad60b109b0d69f403a1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RenameResolve.vsd.WNCRY
                                • Path C:\Users\Admin\Documents\RenameResolve.vsd.WNCRY
                                • Size 525KB
                                • SHA256 4ae492abd3ca02d968971cb4aa76e57d867680c8e3abdc27bead30903e9a0117
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResetSwitch.docm.WNCRY
                                • Path C:\Users\Admin\Documents\ResetSwitch.docm.WNCRY
                                • Size 420KB
                                • SHA256 51ff0b2a2d28524d6a0be42f172b12429369244416332c4d7c0c8404f5b261d8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ResetWatch.odp.WNCRY
                                • Path C:\Users\Admin\Documents\ResetWatch.odp.WNCRY
                                • Size 570KB
                                • SHA256 c24e3e47381e40d9115f1a7351a50781db6d9d97453bd8a0916907a33f8c8dcc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SelectGrant.pptm.WNCRY
                                • Path C:\Users\Admin\Documents\SelectGrant.pptm.WNCRY
                                • Size 330KB
                                • SHA256 8bb41b2dee1e3dcd3e80b8b2f29ab730a17d77768d84395acf4084409306a7fc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                StopSync.docx.WNCRY
                                • Path C:\Users\Admin\Documents\StopSync.docx.WNCRY
                                • Size 315KB
                                • SHA256 d407d1c0fd4844e66d823a130ea2df8ba48a3666cb78616e66989515f55cc0d0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SuspendConnect.odp.WNCRY
                                • Path C:\Users\Admin\Documents\SuspendConnect.odp.WNCRY
                                • Size 630KB
                                • SHA256 db288d411f3e692fdc392463a22f801f8309e5687729726a26523812b5229db1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SuspendUpdate.xlsb.WNCRY
                                • Path C:\Users\Admin\Documents\SuspendUpdate.xlsb.WNCRY
                                • Size 600KB
                                • SHA256 3da758800643cc5a596098b56801d8aad3d8bec953de56ad9042441ead0bce97
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SwitchAssert.dotm.WNCRY
                                • Path C:\Users\Admin\Documents\SwitchAssert.dotm.WNCRY
                                • Size 750KB
                                • SHA256 3e98b484a0bebeebbd5333c39cc22d6d7a0401869f5b675fedb05b9100c2f075
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SwitchRedo.dotm.WNCRY
                                • Path C:\Users\Admin\Documents\SwitchRedo.dotm.WNCRY
                                • Size 720KB
                                • SHA256 f2210572090d50614e6cc2e2abcd3d89e9e6dd53be47678df7a39fa8bb60a31c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnblockCheckpoint.xlsx.WNCRY
                                • Path C:\Users\Admin\Documents\UnblockCheckpoint.xlsx.WNCRY
                                • Size 12KB
                                • SHA256 bf972afb9257ea22b0dcb705091cc42288a58db7bc6c47b72b335bbfe177beb5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnlockOut.potm.WNCRY
                                • Path C:\Users\Admin\Documents\UnlockOut.potm.WNCRY
                                • Size 480KB
                                • SHA256 9c39b5896005ab21f4ddd2faf12c469840446acb19f036d97946ed731cc84048
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnlockStart.xlsx.WNCRY
                                • Path C:\Users\Admin\Documents\UnlockStart.xlsx.WNCRY
                                • Size 12KB
                                • SHA256 042f6b5dfc65a777e4a6aaafc5c0d8fbe633c59fd0178fb38975f6a759a6b741
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnprotectConvert.pptm.WNCRY
                                • Path C:\Users\Admin\Documents\UnprotectConvert.pptm.WNCRY
                                • Size 675KB
                                • SHA256 0aa7762209c9ed48e4c5f70264612885752610ec69d7fb9770c07a26ac809979
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GroupSuspend.doc.WNCRYT
                                • Path C:\Users\Admin\Downloads\GroupSuspend.doc.WNCRYT
                                • Size 257KB
                                • SHA256 64108ff08972c32746c2c1a74b4202852601fb40ca629b51aa06510ca3e6b1a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MergeGrant.jpeg.WNCRYT
                                • Path C:\Users\Admin\Downloads\MergeGrant.jpeg.WNCRYT
                                • Size 247KB
                                • SHA256 5f24760a50a4ea0f23a31c5227c600b2a6fe059edb49bbd0492a908417da86c8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RedoReceive.jpeg.WNCRYT
                                • Path C:\Users\Admin\Downloads\RedoReceive.jpeg.WNCRYT
                                • Size 550KB
                                • SHA256 1bdc0c2864169754f160877f409a69ea7343804276d0aac805ff5eabb4b3e171
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                AddResize.cmd.WNCRY
                                • Path C:\Users\Admin\Music\AddResize.cmd.WNCRY
                                • Size 377KB
                                • SHA256 fb8e0603af91046e5a7e4b79b0f5076eb25cc09ac2adf64399dffd6ef77cd058
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ApproveReceive.vbs.WNCRY
                                • Path C:\Users\Admin\Music\ApproveReceive.vbs.WNCRY
                                • Size 264KB
                                • SHA256 dbd1740a11ce3ca0a12f32a90ed6b2ffda28e47747f84285d821dcd003e8e0f3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConvertFromUnregister.ppt.WNCRY
                                • Path C:\Users\Admin\Music\ConvertFromUnregister.ppt.WNCRY
                                • Size 357KB
                                • SHA256 3ca7db1371c69b1fa9892db6680f66f9cfa7b5a52f3b2a5bd4209f92e4c34e93
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConvertToSend.xlsx.WNCRY
                                • Path C:\Users\Admin\Music\ConvertToSend.xlsx.WNCRY
                                • Size 191KB
                                • SHA256 a86c90efcbd64bbf997f1ee250fa49d3aaa228be4385cafa652dc7dee8a997f5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DenyDisconnect.jpg.WNCRY
                                • Path C:\Users\Admin\Music\DenyDisconnect.jpg.WNCRY
                                • Size 233KB
                                • SHA256 8e2455901e7b258379bdd9fbc8253a0acdefc228232e8fffea4a19b7457ee401
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EnableConfirm.vb.WNCRY
                                • Path C:\Users\Admin\Music\EnableConfirm.vb.WNCRY
                                • Size 336KB
                                • SHA256 2b7bd020388b3fe96ae37f056f27e703acb24aaba0ecc11e874aedebff721e5e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MeasureImport.bmp.WNCRY
                                • Path C:\Users\Admin\Music\MeasureImport.bmp.WNCRY
                                • Size 222KB
                                • SHA256 5daa587a8c21e88592de0c477258b28240268ac91e35c8c0d9af443a26ae73cb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                OutUnblock.xltm.WNCRY
                                • Path C:\Users\Admin\Music\OutUnblock.xltm.WNCRY
                                • Size 460KB
                                • SHA256 96725fe4a90fa6241626841f358faa77a53a2ec588767e87a9df1fd109c83014
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                PublishRequest.rtf.WNCRY
                                • Path C:\Users\Admin\Music\PublishRequest.rtf.WNCRY
                                • Size 408KB
                                • SHA256 8d1f5f3661a255dd4f1531d8618d2225bd2705f197db840407dab62e5817adc3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SplitOptimize.tiff.WNCRY
                                • Path C:\Users\Admin\Music\SplitOptimize.tiff.WNCRY
                                • Size 429KB
                                • SHA256 c5857bf7f2ab449caae1621c2d0230c4aa380d1cb70b8b1cdd7f421890a758e4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SubmitShow.xltx.WNCRY
                                • Path C:\Users\Admin\Music\SubmitShow.xltx.WNCRY
                                • Size 274KB
                                • SHA256 e86a11cdf71051d099d560f6b1f75bb979dfac47e796e9c908019a4536390a74
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                TraceCompress.xltm.WNCRY
                                • Path C:\Users\Admin\Music\TraceCompress.xltm.WNCRY
                                • Size 346KB
                                • SHA256 9031b7bea178fe330e5c0560f2e0c6616c497ecf064d9ea1403e2832eb7f5f38
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnregisterCopy.ppt.WNCRY
                                • Path C:\Users\Admin\Music\UnregisterCopy.ppt.WNCRY
                                • Size 201KB
                                • SHA256 6f32be1b335f7e68e60b419986c3b181d31809c9d600c1031fa052c8dee71482
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ConvertFromStart.jpeg.WNCRY
                                • Path C:\Users\Admin\Pictures\ConvertFromStart.jpeg.WNCRY
                                • Size 1.4MB
                                • SHA256 9ae51e9d1dc35d1fe3cb8a0288dccd885dc287ea30ea1699b17411f9e3052bb6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                NewDisconnect.jpg.WNCRY
                                • Path C:\Users\Admin\Pictures\NewDisconnect.jpg.WNCRY
                                • Size 965KB
                                • SHA256 dcdffa4a2458f995e1d5caf1ee074c9a07257adeb981557655f45b049c206e82
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                PublishSkip.png.WNCRY
                                • Path C:\Users\Admin\Pictures\PublishSkip.png.WNCRY
                                • Size 1.1MB
                                • SHA256 6daf277ee8cd0aab6a2c4eed8488394827e080c8ab2b4299eaa0f0171a4b2a2a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ShowTrace.tif.WNCRY
                                • Path C:\Users\Admin\Pictures\ShowTrace.tif.WNCRY
                                • Size 1.2MB
                                • SHA256 727b0b008c322253209a54a7fe8dd22a921df125081dc76d6402f4e4412354d4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                hcYW.jpg.WNCRY
                                • Path C:\Users\Admin\Pictures\hcYW.jpg.WNCRY
                                • Size 24KB
                                • SHA256 a7690100cc52f6f4ddb67eb46730b20da6f9a2b824c6f5f2d5b847773289b1a7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                memory/3248-3143-0x0000000073DA0000-0x0000000073DBC000-memory.dmp
                                Download

                                memory/3248-2489-0x0000000073D10000-0x0000000073D92000-memory.dmp
                                Download

                                memory/3248-2497-0x0000000073DA0000-0x0000000073DBC000-memory.dmp
                                Download

                                memory/3248-2498-0x0000000073CE0000-0x0000000073D02000-memory.dmp
                                Download

                                memory/3248-2499-0x0000000073C60000-0x0000000073CD7000-memory.dmp
                                Download

                                memory/3248-2500-0x0000000073A40000-0x0000000073C5C000-memory.dmp
                                Download

                                memory/3248-2501-0x0000000073D10000-0x0000000073D92000-memory.dmp
                                Download

                                memory/3248-2495-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-3104-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-3114-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-3119-0x0000000073A40000-0x0000000073C5C000-memory.dmp
                                Download

                                memory/3248-3121-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-3128-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-3142-0x0000000073DC0000-0x0000000073E42000-memory.dmp
                                Download

                                memory/3248-3147-0x0000000073D10000-0x0000000073D92000-memory.dmp
                                Download

                                memory/3248-3146-0x0000000073A40000-0x0000000073C5C000-memory.dmp
                                Download

                                memory/3248-3145-0x0000000073C60000-0x0000000073CD7000-memory.dmp
                                Download

                                memory/3248-3144-0x0000000073CE0000-0x0000000073D02000-memory.dmp
                                Download

                                memory/3248-2496-0x0000000073DC0000-0x0000000073E42000-memory.dmp
                                Download

                                memory/3248-3141-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-2488-0x0000000073A40000-0x0000000073C5C000-memory.dmp
                                Download

                                memory/3248-2533-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-2491-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-2490-0x0000000073CE0000-0x0000000073D02000-memory.dmp
                                Download

                                memory/3248-2487-0x0000000073DC0000-0x0000000073E42000-memory.dmp
                                Download

                                memory/3248-2510-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-2515-0x0000000073A40000-0x0000000073C5C000-memory.dmp
                                Download

                                memory/3248-2517-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-2522-0x0000000073A40000-0x0000000073C5C000-memory.dmp
                                Download

                                memory/3248-2524-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/3248-2529-0x0000000073A40000-0x0000000073C5C000-memory.dmp
                                Download

                                memory/4156-39-0x0000000010000000-0x0000000010010000-memory.dmp
                                Download

                                memory/5528-3153-0x0000000073A40000-0x0000000073A62000-memory.dmp
                                Download

                                memory/5528-3152-0x0000000073A70000-0x0000000073AF2000-memory.dmp
                                Download

                                memory/5528-3150-0x0000000073DC0000-0x0000000073E42000-memory.dmp
                                Download

                                memory/5528-3151-0x0000000073B00000-0x0000000073D1C000-memory.dmp
                                Download

                                memory/5528-3154-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/5528-3161-0x0000000073B00000-0x0000000073D1C000-memory.dmp
                                Download

                                memory/5528-3158-0x0000000073D20000-0x0000000073D97000-memory.dmp
                                Download

                                memory/5528-3160-0x0000000073A40000-0x0000000073A62000-memory.dmp
                                Download

                                memory/5528-3159-0x0000000073A70000-0x0000000073AF2000-memory.dmp
                                Download

                                memory/5528-3155-0x0000000000E90000-0x000000000118E000-memory.dmp
                                Download

                                memory/5528-3157-0x0000000073DA0000-0x0000000073DBC000-memory.dmp
                                Download

                                memory/5528-3156-0x0000000073DC0000-0x0000000073E42000-memory.dmp
                                Download